Warning: Permanently added '10.128.0.149' (ECDSA) to the list of known hosts. 2019/09/16 14:35:27 fuzzer started 2019/09/16 14:35:29 dialing manager at 10.128.0.26:41059 2019/09/16 14:35:29 syscalls: 1327 2019/09/16 14:35:29 code coverage: enabled 2019/09/16 14:35:29 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/16 14:35:29 extra coverage: extra coverage is not supported by the kernel 2019/09/16 14:35:29 setuid sandbox: enabled 2019/09/16 14:35:29 namespace sandbox: enabled 2019/09/16 14:35:29 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/16 14:35:29 fault injection: kernel does not have systematic fault injection support 2019/09/16 14:35:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/16 14:35:29 net packet injection: enabled 2019/09/16 14:35:29 net device setup: enabled 14:35:53 executing program 0: 14:35:53 executing program 1: 14:35:53 executing program 5: read(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x16) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffd13, &(0x7f0000000600)={0x0, 0x19c}}, 0x0) 14:35:53 executing program 3: 14:35:53 executing program 2: 14:35:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect(r0, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) connect(r0, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x1b) 14:35:54 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/128, 0x80}, {&(0x7f0000003d00)=""/24, 0x18}, {&(0x7f0000003d40)=""/211, 0xd3}, {&(0x7f0000003ec0)=""/96, 0x60}], 0x6}}], 0x2, 0x0, 0x0) 14:35:54 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 14:35:54 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0}) 14:35:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x40}, 0x8) close(r1) 14:35:54 executing program 4: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="2800f900", @ANYRES16=0x0, @ANYBLOB="e90003afedb37a", @ANYRES32, @ANYBLOB="f3000000", @ANYRES32], 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x2bc, &(0x7f0000000140), 0xfffffffffffffd85}}], 0x40001ab, 0x0) 14:35:54 executing program 0: 14:35:54 executing program 4: 14:35:55 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/99, 0x63}], 0x1) 14:35:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00'}) syz_genetlink_get_family_id$team(0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000280)=0x976, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@empty}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000200)=0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) 14:35:55 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00;\xe9\xf1g 45\x817\xee\x0f\x9e2\xe7\xdf\"{\x02&\xfbI\xeb\x88z\x11\x8e\xc7\xb1j\xe3\x03\x8c\x9ed#\xca5\xb5\xc1\b\a\xf32bK\xf8\xb8\x9a<\xac\n\x04*\xeb\xe4;\xad\x8d\x1c@\x84dZ\x1aU\x9f\xbb\xebs\xf9\x82r\x04\xb7\x87\x96\xa9k\xa7\x81\'\xbfT\xf6\xafi\x8f\xf9{1$\x8d\x9e$\xa0\xbeN\xd5v\xb8\"s\xae\xfa\xe1\x1e\x8c\xf1\x95M\xb5\xf1\xd9\xed\xae4\x1dJ\xa2\x1a\xa3\x96(?w\xcb\x1f4;') 14:35:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) 14:35:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lchown(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000260007031dfffd946fa2830020200a00090000000600000001ffffffff00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:35:55 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @broadcast}, @icmp=@timestamp}}}}, 0x0) 14:35:55 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00002f5ff8)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000320000/0x3000)=nil, 0x3000, 0xf) 14:35:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, 0x0) 14:35:55 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) ftruncate(r1, 0x200) sendfile(r1, r2, 0x0, 0x10000) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x92, 0x0, 0xffffffff00000001}) 14:35:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\x84\xe0\xda\x82a\xbe\x18O\x17\x1b\\\x143\x06v\x9b=>\xc1\xd9\x06\x00\x05\xf7\xae\xce\xbeA,j5\xac\xf5\xf0&\xc5$\x951QC\x87\x9f\xe0};\xac\xb7k>0\xce\xcd~\xd766*\fo=Cg&[\x8b\xe2\xbd\xe9\x16\xc6\x1e\x97e]\xb0\xed\xe7I\x18\x96RS\x10\x8cyr\xb7\xcf', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) syzkaller login: [ 66.172118] audit: type=1400 audit(1568644555.119:5): avc: denied { create } for pid=2315 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 66.206678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.254047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:35:55 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) ftruncate(r1, 0x200) sendfile(r1, r2, 0x0, 0x10000) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) open(0x0, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) 14:35:55 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT], 0x32) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 14:35:55 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00002f5ff8)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000320000/0x3000)=nil, 0x3000, 0xf) madvise(&(0x7f000033e000/0x2000)=nil, 0x2000, 0x8) [ 66.300186] audit: type=1400 audit(1568644555.249:6): avc: denied { write } for pid=2315 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 66.461424] audit: type=1400 audit(1568644555.409:7): avc: denied { read } for pid=2315 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 14:35:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00'}, 0x45c) 14:35:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000050c0)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) 14:35:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)="580000001400add427321b470c45b45602067fffffff81004e22000d00ff0030925aa80020007b00090080000efffeffe809000000ff0000f03ac703000000ffffffffffffff96dbd7e3d271885941e08780e9419d7b02a8", 0x58}], 0x1) 14:35:55 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x48}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:35:55 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 14:35:55 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) 14:35:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000050c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000780)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003580)=[@hopopts={{0x18}}, @hopopts={{0x18}}], 0x30}}], 0x2, 0x0) 14:35:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xfffffffffffffffe]) 14:35:55 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280)={0x1}, 0xff7f) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0xedf1d44) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r6, 0x4, 0x40400) write$FUSE_WRITE(r6, &(0x7f0000000080)={0x18}, 0x18) fcntl$setstatus(r1, 0x4, 0x4000) fdatasync(r0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r0}) 14:35:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) 14:35:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fa71ca12880e1f75b87187a2ba4dc3bd55d4a462b92a2c00fd7a3cc5aaf45e6b009c302a027a305da4a7d9fc9a460de69e23f08fa809a983d071f25d38b1978c", "f83c0f2ca28b2f3829463149455e07669686a39606824f28df3ba53313827c00cc50afcfc638bb491fcec6565f4e658373ccfdaad198d9cf0acdf6c169d79921", "2e4fc451b270daa4892406454d95b940ecc1bc6e2586e7c90f1dcf80de938c00"}) dup3(r1, r0, 0x0) [ 66.802309] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket [ 66.815559] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket [ 66.833900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket 14:35:55 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 14:35:55 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000680)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sR/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.658518] syz-executor.0 D ffff8801c30175f8 25072 2114 1 0x20020004 [ 281.665984] ffff8801c30175f8 ffff8801d6ce2f80 5fe913701505ec7a ffff8801d6ce2f80 [ 281.674099] 0000000000000000 ffff8801d6ce3800 ffff8801db61f180 ffff8801db61f1a8 [ 281.682218] ffff8801db61e898 ffff8801d71cc740 ffff8801d6ce2f80 ffffed0038602001 [ 281.690288] Call Trace: [ 281.692861] [] schedule+0x99/0x1d0 [ 281.698025] [] schedule_preempt_disabled+0x13/0x20 [ 281.704619] [] mutex_lock_nested+0x3c2/0xb80 [ 281.710677] [] ? __blkdev_get+0x10c/0xdf0 [ 281.716465] [] ? get_disk+0xe0/0xe0 [ 281.721780] [] ? kobj_lookup+0x273/0x410 [ 281.727489] [] ? mutex_trylock+0x500/0x500 [ 281.733398] [] ? disk_block_events+0xc7/0x140 [ 281.739609] [] __blkdev_get+0x10c/0xdf0 [ 281.745211] [] ? __blkdev_put+0x840/0x840 [ 281.751117] [] ? trace_hardirqs_on+0x10/0x10 [ 281.757175] [] blkdev_get+0x2e8/0x920 [ 281.762648] [] ? bd_may_claim+0xd0/0xd0 [ 281.768311] [] ? bd_acquire+0x8a/0x370 [ 281.773906] [] ? _raw_spin_unlock+0x2d/0x50 [ 281.779900] [] blkdev_open+0x1aa/0x250 [ 281.785415] [] do_dentry_open+0x38f/0xbd0 [ 281.791218] [] ? __inode_permission2+0x9e/0x250 [ 281.797535] [] ? blkdev_get_by_dev+0x80/0x80 [ 281.803598] [] vfs_open+0x10b/0x210 [ 281.808869] [] ? may_open.isra.0+0xe7/0x210 [ 281.814820] [] path_openat+0x136f/0x4470 [ 281.820530] [] ? kasan_kmalloc.part.0+0xc6/0xf0 [ 281.826830] [] ? may_open.isra.0+0x210/0x210 [ 281.832917] [] ? trace_hardirqs_on+0x10/0x10 [ 281.838986] [] do_filp_open+0x1a1/0x270 [ 281.844589] [] ? user_path_mountpoint_at+0x50/0x50 [ 281.851166] [] ? do_dup2+0x3d0/0x3d0 [ 281.856515] [] ? _raw_spin_unlock+0x2d/0x50 [ 281.862495] [] do_sys_open+0x2f8/0x600 [ 281.868014] [] ? mntput+0x66/0x90 [ 281.873121] [] ? filp_open+0x70/0x70 [ 281.878479] [] ? SyS_mkdirat+0x164/0x250 [ 281.884196] [] ? SyS_mknod+0x40/0x40 [ 281.889738] [] compat_SyS_open+0x2a/0x40 [ 281.895432] [] ? compat_SyS_getdents64+0x270/0x270 [ 281.902026] [] do_fast_syscall_32+0x32d/0xa90 [ 281.908157] [] sysenter_flags_fixed+0xd/0x1a [ 281.914220] 1 lock held by syz-executor.0/2114: [ 281.918983] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xdf0 [ 281.928315] Sending NMI to all CPUs: [ 281.932319] NMI backtrace for cpu 0 [ 281.935931] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.4.174+ #17 [ 281.942251] task: ffffffff82e151c0 task.stack: ffffffff82e00000 [ 281.948285] RIP: 0010:[] [] native_safe_halt+0x2/0x10 [ 281.956772] RSP: 0018:ffffffff82e07db0 EFLAGS: 00000246 [ 281.962214] RAX: 0000000000000007 RBX: ffffffff8319bf68 RCX: 0000000000000000 [ 281.969482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff82e15a84 [ 281.976735] RBP: ffffffff82e07de0 R08: 0000000000000000 R09: 0000000000000000 [ 281.984012] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 281.991281] R13: ffffffff82e08000 R14: dffffc0000000000 R15: ffffffff82e00000 [ 281.998527] FS: 0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 282.006747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.012623] CR2: 000000000213f000 CR3: 00000000b8cd9000 CR4: 00000000001606b0 [ 282.020074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.027330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.034611] Stack: [ 282.036783] ffffffff81020b16 ffffffff82e00000 0000000000000000 ffffffff82e08000 [ 282.044321] dffffc0000000000 ffffffff82e00000 ffffffff82e07df0 ffffffff81022d50 [ 282.052631] ffffffff82e07e08 ffffffff811eb4c8 0000000000000000 ffffffff82e07ed0 [ 282.060164] Call Trace: [ 282.062726] [] ? default_idle+0x56/0x3d0 [ 282.068421] [] arch_cpu_idle+0x10/0x20 [ 282.073957] [] default_idle_call+0x48/0x70 [ 282.079864] [] cpu_startup_entry+0x6d1/0x810 [ 282.085903] [] ? complete+0x18/0x70 [ 282.091349] [] ? call_cpuidle+0xe0/0xe0 [ 282.096961] [] ? schedule+0xab/0x1d0 [ 282.102849] [] rest_init+0x190/0x199 [ 282.108197] [] ? trace_event_define_fields_x86_irq_vector+0x2c/0x2c [ 282.116262] [] start_kernel+0x64a/0x67e [ 282.122839] [] ? thread_stack_cache_init+0xb/0xb [ 282.129244] [] ? early_idt_handler_array+0x120/0x120 [ 282.135976] [] ? early_idt_handler_array+0x120/0x120 [ 282.142730] [] x86_64_start_reservations+0x29/0x2b [ 282.149299] [] x86_64_start_kernel+0x137/0x15a [ 282.155522] Code: 2e 0f 1f 84 00 00 00 00 00 fa c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 fb c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 fb f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f4 c3 0f 1f 40 00 66 [ 282.174529] NMI backtrace for cpu 1 [ 282.178137] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #17 [ 282.184628] task: ffff8801da6f4740 task.stack: ffff8800001d0000 [ 282.190699] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1b0 [ 282.199529] RSP: 0018:ffff8800001d7c88 EFLAGS: 00000046 [ 282.204960] RAX: 0000000000000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 282.212231] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fc300 [ 282.219934] RBP: ffff8800001d7cb8 R08: 0000000000000018 R09: 0000000000000000 [ 282.227175] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246 [ 282.234443] R13: 0000000003000000 R14: ffffffff82e5f2e0 R15: 0000000000000002 [ 282.241718] FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 282.249941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.255805] CR2: 00007f1eb0987000 CR3: 00000000b8cd9000 CR4: 00000000001606b0 [ 282.263075] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.270351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.277596] Stack: [ 282.279738] 0000000000000001 ffffffff82e5f2e0 ffffffff831a6ac0 fffffbfff0634c34 [ 282.287250] 000000000001b6c0 0000000000000008 ffff8800001d7cd8 ffffffff81092bee [ 282.294782] 0000000000000008 ffffffff82924260 ffff8800001d7d30 ffffffff81ab8252 [ 282.302315] Call Trace: [ 282.304872] [] nmi_raise_cpu_backtrace+0x5e/0x80 [ 282.311268] [] nmi_trigger_all_cpu_backtrace.cold+0xa1/0xae [ 282.318619] [] ? print_lock+0xa8/0xab [ 282.324076] [] ? irq_force_complete_move+0x330/0x330 [ 282.330827] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 282.337809] [] watchdog.cold+0xd3/0xee [ 282.343350] [] ? watchdog+0xac/0xa00 [ 282.348693] [] ? reset_hung_task_detector+0x20/0x20 [ 282.355356] [] kthread+0x273/0x310 [ 282.360537] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.367174] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 282.373485] [] ? finish_task_switch+0x1e1/0x660 [ 282.380066] [] ? finish_task_switch+0x1b3/0x660 [ 282.386357] [] ? __schedule+0x7af/0x1ee0 [ 282.392061] [] ? __schedule+0x7a3/0x1ee0 [ 282.397749] [] ? __schedule+0x7af/0x1ee0 [ 282.403507] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.410177] [] ret_from_fork+0x55/0x80 [ 282.415688] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.422354] Code: 00 c3 5f ff 80 e6 10 75 e1 41 c1 e5 18 44 89 2c 25 10 c3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 c3 5f ff <41> f7 c4 00 02 00 00 75 1e 4c 89 e7 57 9d 0f 1f 44 00 00 e8 f1 [ 282.442040] Kernel panic - not syncing: hung_task: blocked tasks [ 282.448163] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #17 [ 282.454635] 0000000000000000 5d14372c33ca8550 ffff8800001d7c60 ffffffff81aad1a1 [ 282.462643] ffff8801d6ce2f80 ffffffff82872120 dffffc0000000000 0000000000000003 [ 282.470652] 00000000003fff9a ffff8800001d7d40 ffffffff813a48c2 0000000041b58ab3 [ 282.478646] Call Trace: [ 282.481207] [] dump_stack+0xc1/0x120 [ 282.486545] [] panic+0x1b9/0x37b [ 282.491628] [] ? add_taint.cold+0x16/0x16 [ 282.497397] [] ? find_next_bit+0x44/0x50 [ 282.503080] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 282.510334] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 282.517579] [] watchdog.cold+0xe4/0xee [ 282.523088] [] ? watchdog+0xac/0xa00 [ 282.528423] [] ? reset_hung_task_detector+0x20/0x20 [ 282.535063] [] kthread+0x273/0x310 [ 282.540227] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.546883] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 282.553179] [] ? finish_task_switch+0x1e1/0x660 [ 282.559474] [] ? finish_task_switch+0x1b3/0x660 [ 282.565785] [] ? __schedule+0x7af/0x1ee0 [ 282.571532] [] ? __schedule+0x7a3/0x1ee0 [ 282.577221] [] ? __schedule+0x7af/0x1ee0 [ 282.582909] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.589553] [] ret_from_fork+0x55/0x80 [ 282.595066] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.602352] Kernel Offset: disabled [ 282.605975] Rebooting in 86400 seconds..