[....] Starting enhanced syslogd: rsyslogd[   14.309185] audit: type=1400 audit(1543693476.161:4): avc:  denied  { syslog } for  pid=1920 comm="rsyslogd" capability=34  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
Starting mcstransd: 
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.82' (ECDSA) to the list of known hosts.
2018/12/01 19:44:52 fuzzer started
2018/12/01 19:44:54 dialing manager at 10.128.0.26:43915
2018/12/01 19:44:54 syscalls: 1
2018/12/01 19:44:54 code coverage: enabled
2018/12/01 19:44:54 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/12/01 19:44:54 setuid sandbox: enabled
2018/12/01 19:44:54 namespace sandbox: enabled
2018/12/01 19:44:54 Android sandbox: /sys/fs/selinux/policy does not exist
2018/12/01 19:44:54 fault injection: kernel does not have systematic fault injection support
2018/12/01 19:44:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/12/01 19:44:54 net packet injection: enabled
2018/12/01 19:44:54 net device setup: enabled
19:45:44 executing program 0:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0)
read(r0, 0x0, 0x0)

19:45:44 executing program 5:
socketpair$inet6(0xa, 0x5, 0xffff, &(0x7f0000000180))
fsync(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000002c0))
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000340))
accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
umount2(&(0x7f00000003c0)='./file0\x00', 0x3)
getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), 0x0)
close(r0)
r2 = socket(0x840000000002, 0x3, 0xff)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000280))
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req={0x6, 0x8, 0x2, 0x6}, 0x10)
openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x24000, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x40, 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, 0x0, 0x100000001)

19:45:44 executing program 1:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair(0x1, 0x5, 0xa0, &(0x7f0000004880)={<r0=>0xffffffffffffffff})
r1 = accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180))
getpgrp(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x3ffffffffffffffd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000000), 0x0, 0x20000802, 0x0, 0x0)
dup3(r2, 0xffffffffffffffff, 0x80000)
sendto$inet(r2, &(0x7f0000d7cfcb), 0x0, 0x0, 0x0, 0x0)

19:45:44 executing program 3:
syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000000cf1f20000000000000d0000000000000000f3b721c41fb7c626d49cb11f7789b51a3d797220dabfc2ae5cc9d4c88cd70d945a84e4f0a9f09089b6f1e7cf64a21d43af4c0f3599a50b51993e982605786bf6057c2b2d61cb3762a94bdd36"], 0x0)

19:45:44 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400000000001, 0x0)
write(r0, &(0x7f0000000280), 0xba6c1c86)
r1 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setsig(r2, 0xa, 0x12)
ppoll(&(0x7f0000000040)=[{r3}], 0x1, 0x0, 0x0, 0xffffffffffffffd7)
fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1})
dup2(r0, r3)
tkill(r1, 0x15)

19:45:44 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
read(r1, &(0x7f0000000000)=""/11, 0xb)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBSENT(r1, 0x4b49, 0x0)

19:45:52 executing program 0:
renameat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00')
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000ac0), &(0x7f0000000a80)='./file0\x00', &(0x7f0000000000)="72616d667300e0a68a268cd695244837e94077a35c338dd2750e85bd3c22907369dcb28bc7fa27df8781677e48e54dbc464267208407f81e68331a0dd01aa64e853abda2c1c278674f31aaec384b3eeb5add3d523f24b80f991300e7985e5c3ef9d410fb25f89d6a1a4b69b9e09a213c917be0a348c7df8cc77b822723e0d6c493b6861068e5f74de7d25a17af865c6b41987e3c6d01c3ab165b4d79601030ce117c66a1c288daa70d69f17d502daa9eed3f013f9c124efabd779aa310baff3d467eebf8b425f2daa298b4ee36531406d7a1e04e2171a13fb86cd298cb7dac2f", 0x0, &(0x7f00000002c0))
chroot(&(0x7f0000000280)='./file0\x00')
mount(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='qnx6\x00', 0x1000, &(0x7f0000000500))
mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='ext4\x00', 0x8000, &(0x7f0000000300)='\x00')
clone(0x0, &(0x7f0000000500), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000600))
pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00')

19:45:52 executing program 0:
inotify_init()
unshare(0x600)
rt_sigsuspend(&(0x7f0000000080)={0x6}, 0x8)
pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300)={0x8000000}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8})

19:45:53 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@local}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev, @in=@local}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400))
fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setfsuid(r0)

19:45:53 executing program 3:
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/exec\x00', 0x2, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x80)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
epoll_create1(0x80000)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={"76657400bd6800000000e2ffffff00", 0x43732e5398416f1a})
recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x8, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400})

19:45:53 executing program 1:
getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80)
r1 = memfd_create(&(0x7f0000000080)="02707070315200", 0x0)
ioctl$TIOCSTI(r1, 0x5412, 0x401)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x3, 0xc0, [], 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000180)=""/192}, &(0x7f00000002c0)=0x78)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x408400)

19:45:53 executing program 5:
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000240)='attr/current\x00')
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(r0, &(0x7f0000000000)='net/sctp\x00')
write$selinux_context(r1, &(0x7f00000000c0)='system_u:object_r:var_run_t:s0\x00', 0x1f)
read(r1, &(0x7f0000000180)=""/156, 0x9c)

syzkaller login: [   91.229254] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[   91.254555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
19:45:53 executing program 1:
clone(0x10000000000200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x2, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0)
tkill(r0, 0x1000000000016)
waitid(0x0, r0, 0x0, 0x2, &(0x7f0000000000))

19:45:53 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00')
sendfile(r0, r1, 0x0, 0x8001)

19:45:53 executing program 1:
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x10000, 0x10a)
mount$fuseblk(&(0x7f0000000200)='/dev/loop0\x00', &(0x7f0000000140)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f00000001c0)='fuseblk\x00', 0x4, 0xfffffffffffffffe)
mknod(&(0x7f0000000300)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0, 0xffffffff)
mknod(&(0x7f0000000000)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x903, 0x40)

[   91.341863] audit: type=1401 audit(1543693553.201:5): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=system_u:object_r:var_run_t:s0
[   91.373225] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
19:45:53 executing program 5:
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}})
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140))
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x80000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = getpid()
mkdir(&(0x7f0000000780)='./file2\x00', 0x60)
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100))
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/status\x00', 0x0, 0x0)
fstat(r2, &(0x7f0000000b80))
inotify_add_watch(r2, &(0x7f0000000b40)='./file1\x00', 0x200)
ptrace$poke(0x5, r1, &(0x7f0000000080), 0x3)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0)
getpeername$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14)
sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000200)=@hci={0x1f, r4}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)="20d0d36b74ca37dd0e85709295519f850997681121ef4bc30c35fbd289eb0dcd4d4dadf2c35f70e73ef47d27f06502fd4c917409abedc1329c3717c2197e2b8606ff081c12825cd272ead5a3d33f57cc762c7a4df49092b746bf43b6f4e64df7b557f6622d13bd1cb79d51a7a2c08a21fe9719c34a", 0x75}, {&(0x7f0000000300)="1f7dffe4099969cf688703c7801b523b609f253cde7fba758dd674", 0x1b}, {&(0x7f0000000340)="2755094d7726197941df19e85f762cb123e7259928bc27f78a436d0d629ccb4f3511890fef4924c449ebb1d9dd57952c2c9c6fb900401d972328a52c5668b13901ebb2e92b4c0f5fc842018c9cba74e93d86c543", 0x54}, {&(0x7f00000003c0)="1dfb85f21068de32110fe0c3f2c49a5d80a6a5fc8c446c107e7800ee198557153fdccfc14313b32cea044a275c032e4a0f66d0c16e84dbac11702a214a88196a3a568c4e3927dc530a32b8064902d630bff5b6345bcbc2e14305e3d56d858257187ce34169fe39bec30a6bdc8d0af6708f0acc01a12bc78881d7fe85796aa6ab48", 0x81}, {&(0x7f0000000540)="93ba3b05c54ed4d918f9ef4b6bfc0db6e00ec863197aff42a6f0aa59fc06241969334da93f22159949244b76abd026c90381c98d0e436909", 0x38}, {&(0x7f0000000580)="537ae78706481b284f1c14924aa1b993d88b34a33b449ddf4f3657b17a5cd26756c67ea69ebce18368b68f1e030e9ae777940fc45c262a3af19b28985f80dd45d6d58f53ddca2ad96b99aae6401a1cbe93ddf9c14f2e7332ede47e8af101235536ae0462a5a273d4dd387b3333a999242240d6889b3bd092b5ecc80a", 0x7c}, {&(0x7f0000000600)="ae2fbe195ddfbd16ec67246ccb8c29e5263ad17be277a4dd2ecb5533d7d506cb107cdb4758345162dc3d4adbee9345d09877478d9cb315d47204f5a019f14d20a0481015146369b24cb6d344e434804bf491b91679f4e6857e9a76ac8cc9563fea554d69489e2ae9b9b6244b17375a680a2884820d24228545cf061294006fecf88acd774752435076591fc58a284caa8462a0719ddffcaa493c0c39cb2f9c485b5362ad333b5508e74fef51772e7940dc01c095e62ea183629ebbf2efbe284b7867310a9c9bd0812c8f19f031e6d6a6f6be18b5a83c3c40568b8f81d08068d643b51e2067ceb2ca3f8122f5079a", 0xee}], 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x270, 0x4008010}, 0xeae0}], 0x1, 0x4084)

[   91.449599] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sysfs, type sysfs) errno=-22
[   91.464720] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sysfs, type sysfs) errno=-22
19:45:55 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r0)
r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0)
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/context\x00', 0x2, 0x0)
write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x29, 0x1, {0x4, [{{0x99, 0x0, 0x7}, 0x20, 0xfffffffffffffff7, 0x5, './bus'}]}}, 0x28)
fsync(r4)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000500)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f9b6ada28f508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8464e64f656f866d4d9a7bd264d")
r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$P9_RSTATu(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3], 0x17)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}})
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000100)=0xffffffff)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x2400, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
fcntl$setstatus(r5, 0x4, 0x8d264d94b88cc547)
mmap(&(0x7f0000d5b000/0x2000)=nil, 0x2000, 0x3, 0x50, r3, 0x0)
syz_open_dev$rtc(&(0x7f0000000380)='/dev/rtc#\x00', 0xac, 0x101000)
sync_file_range(r6, 0xfffffffffffffffe, 0x0, 0x6)
msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6, 0xb000}, 0x4)

19:45:55 executing program 1:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x31)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x340, 0x0, 0xca})
ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000040))
ptrace$cont(0x1f, r0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

19:45:55 executing program 5:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[]}}, 0xfffffffffffffffc)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xfa}}, 0x0)
socketpair(0x2000000000019, 0x4, 0xde, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0', [{0x20, 'veth1\x00'}, {0x20, '#! '}, {}, {0x20, '/'}, {}]}, 0x1a)
socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r5=>0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc)
r6 = socket$inet6(0xa, 0x800, 0xc270)
r7 = socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
gettid()
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0)
write$FUSE_IOCTL(r8, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x8, 0x0, 0x1, 0x7fffffff}}, 0x20)
openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x804, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x4)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001280)='veth1\x00', 0x10)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_ifreq(r4, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}})
getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f00000003c0)={'HL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x00'}, &(0x7f0000000480)=0x1e)
dup(r3)
write$binfmt_script(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x149)
connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r7, &(0x7f00000092c0), 0x40000a9, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
read$eventfd(r3, &(0x7f0000000180), 0x8)
munlockall()
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', r5})

19:45:55 executing program 3:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={<r3=>0x0}, &(0x7f0000000380)=0xc)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000003080), 0x0, &(0x7f0000003140)=""/156, 0x9c}}, {{0x0, 0x0, &(0x7f0000003380), 0x0, &(0x7f00000033c0)=""/166, 0xa6}}], 0x2, 0x0, &(0x7f0000005380)={0x0, 0x1c9c380})
getuid()
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
syz_open_procfs(r3, &(0x7f0000000800)="6e65742f616e79636173d6ac00")
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480))
add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2)
r6 = getuid()
ioctl$TUNSETOWNER(r5, 0x400454cc, r6)
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000002c0)=[{&(0x7f0000000240)="f699e4d63327f63e7d649fc1cae4d1e27360431ed889ddbc48f9c84d9ba362b245759f2e813916f59c49111649b887307b0489a878488eca463ffd8ca167ecf4b4d5086c0d0a19689a2c7a86e34c5803ea784d305abe5c2db39d9339b1c3", 0x5e}], 0x1, 0x0)
sendfile(r8, r5, &(0x7f0000000140), 0x7)
write(r8, &(0x7f00000001c0), 0x100000104)
vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
preadv(r9, &(0x7f0000000700), 0x31f, 0x10400003)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0)

19:45:55 executing program 0:
capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8))
unshare(0x20000200)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/enforce\x00', 0x40, 0x0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000580))
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000180)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8)
r4 = geteuid()
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000400)=0xe8)
mknod$loop(&(0x7f00000005c0)='./file0\x00', 0x7610, 0x1)
r6 = getegid()
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000004c0)={<r8=>0x0, 0x0, <r9=>0x0}, &(0x7f0000000500)=0xc)
r10 = getegid()
prlimit64(r8, 0xf, &(0x7f0000000600)={0x6, 0x80000000}, &(0x7f0000000640))
fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010007000000000002000400", @ANYRES32=r2, @ANYBLOB="02000600f7d4ac6043f8cde1a9e645e1f5ed10909d876a90177e55abef384efac2c3f16b17b23a164da47552aae2e6db5c31100b57338208551b79de1fb41ee3e291502f6e52b21a99aca15ee824185671a6653b4080fe218231eadd9c9ec4d4c810176292e64b31d97040180e73c54540ffb009bab897e2592911182c0385c0b460a722d1c1efa1e471536471aa67c6e3801be5f0988bd63e40bc122e311f6005d30e698d449dc028862902f9e59e0857b33b6220d8f51381e5270b0cbaed3ecc79c88f089e76ed8c9de0f7b9e441dbdfa5c77b", @ANYRES32=r3, @ANYBLOB="000300", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="040002000000000008000100", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="10000400000000002000020000000000"], 0x64, 0x2)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000007c0)=""/238)

19:45:55 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket(0x19, 0x3, 0x4)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{}, {{@in=@loopback}}}, &(0x7f0000000400)=0xe8)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x80012, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r3, &(0x7f0000000040)=0x100000, 0x8001)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}}}, &(0x7f00000001c0)=0xe8)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getuid()
write$P9_RSTATu(r3, &(0x7f00000002c0)={0x6a, 0x7d, 0x2, {{0x0, 0x4d, 0x200, 0x9, {0xc1, 0x3, 0x5}, 0x2010000, 0x8, 0xffffffffffffffe0, 0x10001, 0x10, '/selinux/status\x00', 0x2, '+-', 0x0, "", 0x8, 'pagemap\x00'}, 0x8, 'pagemap\x00', r4, r5, r6}}, 0x6a)

[   93.905055] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use)
19:45:55 executing program 4:
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3ff}, 0x8)
r1 = socket$inet(0x10, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='vlan0\x00', 0x10)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0)
getsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000210007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)

19:45:55 executing program 0:
wait4(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000340))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000040)='GPL\x00', 0x7)
getsockname$inet6(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070008020000003439507f1488bb02"], 0x10}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
sendmmsg(r2, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000280)}}], 0x1, 0x0)

[   93.931667] audit: type=1400 audit(1543693555.791:6): avc:  denied  { setattr } for  pid=3817 comm="syz-executor0" name="exec" dev="proc" ino=10262 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1
19:45:55 executing program 4:
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x20402, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5)
r1 = socket(0x10, 0x200000000080002, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000c80))
capget(&(0x7f0000000040)={0x399f1336, r2}, &(0x7f0000000080)={0x1f, 0x6, 0xfff, 0xfffffffffffff52f, 0x4, 0x2})
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
connect$netlink(r1, &(0x7f00000000c0), 0x9)

19:45:55 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]})
restart_syscall()
r0 = socket$nl_route(0x10, 0x3, 0x0)
flock(r0, 0xc)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x57, 0x100000000, 0x8, {0x1, 0xe0}, {0x5, 0xf4b3}, @const={0x8001, {0x8000, 0x9, 0x2, 0x2}}})

19:45:56 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x28000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3f)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0))

19:45:56 executing program 1:
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
gettid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0x60})
ptrace$setregs(0xd, r0, 0x4, &(0x7f0000000140))
ptrace$cont(0x1f, r0, 0x0, 0x0)

19:45:57 executing program 3:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={<r3=>0x0}, &(0x7f0000000380)=0xc)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000003080), 0x0, &(0x7f0000003140)=""/156, 0x9c}}, {{0x0, 0x0, &(0x7f0000003380), 0x0, &(0x7f00000033c0)=""/166, 0xa6}}], 0x2, 0x0, &(0x7f0000005380)={0x0, 0x1c9c380})
getuid()
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
syz_open_procfs(r3, &(0x7f0000000800)="6e65742f616e79636173d6ac00")
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480))
add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2)
r6 = getuid()
ioctl$TUNSETOWNER(r5, 0x400454cc, r6)
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000002c0)=[{&(0x7f0000000240)="f699e4d63327f63e7d649fc1cae4d1e27360431ed889ddbc48f9c84d9ba362b245759f2e813916f59c49111649b887307b0489a878488eca463ffd8ca167ecf4b4d5086c0d0a19689a2c7a86e34c5803ea784d305abe5c2db39d9339b1c3", 0x5e}], 0x1, 0x0)
sendfile(r8, r5, &(0x7f0000000140), 0x7)
write(r8, &(0x7f00000001c0), 0x100000104)
vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
preadv(r9, &(0x7f0000000700), 0x31f, 0x10400003)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0)

19:45:57 executing program 1:
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
gettid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0x60})
ptrace$setregs(0xd, r0, 0x4, &(0x7f0000000140))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[   95.564048] syz-executor5 (3849) used greatest stack depth: 23616 bytes left
19:45:57 executing program 5:
capset(&(0x7f0000002ffa)={0x20080523}, &(0x7f0000002000))
setresuid(0x0, 0x0, 0xffffffffffffffff)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
accept$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000680)=0x8000ff8, 0x1a4)
bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x222040, 0x0)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x37e, 0x7, 0x5, 0x6}, {0xfffffffffffff801, 0xfff, 0xfffffffffffffff9, 0x100000000}, {0x5, 0x4, 0x7, 0x7}, {0x4c5, 0xffffffffffffffff, 0x7fffffff}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af)
fcntl$dupfd(r3, 0x0, r0)

19:45:57 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x400000a79, 0xb)
write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0xe681f134)
fcntl$setpipe(r3, 0x407, 0x100000c453)
close(r1)

19:45:57 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="37000000000089762a"]})
socketpair(0x4, 0x6, 0x90d, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000040)=0xe8)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x5, 0x4)
socket(0x4, 0x4, 0xb7)
connect$packet(r3, &(0x7f00000001c0)={0x11, 0x5, r4, 0x1, 0x7, 0x6, @remote}, 0x14)

19:45:57 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x4032, 0xffffffffffffffff, 0x0)
listen(r0, 0x3)
exit(0x0)

19:45:57 executing program 5:
sched_setaffinity(0x0, 0xffffffffffffffb1, &(0x7f0000000180))
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect(r1, &(0x7f0000000140)=@ax25={0x3, {"06976258e8ee21"}, 0x73}, 0x80)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x1)
sendto$inet(r2, &(0x7f0000002440), 0x0, 0x4040000, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0xa)
r3 = dup3(r2, r0, 0x80003)
ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000004c0)={0x100008, 0x800, 0x22})
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r4, &(0x7f00000003c0)="a2bf61c3e045ad904b1c88436b5b7f00000000000000d149395fd0ce3741629b7d874028d77a853e", 0xfffffffffffffd4a)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r6 = socket$inet6(0xa, 0x2000000000002, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x3797}, 0x1c)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$LOOP_SET_CAPACITY(r4, 0x4c07)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
ioctl$TCXONC(r5, 0x540a, 0x40)
getsockname$inet6(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x2c3)
sendto$inet(r2, &(0x7f0000000500)="3c8c6337124f4da4e1bd5e4458288d5342deaece1ebf43bea6ded93b34d6bd3a1e4efc31a0f8d6c08d51588c09e0ba8611f1ff3d27f702f3e375c6389e16afc7be36a94d1f1d2a32c2716b422828728dd5318e3a8f6f2e48a4b1a18e2049f44c595b7d644e24a45d8856d5bbbf3adfa57394bf3a963ff955216045ebdd4e1ca416371a9133fed381225389eae5db7fdaa0e1ba4b41710783cd8ce3bc6b42cdb59646e921d583b25f5262d360b55afe5d5050f82eb5e9f07c8c735f3eb90740a0efcdbf957723ef757264ee7ee76b6a9c2b4b250cc7de1ec8418e7e10cd90f292968c104c1499fe414ef1a538a19273acedcaef08", 0xf4, 0x0, &(0x7f0000000300)={0x2, 0x3}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x3}, 0xc26, 0x9, 0x4})
shutdown(r2, 0x2000000001)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000400)={{0x3, 0x3, 0x100000001, 0x0, 0x4}, 0x0, 0x3ff, 0xffffffffffffff80})
capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff})
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}})

19:45:57 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f00009f5ffc)=0xd6, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x3b3}, 0x1c)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x1013c2, 0x0)

19:45:57 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80000, 0x50)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x1)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000030107041dfffd946fa2830020200a0009000200001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
io_setup(0x8, &(0x7f00000000c0)=<r2=>0x0)
io_destroy(r2)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000100))
ioctl$int_out(r3, 0x2, &(0x7f0000000080))
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000040))
dup(r3)

19:45:57 executing program 5:
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240))
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x7ff, {{0x2, 0x4e22, @local}}}, 0x88)
r1 = socket$netlink(0x10, 0x3, 0x6)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x4)
writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100070aa8f7410400000000fcff", 0x58}], 0x1)
getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@broadcast, @multicast2, @remote}, &(0x7f0000000080)=0xc)

[   95.918659] audit: type=1400 audit(1543693557.771:7): avc:  denied  { create } for  pid=4043 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
19:45:57 executing program 5:
open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x186)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280), 0x10000030}}], 0x1, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_names\x00')
preadv(r1, &(0x7f00000017c0), 0x1a1, 0x1a1)

19:45:57 executing program 5:
r0 = socket(0xd, 0x7, 0x202)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x2, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0x6)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)

[   95.946900] audit: type=1400 audit(1543693557.801:8): avc:  denied  { write } for  pid=4043 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[   95.964868] capability: warning: `syz-executor5' uses deprecated v2 capabilities in a way that may be insecure
[   95.995359] netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'.
19:45:57 executing program 2:
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = getpid()
mkdir(&(0x7f0000000080)='./file0\x00', 0x4)
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100))

[   96.043861] netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'.
[   96.093448] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sysfs, type sysfs) errno=-22
[   96.105688] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sysfs, type sysfs) errno=-22
19:46:00 executing program 1:
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
gettid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0x60})
ptrace$setregs(0xd, r0, 0x4, &(0x7f0000000140))
ptrace$cont(0x1f, r0, 0x0, 0x0)

19:46:00 executing program 3:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
sync_file_range(r0, 0x100000000, 0x3ff, 0x7)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
readv(r0, &(0x7f0000000000), 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/197)

19:46:00 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file0\x00', 0x41)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x1f3, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="b800000019000107000000000000000000000000000000000000ffff7f00000100000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0)
pwritev(r1, &(0x7f00000014c0)=[{&(0x7f0000000100)="c2f43d5f460dc8e5fe9cb859e280abc37a45c3287f63a60a47949b2d3bb7bbdcb947298a61692cc9fb2f0979d30215db730f0637ad2ad6292e913fd9988a44cdec08", 0x42}, {&(0x7f00000001c0)="656f4f9302493d2aee3a72491f97f09e33ebde8560b54abe6e65b8d509917706350288986fbe915200d9dd360cb589d1785db06c258f5d8cff86fa3c9791482e3a29761cb01d8122340ef3b8c1d4905a911433ed8d231c2511a127fc7fd17bdf31fece243fae8a580cfb2c9716e3e74635369b8f5548f108f8c3be6fed90ca", 0x7f}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="4046a89ca980da8ef963d89328c01d46c68b85bcca80adc80c70bc7d52ab881b552021ee82f473c30a262a7c6e76a67fdefa78217cd2320d95f0232f854711ce0ba5d79b0b61c9de6a280f11e5ae603df866c871f7a5e75b4fdf5572e76ea616d20ac023be45b2d35383224d9fc7249d14ea0d754774c2fbdeb7663e5b3f0ac12d04d6c0acfdf6b01a27721ac526902787d83e85868ec071e96069cc8696abd412058b9cbb0af753e5207bd8841095d032f79184be0dcbb5bb290bc2b5aaa1b70bce62cb8ae039", 0xc7}, {&(0x7f0000001440)="7275fb971396930a5fb9ed5038d22672db1af8d1e5995c0fd234f41b0392e44bf8d2f2caffd2a13a3fe7a7fcfa04877eec12ff1d2df262bd1bb8edfcfbc08250aa4118fff22ea6bb51d58bbc0dbc0f3098418ed934b4", 0x56}], 0x5, 0x0)

19:46:00 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
r2 = dup(r0)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x1284)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140), 0x4)

19:46:00 executing program 0:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
flistxattr(r0, &(0x7f0000000080)=""/34, 0x22)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e0020002000aa0802000000000000800001000105000600200000000000000000000000000500e5000007f4ffff1e000000000000250000000000000200010000000000000000020200000000000000000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000700000028bd70170080000005001a0000000000000000000000eaffac1414aa0000000040000000113c04a23743f008499547b5"], 0x38}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

19:46:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000240)="b021d24ee70a6f01c71807000000e55475b5a1792d4abdf61903d431338bed93a8e00792e56a259dbc011dcc0068983254fb0beee881897a68d349b5e6d8eee72eee2e5dfd1feee5"})
r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xa0, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0]}, 0x6}}, @register_looper, @transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000140), &(0x7f0000000180)=[0x38, 0x30, 0x0, 0x78, 0x70]}, 0x2}}, @exit_looper], 0x3c, 0x0, &(0x7f00000001c0)="7678fc658c1137f82b2e0b7e205e03443dfb3f7e08977f34c6436fb55c81d9071a491220edfc5c23728a7ae9bb55b1ccc3691c748b7eb0a2e437d8e1"})

19:46:00 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac)
mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r0, 0x0)
write$FUSE_POLL(r0, 0x0, 0x0)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x400)

19:46:00 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4d)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x400000060fc)
ftruncate(r4, 0x208200)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r5, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x7)
ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000002c0)={0xfffffffffffff000, 0x6})
r6 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000300)=<r7=>0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000340)={0x30, 0x37, 0x1, {0x0, 0xfffffffffffffffc, 0x5, r7, 0x12, '/dev/loop-control\x00'}}, 0x30)
fcntl$setstatus(r1, 0x4, 0x6800)
preadv(r1, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0)
ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000200))
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

[   98.298090] audit: type=1400 audit(1543693560.151:9): avc:  denied  { set_context_mgr } for  pid=4082 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[   98.337269] audit: type=1400 audit(1543693560.191:10): avc:  denied  { call } for  pid=4082 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[   98.368456] binder: 4082:4089 ERROR: BC_REGISTER_LOOPER called without request
[   98.381974] binder: 4082:4089 got transaction with unaligned buffers size, 6
[   98.391179] binder: 4082:4089 transaction failed 29201/-22, size 0-16 line 3182
19:46:00 executing program 0:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x408000, 0x0)
getpeername$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
mount(&(0x7f0000018000), &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000))
open$dir(&(0x7f00000001c0)='./file1\x00', 0x40, 0x0)
open$dir(&(0x7f0000000080)='./file0/bus\x00', 0x101840, 0x0)
seccomp(0x1, 0x1, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xfffffffffffffff8, 0x2000000000000000, 0x3, 0x5}, {0x10000, 0x74, 0x20, 0x3}, {0xd587, 0x0, 0x9, 0x8}]})
lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x80000001}, 0x28, 0x1)

19:46:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000240)="b021d24ee70a6f01c71807000000e55475b5a1792d4abdf61903d431338bed93a8e00792e56a259dbc011dcc0068983254fb0beee881897a68d349b5e6d8eee72eee2e5dfd1feee5"})
r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xa0, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0]}, 0x6}}, @register_looper, @transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000140), &(0x7f0000000180)=[0x38, 0x30, 0x0, 0x78, 0x70]}, 0x2}}, @exit_looper], 0x3c, 0x0, &(0x7f00000001c0)="7678fc658c1137f82b2e0b7e205e03443dfb3f7e08977f34c6436fb55c81d9071a491220edfc5c23728a7ae9bb55b1ccc3691c748b7eb0a2e437d8e1"})

[   98.399706] binder: send failed reply for transaction 2 to 4082:4101
[   98.434092] binder: undelivered TRANSACTION_COMPLETE
19:46:00 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
clock_settime(0x0, &(0x7f0000000040)={r1, r2+10000000})
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x82)
fcntl$setstatus(r3, 0x4, 0x6100)
accept$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
rt_sigreturn()
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r5, 0x0)
fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./bus\x00', 0xffffffffffffffcd, 0x3)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3)
accept$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14)

[   98.447762] binder: undelivered TRANSACTION_ERROR: 29201
[   98.470014] binder: undelivered TRANSACTION_ERROR: 29190
[   98.492033] binder: 4107:4112 ERROR: BC_REGISTER_LOOPER called without request
19:46:00 executing program 3:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x90)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00')
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200527bd7000fddbdf250200000008000300460000000000000090000000"], 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x14)
readv(r0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/185, 0xb9}], 0x3)
io_setup(0x7, &(0x7f0000000080))
write$P9_RREADLINK(r0, &(0x7f0000000500)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
io_setup(0x2, &(0x7f0000000000)=<r2=>0x0)
fchdir(r0)
io_submit(r2, 0x2, &(0x7f0000000900)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r0}])
sendfile(r0, r0, &(0x7f00000000c0), 0x200)

[   98.513132] binder: 4107:4112 got transaction with unaligned buffers size, 6
[   98.523071] binder: 4107:4112 transaction failed 29201/-22, size 0-16 line 3182
[   98.538927] binder: send failed reply for transaction 5 to 4107:4112
[   98.564084] audit: type=1400 audit(1543693560.421:11): avc:  denied  { create } for  pid=4116 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[   98.588449] binder: undelivered TRANSACTION_ERROR: 29190
[   98.595063] binder: undelivered TRANSACTION_COMPLETE
[   98.600394] binder: undelivered TRANSACTION_ERROR: 29201
[   98.607123] audit: type=1400 audit(1543693560.461:12): avc:  denied  { write } for  pid=4116 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[   98.654272] audit: type=1400 audit(1543693560.511:13): avc:  denied  { read } for  pid=4116 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[   98.713857] syz-executor2 (4104) used greatest stack depth: 23152 bytes left
19:46:03 executing program 1:
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
gettid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0x60})
ptrace$setregs(0xd, r0, 0x4, &(0x7f0000000140))
ptrace$cont(0x1f, r0, 0x0, 0x0)

19:46:03 executing program 5:
r0 = memfd_create(&(0x7f00000000c0)="2365a782772400", 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7e070d4c0b8504"], 0x7)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket(0x18, 0x0, 0x4)
connect(r1, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xe)

19:46:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000240)="b021d24ee70a6f01c71807000000e55475b5a1792d4abdf61903d431338bed93a8e00792e56a259dbc011dcc0068983254fb0beee881897a68d349b5e6d8eee72eee2e5dfd1feee5"})
r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xa0, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0]}, 0x6}}, @register_looper, @transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000140), &(0x7f0000000180)=[0x38, 0x30, 0x0, 0x78, 0x70]}, 0x2}}, @exit_looper], 0x3c, 0x0, &(0x7f00000001c0)="7678fc658c1137f82b2e0b7e205e03443dfb3f7e08977f34c6436fb55c81d9071a491220edfc5c23728a7ae9bb55b1ccc3691c748b7eb0a2e437d8e1"})

19:46:03 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x123100, 0x0)
r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x100, 0x0)
linkat(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x1000)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x24}, {0x6}]}, 0x10)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r4=>0x0)
getpgid(r4)
socket$inet6(0xa, 0x2, 0x40000003)
sendmmsg(r0, &(0x7f0000006e00)=[{{&(0x7f0000000540)=@hci, 0x80, &(0x7f00000006c0)}}], 0x1, 0x0)
fdatasync(r0)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f0000000080))

19:46:03 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4d)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x400000060fc)
ftruncate(r4, 0x208200)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r5, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x7)
ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000002c0)={0xfffffffffffff000, 0x6})
r6 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000300)=<r7=>0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000340)={0x30, 0x37, 0x1, {0x0, 0xfffffffffffffffc, 0x5, r7, 0x12, '/dev/loop-control\x00'}}, 0x30)
fcntl$setstatus(r1, 0x4, 0x6800)
preadv(r1, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0)
ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000200))
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

19:46:03 executing program 3:
clone(0x40000000, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f0000000040)=0x2, 0x8f, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup3(r1, r0, 0x0)
mknodat(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x3)
futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f000044b000), 0x0)

19:46:03 executing program 0:
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)
fcntl$dupfd(r2, 0x406, r0)
r3 = syz_open_procfs(0x0, &(0x7f0000000680)="2f65786500000000000409004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade315a544d2581fe8653d0cff54369df8c2fce21dcb1cb965669f9a75345ac3479cd51dc7de364c9c272c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065cfca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bdd")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0xc020660b, 0x5acb)

19:46:03 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="2e2f6367726f757000c22874f53663f731459e90aca4197fa1b8027839ff307f94a7be58d2ed0e5e3e40af1163ce3139f5f8d3196b1da59989b43d1bde8867f4ad69efbe13aa55dcdc770de1206a79380a25de86b84578416b434270182f80572e5b0d13c0658f3969c595cad1ba263fe6357de90a6cb462a79d4822f3aa3e34e94124f904ebd500b72c801aafbe500ceca8c16cbbe9c201e7f46d44806dc2bd7c0608d2c9dbcb83b2daa7c5f14ad2f76995b7c0f46e45552e0e9bb68713d5a87f16c3ac9d2ca2343e39a4368c7f0000000000000004f68f0e7ca07c8a77879feceb51a2f45b33de46cef2b4f94840ce38e4f8d3f0", 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4(r1, &(0x7f0000000080)=@hci, &(0x7f0000000000)=0x80, 0x80800)
ftruncate(r2, 0x8200)
r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
fallocate(r2, 0x11, 0x7ff, 0x7fff)

[  101.318045] binder: 4130:4137 ERROR: BC_REGISTER_LOOPER called without request
[  101.341844] binder: 4130:4137 got transaction with unaligned buffers size, 6
[  101.357146] binder: 4130:4137 transaction failed 29201/-22, size 0-16 line 3182
[  101.386487] binder: send failed reply for transaction 8 to 4130:4137
[  101.425366] binder: undelivered TRANSACTION_ERROR: 29190
19:46:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000240)="b021d24ee70a6f01c71807000000e55475b5a1792d4abdf61903d431338bed93a8e00792e56a259dbc011dcc0068983254fb0beee881897a68d349b5e6d8eee72eee2e5dfd1feee5"})
r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xa0, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0]}, 0x6}}, @register_looper, @transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000140), &(0x7f0000000180)=[0x38, 0x30, 0x0, 0x78, 0x70]}, 0x2}}, @exit_looper], 0x3c, 0x0, &(0x7f00000001c0)="7678fc658c1137f82b2e0b7e205e03443dfb3f7e08977f34c6436fb55c81d9071a491220edfc5c23728a7ae9bb55b1ccc3691c748b7eb0a2e437d8e1"})

19:46:03 executing program 0:
pwritev(0xffffffffffffffff, &(0x7f0000000cc0), 0x1000000000000271, 0xfffffffffffffffe)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
writev(r1, &(0x7f00000013c0)=[{&(0x7f0000000000)="791ce0bf7815448f49f225fa1eaa2152b67abf2e8ffc877def270bf5f32e322ca1ca6c85fb1fa59f1cda1fdc55aa251dbd414e118ae212f0ae0b6081e8bbc2dff2e5ad95c1c06aa340e21100a56e5dfe4ef32be5519e994eb1b95499aeaa9f7eb356365f0c3bca29fb22c416e189b426f0fc57ba6a78", 0x76}, {&(0x7f0000000080)="10", 0x1}, {&(0x7f00000000c0)="257346cfdde3888ab01aa15f47961a00c0c8a288672a5bc0a827d32c188d8b478c0ed851ae0caa5d4375f2203bfc7783e3b8db2e0f37755d73e26283abed657cfae51b1ddcc41bcd90e73fbfd84051b931590d5075d40c2de6", 0x59}, {&(0x7f0000000140)="ff462f557c0ef3b041cbdf93962ede088edc534df76068764ea66f87ff7db980c4afb9bbfbe6a717d9d83565ad1a6617e927e2aba26a9ed0a907f614e7c4772d1aa03173c7aa1868d987c046bf75b5ec1e9c352fbe1d8516ca3fe5c3926686cc0ebe263b239edc094c7e3355252a3008192148aff5e195a9cc1bfd1137a0e758d147113e895f7c50c6f3ad90e126eb4b073e41889597224c8d4aaf04f29b5bf2a6aa822b7698e8994c6ae48121de4a2ba2a987ca9dfe4b10419cc7aea64b523c8344", 0xc2}, {&(0x7f0000000240)="b085f2d7068e158dbb7e4b3fb4bed7879db2f8cc90f4245a0c4703d6e714ede72adf3ab99aeb1309f3a63096e902a868cf9f33df5066c2591150bc7c9ab37fb8cfb3aecb16f9d5d83f279f2cbf3a4b2c536762d91c3d710987fe21c78bfaafb611d77351aa544c85ad8fb64611ed11d33923fd208b0017ef265b38da37e4f0", 0x7f}, {&(0x7f00000002c0)="aac59dd7edce736ea5eddaf16811e056cc168f92508055dfa1f3c8ea8e548b303b504ac615f0e95e55c469c0e81c0c1319786e0a040acfb54f6df9d12cc66b5bb1898c931255c7ead97ecb", 0x4b}, {&(0x7f0000000340)="dc16f60ff582a9175e161357fc3170bac139edb91246cfa992b8351182ff2c51945629e75df4c694118d558b2492428d7cf031bed75e8719498c354e83e95d367eff781ebd582cafdb6c37a0d86268770550092f2b9d30ef84086ac8ecc89da1", 0x60}, {&(0x7f00000003c0)="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", 0x1000}], 0x8)

[  101.432895] binder: undelivered TRANSACTION_COMPLETE
19:46:03 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', r1})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
connect(r2, &(0x7f0000000040)=@can={0x1d, r1}, 0x80)
dup3(r2, r0, 0x0)

[  101.464393] binder: undelivered TRANSACTION_ERROR: 29201
19:46:03 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
r1 = getpid()
lstat(&(0x7f0000000480)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0xa7)
r3 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f00000000c0)=0x80, 0x80000)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000100)={<r4=>0x0, @multicast2, @empty}, &(0x7f0000000140)=0xc)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@empty, @in=@remote, 0x4e22, 0x9, 0x4e22, 0xfffffffffffff3a3, 0x2, 0x20, 0xa0, 0xbb, r4, r2}, {0x9, 0x65, 0x9, 0x1f, 0x9, 0x1e0, 0x4, 0x3}, {0xf1, 0x7ff, 0x9, 0xfff}, 0x1f, 0x6e6bb9, 0x0, 0x0, 0x3, 0x3}, {{@in=@broadcast, 0x4d2, 0xff}, 0x2, @in=@rand_addr=0x7, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x1}}, 0xe8)
ioctl$TCFLSH(r0, 0x5434, 0x0)

[  101.549648] device syz_tun entered promiscuous mode
[  101.550999] binder: 4157:4172 ERROR: BC_REGISTER_LOOPER called without request
[  101.567211] binder: 4157:4160 got reply transaction with no transaction stack
[  101.577472] binder: 4157:4160 transaction failed 29201/-71, size 0-16 line 2922
[  101.604544] device syz_tun left promiscuous mode
[  101.606986] binder: undelivered TRANSACTION_ERROR: 29201
[  101.607021] binder: release 4157:4172 transaction 11 in, still active
[  101.607039] binder: send failed reply for transaction 11 to 4157:4160
[  101.609365] binder: undelivered TRANSACTION_COMPLETE
[  101.609379] binder: undelivered TRANSACTION_ERROR: 29189
[  101.670233] device syz_tun entered promiscuous mode
[  101.671681] ------------[ cut here ]------------
[  101.671686] kernel BUG at fs/ext4/inode.c:2462!
[  101.671695] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  101.671699] Modules linked in:
[  101.671706] CPU: 1 PID: 4132 Comm: syz-executor2 Not tainted 4.4.166+ #4
[  101.671711] task: ffff8800a73097c0 task.stack: ffff8801c1a00000
[  101.671727] RIP: 0010:[<ffffffff81640f40>]  [<ffffffff81640f40>] mpage_prepare_extent_to_map+0x670/0x8e0
[  101.671731] RSP: 0018:ffff8801c1a07820  EFLAGS: 00010293
[  101.671751] RAX: ffff8800a73097c0 RBX: ffffea00028ccc00 RCX: 0000000000000000
[  101.671755] RDX: 0000000000000000 RSI: ffffffff81640f40 RDI: ffffea00028ccc10
[  101.671774] RBP: ffff8801c1a079d8 R08: ffff8800a730a088 R09: 0000000000000001
[  101.671778] R10: 0000000000000000 R11: ffffffff831a49f8 R12: 000000000000000c
[  101.671783] R13: 00000000000000d0 R14: dffffc0000000000 R15: ffff8801c1a07b20
[  101.671789] FS:  0000000001d71940(0063) GS:ffff8801db700000(0000) knlGS:0000000000000000
[  101.671793] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  101.671797] CR2: 0000001b30040000 CR3: 00000001d0a7d000 CR4: 00000000001606b0
[  101.671804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  101.671822] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  101.671823] Stack:
[  101.671833]  1ffff10038340f12 ffff8801c1a078b0 ffff8801c1a07b28 ffff8801c1a07b30
[  101.671842]  00000000a730a0c8 0007ffffffffffff ffff8800b8bbabb0 0000000e0000000c
[  101.671850]  7fffffffffffff2f ffff8801c1a078f0 ffff8801c1a07b38 ffffed0038340f65
[  101.671852] Call Trace:
[  101.671862]  [<ffffffff816408d0>] ? mpage_process_page_bufs+0x490/0x490
[  101.671870]  [<ffffffff81650116>] ? ext4_writepages+0xcc6/0x2c20
[  101.671879]  [<ffffffff8165019c>] ext4_writepages+0xd4c/0x2c20
[  101.671902]  [<ffffffff814805fa>] ? quarantine_put+0xda/0x180
[  101.671911]  [<ffffffff811fc400>] ? trace_hardirqs_on_caller+0x360/0x590
[  101.671919]  [<ffffffff8164f450>] ? ext4_mark_inode_dirty+0xb80/0xb80
[  101.671926]  [<ffffffff8147faac>] ? kasan_slab_free+0xac/0x190
[  101.671933]  [<ffffffff8147c7ae>] ? kmem_cache_free+0xbe/0x350
[  101.671941]  [<ffffffff814d6635>] ? dentry_free+0xd5/0x150
[  101.671948]  [<ffffffff814d6bfd>] ? __dentry_kill+0x54d/0x6c0
[  101.671955]  [<ffffffff814d7f37>] ? dput.part.9+0x587/0x760
[  101.671962]  [<ffffffff814d812f>] ? dput+0x1f/0x30
[  101.671973]  [<ffffffff8271527a>] ? _raw_spin_unlock_irqrestore+0x5a/0x70
[  101.671981]  [<ffffffff8164f450>] ? ext4_mark_inode_dirty+0xb80/0xb80
[  101.671989]  [<ffffffff813d7f9f>] do_writepages+0xef/0x1d0
[  101.671996]  [<ffffffff813d7eb0>] ? ratelimit_handler+0x50/0x50
[  101.672004]  [<ffffffff81237e93>] ? rcu_read_lock_sched_held+0x103/0x120
[  101.672012]  [<ffffffff813b9959>] __filemap_fdatawrite_range+0x1a9/0x250
[  101.672020]  [<ffffffff813b97b0>] ? replace_page_cache_page+0x410/0x410
[  101.672028]  [<ffffffff8162baa0>] ? ext4_check_all_de+0xf0/0xf0
[  101.672035]  [<ffffffff813b9a53>] filemap_flush+0x23/0x30
[  101.672042]  [<ffffffff81647838>] ext4_alloc_da_blocks+0x108/0x3c0
[  101.672049]  [<ffffffff8162baa0>] ? ext4_check_all_de+0xf0/0xf0
[  101.672056]  [<ffffffff8162bc9f>] ext4_release_file+0x1ff/0x2e0
[  101.672063]  [<ffffffff81497685>] __fput+0x235/0x6f0
[  101.672069]  [<ffffffff81497bc5>] ____fput+0x15/0x20
[  101.672077]  [<ffffffff8112f8bc>] task_work_run+0x21c/0x2d0
[  101.672086]  [<ffffffff81003edd>] exit_to_usermode_loop+0x13d/0x160
[  101.672095]  [<ffffffff81005784>] syscall_return_slowpath+0x254/0x2d0
[  101.672103]  [<ffffffff82715ee1>] int_ret_from_sys_call+0x25/0xa3
[  101.672110]  [<ffffffff81117eb2>] ? __init_work+0x12/0x60
[  101.672231] Code: 48 89 df e8 43 3f d7 ff e9 32 ff ff ff e8 09 63 cc ff 48 89 df e8 d1 58 d7 ff e9 fa fd ff ff e8 f7 62 cc ff 0f 0b e8 f0 62 cc ff <0f> 0b 31 c0 89 85 b0 fe ff ff e8 e1 62 cc ff 8b 85 18 ff ff ff 
[  101.672240] RIP  [<ffffffff81640f40>] mpage_prepare_extent_to_map+0x670/0x8e0
[  101.672252]  RSP <ffff8801c1a07820>
[  101.672256] ---[ end trace 521437ed2fbe0c82 ]---
[  101.672261] Kernel panic - not syncing: Fatal exception
[  101.675617] Kernel Offset: disabled
[  102.051857] Rebooting in 86400 seconds..