[....] Starting enhanced syslogd: rsyslogd[ 14.258266] audit: type=1400 audit(1575343100.177:4): avc: denied { syslog } for pid=1925 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. 2019/12/03 03:18:31 fuzzer started 2019/12/03 03:18:34 dialing manager at 10.128.0.26:41225 2019/12/03 03:18:34 syscalls: 1382 2019/12/03 03:18:34 code coverage: enabled 2019/12/03 03:18:34 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/12/03 03:18:34 extra coverage: extra coverage is not supported by the kernel 2019/12/03 03:18:34 setuid sandbox: enabled 2019/12/03 03:18:34 namespace sandbox: enabled 2019/12/03 03:18:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 03:18:34 fault injection: kernel does not have systematic fault injection support 2019/12/03 03:18:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 03:18:34 net packet injection: enabled 2019/12/03 03:18:34 net device setup: enabled 2019/12/03 03:18:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 03:18:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:19:20 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) 03:19:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x16, r1, r0, 0xfffffffffffffffd, 0x0) 03:19:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000800)=""/222, 0xde) 03:19:20 executing program 5: sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 03:19:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 03:19:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setrlimit(0x2, &(0x7f0000000080)={0x0, 0x2000000}) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x403, 0x2000000000032, 0xffffffffffffffff, 0x0) 03:19:21 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) 03:19:21 executing program 1: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000000240)={&(0x7f0000000040)="f30fbc7a00d918c4e3adcf660100c4e1f8162bc4c27d178500000100c4e25d8c61d7662e65f30f7e10660f3804fdc4c1a973d30a8fe878c10bfe", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) syslog(0x2, &(0x7f0000000800)=""/222, 0xde) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x7, 0x4}]}, 0x8) 03:19:21 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:19:21 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet(0x2, 0x803, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="ac"], 0x1) 03:19:21 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet(0x2, 0x803, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) 03:19:21 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2000000050000}]}) r0 = gettid() ptrace$pokeuser(0x6, r0, 0x0, 0x0) 03:19:21 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet(0x2, 0x803, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="ac"], 0x1) 03:19:21 executing program 1: 03:19:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200008032, 0xffffffffffffffff, 0x0) 03:19:21 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) syzkaller login: [ 75.528994] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 03:19:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 03:19:22 executing program 2: syz_emit_ethernet(0x68, &(0x7f00000002c0)={@broadcast, @random="708a1c045afe", [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x32, 0x3a, 0x0, @rand_addr, @mcast2, {[], @icmpv6=@dest_unreach={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, '\x00', 0x0, 0x3c, 0x0, @empty, @remote, [], "0200"}}}}}}}, 0x0) 03:19:22 executing program 0: getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 03:19:22 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{0x801, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x801, 0x0, 0x2000000000000}]}) 03:19:22 executing program 4: 03:19:22 executing program 2: 03:19:22 executing program 4: 03:19:22 executing program 1: 03:19:22 executing program 4: 03:19:22 executing program 2: 03:19:22 executing program 1: [ 76.330258] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 03:19:22 executing program 5: 03:19:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 03:19:22 executing program 1: 03:19:23 executing program 0: 03:19:23 executing program 4: 03:19:23 executing program 2: 03:19:23 executing program 5: 03:19:23 executing program 1: 03:19:23 executing program 1: 03:19:23 executing program 2: 03:19:23 executing program 4: 03:19:23 executing program 5: 03:19:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 03:19:23 executing program 2: 03:19:23 executing program 0: 03:19:23 executing program 5: 03:19:23 executing program 1: 03:19:23 executing program 4: 03:19:23 executing program 1: 03:19:23 executing program 0: 03:19:23 executing program 4: 03:19:23 executing program 5: 03:19:23 executing program 2: 03:19:23 executing program 2: 03:19:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 03:19:23 executing program 5: 03:19:23 executing program 0: 03:19:23 executing program 4: 03:19:23 executing program 1: 03:19:23 executing program 2: 03:19:23 executing program 2: 03:19:23 executing program 4: 03:19:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 03:19:23 executing program 1: 03:19:23 executing program 0: 03:19:23 executing program 1: [ 77.470281] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 03:19:23 executing program 4: 03:19:23 executing program 2: 03:19:23 executing program 0: 03:19:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 03:19:23 executing program 1: 03:19:23 executing program 1: 03:19:23 executing program 2: 03:19:23 executing program 0: 03:19:24 executing program 5: 03:19:24 executing program 4: 03:19:24 executing program 0: 03:19:24 executing program 2: 03:19:24 executing program 1: 03:19:24 executing program 4: 03:19:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 03:19:24 executing program 1: 03:19:24 executing program 0: 03:19:24 executing program 2: 03:19:24 executing program 5: 03:19:24 executing program 4: 03:19:24 executing program 5: 03:19:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@rand_addr="70549fa0deb7af603a9680b8b0b98828", {@in=@broadcast, @in6=@local}, {{@in=@empty, @in=@local}, {}, {}, 0x0, 0x0, 0x0, 0x2}}}, 0x128}}, 0x0) 03:19:24 executing program 0: poll(&(0x7f0000000000), 0x2000000000000035, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xceb5ab17, 0x0, 0x0, 0x800e00759) shutdown(r0, 0x0) 03:19:24 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2000000050000}]}) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) gettid() 03:19:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="28010000170001000000000000000000e0000001000000000000000000000000000000000000000070549fa0afc5d4aa3a9680b8b0b98828ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="4000000000000000000000a88001ba68558b914e40000000000000000000000000000000000000000200f10000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/128], 0x128}}, 0x0) 03:19:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/de\x93/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x23) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a74700000000000000000000000004e0100000000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="eaffffffffffffff0000000047e754b336acc2dc56b2fc6aeabb71257a1fc695aadf59033c8ae7d3e569238edd24cd0f4d28bc505ab426f0b90f1f4baa8cca14e547c2407bb942030de27baa386e44439d2bfbc8743a600bc94ad4435f943c2c463ab4848f733926b352197387fc"], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=r4, @ANYBLOB="f3bc6af8c0768e83f4351364c068c27d30f83b37780cd9520399"]], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 78.834689] ------------[ cut here ]------------ [ 78.854607] ------------[ cut here ]------------ [ 78.861821] WARNING: CPU: 0 PID: 2490 at net/xfrm/xfrm_user.c:2210 xfrm_add_acquire+0x7a1/0x9c0() [ 78.878868] WARNING: CPU: 0 PID: 2496 at net/xfrm/xfrm_user.c:2210 xfrm_add_acquire+0x7a1/0x9c0() [ 78.896316] BAD policy passed [ 78.902866] BAD policy passed [ 78.907072] Kernel panic - not syncing: panic_on_warn set ... [ 78.907072] [ 78.914453] CPU: 0 PID: 2490 Comm: syz-executor.1 Not tainted 4.4.174+ #4 [ 78.921376] 0000000000000000[ 78.922777] Modules linked in: [ 78.927602] c576e7ac2501a80f ffff8801beca73f0 ffffffff81aad1a1 [ 78.934352] ffff8801beca7540 ffffffff82835ee0 ffffffff82a9d500 00000000000008a2 [ 78.942416] ffffffff825836c1 ffff8801beca74d0 ffffffff813a48c2 0000000041b58ab3 [ 78.950447] Call Trace: [ 78.953547] [] dump_stack+0xc1/0x120 [ 78.958901] [] ? xfrm_add_acquire+0x7a1/0x9c0 [ 78.965029] [] panic+0x1b9/0x37b [ 78.970031] [] ? add_taint.cold+0x16/0x16 [ 78.975816] [] ? vprintk_emit+0x248/0x820 [ 78.981599] [] ? warn_slowpath_common.cold+0x5/0x20 [ 78.988249] [] warn_slowpath_common.cold+0x20/0x20 [ 78.994815] [] warn_slowpath_fmt+0xbf/0x100 [ 79.000773] [] ? warn_slowpath_common+0x120/0x120 [ 79.007278] [] ? lockdep_init_map+0x114/0x1520 [ 79.013500] [] ? __raw_spin_lock_init+0x2d/0x100 [ 79.019891] [] xfrm_add_acquire+0x7a1/0x9c0 [ 79.025850] [] ? selinux_capable+0x41/0x50 [ 79.031720] [] ? security_capable+0x94/0xc0 [ 79.037686] [] ? xfrm_policy_construct+0x770/0x770 [ 79.044255] [] ? memset+0x32/0x40 [ 79.049519] [] ? nla_parse+0x15f/0x1c0 [ 79.055043] [] ? xfrm_policy_construct+0x770/0x770 [ 79.061624] [] xfrm_user_rcv_msg+0x37c/0x630 [ 79.067670] [] ? xfrm_dump_sa_done+0xa0/0xa0 [ 79.073716] [] ? trace_hardirqs_on+0x10/0x10 [ 79.079760] [] ? __lock_acquire+0xa4f/0x4f50 [ 79.085807] [] ? mutex_trylock+0x500/0x500 [ 79.091680] [] netlink_rcv_skb+0xd4/0x2e0 [ 79.097468] [] ? xfrm_dump_sa_done+0xa0/0xa0 [ 79.103512] [] xfrm_netlink_rcv+0x70/0x90 [ 79.109297] [] netlink_unicast+0x4d7/0x700 [ 79.115166] [] ? netlink_sendskb+0x60/0x60 [ 79.121046] [] netlink_sendmsg+0x6b6/0xc80 [ 79.126916] [] ? nlmsg_notify+0x170/0x170 [ 79.132711] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 79.139203] [] ? security_socket_sendmsg+0x8f/0xc0 [ 79.145768] [] ? nlmsg_notify+0x170/0x170 [ 79.151551] [] sock_sendmsg+0xbe/0x110 [ 79.157072] [] ___sys_sendmsg+0x769/0x890 [ 79.162858] [] ? copy_msghdr_from_user+0x550/0x550 [ 79.169421] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 79.176161] [] ? check_preemption_disabled+0x3c/0x200 [ 79.182986] [] ? check_preemption_disabled+0x3c/0x200 [ 79.189815] [] ? __fget+0x13b/0x370 [ 79.195082] [] ? __fget+0x162/0x370 [ 79.202532] [] ? __fget+0x47/0x370 [ 79.207712] [] ? __fget_light+0xa3/0x1f0 [ 79.213410] [] ? __fdget+0x1b/0x20 [ 79.218597] [] __sys_sendmsg+0xc5/0x160 [ 79.224340] [] ? SyS_shutdown+0x1a0/0x1a0 [ 79.230147] [] ? SyS_clock_gettime+0x118/0x1e0 [ 79.236372] [] ? SyS_clock_settime+0x220/0x220 [ 79.242615] [] SyS_sendmsg+0x2d/0x50 [ 79.247989] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 79.254563] CPU: 1 PID: 2496 Comm: syz-executor.4 Not tainted 4.4.174+ #4 [ 79.266092] 0000000000000000 47ac9e9b97dd20f3 ffff8800a418f4d0 ffffffff81aad1a1 [ 79.274141] ffff8800a418f540 0000000000000009 ffffffff82a9d500 00000000000008a2 [ 79.282190] ffffffff825836c1 ffff8800a418f510 ffffffff810d3849 ffff8800a418f550 [ 79.290247] Call Trace: [ 79.292829] [] dump_stack+0xc1/0x120 [ 79.298214] [] ? xfrm_add_acquire+0x7a1/0x9c0 [ 79.304352] [] warn_slowpath_common+0xd9/0x120 [ 79.310573] [] warn_slowpath_fmt+0xbf/0x100 [ 79.316528] [] ? warn_slowpath_common+0x120/0x120 [ 79.323023] [] ? lockdep_init_map+0x114/0x1520 [ 79.329243] [] ? __raw_spin_lock_init+0x2d/0x100 [ 79.335632] [] xfrm_add_acquire+0x7a1/0x9c0 [ 79.341588] [] ? selinux_capable+0x41/0x50 [ 79.347458] [] ? security_capable+0x94/0xc0 [ 79.353508] [] ? xfrm_policy_construct+0x770/0x770 [ 79.360073] [] ? memset+0x32/0x40 [ 79.365170] [] ? nla_parse+0x15f/0x1c0 [ 79.370694] [] ? xfrm_policy_construct+0x770/0x770 [ 79.377257] [] xfrm_user_rcv_msg+0x37c/0x630 [ 79.383300] [] ? xfrm_dump_sa_done+0xa0/0xa0 [ 79.389340] [] ? trace_hardirqs_on+0x10/0x10 [ 79.395555] [] ? __lock_acquire+0xa4f/0x4f50 [ 79.401621] [] ? mutex_trylock+0x500/0x500 [ 79.407493] [] netlink_rcv_skb+0xd4/0x2e0 [ 79.413275] [] ? xfrm_dump_sa_done+0xa0/0xa0 [ 79.419315] [] xfrm_netlink_rcv+0x70/0x90 [ 79.425097] [] netlink_unicast+0x4d7/0x700 [ 79.430965] [] ? netlink_sendskb+0x60/0x60 [ 79.436833] [] netlink_sendmsg+0x6b6/0xc80 [ 79.442707] [] ? nlmsg_notify+0x170/0x170 [ 79.448492] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 79.454988] [] ? security_socket_sendmsg+0x8f/0xc0 [ 79.461568] [] ? nlmsg_notify+0x170/0x170 [ 79.467371] [] sock_sendmsg+0xbe/0x110 [ 79.472900] [] ___sys_sendmsg+0x769/0x890 [ 79.478686] [] ? copy_msghdr_from_user+0x550/0x550 [ 79.485254] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 79.491992] [] ? check_preemption_disabled+0x3c/0x200 [ 79.498818] [] ? check_preemption_disabled+0x3c/0x200 [ 79.505644] [] ? __fget+0x13b/0x370 [ 79.511531] [] ? __fget+0x162/0x370 [ 79.516792] [] ? __fget+0x47/0x370 [ 79.521967] [] ? __fget_light+0xa3/0x1f0 [ 79.527672] [] ? __fdget+0x1b/0x20 [ 79.532847] [] __sys_sendmsg+0xc5/0x160 [ 79.538455] [] ? SyS_shutdown+0x1a0/0x1a0 [ 79.544238] [] ? SyS_clock_gettime+0x118/0x1e0 [ 79.550453] [] ? SyS_clock_settime+0x220/0x220 [ 79.556673] [] SyS_sendmsg+0x2d/0x50 [ 79.562043] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 79.568643] Kernel Offset: disabled [ 79.572374] Rebooting in 86400 seconds..