[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.794195] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.844944] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 26.333192] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 27.275386] random: nonblocking pool is initialized Warning: Permanently added '10.128.10.53' (ECDSA) to the list of known hosts. 2018/04/25 02:49:35 fuzzer started 2018/04/25 02:49:36 dialing manager at 10.128.0.26:46601 2018/04/25 02:49:42 kcov=true, comps=false 2018/04/25 02:49:45 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000803, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 2018/04/25 02:49:45 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={"020081007f001e003b008ca865b59735"}) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@can={0x1d, r1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="d80929d309d708db35cdfe5fe2d7", 0xe}], 0x1, &(0x7f00000000c0), 0x0, 0xffffffffffffffff}, 0x0) 2018/04/25 02:49:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xc9, "ff4a4f1563173e3429193d3bbf1bf2af6d5980890b15cc43fdfb981564d08a3148caa935fdbf20ff1fdc0b111161d64dfca62b46537249814e47f4731130b8b0c6bb66894d09d23029eee94c431a6c73defdf4f7f2f0b3389354ba6494b21e052e399c6880f3371f5dd749c9b17368dcdbf25bd84c3e0536e17a9a47d4d4cacfa69af6aa8fe3fe5a75ae222911c903352e0dcfe72de99b789f98a0a8a08e6b4996f7bdb7b48681d2c029fc82e7a7a937436dd994b2f3a4a0565306a943c9dcf056f3fab6f410dc3faf"}, &(0x7f0000000140)=0xd1) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) 2018/04/25 02:49:45 executing program 7: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0x50, 0x100000000000114, 0x8, "4d037f67d8b7b40800000000000000f7b4559556d9101709322be4c68537e918d56fc5fa0d02739b2ab80ec25d434d3e8a83e36011c57e8769315dd29005dba330"}], 0x50}, 0x0) 2018/04/25 02:49:45 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) select(0x40, &(0x7f0000002000), &(0x7f0000000040), &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) 2018/04/25 02:49:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000fe1ff4)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)) 2018/04/25 02:49:45 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000ed3000)=0x3e, 0x4) bind$inet6(r0, &(0x7f0000afe000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 2018/04/25 02:49:45 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00ed4354c007110000f305010008000100010423dcd9df00", 0x1f) [ 43.101891] IPVS: Creating netns size=2552 id=1 [ 43.259477] IPVS: Creating netns size=2552 id=2 [ 43.336160] IPVS: Creating netns size=2552 id=3 [ 43.420286] IPVS: Creating netns size=2552 id=4 [ 43.540507] IPVS: Creating netns size=2552 id=5 [ 43.677422] IPVS: Creating netns size=2552 id=6 [ 43.872618] IPVS: Creating netns size=2552 id=7 [ 44.058380] IPVS: Creating netns size=2552 id=8 [ 44.166972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.275064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.554071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.609500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.629361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.705920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.724899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.803189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.085931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.101360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.131748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.152288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.164029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.254573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.263693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.369899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.528348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.540254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.608290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.664954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.736291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.780346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.822699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.891517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.900764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.968363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.980804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.000944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.100555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.112569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.126208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.134536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.157126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.175671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.195589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.249966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.261497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.276372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.340411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.354336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.482275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.498178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.517410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.642052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.650326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.715049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.790909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.820058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.837450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.892625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.905872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.928971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.108136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.210021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.308254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.327793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.380242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.409711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.439308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.479818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.551732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.575074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.610958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.637935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.090542] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.458900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.672720] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.688802] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.703691] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.924894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.958717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.987621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.329565] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.544936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.642220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.701862] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.798191] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.872705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.064034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.095456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.544343] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/25 02:49:55 executing program 0: 2018/04/25 02:49:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x1008000000000004, 0x4) r1 = socket$packet(0x11, 0x100000400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) recvfrom$packet(r1, &(0x7f0000000240)=""/237, 0xed, 0x0, 0x0, 0x0) 2018/04/25 02:49:55 executing program 7: 2018/04/25 02:49:55 executing program 2: 2018/04/25 02:49:55 executing program 5: 2018/04/25 02:49:55 executing program 6: 2018/04/25 02:49:55 executing program 4: 2018/04/25 02:49:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000fe1ff4)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)) 2018/04/25 02:49:56 executing program 0: 2018/04/25 02:49:56 executing program 7: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="85a970b0146b28e04580fe2586dd607660510000000000ffff0200000000000000614300000000000001860090780414582460c5960000000503000004000001ff020000000000000000000000007e2023f33c51bd73f4ac06fd1e434dd0fb46879c62d840636962a7f5ff010a9383fae1c844259110a109daf35ba52e6b8a377b94334a3e01473be2ecf46034683415c7040a749b783f971b23e5f1044f1ff68a4da018f017b6f8ef000000000000000000"], 0x0) 2018/04/25 02:49:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000002040)=[{{&(0x7f00000007c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000f00)=""/132, 0x84}}], 0x1, 0x0, &(0x7f00000020c0)) close(r0) 2018/04/25 02:49:56 executing program 5: [ 53.764944] IPv4: Oversized IP packet from 127.0.0.1 2018/04/25 02:49:56 executing program 4: 2018/04/25 02:49:56 executing program 3: 2018/04/25 02:49:56 executing program 0: syz_mount_image$reiserfs(&(0x7f00000004c0)='reiserfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000800)={[{@commit={'commit', 0x3d}, 0x2c}]}) 2018/04/25 02:49:56 executing program 5: 2018/04/25 02:49:56 executing program 6: 2018/04/25 02:49:56 executing program 4: 2018/04/25 02:49:56 executing program 7: 2018/04/25 02:49:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000d6a000)='i', 0x1, 0x0, &(0x7f0000266000)=@hci={0x1f}, 0x80) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x3, 0x4) 2018/04/25 02:49:56 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@time={0x77359400}}], 0x1c) unlink(&(0x7f0000000200)='./control/file0\x00') chown(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) close(r0) 2018/04/25 02:49:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00006f0fc8)={&(0x7f0000c16ff4)={0x10}, 0xc, &(0x7f0000e83ff0)={&(0x7f0000bcd000)=ANY=[@ANYBLOB="b8000000130021020000000000000000e0000002000000000000000000000000000000000000000000000000000000010000ce00000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3}, 0x1}, 0x0) 2018/04/25 02:49:56 executing program 4: r0 = socket(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x3b4) 2018/04/25 02:49:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000280)='./file0/file0\x00', 0x3fffa, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa}, 0xb) 2018/04/25 02:49:56 executing program 7: 2018/04/25 02:49:56 executing program 6: 2018/04/25 02:49:57 executing program 7: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)=""/131, 0x83}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000000240)=""/233, 0xfffffd1e}], 0x4, &(0x7f0000000180)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100), 0x49, &(0x7f0000000200)}, 0x0) 2018/04/25 02:49:57 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000580)="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", 0xfc) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)=""/79, 0x4f}], 0x1) 2018/04/25 02:49:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000000240)={[{@flush='flush', 0x2c}]}) 2018/04/25 02:49:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x3b4) 2018/04/25 02:49:57 executing program 1: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)=""/131, 0x83}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000000240)=""/233, 0xfffffd1e}], 0x4, &(0x7f0000000180)=""/4096, 0x1000}, 0x0) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100), 0x49, &(0x7f0000000200)}, 0x0) 2018/04/25 02:49:57 executing program 5: getsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040)=""/252, &(0x7f0000000000)=0xfc) poll(&(0x7f0000000000), 0xfb, 0x0) 2018/04/25 02:49:57 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000ed3000)=0x3e, 0x4) bind$inet6(r0, &(0x7f0000afe000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x20000044, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x10000}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 2018/04/25 02:49:57 executing program 0: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x2286, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) 2018/04/25 02:49:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 2018/04/25 02:49:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000fb7fee)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)) 2018/04/25 02:49:57 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c) 2018/04/25 02:49:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f000084c000), 0x101, 0x20000000, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/25 02:49:57 executing program 0: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) dup2(r1, r0) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000a00)=@nfc, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=""/39, 0x27}}, {{&(0x7f0000000b80)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000dc0)=""/36, 0x24}}], 0x2, 0x0, &(0x7f0000000f00)={0x0, r2+30000000}) 2018/04/25 02:49:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) dup2(r1, r0) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000a00)=@nfc, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=""/39, 0x27}}, {{&(0x7f0000000b80)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/90, 0x5a}], 0x1, &(0x7f0000000dc0)=""/36, 0x24}, 0x3}], 0x2, 0x40010001, &(0x7f0000000f00)={0x0, r2+30000000}) 2018/04/25 02:49:57 executing program 6: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) dup2(r1, r0) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000a00)=@nfc, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=""/39, 0x27}}, {{&(0x7f0000000b80)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000dc0)=""/36, 0x24}}], 0x2, 0x40010001, &(0x7f0000000f00)={0x0, r2+30000000}) 2018/04/25 02:49:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000012003103000000000000000000000000", @ANYBLOB="000000000000000008001f000000000008002e0000eaffff070025000da37e4d08001e000000000008000f0000000000100018000c00eb000800000000000000991ec1ff99fdcd5466b366"], 0x2}, 0x1}, 0x0) 2018/04/25 02:49:57 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x15, 0x0, 0x0, 0x40}, {0x6}]}) 2018/04/25 02:49:58 executing program 5: 2018/04/25 02:49:58 executing program 4: 2018/04/25 02:49:58 executing program 4: [ 55.773067] audit: type=1326 audit(1524624598.011:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=6205 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455389 code=0x0 [ 55.819272] IPVS: Creating netns size=2552 id=9 [ 55.920389] IPVS: Creating netns size=2552 id=10 [ 56.000789] l2tp_core: tunl 4: netns mismatch 2018/04/25 02:49:58 executing program 5: 2018/04/25 02:49:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) dup2(r1, r0) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000a00)=@nfc, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=""/39, 0x27}}, {{&(0x7f0000000b80)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/90, 0x5a}], 0x1, &(0x7f0000000dc0)=""/36, 0x24}, 0x3}], 0x2, 0x40010001, &(0x7f0000000f00)={0x0, r2+30000000}) 2018/04/25 02:49:58 executing program 4: 2018/04/25 02:49:58 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000180), 0x0, &(0x7f0000000300)}, 0x0) recvmmsg(r1, &(0x7f0000002040)=[{{&(0x7f00000007c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000f00)=""/132, 0x84}}], 0x1, 0x0, &(0x7f00000020c0)) close(r0) 2018/04/25 02:49:58 executing program 2: 2018/04/25 02:49:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fb7fee)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "1c055298671c9d086ae0bc000e5e4e114913317ccfa118e388b70ba6984b6d53"}) 2018/04/25 02:49:58 executing program 1: 2018/04/25 02:49:58 executing program 6: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) dup2(r1, r0) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000a00)=@nfc, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=""/39, 0x27}}, {{&(0x7f0000000b80)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000dc0)=""/36, 0x24}}], 0x2, 0x40010001, &(0x7f0000000f00)={0x0, r2+30000000}) 2018/04/25 02:49:58 executing program 4: 2018/04/25 02:49:58 executing program 2: 2018/04/25 02:49:58 executing program 5: 2018/04/25 02:49:58 executing program 1: 2018/04/25 02:49:58 executing program 4: 2018/04/25 02:49:58 executing program 3: 2018/04/25 02:49:58 executing program 2: [ 57.310249] IPVS: Creating netns size=2552 id=11 2018/04/25 02:49:59 executing program 5: 2018/04/25 02:49:59 executing program 3: 2018/04/25 02:49:59 executing program 2: 2018/04/25 02:49:59 executing program 1: 2018/04/25 02:49:59 executing program 4: 2018/04/25 02:49:59 executing program 0: 2018/04/25 02:49:59 executing program 6: 2018/04/25 02:49:59 executing program 7: 2018/04/25 02:49:59 executing program 1: 2018/04/25 02:49:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000002ec0)={&(0x7f0000001dc0)=@ipv6_newroute={0x30, 0x18, 0x7de1124c6ffd611d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9}, {}]}]}, 0x30}, 0x1}, 0x0) 2018/04/25 02:49:59 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x193, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) getpeername$packet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x14) sendto$packet(r1, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x400000000000, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}}, 0x14) accept$ipx(r1, 0x0, &(0x7f0000000180)) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/25 02:49:59 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00006ba000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="e2701bb60589", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000040)) 2018/04/25 02:49:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5424, &(0x7f0000000000)) 2018/04/25 02:49:59 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000000080)="f9ff186e2eb35ddb0af06bac9e05f8ffc4074d1bc5d3c8bd821ea380feb27f2489cec7b5c3605382aa2161416fabf18f490050d071efd126733ff45af7b922f8efd743f8e49b29370da125264e13b687d58f917bc820fbe56b539c701f6dae0f542a76bf344070f1c521cc972805f323277c700e16dc76cabbd8faad562f088ec0dcfdc3cb25711424253ef821", 0x8d, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/25 02:49:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{}], 0x18) 2018/04/25 02:49:59 executing program 5: r0 = socket(0x10, 0x20001000000003, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/21, 0xfffffffffffffe84}], 0x1) write(r0, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) 2018/04/25 02:49:59 executing program 1: clone(0x0, &(0x7f0000597f1c), &(0x7f00009b9ffc), &(0x7f0000005ffc), &(0x7f0000000040)) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4000, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006d656d6f72656d6f7279202d6991b23e6f202b6d656d6f728b2000000000"], 0x1f) [ 57.655379] netlink: 2 bytes leftover after parsing attributes in process `syz-executor5'. [ 57.668141] IPv6: NLM_F_REPLACE set, but no existing node found! [ 57.683739] netlink: 2 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/25 02:50:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000040), 0xfe70) sendto$inet6(r0, &(0x7f0000eb9fff), 0xffffff31, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x200, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000200)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x140, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'bond_slave_1\x00', 0x2}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000140)={0xe2, {0x2, 0x4e23, @loopback=0x7f000001}, {0x2, 0x4e20}, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x40, 0x9, 0x6, 0x1ff, 0x8, &(0x7f0000000100)='ip6gretap0\x00', 0x5b8f, 0x6, 0x9}) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000000280)="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", 0xfd) 2018/04/25 02:50:00 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x2331, 0x4) seccomp(0x800000000001, 0x0, &(0x7f0000000ff0)={0x2, &(0x7f00000f7ff0)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]}) 2018/04/25 02:50:00 executing program 0: r0 = epoll_create1(0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x400, 0xfffffffffffffffe, 0x2, 0xee, 0x7fffffff, 0xa000000000000}) clone(0x0, &(0x7f0000c8d000), &(0x7f0000475000), &(0x7f00000f4000), &(0x7f00003a3f08)) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) 2018/04/25 02:50:00 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000000080)="f9ff186e2eb35ddb0af06bac9e05f8ffc4074d1bc5d3c8bd821ea380feb27f2489cec7b5c3605382aa2161416fabf18f490050d071efd126733ff45af7b922f8efd743f8e49b29370da125264e13b687d58f917bc820fbe56b539c701f6dae0f542a76bf344070f1c521cc972805f323277c700e16dc76cabbd8faad562f088ec0dcfdc3cb25711424253ef821", 0x8d, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/25 02:50:00 executing program 1: r0 = add_key$keyring(&(0x7f0000001100)='keyring\x00', &(0x7f0000001140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x100}, 0x10) keyctl$setperm(0x5, r0, 0xa021400) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x40, 0x6, 0x0, "fe069399de1a6a7535a4e90b410df90b97095bad7fc4225bb15072595860735e416310b6ce546952f328d4ee857b888f0a67def1ae7a8ec37cda6de8ced89d3b0ef1a30e22cdf4c4caa95c1c034a16c4"}, 0xd8) keyctl$read(0xb, r0, &(0x7f0000001180), 0x0) prctl$intptr(0x6, 0x3) 2018/04/25 02:50:00 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8efa7)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, 0x4) writev(r0, &(0x7f00001b6f90)=[{&(0x7f0000000040)="e59bc053050000007bb51f597ea6feb27c6371100ca6f5c53ded1a2f0fd1c92c1f8082d61217feadb3af", 0x2a}], 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x227c, &(0x7f0000000100)={{0x2, 0x0, @loopback=0x7f000001}, {}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, "e8e1ffc9920000200001000100"}) 2018/04/25 02:50:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000001040)='/selinux/avc/cache_stats\x00', 0x3) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000001080)={0xfffffffffffffffc, 0x400000000000000, 0xae, 0x1, 0x8, 0x9}) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000dc9000)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f000011adf8)={0x14, 0xa, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}}, 0x14}, 0x1}, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000040)=""/4096) 2018/04/25 02:50:00 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x193, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) getpeername$packet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x14) sendto$packet(r1, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x400000000000, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}}, 0x14) accept$ipx(r1, 0x0, &(0x7f0000000180)) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/25 02:50:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000200)={@remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)="2f70726f632f7379732f6e65072f697076342f76732f6261636b75705f6f6e6c7900a0", 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400d311", @ANYRES16=r3, @ANYBLOB="000826bd70001edcdf25010000002800020014000100fe80000000000000000000000000001c08000800070000000800080038aa00002c000200080003000000000008000700ff010000080002004e2300000800040080ffffff08000b000a000b0073697000"], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000001000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r6) keyctl$restrict_keyring(0x1d, r7, &(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)='vmnet0-Tmd5sum]]vboxnet1selinux+cpuset\x00') bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x3f}, 0x10) 2018/04/25 02:50:00 executing program 2: capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001840)) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000ed6ff6)='\x00es\x00\x00') r2 = gettid() socketpair(0x10, 0x800, 0xfffffffffffffffe, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(r2, &(0x7f0000000340)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/203, 0xcb}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/235, 0xeb}], 0x5, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/219, 0xdb}], 0x6, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) r4 = getpgrp(0xffffffffffffffff) sched_setparam(r4, &(0x7f0000000000)=0x50) fsetxattr(r1, &(0x7f0000ac7fe6)=@known='com.apple.system.Security\x00', &(0x7f0000a7a000)="656d3073656c66a673656c696e757800", 0x10, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001880)=ANY=[@ANYBLOB="5700080060000500000000643a00000000000000000000000000"]) ioctl$TIOCCONS(r1, 0x541d) 2018/04/25 02:50:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000040)=@ll={0x0, 0x0, 0x0}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/224, 0xe0}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000340)=""/191, 0xbf}], 0x6, &(0x7f0000000480)=""/171, 0xab, 0x20}, 0x40000040) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000580)={@loopback={0x0, 0x1}, r2}, 0x14) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa, 0x4e22}, 0x1c) r3 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000db4ffc)=0x214, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000001200)=ANY=[@ANYBLOB="00eeb24781000020"], 0x8) 2018/04/25 02:50:00 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000a03000)={0x10}, 0xc, &(0x7f0000b62ff0)={&(0x7f00006f3f7c)=ANY=[@ANYBLOB="2c0000779b7ac20015001502ffffffff92ffffff", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000ffffe0000002"], 0x70}, 0x1}, 0x0) 2018/04/25 02:50:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000e6bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000276fa8)={{}, 0xfffffffffffffffd, 0x0, 0x20000000000, {0x4}, 0x0, 0x1}) flistxattr(r0, &(0x7f0000000000)=""/92, 0x5c) 2018/04/25 02:50:00 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000000080)="f9ff186e2eb35ddb0af06bac9e05f8ffc4074d1bc5d3c8bd821ea380feb27f2489cec7b5c3605382aa2161416fabf18f490050d071efd126733ff45af7b922f8efd743f8e49b29370da125264e13b687d58f917bc820fbe56b539c701f6dae0f542a76bf344070f1c521cc972805f323277c700e16dc76cabbd8faad562f088ec0dcfdc3cb25711424253ef821", 0x8d, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/25 02:50:00 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16}]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={&(0x7f0000000000), &(0x7f00000000c0)}}, &(0x7f0000000140)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x108) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/24) socket$inet(0x2, 0x807, 0x1000000000000) timer_delete(0x0) 2018/04/25 02:50:00 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) preadv(r0, &(0x7f0000000140), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100), 0x361, 0x10400003) [ 58.024498] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) [ 58.045800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31387 sclass=netlink_route_socket 2018/04/25 02:50:00 executing program 0: getegid() r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) syncfs(r0) 2018/04/25 02:50:00 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000000080)="f9ff186e2eb35ddb0af06bac9e05f8ffc4074d1bc5d3c8bd821ea380feb27f2489cec7b5c3605382aa2161416fabf18f490050d071efd126733ff45af7b922f8efd743f8e49b29370da125264e13b687d58f917bc820fbe56b539c701f6dae0f542a76bf344070f1c521cc972805f323277c700e16dc76cabbd8faad562f088ec0dcfdc3cb25711424253ef821", 0x8d, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/25 02:50:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mlock2(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0) 2018/04/25 02:50:00 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000080), &(0x7f0000000040)=0x4) 2018/04/25 02:50:01 executing program 1: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000a80)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f0000000200)='V', 0x1, r2) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000440)="f9d99cb7e7d251950f5743507ca342820dc385a3134ec0fc9565ad003cadd47cf8f2096ad2ea0b5990a0f4cd780fe0c3a48e3ad430a41fe7d75abf6c2dc7c392a555ae9d7e7aa2acc65bfa260051c1d841012c9283c898b8db478143ec6c880cca12c5dd5d0e4b92b5b76fd0744a5409e3bf7a9e636b4ad277617a8f2e0e193d473a1184f4bd3ba29ece4734a753856d2964823f6d8a3ab337238410a98605f807306ef9bca97d3d308eb42ba8a42cb43f062337c2c2bfdc14db8c0d029a8d53", 0xc0, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000180)={&(0x7f0000000140)={'poly1305\x00'}}) 2018/04/25 02:50:01 executing program 7: mmap(&(0x7f0000000000/0xe76000)=nil, 0xe76000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000039e000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0x7, 0x82) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000040)=[0x5], 0x1, 0x9, 0x100, 0x200, 0x2, 0x3, {0x7, 0x1f, 0x1ff, 0x2, 0x0, 0x7f, 0x7fff, 0x3, 0x4, 0x52e9e408, 0x3, 0x6, 0xacf6, 0x7, "6d819585c6db9af2145121304ba9d19cb97a1b2a5e6569558394fdb8ae1688c4"}}) 2018/04/25 02:50:01 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000d90ff8)='./file0\x00', 0xff78784f70e1668e, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@local}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000100)=0xe8) 2018/04/25 02:50:01 executing program 0: seccomp(0x1, 0x5, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) prctl$seccomp(0x16, 0x1, &(0x7f0000047ff0)={0x2000000000000189, &(0x7f0000000040)}) 2018/04/25 02:50:01 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) preadv(r0, &(0x7f0000000140), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100), 0x361, 0x10400003) 2018/04/25 02:50:01 executing program 5: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) preadv(r0, &(0x7f0000000140), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100), 0x361, 0x10400003) 2018/04/25 02:50:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) sendto$inet6(r0, &(0x7f0000000080)="f9ff186e2eb35ddb0af06bac9e05f8ffc4074d1bc5d3c8bd821ea380feb27f2489cec7b5c3605382aa2161416fabf18f490050d071efd126733ff45af7b922f8efd743f8e49b29370da125264e13b687d58f917bc820fbe56b539c701f6dae0f542a76bf344070f1c521cc972805f323277c700e16dc76cabbd8faad562f088ec0dcfdc3cb25711424253ef821", 0x8d, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/25 02:50:01 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x193, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) getpeername$packet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x14) sendto$packet(r1, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x400000000000, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}}, 0x14) accept$ipx(r1, 0x0, &(0x7f0000000180)) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/25 02:50:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0x100000000]}) [ 58.916629] audit: type=1326 audit(1524624601.151:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=6401 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455389 code=0x0 2018/04/25 02:50:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/189, &(0x7f0000000040)=0xbd) 2018/04/25 02:50:02 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) sendto$inet6(r0, &(0x7f0000000080)="f9ff186e2eb35ddb0af06bac9e05f8ffc4074d1bc5d3c8bd821ea380feb27f2489cec7b5c3605382aa2161416fabf18f490050d071efd126733ff45af7b922f8efd743f8e49b29370da125264e13b687d58f917bc820fbe56b539c701f6dae0f542a76bf344070f1c521cc972805f323277c700e16dc76cabbd8faad562f088ec0dcfdc3cb25711424253ef821", 0x8d, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/25 02:50:02 executing program 5: r0 = mq_open(&(0x7f0000000080)=']\x00', 0x0, 0x0, &(0x7f00000000c0)) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x6) 2018/04/25 02:50:02 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) preadv(r0, &(0x7f0000000140), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100), 0x361, 0x10400003) 2018/04/25 02:50:02 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x1) 2018/04/25 02:50:02 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={"03000e04eb005fdeffff0100042000", 0x7fd}) 2018/04/25 02:50:02 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="4a3a83d729b4", [], {@ipv6={0x86dd, {0x0, 0x6, "0b168e", 0x14, 0x6, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000040)) 2018/04/25 02:50:02 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x193, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) getpeername$packet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x14) sendto$packet(r1, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x400000000000, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}}, 0x14) accept$ipx(r1, 0x0, &(0x7f0000000180)) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/25 02:50:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="88617400000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089ee00000000000000190000000000000000000000000000000400000000"], 0x1) 2018/04/25 02:50:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/25 02:50:02 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) sendto$inet6(r0, &(0x7f0000000080)="f9ff186e2eb35ddb0af06bac9e05f8ffc4074d1bc5d3c8bd821ea380feb27f2489cec7b5c3605382aa2161416fabf18f490050d071efd126733ff45af7b922f8efd743f8e49b29370da125264e13b687d58f917bc820fbe56b539c701f6dae0f542a76bf344070f1c521cc972805f323277c700e16dc76cabbd8faad562f088ec0dcfdc3cb25711424253ef821", 0x8d, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/25 02:50:02 executing program 0: r0 = socket(0x11, 0x4000000000080003, 0x0) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)="73231e8d6f8ef71ccf1c0f787f5e3253", 0x10}], 0x1, &(0x7f0000000280)}}], 0x1, 0x0) 2018/04/25 02:50:02 executing program 7: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x10503e, 0x0) pwrite64(r0, &(0x7f0000000000), 0xfffffdcb, 0x0) 2018/04/25 02:50:02 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40002) 2018/04/25 02:50:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="73657373696f6e696400765145f4bb7514d78c56de54826637bd38c066a9c459e228b5651a01c540acefe40a182bc990185fbc46a2cf6eaca3ab16c383cd8110254ec3dfab4125017c8d7ededaeafc8b9eea86b4b5387e0c054ccc632676061a213795c292b52dee0d4be803fdde251153389842e7f7521e5625e020c694a1bb1bd3c35fa67944") perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/65, 0x4a1) 2018/04/25 02:50:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="200a4f7d2cd3cf681df3e40f9a52c906790667ea55684d1647b5e62cd403c20cdc7d576f7ea8e978c8aec8834536b5140fed9f16c9c0763033919c342ff0084dd944f0455006071b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) exit(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000500)='j'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0x0, 0x0, &(0x7f0000000280)}) [ 60.120442] binder: 6473:6475 ERROR: BC_REGISTER_LOOPER called without request [ 60.894023] binder: release 6473:6475 transaction 3 out, still active [ 60.900650] binder: release 6473:6475 transaction 2 in, still active [ 60.907206] binder: undelivered TRANSACTION_COMPLETE [ 61.048946] binder: BINDER_SET_CONTEXT_MGR already set [ 61.054257] binder: 6473:6486 ioctl 40046207 0 returned -16 [ 61.063352] binder: 6473:6484 ERROR: BC_REGISTER_LOOPER called without request [ 61.063396] binder_alloc: 6473: binder_alloc_buf, no vma [ 61.063442] binder: 6473:6486 transaction failed 29189/-3, size 0-0 line 3134 [ 61.086862] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.086928] binder_alloc: 6473: binder_alloc_buf, no vma 2018/04/25 02:50:03 executing program 5: 2018/04/25 02:50:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns/cgroup\x00') setns(r0, 0x0) 2018/04/25 02:50:03 executing program 0: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r1, &(0x7f0000000180), 0x0, 0x0) 2018/04/25 02:50:03 executing program 3: socket$packet(0x11, 0x2, 0x300) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="f9ff186e2eb35ddb0af06bac9e05f8ffc4074d1bc5d3c8bd821ea380feb27f2489cec7b5c3605382aa2161416fabf18f490050d071efd126733ff45af7b922f8efd743f8e49b29370da125264e13b687d58f917bc820fbe56b539c701f6dae0f542a76bf344070f1c521cc972805f323277c700e16dc76cabbd8faad562f088ec0dcfdc3cb25711424253ef821", 0x8d, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/25 02:50:03 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 2018/04/25 02:50:03 executing program 2: 2018/04/25 02:50:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="200a4f7d2cd3cf681df3e40f9a52c906790667ea55684d1647b5e62cd403c20cdc7d576f7ea8e978c8aec8834536b5140fed9f16c9c0763033919c342ff0084dd944f0455006071b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) exit(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000500)='j'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/04/25 02:50:03 executing program 6: [ 61.086974] binder: 6473:6484 transaction failed 29189/-3, size 0-0 line 3134 [ 61.116836] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.130136] binder: release 6473:6484 transaction 4 in, still active 2018/04/25 02:50:03 executing program 5: 2018/04/25 02:50:03 executing program 2: 2018/04/25 02:50:03 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x40000004e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000002640)="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", 0x355}], 0x1, &(0x7f0000003640)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) recvfrom$inet(r0, &(0x7f0000000b00)=""/4096, 0x1000, 0x100, &(0x7f0000000080)={0x2}, 0x10) shutdown(r0, 0x0) 2018/04/25 02:50:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 61.154411] binder: send failed reply for transaction 4 to 6473:6484 [ 61.161821] binder: 6489:6498 ERROR: BC_REGISTER_LOOPER called without request [ 61.184188] ================================================================== [ 61.191588] BUG: KASAN: use-after-free in __list_del_entry+0x1a9/0x1c0 2018/04/25 02:50:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x00') fsync(r0) 2018/04/25 02:50:03 executing program 5: [ 61.198244] Read of size 8 at addr ffff8801ce846110 by task kworker/u4:3/488 [ 61.205415] [ 61.207038] CPU: 0 PID: 488 Comm: kworker/u4:3 Not tainted 4.4.128-gbd23e3a #20 [ 61.214470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.223824] Workqueue: binder binder_deferred_func [ 61.228871] 0000000000000000 b5a8f4225b163e4f ffff8800bb1c7a50 ffffffff81e0daad [ 61.236919] ffffea00073a1180 ffff8801ce846110 0000000000000000 ffff8801ce846110 [ 61.244972] ffffed0016b39239 ffff8800bb1c7a88 ffffffff815150ac ffff8801ce846110 2018/04/25 02:50:03 executing program 0: [ 61.252995] Call Trace: [ 61.255573] [] dump_stack+0xc1/0x124 [ 61.260931] [] print_address_description+0x6c/0x216 [ 61.267592] [] kasan_report.cold.7+0x175/0x2f7 [ 61.273821] [] ? __list_del_entry+0x1a9/0x1c0 [ 61.279964] [] __asan_report_load8_noabort+0x14/0x20 [ 61.286729] [] __list_del_entry+0x1a9/0x1c0 [ 61.292697] [] binder_release_work+0x6f/0x1d0 [ 61.298841] [] ? binder_send_failed_reply+0x1c8/0x230 [ 61.305677] [] binder_thread_release+0x422/0x520 [ 61.312080] [] binder_deferred_func+0x427/0xc00 [ 61.318397] [] ? __lock_is_held+0xa2/0xf0 [ 61.324198] [] process_one_work+0x7df/0x1600 [ 61.330253] [] ? process_one_work+0x6fa/0x1600 [ 61.336483] [] ? cancel_delayed_work_sync+0x20/0x20 [ 61.343172] [] worker_thread+0xd9/0xfc0 [ 61.348792] [] ? ___preempt_schedule+0x12/0x14 [ 61.355026] [] kthread+0x268/0x300 [ 61.360215] [] ? process_one_work+0x1600/0x1600 [ 61.366537] [] ? kthread_create_on_node+0x400/0x400 [ 61.373205] [] ? kthread_create_on_node+0x400/0x400 [ 61.379862] [] ret_from_fork+0x55/0x80 [ 61.385378] [] ? kthread_create_on_node+0x400/0x400 [ 61.392013] [ 61.393615] Allocated by task 6484: [ 61.397220] [] save_stack_trace+0x26/0x50 [ 61.403121] [] save_stack+0x43/0xd0 [ 61.408497] [] kasan_kmalloc+0xc7/0xe0 [ 61.414138] [] kmem_cache_alloc_trace+0x104/0x2c0 [ 61.420730] [] binder_transaction+0x8d4/0x6490 [ 61.427062] [] binder_thread_write+0xa1f/0x2240 [ 61.433496] [] binder_ioctl_write_read.isra.47+0x1cd/0x920 [ 61.440881] [] binder_ioctl+0x7f4/0x1210 [ 61.446692] [] do_vfs_ioctl+0x63f/0xf40 [ 61.452520] [] SyS_ioctl+0x8f/0xc0 [ 61.457809] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 61.464490] [ 61.466095] Freed by task 488: [ 61.469258] [] save_stack_trace+0x26/0x50 [ 61.475162] [] save_stack+0x43/0xd0 [ 61.480540] [] kasan_slab_free+0x72/0xc0 [ 61.486359] [] kfree+0xf4/0x310 [ 61.491395] [] binder_free_transaction+0x6a/0x90 [ 61.497898] [] binder_send_failed_reply+0x1c3/0x230 [ 61.504665] [] binder_thread_release+0x410/0x520 [ 61.511169] [] binder_deferred_func+0x427/0xc00 [ 61.517586] [] process_one_work+0x7df/0x1600 [ 61.523748] [] worker_thread+0xd9/0xfc0 [ 61.529481] [] kthread+0x268/0x300 [ 61.534780] [] ret_from_fork+0x55/0x80 [ 61.540431] [ 61.542038] The buggy address belongs to the object at ffff8801ce846100 [ 61.542038] which belongs to the cache kmalloc-192 of size 192 [ 61.554674] The buggy address is located 16 bytes inside of [ 61.554674] 192-byte region [ffff8801ce846100, ffff8801ce8461c0) [ 61.566435] The buggy address belongs to the page: [ 61.572894] ------------[ cut here ]------------ [ 61.577681] WARNING: CPU: 1 PID: 0 at kernel/locking/lockdep.c:973 __bfs+0x2aa/0x5f0() [ 61.585727] Kernel panic - not syncing: panic_on_warn set ... [ 61.585727] [ 61.593092] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.128-gbd23e3a #20 [ 61.600097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.609452] 0000000000000000 cc7723a63122f877 ffff8801db307788 ffffffff81e0daad [ 61.617528] ffffffff83a43ec0 ffff8801d9b49800 ffffffff83a55d20 0000000000000009 [ 61.625599] 00000000000003cd ffff8801db307848 ffffffff81409eb4 0000000041b58ab3 [ 61.633665] Call Trace: [ 61.636251] [] dump_stack+0xc1/0x124 [ 61.642365] [] panic+0x19e/0x38d [ 61.647380] [] ? add_taint.cold.4+0x16/0x16 [ 61.653349] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 61.660194] [] ? _find_next_bit.part.0+0xe0/0x120 [ 61.666689] [] ? warn_slowpath_common.cold.6+0x5/0x20 [ 61.673531] [] warn_slowpath_common.cold.6+0x20/0x20 [ 61.680288] [] ? __bfs+0x2aa/0x5f0 [ 61.685486] [] ? noop_count+0x40/0x40 [ 61.690950] [] warn_slowpath_null+0x29/0x30 [ 61.696932] [] __bfs+0x2aa/0x5f0 [ 61.701972] [] ? ip_local_deliver_finish+0xa60/0xa60 [ 61.708752] [] ? __module_text_address+0x13/0x140 [ 61.715265] [] check_usage_forwards+0x126/0x2e0 [ 61.721593] [] ? print_shortest_lock_dependencies+0x80/0x80 [ 61.728962] [] ? dump_trace+0x184/0x360 [ 61.734609] [] ? __lock_acquire+0xa86/0x5270 [ 61.740683] [] ? save_stack_trace+0x26/0x50 [ 61.746672] [] ? save_trace+0xe0/0x250 [ 61.752219] [] mark_lock+0x6de/0x1280 [ 61.757684] [] ? print_shortest_lock_dependencies+0x80/0x80 [ 61.765057] [] __lock_acquire+0x2509/0x5270 [ 61.771036] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 61.777890] [] ? debug_check_no_locks_freed+0x210/0x210 [ 61.784913] [] ? debug_check_no_locks_freed+0x210/0x210 [ 61.791939] [] lock_acquire+0x15e/0x450 [ 61.797599] [] ? try_to_wake_up+0x2c/0xf00 [ 61.803494] [] ? debug_object_deactivate+0x214/0x340 [ 61.810263] [] _raw_spin_lock_irqsave+0x4e/0x70 [ 61.816602] [] ? try_to_wake_up+0x2c/0xf00 [ 61.822498] [] try_to_wake_up+0x2c/0xf00 [ 61.828220] [] ? check_preemption_disabled+0x3b/0x170 [ 61.835063] [] wake_up_process+0x15/0x20 [ 61.840800] [] hrtimer_wakeup+0x48/0x60 [ 61.846431] [] ? clock_was_set_work+0x30/0x30 [ 61.852593] [] __hrtimer_run_queues+0x3ad/0x1000 [ 61.859027] [] ? retrigger_next_event+0x1c0/0x1c0 [ 61.865549] [] ? kvm_clock_read+0x23/0x40 [ 61.871367] [] ? kvm_clock_get_cycles+0x9/0x10 [ 61.877611] [] ? hrtimer_interrupt+0x12d/0x430 [ 61.883853] [] hrtimer_interrupt+0x1b1/0x430 [ 61.889923] [] local_apic_timer_interrupt+0x74/0xa0 [ 61.896608] [] smp_apic_timer_interrupt+0x7c/0xa0 [ 61.903114] [] apic_timer_interrupt+0xa0/0xb0 [ 61.909254] [] ? native_safe_halt+0x6/0x10 [ 61.915985] [] default_idle+0x55/0x3c0 [ 61.921535] [] arch_cpu_idle+0x10/0x20 [ 61.927089] [] default_idle_call+0x57/0x70 [ 61.932993] [] cpu_startup_entry+0x6af/0x780 [ 61.939066] [] ? call_cpuidle+0xe0/0xe0 [ 61.944702] [] start_secondary+0x324/0x400 [ 61.950598] [] ? set_cpu_sibling_map+0x1180/0x1180 SeaBIOS (version 1.8.2-20171130_102032-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 256 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2350: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... early console in decompress_kernel input_data: 0x0000000003b5326e input_len: 0x00000000014ca886 output: 0x0000000001000000 output_len: 0x0000000004008a40 run_size: 0x0000000005752000 Decompressing Linux... Parsing ELF... done. Booting the kernel. [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Initializing cgroup subsys schedtune [ 0.000000] Linux version 4.4.128-gbd23e3a (syzkaller@ci) (gcc version 8.0.1 20180413 (experimental) (GCC) ) #20 SMP PREEMPT Tue Apr 24 03:43:15 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=120 [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] Centaur CentaurHauls [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] x86/fpu: Using 'eager' FPU context switches. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfff2fff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfff3000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] Hypervisor detected: KVM [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT [ 0.000000] e820: last_pfn = 0xbfff3 max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f23d0-0x000f23df] mapped at [ffff8800000f23d0] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F2390 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFF3430 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFCF60 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFF3470 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFF65F0 00690D (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFF5D10 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFF5CE0 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFF4C30 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 2596961022 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfff2fff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] PM: Registered nosave memory: [mem 0xbfff3000-0xbfffffff] [ 0.000000] PM: Registered nosave memory: [mem 0xc0000000-0xfffbbfff] [ 0.000000] PM: Registered nosave memory: [mem 0xfffbc000-0xffffffff] [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 42 pages/cpu @ffff8801db200000 s134024 r8192 d29816 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935227 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=120 [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6579092K/7863876K available (41745K kernel code, 6300K rwdata, 9048K rodata, 1864K init, 23696K bss, 1284784K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Kernel/User page tables isolation: enabled [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2300.000 MHz processor [ 1.200915] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 1.202066] pid_max: default: 32768 minimum: 301 [ 1.202777] ACPI: Core revision 20150930 [ 1.615689] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.617878] Security Framework initialized [ 1.618488] SELinux: Initializing. [ 1.619194] AppArmor: AppArmor disabled by boot time parameter [ 1.620118] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.621146] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.624791] Initializing cgroup subsys io [ 1.625461] Initializing cgroup subsys freezer [ 1.626142] Initializing cgroup subsys hugetlb [ 1.626778] Initializing cgroup subsys debug [ 1.627552] CPU: Physical Processor ID: 0 [ 1.629312] mce: CPU supports 32 MCE banks [ 1.630053] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.630973] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.631917] Spectre V2 : Mitigation: Full generic retpoline [ 1.635053] Freeing SMP alternatives memory: 48K [ 1.644916] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.760265] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.761798] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.850598] x86: Booting SMP configuration: [ 1.851292] .... node #0, CPUs: #1 [ 1.852068] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 1.856955] x86: Booted up 1 node, 2 CPUs [ 1.857586] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 1.861818] devtmpfs: initialized [ 1.872831] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.874265] futex hash table entries: 512 (order: 4, 65536 bytes) [ 1.875997] xor: automatically using best checksumming function: [ 1.888189] kworker/u4:0 (21) used greatest stack depth: 27424 bytes left [ 1.970260] avx : 21750.000 MB/sec [ 1.971531] RTC time: 2:50:10, date: 04/25/18 [ 1.974065] NET: Registered protocol family 16 [ 1.975193] schedtune: init normalization constants... [ 1.975895] schedtune: no energy model data [ 1.976474] schedtune: disabled! [ 2.010551] cpuidle: using governor ladder [ 2.040317] cpuidle: using governor menu [ 2.041673] ACPI: bus type PCI registered [ 2.042310] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 2.045377] PCI: Using configuration type 1 for base access [ 2.540199] raid6: sse2x1 gen() 4640 MB/s [ 2.710182] raid6: sse2x1 xor() 2603 MB/s [ 2.880167] raid6: sse2x2 gen() 6877 MB/s [ 3.050144] raid6: sse2x2 xor() 4047 MB/s [ 3.220120] raid6: sse2x4 gen() 8676 MB/s [ 3.390103] raid6: sse2x4 xor() 5317 MB/s [ 3.560088] raid6: avx2x1 gen() 9325 MB/s [ 3.730077] raid6: avx2x2 gen() 14602 MB/s [ 3.900051] raid6: avx2x4 gen() 19076 MB/s [ 3.900742] raid6: using algorithm avx2x4 gen() 19076 MB/s [ 3.901515] raid6: using avx2x2 recovery algorithm [ 3.902946] ACPI: Added _OSI(Module Device) [ 3.903683] ACPI: Added _OSI(Processor Device) [ 3.904316] ACPI: Added _OSI(3.0 _SCP Extensions) [ 3.904999] ACPI: Added _OSI(Processor Aggregator Device) [ 3.932144] ACPI: Executed 2 blocks of module-level executable AML code [ 4.876889] ACPI: Interpreter enabled [ 4.877894] ACPI: (supports S0 S3 S4 S5) [ 4.878458] ACPI: Using IOAPIC for interrupt routing [ 4.879639] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug