[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 8.790767] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.059593] random: sshd: uninitialized urandom read (32 bytes read) [ 18.244324] random: sshd: uninitialized urandom read (32 bytes read) [ 18.576222] random: crng init done Warning: Permanently added '10.128.0.178' (ECDSA) to the list of known hosts. 2019/08/19 23:44:24 fuzzer started 2019/08/19 23:44:27 dialing manager at 10.128.0.26:43649 2019/08/19 23:44:27 syscalls: 1367 2019/08/19 23:44:27 code coverage: enabled 2019/08/19 23:44:27 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/19 23:44:27 extra coverage: extra coverage is not supported by the kernel 2019/08/19 23:44:27 setuid sandbox: enabled 2019/08/19 23:44:27 namespace sandbox: enabled 2019/08/19 23:44:27 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/19 23:44:27 fault injection: kernel does not have systematic fault injection support 2019/08/19 23:44:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/19 23:44:27 net packet injection: enabled 2019/08/19 23:44:27 net device setup: enabled 23:44:54 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl(r0, 0x0, 0x0) 23:44:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 23:44:54 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 23:44:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080), 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000001000)=""/4096, &(0x7f00000001c0)=0x1000) 23:44:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40001, 0x1, 0x0, 0x1}, 0x3c) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/68, 0x44}], 0x1) 23:44:54 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x18) [ 54.494003] audit: type=1400 audit(1566258294.234:5): avc: denied { sys_admin } for pid=2080 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 54.545670] audit: type=1400 audit(1566258294.284:6): avc: denied { net_admin } for pid=2085 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 54.949236] audit: type=1400 audit(1566258294.694:7): avc: denied { sys_chroot } for pid=2085 comm="syz-executor.5" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 23:44:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001380)={@remote, 0x0, r2}) [ 54.979782] audit: type=1400 audit(1566258294.724:8): avc: denied { associate } for pid=2089 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 23:44:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 23:44:54 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 23:44:54 executing program 1: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80}) [ 55.097420] audit: type=1400 audit(1566258294.834:9): avc: denied { net_raw } for pid=2241 comm="syz-executor.2" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 23:44:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x362) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0xb3a650d5cfb38501, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000940)=""/230, &(0x7f0000000280)=0xe6) ioctl$FICLONE(r0, 0x40049409, r1) r3 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000a40)="e7f1139e4c6ce4674c620e7c8ea876d3ba35fc34410205f66a4c62fbc12e57f9bf4d45b41692049c7813a1916ba1060b448faa13516a3b9aacf3f9f1ac6217a5fee8ea21a89c6a202f068fe349664c2026ca50e3417903a8548292d4eac01c53e68442c98462ba78f9f94264fd327016468011bd07a8460ec00b7a9e7ff3a96de8bcb708f1623f3c6ee0dd295b1426c1b2f4631cc76ebc7aee703e2ebd8e29b40dd5862fa4c5c9e3fdcefa6edb7aefb68f6c2111e4cb05587015d7a0f3d7c9546fab7c4a62b9b50277510b4fbc3413e0a96a9c6f3596ee9eed772dd84fca1f076fac6e280593000fff28f97e22115d1c550eaa492a7664386a884f54aa0fbe6c237c8cd58cc01b286a213dd246a40ff82464537d4288a83bb902628a1ea64aa9f54d03113179463ef1bc931f920fc3605d0724d3c03dfdb8f607b632b72e6a26d70073cae05f0867e83453a616fe7748e0b7b5a7cd6a6a1ad590ac8767ab3c339592c189ce8549a4ee079e7e077e071220b2e3145244bef300948abf8ac8abae271a8f3d8746d79812f10b9f7598fdde87effa9ef061b8be20b9b3b7763956b43a0516bb7632ebc776e264713cd8589a4936f72013566aa879fbcfb16c98944add598840365388a642930ca32d1862c594f79aa80939be36f817c6577bd221f19cd88c31efdfc1ad7a0630360db01ed3817bb428d8a7690de0ecf8f12e38fe5f1713fae951fc7fdb331d33d3b0ed9dd781a621f720daf22ec8439170b21fb29755251580ff0bc4703ad785243414fc26e8c4b7a9ae41a88463c5cdce1f9200fa31afcfbc3a8312c321e2a8e281a0eb9ed9fa6df965136bd3be2bc9575ba2025f3af4560213b1d1b67de40d3b30dd7ff66892c7038bd47bb4f151025fac5f78c65f6566f9a657e03607a125f66091d4ef3ed12ee1a7c2e1848b0ce3b7028c3dfcc77211a23a5b82e7c4b09cfc1dc25a7c7f8be858357adb404909b74e31592b3e1e8c007c83cece64a2bb5fcde3dcafdbcbef1690e97d6248b2bd328c97d7864a824bff8b0a48752c17d541226ca293d3e5fff5539fab5ab01db835edc437652ca808ab59eda18a67dcdb5ad46b1dee8dcc3924deb55754eff00bbd27aa7a420d83fdf083b0d6dd6a7fd3924da5c5005b01f2954a16eea9b2e867afd5ef531c6bd357edbd3dae50a7ad5d43f0e07dae5509dbf9f9329ebb7c4b713653f23f0c0f1b65cffaba813bd6f5fbfd0ffb6b9b27c38d71988abcec8bb9df6f2be17b8774446ba3f97cd2136d708570956f70bfd5ce83382736a40fd63dbdd4dc24cbb7abf0b19c0f40af2ac9b9dfb2f9b679d51eb47c19df0ca5765878713704a859f5ef0f4114b7dd7e1ec947e887bfcc396b4bf002a052c041c1cff82c7aea958e8bd6f55a2c9ed6c015743abe5da72495b50e3a7ceaf0edc20696e6ca8db75bc356ced9fcba6b868b73d092812a71c51cd1ae62a028bfaf584a0462ab8cc66d0068cce7547a5b323dfe9783fdafeb400d3fd6051da5f9bd6f0cd581462b0e1fc6b69c348d248429d79b23b9189ebd850e269ee7877fc564a6bc3193a54e7128dedcc66903c54bf6b27aee997f44e64090178eb53c5df0d4acaf0319866cb02fad02f14dd80d71a34f2c27623f04a340dea16f39fc15523a245676323e5390276f6bf0849d3f72aa486731b9e6a0557d106991a65dab0122ac83e8f582360e9cb8d80f120a7f2d90de5bf33c85ac67e227505e82d744a08c5932101a4a48341e4400cab157fb47aaa078c8711d22db7b697ec9a8233bd361b844a1811e765f3462927d804c1e244c70a9cb4682c7aa7ab53fd559c254f0e561ccbdda4acf5ccaf15bf03b621cab8d7dbcedbfc2796fa31cdb33bbfee463d89486b054b68947c2c657c12205a9af42329b23abc36898b0b39a9c9c29e1c4308388b9dcee0562f4eb3acfa692e16c67ef0e980ced7aba8f176ca8ff8de17aa24aa16bf957a6ef60839d9a8ca6c00dc6b1162fd7acd411752f0904e3e223245f4c01148f1214f4f75c4974c626b952018acb03d4762e330dd6c574cc7e97721166c5b3a2f0399295892084f7765765825e8279e4f391317a38e09c9d84a309e97d6a15d3acb18ee2699c94ca25d0c1739fc7a3958bdfb7a4de19cf4ee97e32ebb977b58645fa47a633156e7a44327c838b81fd8134172cd9098046fa9a2b2bcac3c8213c7d866f0470a54f176e79326e042b13a562099c95353d4cf2dbb5dcec4e4db4193aac0efe2ef3d08ee79cbb24ee09c06fb25eaddc78d5913d0cf5977249c982ed387ac35b078173985794674fa3541b3b075fcb7fc69a9d6fce5190c5b1f3704399b4e8baf8e353fd79e914b8a0e12568a942e6fca05aa2b832a07e7cd387987503bbf4d82ccc3d9207664cfbfb70ba2d2dcf9a021efa31fc45eb1df9bdbc5ea922e85612ea9c2e7892c98d248c545e32e7d77a23ad18d5c154662c1232629c0050a3c1df7d292d75abf5465816a4cc54d750f16c84d9d590df780ae5c916f9e1e81b072710cf9e6c8d5c297b53ea319c269b775810c4bbcb2546552907737780b743b4e5b119935179c8bb0926b605a7e9e5699754cf27275b0f068ca114465eed9628e09600eea3ee225f7d6417bed23c1528787cf79cf4cabbfd7368908adfe512920f6ff556dd5c3142071b140f04b5e2f5789bdddb35ed477ac91c602f650b632abddbb7d5008c79df0e819eb232bd095705952c9e51e2ddc2a83e5136dbf2f005ad54617ca762e2e2b018f7325bde9b6ca872c8696673cb96d084b54ca93390c4853deea0c4deb2530d0755c84c24dc786d7e939bbc5a0c6bd8c6f74eb5d8d738fec047a47c82622dde28613a49d46218f0e8810c0f98cf55935a2b33df68cb474eb6f9a0fc4a317995b1cdea70101c28ddec859b1c04006d8f40068d21d6b930017894bb31238bc8b3ac81586a11e9bdecc54db617f483b239733b89b15977c8d234e9994cf71c82a65344a9d23ea43b06fa654ed822210e19f51a9d04cc83bc5b8deb72e126473f89f56611bff612eb9c90b6f0f00987fb05d03d518d8b24e7661deaf44aaf1fb67ef52f06916ea7f960fb27a9b0b669662d5c36b8ecdfcc0786f965bb86ee9e01b0b2ffc0e8399fcd7d83e59f889df9542b7a9be56ad6a1f67329e661c0fbdb1b3a259ff05309ff0f8a20da5e6f156e770500789961010d967051d29015a56ec40bb9ec60f8f8bfd3d8586300d71c00df0166c1d73d04c93a45bd25141476e5cb5003155860ae03ce6549e7f6e6e8682a365210770d58672e127a1bfd2de59225f9e49f3875f851dcdd194e561098509dfb154981a80ed2c83a15f2c2620c3bdbc9dd408f61014be44dac0a7a78c402024cbd4d2691ed46cc4bd698d2dc344c9c610426b7c39f44dbcc2048b797277b7047fd6de6c802abf89db5230769b9c59121bcd5e53a73f4bc3c3644125059b6ac57933b8ef42796878f60eacb98d316e7ca451a09f4020744847e95598542ec126a413ddea6fbccaf3c73d9c3fbbae0007040899f9a4dcc1a9150051c4e0775a5379b5404fbb733bcea41f5dbeae8f57df9a4b3ab566a58122b9def2473f26717035defc852e8fd6d283ad40b62b9ffb1f7f8981db5d87171ad0d268c88e00db64f0550be8bf173890b53eaabd4983b75318b1a5d9ce9d1d4aca516d7583a516aecf13355114c304f9d25becad872c62ec65c4f93560a27c3b1bc22025b3162ce36f4111ff82d49999a464c06c4aa3e98b419a8bd37ae1624b8d171b5d7dda2dbdd6892488d7dd0455360dc79da23f02f1dc855d8f8b2bf97bdeb6c3afcec6bfe055d46873fb23bc7f125cf910a6ddb5cff9b3c0dcd99639d81f5aec2edbae22fdce5e21ed578be63d26ff07780cc827508d053fcd5b9e6683ff363c9cc83b6e6d1ae91172bbf3433387c454fcc6ebdf49a67a2e573a3b094b812eba691534e22d9305ca08a2272df0c9158761212f418c9021ed802f2b57bf00dda5da95b0e2a2b92de03f357cfe49b936ee78763fb47dbeef6a3c78a00fda9e6b159c143104076aa247c5ea98041257f362b7dc6ff5d24d8512b4dd12009a8002595e6d951c79487348d981f456c81d7d0367840fcb3d24b4d72cefbfbafe3813c32ef2cd474eac590b5169edc289ed4cf9f9b6a029cc07ca00741df59ae5fa1b7ec122bc0eb446649fee6cb7afaadb0aece4737c835db45eda8898a968873fba048560c6f27194cc2cefb1365af731ac88bf739574334039da6be1a548a841b27889ffc3dca7275b71bfe80b1841e63facc839114d8a2a693cb8b207b70697d8e95a8821a1588d6f6960d0a2a40f4a2dd8479a83a1967f43951a29267f75da1ebddb9fe245e5907e0c4d3cea2f2eec9d1d518895c7e6ab5327850c0726135a0b0bdeffd0833e330f3f25afb47eb3f9ec19c42b6c00ae429557be7b7bcacdf15a3aa1ee4de03ba14a1a4134b3f48447d0b884fe58a49c02da4ea660991f279a863581686f64cb9220ad96341840703cd2d10cb2aa2060005222c9fe77389ceb4ab27daecd5ef8df3d1b254722ff6d31d6c8f5fd85a864894f99f090d8f2cb6cfb30900a905fe2aed65e5d5d22430cfc00264f294a52441c10af97c11371d80e5cf9f689a1534acc64c2b238e60a8eb619502ab8f2b5a92c74dafcebd176e6f8b9df6b9ef8f1935e92ed27ec7e86c96390e980284de1ab1c4e4c32f70a7ac36a365ca3f5bd817ff4a130fca61f539674e196caa3c742c2fac03b57dba37e1e551939d59ce6f2d2cfccd5e3785f3aadd7bf07c2badf2a39b851666950b8ffffd2b4453ef91d99a3a41cadf9d5996c83d378cb5bc12fca705d8eca396c9c630561edab5e35d10b6dc9e30984235ed2d86e88febbc12cdd23aafc6d264643e2eedb527ef53dc6b18b0258281d61f29980805df28edda49f9c8df1e1f84747bd7f6f9b35268b09fef0e7d2192bf4e79100487052c49fc5dd749775f33e1d18107b20bf3f191c60990ead2772098593ad5f24f856b096a36d5b14dce8d0a7d3cbf4aa24ea72d6b7b70c1dcc5337b49b8c51f1d5ae52e81246b5f2291b85d14505b68368165a572abf8677393dfd6941f1bc7fe2f5c04969f0c1b9cf1d1291eeb7a548ed6b868e706e6a2e7c802362e3e5545e01e172e6ea612d4c0c8587fb3f65d276c1199ff46c27a79911b2370c04c84a2daafbefc2aaa418f74936d710451f46a281546b4e07156afe69dc07238bbb4fa27f4f23e3fdb7b6b0f178158b49623cd36a67ee9c545b1022da121cdac4f7eccaf5169a514e64f4205a0693992cb08aeabaffe0dcbdd040e6984326ac3bdbf5402810338f3f9601cb368879b5141f3b967e01cb2404816fa5451c27466d884d5e01cbe1b34cd09960dff16080be2098a9d766057de5ac4c982ff22ff397310ddb632ad7f87f2c405bb7cce410a756e94d2275a8f33804e58c408678a81441f1c6a9b73fa4b97edba726d10f10eb2a001979d97f719cb4bd267c7155f89c6d7dbea908248944299aef09796bf4d9daee1e2d7d706be88dcfb0292461f67208d963604131ddd61733f5d554b94186d822807a5ee1ad442aa8ba2835dce673eb8428395bf82280da103b29b1b7aa91aa1068ec44dc1ae6d0877386d4e064c5e749ebeb3d22bdc68e1371893362c5dab4da9110341fa7eaf21910c", 0xfb6, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000900)={r3, r4}, &(0x7f0000001bc0)=""/4096, 0x1000, &(0x7f00000001c0)={0x0, &(0x7f0000002c00)}) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r2, r5, 0x0, 0x8000fffffffe) 23:44:54 executing program 0: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffff7fb) r0 = getpid() mknod(&(0x7f0000000040)='./file0\x00', 0x1142, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ptrace(0x11, r0) [ 55.126204] audit: type=1400 audit(1566258294.864:10): avc: denied { map_create } for pid=2243 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 23:44:54 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042409, &(0x7f0000000000)='em0\xf1mime_type\x00') 23:44:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f1, 0x0) 23:44:54 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) 23:44:54 executing program 5: clone(0x3182001fd6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x0) [ 55.207990] audit: type=1400 audit(1566258294.944:11): avc: denied { dac_override } for pid=2267 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 23:44:55 executing program 2: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000380), &(0x7f00000003c0)=0x8) 23:44:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getcwd(&(0x7f00000000c0)=""/78, 0x4e) 23:44:55 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1\x00', {0x2, 0x0, @loopback}}) 23:44:55 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2a, 0x0, 0x0) 23:44:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getcwd(&(0x7f00000000c0)=""/78, 0x4e) 23:44:55 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000040)=0xf5, 0x4) getsockopt$inet6_int(r1, 0x29, 0x48, 0x0, &(0x7f00000001c0)) 23:44:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{&(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_retopts={{0x14, 0x0, 0x2, {[@timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0) 23:44:57 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000009f789bae12cf86dd60b4090000302c0080000000000000000000ffffe0000002ff020000000000000000000000000001800090780009040060b680fa000000000000001a000000000000fdffffffffff00000000000000000000ffffac14ffbb"], 0x0) 23:44:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/10, 0xa}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x89, 0x0, 0x0, 0x800e00515) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000300)={0x6}, 0x10) shutdown(r0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xd373, 0x0, 0x0, 0x800e00520) shutdown(r1, 0x0) 23:44:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 23:44:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x362) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0xb3a650d5cfb38501, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000940)=""/230, &(0x7f0000000280)=0xe6) ioctl$FICLONE(r0, 0x40049409, r1) r3 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000a40)="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", 0xfffffff2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000900)={r3, r4}, &(0x7f0000001bc0)=""/4096, 0x1000, &(0x7f00000001c0)={0x0, &(0x7f0000002c00)}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) 23:44:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/10, 0xa}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x89, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xd373, 0x0, 0x0, 0x800e00520) shutdown(r1, 0x0) 23:44:57 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000040), 0x4) 23:44:57 executing program 1: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000c80)='/selinux/user\x00', 0x2, 0x0) lseek(r0, 0x0, 0x3) 23:44:57 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f0000000000)='em0\xf1mime_type\x00') 23:44:57 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$inet6(r0, 0x0, 0x0) 23:44:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010020, 0x0) 23:44:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x0, @rand_addr, 0x0, 0x0, 'rr\x00'}, 0x2c) 23:44:58 executing program 2: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff2b37, &(0x7f0000000040), 0x8) timerfd_create(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 23:44:58 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001e9, 0x400000000000) [ 58.264418] audit: type=1400 audit(1566258298.004:12): avc: denied { create } for pid=2353 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 58.291658] audit: type=1400 audit(1566258298.034:13): avc: denied { write } for pid=2353 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 23:44:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") r2 = epoll_create1(0x0) r3 = syz_open_pts(r0, 0x0) close(r0) dup2(r2, r3) 23:44:58 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001e9, 0x400000000000) 23:44:58 executing program 4: open$dir(0x0, 0x0, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001e9, 0x400000000000) [ 58.338555] audit: type=1400 audit(1566258298.074:14): avc: denied { read } for pid=2353 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 23:44:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00x\x98)\xf1\xbf9\x1a\x97\xfd\x88A\xac\x91\xab\xb5\xf8\xad\xfbG\x83_!D\xd0\xb1+\x84y\xed\xf5-\xdb\xd8\xd8\x87\xf8\x9b\x9fV8\xba8\x9f\xf9\xb3\xe9M\xe1\xbc\x04lh6\xfd]i\x04\x93,\xaeQ\x8d\x11_\xe1\xe9S\xfcS\xf8y\xc4\xb7\xde\xaa{w\x90_') fcntl$setlease(r0, 0x400, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[]) 23:44:58 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syslog(0xa, 0x0, 0x0) 23:44:58 executing program 5: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x5, {0x3}}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x7, 0x0, 0x1, r2}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) get_robust_list(0x0, 0x0, &(0x7f0000000380)) prctl$PR_CAPBSET_DROP(0x18, 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(r1, &(0x7f0000000440)='system_u:object_r:mount_exec_t:s0\x00', 0x22) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x10080000, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) 23:44:58 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x800) write$binfmt_elf64(r0, &(0x7f0000004000)=ANY=[@ANYRESOCT=0x0], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 23:44:58 executing program 4: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x5, {0x3}}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) fcntl$lock(r0, 0x6, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) get_robust_list(0x0, 0x0, &(0x7f0000000380)) prctl$PR_CAPBSET_DROP(0x18, 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(r1, &(0x7f0000000440)='system_u:object_r:mount_exec_t:s0\x00', 0x22) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x10080000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) 23:44:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) r1 = dup2(r0, r0) sendmsg$netlink(r1, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000380)={0x174, 0x25, 0x603, 0x70bd2c, 0x25dfdbfd, "", [@generic="7614e9e79c8ffde5a81fadfd5fb00c8de7a56671c21b915611fcdd81920898275a6eadf4595455c7eae1106d8e089c2852e6ff7ee9b7cec6705f1719f8700d7cf4b24268036ef13856a048eb954cb6c65699f0eb611731f5905c10e0b9b333fc152ebcea702215e477dfc9b176d1ed266e075827c8f5cf243ec77284bfc9a307dea9b6600f40a6faad47db7699a16b74e974465a19e3427a91a258d43c20cca1e634", @typed={0xc, 0x0, @u64=0x20}, @generic="9d9653c6d129d01bdae1a19584bd7519c2e47d38b9ececb620227f9966dd2b96be8c068ad05561035ed689eafba9bd32a920c583814678864f386bf882005d0ff51517317814446c1824c6c9b84b22cc2d91a22a9244e4ac41dbce87305c52167d6bfb2ab11824dcc46d6a5a67967fcb147ed611623da7c1b229", @generic="248b13054360de289a2fb5420a901c372a00963f739e04c93fd64e1f22c849f1ec8e8761f8", @nested={0x14, 0x7b, [@typed={0x8, 0x58, @uid}, @typed={0x8, 0x0, @uid}]}]}, 0x174}, {&(0x7f0000001080)={0x264, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x240, 0x0, [@generic, @generic="d4d483ef36ccf2ed533f5bd9e1e465a57a8c7758892deb7327ea34ff7555a722cac54e565f2b3f742c1ecce72eb5dd7e2e5b10d72a34dfd57f3575475c1f1c", @generic="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"]}, @typed={0x14, 0x0, @ipv6=@rand_addr="34d1df6de07157606a2ba19f56b533ec"}]}, 0x264}], 0x3, &(0x7f0000003a00)=[@rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0x98, 0x24000011}, 0x40040) shutdown(r0, 0x1) 23:44:58 executing program 0: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffffeff000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x40) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000340)={0x1a, 0x1f, 0x17, 0x7, 0x2, 0x6, 0x6, 0x2f, 0x1}) r2 = socket(0x840000000002, 0x3, 0x9) r3 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f00000005c0)="1bd75be2bbbfd0a85c58b89ec89d7ce32bf71b014ec4ff843efe72261dd063f9a929f5be0340616b2e73ef95f12b336ced225ca382823a7f7884b71a39ab8204f7a66059f2127b7ada4b666b770ee77c6330afa8eca3891bbf607cf07b833d5a5196d8ff13b685bcde203e3a726fb627818f752ca805f0f8dea73e3d737372c32191747ce3b3ed2a8954c051069f503422111db32db7ccc6cd8940936804fe2e8d6539c13df755b51fef08935c93c0f612590034ccf1e0de25a7cabc6f4e4664af1da400352348c5c5a1dff653933fe7e2cda56780b8ba4efa464749748c2f3d80c94f0490ec3ba84a937de39f6049", 0xef, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffc33, 0x10, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x20) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) pipe2(0x0, 0x80000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@empty, @in6=@empty}}, {{@in=@loopback}, 0x0, @in=@local}}, 0x0) 23:44:58 executing program 2: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff2b37, &(0x7f0000000040), 0x8) timerfd_create(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 23:44:58 executing program 0: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffffeff000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x40) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000340)={0x1a, 0x1f, 0x17, 0x7, 0x2, 0x6, 0x6, 0x2f, 0x1}) r2 = socket(0x840000000002, 0x3, 0x9) r3 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f00000005c0)="1bd75be2bbbfd0a85c58b89ec89d7ce32bf71b014ec4ff843efe72261dd063f9a929f5be0340616b2e73ef95f12b336ced225ca382823a7f7884b71a39ab8204f7a66059f2127b7ada4b666b770ee77c6330afa8eca3891bbf607cf07b833d5a5196d8ff13b685bcde203e3a726fb627818f752ca805f0f8dea73e3d737372c32191747ce3b3ed2a8954c051069f503422111db32db7ccc6cd8940936804fe2e8d6539c13df755b51fef08935c93c0f612590034ccf1e0de25a7cabc6f4e4664af1da400352348c5c5a1dff653933fe7e2cda56780b8ba4efa464749748c2f3d80c94f0490ec3ba84a937de39f6049", 0xef, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffc33, 0x10, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x20) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) pipe2(0x0, 0x80000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@empty, @in6=@empty}}, {{@in=@loopback}, 0x0, @in=@local}}, 0x0) 23:44:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000003c0)=""/222, &(0x7f0000000140)=0xde) 23:44:58 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x3c25956b) r3 = socket$inet(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x8001, 0x0) 23:44:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x8, 0x4) 23:44:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/37) 23:44:58 executing program 2: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{}, {}]}, 0x4) 23:44:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{&(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0xffffff94, 0x4}]}}}], 0x18}}], 0x1, 0x0) 23:44:58 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000140)) 23:44:58 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 23:44:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) 23:44:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00', 0x1}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 23:44:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f0000000140)=""/214, 0xd6) 23:44:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) close(r0) 23:44:58 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x81, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) 23:44:59 executing program 3: r0 = getpgrp(0x0) syz_open_procfs(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00') 23:44:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000a00)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 23:44:59 executing program 0: prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/194) 23:44:59 executing program 5: r0 = inotify_init() ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 23:44:59 executing program 4: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x4ff9, &(0x7f0000000080)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141446, 0x0) truncate(&(0x7f0000000600)='./bus\x00', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r2, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000100)="2be9d3a219fc5f", 0x7}]) 23:44:59 executing program 1: r0 = inotify_init() ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) 23:44:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') close(r0) 23:44:59 executing program 3: getcwd(&(0x7f0000000180)=""/251, 0xfb) 23:44:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000280)=[@release], 0x0, 0x0, 0x0}) 23:44:59 executing program 5: 23:44:59 executing program 1: 23:44:59 executing program 0: 23:44:59 executing program 5: 23:44:59 executing program 3: 23:44:59 executing program 0: 23:44:59 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000002c0)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r0, 0xfffffc0000040003, 0x3) close(r0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 23:44:59 executing program 4: 23:44:59 executing program 5: 23:44:59 executing program 3: 23:44:59 executing program 4: [ 59.499907] binder: 2509:2515 Release 1 refcount change on invalid ref 0 ret -22 23:44:59 executing program 2: 23:44:59 executing program 0: 23:44:59 executing program 5: 23:44:59 executing program 3: 23:44:59 executing program 4: 23:44:59 executing program 3: 23:44:59 executing program 0: 23:44:59 executing program 1: 23:44:59 executing program 5: 23:44:59 executing program 2: 23:44:59 executing program 4: 23:44:59 executing program 3: 23:44:59 executing program 0: 23:44:59 executing program 4: 23:44:59 executing program 2: 23:44:59 executing program 3: 23:44:59 executing program 5: 23:44:59 executing program 0: 23:44:59 executing program 1: 23:44:59 executing program 4: 23:44:59 executing program 5: 23:44:59 executing program 0: 23:44:59 executing program 1: 23:44:59 executing program 4: 23:44:59 executing program 2: 23:44:59 executing program 3: 23:44:59 executing program 0: 23:44:59 executing program 5: 23:44:59 executing program 4: 23:44:59 executing program 3: 23:44:59 executing program 2: 23:44:59 executing program 1: 23:44:59 executing program 0: 23:44:59 executing program 4: 23:44:59 executing program 3: 23:44:59 executing program 5: 23:44:59 executing program 2: 23:44:59 executing program 1: 23:44:59 executing program 0: 23:44:59 executing program 4: 23:44:59 executing program 5: 23:44:59 executing program 2: 23:44:59 executing program 4: 23:44:59 executing program 3: 23:44:59 executing program 1: 23:44:59 executing program 0: 23:44:59 executing program 2: 23:44:59 executing program 1: 23:44:59 executing program 5: 23:44:59 executing program 3: 23:44:59 executing program 0: 23:44:59 executing program 4: 23:44:59 executing program 2: 23:44:59 executing program 3: 23:44:59 executing program 0: 23:44:59 executing program 5: 23:44:59 executing program 1: 23:44:59 executing program 4: 23:44:59 executing program 3: 23:44:59 executing program 2: 23:44:59 executing program 0: 23:44:59 executing program 1: 23:44:59 executing program 4: 23:44:59 executing program 5: 23:44:59 executing program 1: 23:44:59 executing program 0: 23:44:59 executing program 2: 23:44:59 executing program 3: 23:44:59 executing program 5: 23:44:59 executing program 1: 23:44:59 executing program 0: 23:44:59 executing program 4: 23:44:59 executing program 3: 23:44:59 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xffffffffffff2b37, &(0x7f0000000040), 0x8) r2 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000006c0)='trusted\x00', 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000840)='logon\x00', 0x0, &(0x7f00000008c0), 0x0, 0xfffffffffffffffb) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) bind(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(r2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 23:44:59 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0xffffffffffffffff) creat(&(0x7f0000000140)='./file0\x00', 0x0) 23:44:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) 23:44:59 executing program 3: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000180), 0x0, 0xffffffffffff2b37, &(0x7f0000000040), 0x8) r1 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000006c0)='trusted\x00', 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000840)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) 23:44:59 executing program 0: 23:44:59 executing program 4: 23:45:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b80)=[{{&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002d00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x18}}], 0x2, 0x0) 23:45:00 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_ENTRY(r0, &(0x7f0000000540)={0x90}, 0x90) 23:45:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) 23:45:00 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) bind$inet(r0, 0x0, 0x0) 23:45:00 executing program 0: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xffffffffffff2b37, &(0x7f0000000040), 0x8) r1 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000840)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) execve(0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) bind(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) 23:45:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000b0500000000000000edffffff00", @ANYRES32, @ANYBLOB="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"], 0x74}}, 0x0) [ 60.353215] ================================================================== [ 60.360626] BUG: KASAN: use-after-free in disk_unblock_events+0x51/0x60 [ 60.367372] Read of size 8 at addr ffff8801a807eb60 by task blkid/2677 [ 60.374026] [ 60.375652] CPU: 1 PID: 2677 Comm: blkid Not tainted 4.9.141+ #23 [ 60.381874] ffff8801c795f6f8 ffffffff81b42e79 ffffea0006a01e00 ffff8801a807eb60 [ 60.389924] 0000000000000000 ffff8801a807eb60 0000000000000000 ffff8801c795f730 [ 60.397922] ffffffff815009b8 ffff8801a807eb60 0000000000000008 0000000000000000 [ 60.405933] Call Trace: [ 60.408522] [] dump_stack+0xc1/0x128 [ 60.413870] [] print_address_description+0x6c/0x234 [ 60.420618] [] kasan_report.cold.6+0x242/0x2fe [ 60.426834] [] ? disk_unblock_events+0x51/0x60 [ 60.433061] [] __asan_report_load8_noabort+0x14/0x20 [ 60.439833] [] disk_unblock_events+0x51/0x60 [ 60.445875] [] __blkdev_get+0x6b6/0xd60 [ 60.451488] [] ? __blkdev_put+0x840/0x840 [ 60.457267] [] ? fsnotify+0x114/0x1100 [ 60.462794] [] blkdev_get+0x2da/0x920 [ 60.468222] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 60.474958] [] ? bd_may_claim+0xd0/0xd0 [ 60.480559] [] ? bd_acquire+0x27/0x250 [ 60.486067] [] ? bd_acquire+0x88/0x250 [ 60.491578] [] ? _raw_spin_unlock+0x2c/0x50 [ 60.497525] [] blkdev_open+0x1a5/0x250 [ 60.503042] [] do_dentry_open+0x3ef/0xc90 [ 60.508816] [] ? blkdev_get_by_dev+0x70/0x70 [ 60.514863] [] vfs_open+0x11c/0x210 [ 60.520135] [] ? may_open.isra.20+0x14f/0x2a0 [ 60.526256] [] path_openat+0x542/0x2790 [ 60.531859] [] ? path_mountpoint+0x6c0/0x6c0 [ 60.537898] [] ? trace_hardirqs_on+0x10/0x10 [ 60.543954] [] ? new_slab+0x22e/0x3d0 [ 60.549428] [] ? expand_files.part.3+0x3a9/0x6d0 [ 60.555811] [] do_filp_open+0x197/0x270 [ 60.561433] [] ? may_open_dev+0xe0/0xe0 [ 60.567030] [] ? _raw_spin_unlock+0x2c/0x50 [ 60.572979] [] ? __alloc_fd+0x1d7/0x4a0 [ 60.578583] [] do_sys_open+0x30d/0x5c0 [ 60.584284] [] ? filp_open+0x70/0x70 [ 60.589621] [] ? up_read+0x1a/0x40 [ 60.594783] [] SyS_open+0x2d/0x40 [ 60.599860] [] ? do_sys_open+0x5c0/0x5c0 [ 60.605547] [] do_syscall_64+0x19f/0x550 [ 60.611239] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 60.618140] [ 60.619745] Allocated by task 2667: [ 60.623350] save_stack_trace+0x16/0x20 [ 60.627298] kasan_kmalloc.part.1+0x62/0xf0 [ 60.631593] kasan_kmalloc+0xaf/0xc0 [ 60.635287] kmem_cache_alloc_trace+0x117/0x2e0 [ 60.639951] alloc_disk_node+0x54/0x3a0 [ 60.643912] alloc_disk+0x18/0x20 [ 60.647344] loop_add+0x368/0x7a0 [ 60.650786] loop_control_ioctl+0x136/0x300 [ 60.655091] compat_SyS_ioctl+0x12d/0x1fd0 [ 60.659311] do_fast_syscall_32+0x2f1/0xa10 [ 60.663615] entry_SYSENTER_compat+0x90/0xa2 [ 60.667994] [ 60.669595] Freed by task 2677: [ 60.672850] save_stack_trace+0x16/0x20 [ 60.676800] kasan_slab_free+0xac/0x190 [ 60.680760] kfree+0xfb/0x310 [ 60.683842] disk_release+0x259/0x330 [ 60.687614] device_release+0x7e/0x220 [ 60.691477] kobject_put+0x148/0x250 [ 60.695166] put_disk+0x23/0x30 [ 60.698420] __blkdev_get+0x616/0xd60 [ 60.702209] blkdev_get+0x2da/0x920 [ 60.705809] blkdev_open+0x1a5/0x250 [ 60.709500] do_dentry_open+0x3ef/0xc90 [ 60.713449] vfs_open+0x11c/0x210 [ 60.716876] path_openat+0x542/0x2790 [ 60.720649] do_filp_open+0x197/0x270 [ 60.724434] do_sys_open+0x30d/0x5c0 [ 60.728123] SyS_open+0x2d/0x40 [ 60.731390] do_syscall_64+0x19f/0x550 [ 60.735268] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 60.740341] [ 60.741943] The buggy address belongs to the object at ffff8801a807e600 [ 60.741943] which belongs to the cache kmalloc-2048 of size 2048 [ 60.754841] The buggy address is located 1376 bytes inside of [ 60.754841] 2048-byte region [ffff8801a807e600, ffff8801a807ee00) [ 60.766955] The buggy address belongs to the page: [ 60.771876] page:ffffea0006a01e00 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 60.782055] flags: 0x4000000000004080(slab|head) [ 60.786778] page dumped because: kasan: bad access detected [ 60.792456] [ 60.794057] Memory state around the buggy address: [ 60.798965] ffff8801a807ea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.806303] ffff8801a807ea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.813645] >ffff8801a807eb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.820981] ^ [ 60.827450] ffff8801a807eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.834787] ffff8801a807ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.842118] ================================================================== [ 60.849453] Disabling lock debugging due to kernel taint [ 60.857148] Kernel panic - not syncing: panic_on_warn set ... [ 60.857148] [ 60.864531] CPU: 1 PID: 2677 Comm: blkid Tainted: G B 4.9.141+ #23 [ 60.871966] ffff8801c795f658 ffffffff81b42e79 ffffffff82e37630 00000000ffffffff [ 60.879975] 0000000000000000 0000000000000001 0000000000000000 ffff8801c795f718 [ 60.887975] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 60.895990] Call Trace: [ 60.898564] [] dump_stack+0xc1/0x128 [ 60.903904] [] panic+0x1bf/0x39f [ 60.908893] [] ? add_taint.cold.5+0x16/0x16 [ 60.914842] [] ? ___preempt_schedule+0x16/0x18 [ 60.921049] [] kasan_end_report+0x47/0x4f [ 60.926824] [] kasan_report.cold.6+0x76/0x2fe [ 60.932943] [] ? disk_unblock_events+0x51/0x60 [ 60.939160] [] __asan_report_load8_noabort+0x14/0x20 [ 60.945888] [] disk_unblock_events+0x51/0x60 [ 60.951924] [] __blkdev_get+0x6b6/0xd60 [ 60.957522] [] ? __blkdev_put+0x840/0x840 [ 60.963310] [] ? fsnotify+0x114/0x1100 [ 60.968827] [] blkdev_get+0x2da/0x920 [ 60.974252] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 60.981106] [] ? bd_may_claim+0xd0/0xd0 [ 60.986699] [] ? bd_acquire+0x27/0x250 [ 60.992207] [] ? bd_acquire+0x88/0x250 [ 60.997809] [] ? _raw_spin_unlock+0x2c/0x50 [ 61.003755] [] blkdev_open+0x1a5/0x250 [ 61.009271] [] do_dentry_open+0x3ef/0xc90 [ 61.015066] [] ? blkdev_get_by_dev+0x70/0x70 [ 61.021106] [] vfs_open+0x11c/0x210 [ 61.026360] [] ? may_open.isra.20+0x14f/0x2a0 [ 61.032478] [] path_openat+0x542/0x2790 [ 61.038075] [] ? path_mountpoint+0x6c0/0x6c0 [ 61.044110] [] ? trace_hardirqs_on+0x10/0x10 [ 61.050163] [] ? new_slab+0x22e/0x3d0 [ 61.055586] [] ? expand_files.part.3+0x3a9/0x6d0 [ 61.062064] [] do_filp_open+0x197/0x270 [ 61.067694] [] ? may_open_dev+0xe0/0xe0 [ 61.073310] [] ? _raw_spin_unlock+0x2c/0x50 [ 61.079262] [] ? __alloc_fd+0x1d7/0x4a0 [ 61.084859] [] do_sys_open+0x30d/0x5c0 [ 61.090369] [] ? filp_open+0x70/0x70 [ 61.095708] [] ? up_read+0x1a/0x40 [ 61.100873] [] SyS_open+0x2d/0x40 [ 61.105950] [] ? do_sys_open+0x5c0/0x5c0 [ 61.111652] [] do_syscall_64+0x19f/0x550 [ 61.117338] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 61.124697] Kernel Offset: disabled [ 61.128309] Rebooting in 86400 seconds..