Starting mcstransd: [ 20.992377] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.926428] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 24.328859] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 25.394966] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. 2018/02/26 14:26:54 fuzzer started 2018/02/26 14:26:55 dialing manager at 10.128.0.26:33791 2018/02/26 14:26:59 kcov=true, comps=false 2018/02/26 14:27:01 executing program 0: sendmsg$netlink(0xffffffffffffffff, &(0x7f000005cfe4)={&(0x7f000003fff4)=@proc={0x10}, 0xc, &(0x7f000002dfe0)=[{&(0x7f000005c000)=ANY=[@ANYBLOB='\n'], 0x1}], 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) ioctl$int_out(r0, 0x1, &(0x7f000005bffc)) 2018/02/26 14:27:01 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f000002e000)=ANY=[@ANYBLOB="66696e746572000000000000000000000000000000000000000000000000009c0384db000700000004000000e8030000f0010000f00158e90eb50000000300000003000000230000"], 0x1) 2018/02/26 14:27:01 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000b5dff7)=ANY=[@ANYBLOB="0a004e22ff7f000000000000000000000000ffffac140014ff7d92000037d18126e0551be6040361711c66db0306019a"], 0x1) 2018/02/26 14:27:01 executing program 7: r0 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000044fc8)={&(0x7f000075f000)={0x10}, 0xc, &(0x7f0000ea8ff0)={&(0x7f0000c10000)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYBLOB="1400020000000000000000000000000000000001b4d96d40c983db96517aa6b2145ad9e4c1418491124de9e500da8c4db2c184395b9ade65e329e9370de7cd01843bbdf00092475853416b0293bc2c02ff791d5e5c2a332aca16e2f6b4fce6310d1eacb3319de4b4c3c4878154326d1e37b53df33d080b2444d24c939ede7a9c83f6870f4db46f95ec7fa7d22be02614102652890c35911f90daeee61c0ff52b6110eaacfb3c9141fd4708c36cf559c938edbe8bf65e44990f288107124db833fd2257391489e9dadeebaf4e17f7ba01aab8cb5cfbffe14a56994487bf8e8dd344a25dfa9c9337cd4de77b5f9c122d50fe5305feac8a566bf5b06ef067f6b6fba30a660041dfa8ccbc59009804442c5f92c3270e48894ea76cf9dab681ca0b723540f6b8d8726ef5b9694913557bde986dce7a3bb62eeaaf164ef72b9aaf1c678e1e73c099a46806a7d1054b202365c9c78091e693160584dc4d60401dc18a97cbd0611c3d24f4715d80b07074ed52d046e3d3479e3eb1132e54e92d44ca3f5bb209db87e91cb9e21d87eb291817069b0ae9d67786bfc5263b0eea32e6604a5006cb39f0f7a642f2b19882d7eeaf0d012eca63c29addbd1f5939c400c8617969407f156bc7e22c0cbc1790"], 0x2}, 0x1}, 0x0) 2018/02/26 14:27:01 executing program 2: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f00000000c0)="001c08ecdf9d51bdf9f8d40b0d8b2a911a6185cebd8149a1ad95b6208ac07949de00") fchdir(r1) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 14:27:01 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fe8ff4)={0x0}, &(0x7f0000139000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9cff8)={0x0, 0x0}) capset(&(0x7f000043fff8)={0x19980330}, &(0x7f000023bfe8)) get_robust_list(r2, &(0x7f000012b000)=&(0x7f0000f9ffe8), &(0x7f00005dd000)=0x18) 2018/02/26 14:27:01 executing program 5: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 2018/02/26 14:27:01 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000c9effc)=0x10000, 0x4) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) write$eventfd(r1, &(0x7f0000605ff8), 0xffbe) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000300)=0x3c, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000c40000)={0x7}, 0x20) write$eventfd(r1, &(0x7f00006d5000), 0x8) [ 37.661476] IPVS: Creating netns size=2552 id=1 [ 37.701140] IPVS: Creating netns size=2552 id=2 [ 37.751245] IPVS: Creating netns size=2552 id=3 [ 37.812220] IPVS: Creating netns size=2552 id=4 [ 37.902283] IPVS: Creating netns size=2552 id=5 [ 37.999544] IPVS: Creating netns size=2552 id=6 [ 38.151367] IPVS: Creating netns size=2552 id=7 [ 38.316371] IPVS: Creating netns size=2552 id=8 2018/02/26 14:27:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00008bcff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, 0x0) [ 42.625504] audit: type=1400 audit(1519655226.300:5): avc: denied { create } for pid=5199 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 42.651602] audit: type=1400 audit(1519655226.330:6): avc: denied { ioctl } for pid=5199 comm="syz-executor5" path="socket:[12180]" dev="sockfs" ino=12180 ioctlcmd=8904 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/26 14:27:06 executing program 0: perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0xffffffffffffffff, @rand_addr=0x4}, 0x10) 2018/02/26 14:27:06 executing program 1: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e0fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000e5dfae)=ANY=[@ANYBLOB="0f"]}) 2018/02/26 14:27:06 executing program 3: syz_emit_ethernet(0x1, &(0x7f00000fefd6)=ANY=[@ANYBLOB="ffffffffffff0180c200000008060001150006040001ffffffffffffac1400bbaaaaaaaa0000ac140000"], 0x0) 2018/02/26 14:27:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0xa) 2018/02/26 14:27:06 executing program 2: r0 = socket$inet(0x2, 0x200000100000003, 0x400000000002) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x8, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/26 14:27:06 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x2b) connect$inet6(r0, &(0x7f0000017000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000032fc8)={0x0, 0x0, &(0x7f000000f000)=[{&(0x7f00000004c0)="8735d16e511c", 0x6}], 0x1, &(0x7f0000006f48)=[]}, 0x24008040) sendmsg(r0, &(0x7f000001f000)={0x0, 0x0, &(0x7f000001d000)=[], 0x363, &(0x7f0000004000)=[]}, 0x0) 2018/02/26 14:27:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000616000)={0x2, 0x2, @multicast2=0xe0000002}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) bind$inet(r1, &(0x7f0000afbff0)={0x2, 0x2, @multicast1=0xe0000001}, 0x10) 2018/02/26 14:27:06 executing program 5: perf_event_open(&(0x7f0000536000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000680)=@sco, 0x8, &(0x7f00000004c0)=[], 0x0, &(0x7f0000000080)=""/253, 0xfd}, 0x2) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f000002efc0)=[], 0x0, &(0x7f0000006fa0)=[]}, 0x0) 2018/02/26 14:27:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/02/26 14:27:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, 0x5c) [ 42.712961] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 2018/02/26 14:27:06 executing program 6: syz_open_dev$sndseq(&(0x7f0000dd3000)='/dev/snd/seq\x00', 0x0, 0x0) r0 = creat(&(0x7f00003f1ff8)='./file0\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x100000000000c8, &(0x7f00005b8ffc), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000f04000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @empty}}, 0x5c) dup2(r0, r1) 2018/02/26 14:27:06 executing program 4: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00006b2000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000537000)={@remote}, &(0x7f0000499000)=0x14) 2018/02/26 14:27:06 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x80000000009, &(0x7f0000f0fffc)=0x77a, 0x4) connect$inet(r0, &(0x7f0000784ff0)={0x2, 0xffffffffffffffff, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f000000e000)=0x7fff, 0x4) 2018/02/26 14:27:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0xa) 2018/02/26 14:27:06 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x8, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/26 14:27:06 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000e4fecf)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[@cipso={0x86, 0x6, 0x0, []}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 2018/02/26 14:27:06 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000002eff0)={0x2, &(0x7f0000000ff0)=[{0x2}, {0x80000006}]}, 0x10) 2018/02/26 14:27:06 executing program 0: sched_getaffinity(0x0, 0x8, &(0x7f00000000c0)) 2018/02/26 14:27:06 executing program 3: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000004b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/02/26 14:27:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000140)=@req={0x50, &(0x7f00000000c0)={@common='erspan0\x00', @ifru_ivalue}}) 2018/02/26 14:27:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000060d000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x200080000000, 0x0, 0x2, 0x1}, 0x20) 2018/02/26 14:27:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f000067fff8)='syscall\x00') sendfile(r0, r1, &(0x7f0000000000), 0x2) 2018/02/26 14:27:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303}], 0x41, 0x0, &(0x7f0000000040)="41c401d03ebc0353278471a03705212ae7f3953a7ee421af8b986cac08e6f088fd042361a5e5a478ed0ce31ce800a3892b3e0e9ce4f35aa9bdb093f50ffadf2f62"}) 2018/02/26 14:27:06 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x3c}, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0xe8) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/26 14:27:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}], 0x10) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000a68000)={0x0, @in={{0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f000044fffc)=0xa0) 2018/02/26 14:27:06 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0xffffffffffffffff, @rand_addr=0x4}, 0x10) 2018/02/26 14:27:06 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2000000001, 0x0) getsockopt(r0, 0x0, 0x50, &(0x7f0000000080)=""/8, &(0x7f0000000040)=0x25) 2018/02/26 14:27:06 executing program 6: mknod(&(0x7f0000ff0000)='./file0\x00', 0x10000000007fe, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f00000000c0)=[], &(0x7f0000000100)=[]) [ 42.874193] binder: 5264:5276 unknown command 1074291554 [ 42.887113] binder: 5264:5276 ioctl c0306201 20000180 returned -22 [ 42.903404] mmap: syz-executor3 (5271) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes [ 242.176224] INFO: task syz-executor1:5293 blocked for more than 120 seconds. [ 242.183446] Not tainted 4.4.118-g5f7f76a #24 [ 242.188384] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 242.196345] syz-executor1 D ffff8800aac3fa00 29672 5293 3852 0x00000004 [ 242.203742] ffff8800aac3fa00 ffffffff00000006 ffff8801c57ab000 ffffffff8113bd3a [ 242.211738] ffffed001558b2e8 ffff8800aac59700 ffff8801db31fdb8 ffff8801db31fde0 [ 242.219768] ffff8801db31f4d8 ffff8801c57ac800 ffff8801c57ab000 0000000000000000 [ 242.227849] Call Trace: [ 242.230413] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 242.236732] [] schedule+0x7a/0x1b0 [ 242.241895] [] __lock_sock+0xf1/0x180 [ 242.247354] [] ? sock_init_data+0xcc0/0xcc0 [ 242.253295] [] ? lock_sock_nested+0x43/0x120 [ 242.259351] [] ? prepare_to_wait_event+0x420/0x420 [ 242.265901] [] ? get_parent_ip+0xd/0x50 [ 242.271511] [] lock_sock_nested+0xf6/0x120 [ 242.277381] [] getorigdst+0xac/0x470 [ 242.282719] [] ? ipv4_print_tuple+0x30/0x30 [ 242.288721] [] ? __ww_mutex_lock_interruptible+0x14d0/0x14d0 [ 242.296165] [] ? mark_held_locks+0xaf/0x100 [ 242.302114] [] ? mutex_unlock+0x9/0x10 [ 242.307660] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 242.314730] [] nf_getsockopt+0x6a/0xc0 [ 242.320278] [] ip_getsockopt+0x144/0x1a0 [ 242.325959] [] ? do_ip_getsockopt+0x1530/0x1530 [ 242.332291] [] ? sock_has_perm+0x1c1/0x400 [ 242.338169] [] udp_getsockopt+0x45/0x80 [ 242.343763] [] ipv6_getsockopt+0xfb/0x250 [ 242.349563] [] ? do_ipv6_getsockopt.isra.5+0x21a0/0x21a0 [ 242.356647] [] ? __fget+0x23a/0x3b0 [ 242.361893] [] tcp_getsockopt+0x82/0xd0 [ 242.367506] [] sock_common_getsockopt+0x95/0xd0 [ 242.373885] [] SyS_getsockopt+0x14a/0x230 [ 242.379787] [] ? SyS_setsockopt+0x250/0x250 [ 242.385731] [] ? move_addr_to_kernel+0x50/0x50 [ 242.391963] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 242.398445] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 242.405080] 1 lock held by syz-executor1/5293: [ 242.409733] #0: (sk_lock-AF_INET6){+.+.+.}, at: [] ip_getsockopt+0x12e/0x1a0 [ 242.419363] Sending NMI to all CPUs: [ 242.424203] NMI backtrace for cpu 0 [ 242.427823] CPU: 0 PID: 486 Comm: khungtaskd Not tainted 4.4.118-g5f7f76a #24 [ 242.435066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.444446] task: ffff8800bac56000 task.stack: ffff8800bac88000 [ 242.450528] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1a0 [ 242.459457] RSP: 0018:ffff8800bac8fcb8 EFLAGS: 00000046 [ 242.464874] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 242.472140] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300 [ 242.479404] RBP: ffff8800bac8fce0 R08: 0000000000000001 R09: 0000000000000000 [ 242.486660] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 242.493900] R13: 0000000000000003 R14: ffffffff8426f420 R15: 0000000000000002 [ 242.501160] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 242.509371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.515222] CR2: 00007f64649269b8 CR3: 00000001c711e000 CR4: 0000000000160670 [ 242.522496] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.529751] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.537010] Stack: [ 242.539128] ffffffff8426f420 ffffffff847ef9c0 fffffbfff08fd9ec dffffc0000000000 [ 242.546650] ffff8801db31bca0 ffff8800bac8fd00 ffffffff810b999b ffffffff839f63c0 [ 242.554154] 0000000000000003 ffff8800bac8fd60 ffffffff81d0ef94 ffffffff8141b013 [ 242.561780] Call Trace: [ 242.564332] [] nmi_raise_cpu_backtrace+0x5b/0x70 [ 242.570811] [] nmi_trigger_all_cpu_backtrace+0x4a4/0x550 [ 242.577891] [] ? print_lock+0xab/0xae [ 242.583312] [] ? irq_force_complete_move+0x3b0/0x3b0 [ 242.590063] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 242.597067] [] watchdog+0x6fa/0xae0 [ 242.602312] [] ? watchdog+0xc3/0xae0 [ 242.607658] [] kthread+0x268/0x300 [ 242.612815] [] ? reset_hung_task_detector+0x20/0x20 [ 242.619469] [] ? kthread_create_on_node+0x400/0x400 [ 242.626117] [] ? kthread_create_on_node+0x400/0x400 [ 242.632749] [] ret_from_fork+0x55/0x80 [ 242.638273] [] ? kthread_create_on_node+0x400/0x400 [ 242.644908] Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 6b 2f 17 00 4c 89 e7 57 9d 0f 1f [ 242.663997] NMI backtrace for cpu 1 [ 242.667702] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.118-g5f7f76a #24 [ 242.675131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.684865] task: ffff8801d9b49800 task.stack: ffff8801d9b58000 [ 242.690923] RIP: 0010:[] [] native_safe_halt+0x6/0x10 [ 242.699316] RSP: 0018:ffff8801d9b5fd98 EFLAGS: 00000246 [ 242.704756] RAX: 0000000000000007 RBX: ffffffff847ddac8 RCX: 0000000000000000 [ 242.712019] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8801d9b4a0cc [ 242.719275] RBP: ffff8801d9b5fd98 R08: 0000000000000000 R09: 0000000000000000 [ 242.727239] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 242.734479] R13: fffffbfff070889c R14: ffffffff847ebe38 R15: 0000000000000000 [ 242.741738] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 242.749948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.755799] CR2: 00007f732d2c9000 CR3: 00000001c711e000 CR4: 0000000000160670 [ 242.763061] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.770315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.777583] Stack: [ 242.779699] ffff8801d9b5fdd0 ffffffff81027e85 ffff8801d9b60000 ffffffff847ddac8 [ 242.787216] fffffbfff070889c ffffffff847ebe38 0000000000000000 ffff8801d9b5fde0 [ 242.794718] ffffffff810293fa ffff8801d9b5fdf8 ffffffff81221468 dffffc0000000000 [ 242.802250] Call Trace: [ 242.804801] [] default_idle+0x55/0x3c0 [ 242.810322] [] arch_cpu_idle+0xa/0x10 [ 242.815739] [] default_idle_call+0x48/0x70 [ 242.821614] [] cpu_startup_entry+0x5fd/0x8f0 [ 242.827657] [] ? call_cpuidle+0xe0/0xe0 [ 242.833246] [] ? clockevents_register_device+0x122/0x230 [ 242.840333] [] start_secondary+0x304/0x3e0 [ 242.846473] [] ? set_cpu_sibling_map+0x1080/0x1080 [ 242.853035] Code: 00 00 00 00 00 55 48 89 e5 fa 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 66 0f 1f 84 [ 242.872352] Kernel panic - not syncing: hung_task: blocked tasks [ 242.878474] CPU: 0 PID: 486 Comm: khungtaskd Not tainted 4.4.118-g5f7f76a #24 [ 242.885714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.895041] 0000000000000000 272524076a07934b ffff8800bac8fca8 ffffffff81d0402d [ 242.903009] ffffffff83883080 ffff8800bac8fd80 dffffc0000000000 7fffffffffffffff [ 242.911013] ffff8801cee9cc48 ffff8800bac8fd70 ffffffff8141aaea 0000000041b58ab3 [ 242.919023] Call Trace: [ 242.921587] [] dump_stack+0xc1/0x124 [ 242.926924] [] panic+0x1aa/0x388 [ 242.931913] [] ? percpu_up_read.constprop.45+0xe1/0xe1 [ 242.938809] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 242.946050] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 242.953297] [] watchdog+0x70b/0xae0 [ 242.958546] [] ? watchdog+0xc3/0xae0 [ 242.963881] [] kthread+0x268/0x300 [ 242.969127] [] ? reset_hung_task_detector+0x20/0x20 [ 242.975763] [] ? kthread_create_on_node+0x400/0x400 [ 242.982402] [] ? kthread_create_on_node+0x400/0x400 [ 242.989039] [] ret_from_fork+0x55/0x80 [ 242.994542] [] ? kthread_create_on_node+0x400/0x400 [ 243.001645] Dumping ftrace buffer: [ 243.005208] (ftrace buffer empty) [ 243.008890] Kernel Offset: disabled [ 243.012497] Rebooting in 86400 seconds..