[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.009268] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.830023] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 21.290069] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 22.245529] random: sshd: uninitialized urandom read (32 bytes read, 121 bits of entropy available) [ 25.899596] random: nonblocking pool is initialized Warning: Permanently added 'ci-android-44-kasan-gce-4,10.128.0.21' (ECDSA) to the list of known hosts. 2017/12/19 14:05:08 fuzzer started 2017/12/19 14:05:08 dialing manager at 10.128.0.26:35187 2017/12/19 14:05:10 kcov=true, comps=false 2017/12/19 14:05:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 2017/12/19 14:05:11 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x4000000000080003, 0x0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000001000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_map={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}) 2017/12/19 14:05:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f00001a2000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000022000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000a82000-0x1)="", 0x0, 0x20020000003, &(0x7f0000d13000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = dup2(r0, r0) sendmsg$netlink(r1, &(0x7f00005ea000-0x1c)={&(0x7f0000621000-0xc)={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000f28000)=[{&(0x7f0000898000)=[{0x1001, 0x0, 0x0, 0x0, 0x0, "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"}], 0x1001}], 0x1, &(0x7f0000dd7000-0x94)=[], 0x0, 0x0}, 0x0) 2017/12/19 14:05:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000d13000)={&(0x7f0000030000-0x60)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2017/12/19 14:05:11 executing program 5: clone(0x0, &(0x7f0000de9000)="", &(0x7f000019c000-0x4)=0x0, &(0x7f00008be000)=0x0, &(0x7f00008b5000-0x4)="") munlock(&(0x7f0000b6f000/0x2000)=nil, 0x2000) 2017/12/19 14:05:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x96c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20000, &(0x7f000052d000-0x97)="", &(0x7f0000c93000-0x4)=0x0, &(0x7f0000e9b000)=0x0, &(0x7f0000471000-0x83)="") 2017/12/19 14:05:11 executing program 1: 2017/12/19 14:05:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet(r0, &(0x7f000048e000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000e85000-0x4)=0x0, &(0x7f0000220000-0x4)=0x4) [ 31.982554] IPVS: Creating netns size=2552 id=1 [ 32.205383] IPVS: Creating netns size=2552 id=2 [ 32.231594] IPVS: Creating netns size=2552 id=3 [ 32.258914] IPVS: Creating netns size=2552 id=4 [ 32.299241] IPVS: Creating netns size=2552 id=5 [ 32.330402] IPVS: Creating netns size=2552 id=6 [ 32.366368] IPVS: Creating netns size=2552 id=7 [ 32.393238] IPVS: Creating netns size=2552 id=8 2017/12/19 14:05:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) r1 = dup(r0) bind$llc(r1, &(0x7f00002e4000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) 2017/12/19 14:05:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r0) 2017/12/19 14:05:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000cb7000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="01000000611a", [], {{0x40000000000800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x0, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}, 0x0) 2017/12/19 14:05:12 executing program 1: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000013000-0x4)=0x90) 2017/12/19 14:05:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x800, 0x0) preadv(r0, &(0x7f0000001000-0x8)=[{&(0x7f0000000000)=""/145, 0x91}], 0x1, 0x0) 2017/12/19 14:05:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000ded000)={0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/19 14:05:12 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f000001e000-0x3)=0x0) 2017/12/19 14:05:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cd5000-0x4)=0x0, 0x4) sendto$inet(r0, &(0x7f0000583000-0x1)="", 0x0, 0x20000801, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000766000)="6f6ff7e49ca14f656f631fa866a019b6d7164403202870020ff8b6eef3a4ba6ec8f4f17c23f06700e66cfafad3b8a6b53d896fba0a449b13df76a447fdf8c23413f211eefd2b3a74e844c3228f7b568fec690ef6fa67a613793ffeae8fe0203e35beb682f45c9748b0c89e44a3401a7032b4fad25ec043a9fc4b1dd4fce402fdc8df245c553cd374bff9fbc40719e7f57c18393c72f40164c9dde0fced423bdad865a866ffc97dc0e70b9631bd40a8798ec3bc8415072b82ecb3808c925c415422b280d1e77fce200d0a05558bd0f0bf2aab16b97b804e2310e99ae5421c8a4d7b0d781d431237cdf6afdc2edb6a393d3ec6466e0ff29b64ee8042b711e3d84fccbffc244633b21b6baadb8509f3c144ac6c1ced24658704d9eca2304e7dd412518892d30e1605d77f0fbd6c8f08f77ec98390423d5a62f210a92de85f44c91934a5fb8a0c0f2fafae1e537057511a30bf6b2305e2dfbb936154898dc61af238e9bbf8d8a5a6b141f2ce4c2aa09a960c2906f81f435f9d4b8f025e6a3bcb285dedaf2a95d354abe6ac86b7ecfed6fc646d2193a8a4cc02f7e66bd825eba5c7533d22a6e9656d1fb8bd76bcd32b995e07392cd5396276dd4a867f8589b13e10f648837f70d0f12bc85f90fe6fc7c3e0e340d4f099e3c6475ff22d5c8175a4c95ce565b1ab25f95c9fe3f33e084a10d2ab21b28497db062b192caf19f012a8b1444c062b293416540cc28682cd5805247e0164e242543d02699b5901a1227be116c4dbe4e9382af95e58e9df3f2f3e743c05d8c3467655791396645f90c370c4d51bc769ebf3d58d5b9297f1db58d2855347c5e221105da708193ee04b5fbc928a9fb650c0a632452af680fdef2de0d0ca4f2ebe190116a9c03aa8bd3fce5a095f001b821b", 0x284, 0x0, &(0x7f0000f4b000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/19 14:05:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x20000, &(0x7f000052d000-0x97)="", &(0x7f0000c93000-0x4)=0x0, &(0x7f0000e9b000)=0x0, &(0x7f0000471000-0x83)="") 2017/12/19 14:05:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) bind$inet6(r0, &(0x7f00001c1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/19 14:05:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000a18000)=0x0, 0x40000000, &(0x7f0000e97000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/19 14:05:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000568000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000fc2000)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="0200000004000000f004008000e9bc22", @ifru_settings={0x10001, 0x0, @fr=&(0x7f0000cb8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 2017/12/19 14:05:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x3, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000002000-0x4)=0x90) 2017/12/19 14:05:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x10) write(r0, &(0x7f0000f8e000-0x25)="240000001d00252f120000000000005b061c9a1300b492060000000000030005e10004d3", 0x24) [ 32.582464] audit: type=1400 audit(1513692312.832:5): avc: denied { create } for pid=3644 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 32.612775] audit: type=1400 audit(1513692312.862:6): avc: denied { write } for pid=3644 comm="syz-executor6" path="socket:[10427]" dev="sockfs" ino=10427 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2017/12/19 14:05:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00006fd000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000ab000-0xb0)={{0x5710481, 0x0}, 'port1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x84e, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/19 14:05:12 executing program 5: mmap(&(0x7f0000000000/0xa69000)=nil, 0xa69000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x7fffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r0, 0x68400000009) r1 = accept4(r0, 0x0, &(0x7f00004a9000-0x4)=0x0, 0x0) mmap(&(0x7f0000a6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000854000-0x8)=""/8, &(0x7f0000a6b000-0x4)=0x8) 2017/12/19 14:05:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00003df000)="1f0000000701ffd600000100000000ff000000000100000000000007000000", 0x1f) 2017/12/19 14:05:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000fc4000)="1f00000001021fea070000ffffbcf601000081001dffffffffffffff00df18", 0x1f) 2017/12/19 14:05:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x96c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000000) 2017/12/19 14:05:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f00001cb000-0x38)=[{&(0x7f000011c000)=""/81, 0x51}, {&(0x7f0000400000)=""/141, 0x8d}], 0x2, &(0x7f00002a2000-0x18)=[{&(0x7f0000050000)=""/176, 0xb0}], 0x1, 0x0) 2017/12/19 14:05:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00006b1000-0x7)='ns/pid\x00') 2017/12/19 14:05:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000729000)='/dev/loop#\x00', 0x0, 0x1) r1 = memfd_create(&(0x7f0000df0000-0x1b)='/dev/vga_arbiter\x00', 0x0) pwritev(r1, &(0x7f00000a4000-0x10)=[{&(0x7f0000873000-0x8)="81", 0x1}], 0x1, 0x0) sendfile(r0, r1, &(0x7f00003d2000-0x8)=0x0, 0xfffffffe) [ 32.711947] audit: type=1400 audit(1513692312.962:7): avc: denied { create } for pid=3658 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2017/12/19 14:05:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x5382, &(0x7f0000001000)="") 2017/12/19 14:05:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000d93000)=""/222, &(0x7f0000d0e000-0x4)=0xde) 2017/12/19 14:05:13 executing program 2: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000eec000-0x62)="", 0x0) 2017/12/19 14:05:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00006cb000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000602000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/19 14:05:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000f88000-0x8)={0x0}, 0x8) 2017/12/19 14:05:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000ea4000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000024000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0x0, 0x0, 0x8, 0x0, ""}}}, 0x26) 2017/12/19 14:05:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000e87000-0x4)=0x40000000000003fe, 0x4) bind$inet6(r0, &(0x7f0000895000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f0000d46000)="", 0x0, 0xfffffefffffffffe, &(0x7f0000e42000-0x8)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = dup(r0) setsockopt$sock_str(r0, 0x1, 0x19, &(0x7f0000f54000)='\x00', 0x1) write(r1, &(0x7f0000cdd000)="ef", 0x1) [ 32.748546] audit: type=1400 audit(1513692313.002:8): avc: denied { write } for pid=3660 comm="syz-executor0" path="socket:[9788]" dev="sockfs" ino=9788 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 32.761265] netlink: 11 bytes leftover after parsing attributes in process `syz-executor4'. 2017/12/19 14:05:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000003000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000001000-0xb3)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x8, 0x0, &(0x7f000000d000-0x98)=[@release={0x40046306, 0x0}], 0x0, 0x0, &(0x7f0000009000-0xc9)=""}) 2017/12/19 14:05:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x1, 0xffffffffffffffff, 0x0) [ 32.809390] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 32.812293] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 32.816478] device gre0 entered promiscuous mode [ 32.849338] audit: type=1400 audit(1513692313.102:9): avc: denied { set_context_mgr } for pid=3706 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 32.889017] binder: BINDER_SET_CONTEXT_MGR already set [ 32.896119] binder: 3706:3717 ioctl 40046207 0 returned -16 2017/12/19 14:05:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000fdd000-0x1)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000907000-0x28)={@generic="00090000008000001607067d08b1bd5c", @ifru_mtu=0x6}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000994000)={0x0, 0x8, [@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="6a0e0e340c24", @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}]}) 2017/12/19 14:05:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000d13000)={&(0x7f0000030000-0x60)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2017/12/19 14:05:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000272000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x100000806, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x80000000000001, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @rand_addr=0xfffffffffffffffe, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @local={0xac, 0x14, 0x0, 0xaa}}}}}, 0x0) 2017/12/19 14:05:13 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000)='[-\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2012, r0, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x4) mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0) 2017/12/19 14:05:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000eda000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000020000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2017/12/19 14:05:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00002a0000)='/dev/loop#\x00', 0x4, 0x44042) preadv(r0, &(0x7f0000168000-0x10)=[{&(0x7f0000a09000-0x58)=""/88, 0x58}], 0x1, 0x0) 2017/12/19 14:05:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000a95000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) getgid() 2017/12/19 14:05:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000003000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000001000-0xb3)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x8, 0x0, &(0x7f000000d000-0x98)=[@release={0x40046306, 0x0}], 0x0, 0x0, &(0x7f0000009000-0xc9)=""}) 2017/12/19 14:05:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000001000-0x5)='eth0\x00', 0x800, 0x0, &(0x7f0000b62000-0x20)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedreceive(r0, &(0x7f00006a3000-0x8f)=""/12, 0xc, 0x0, &(0x7f0000faa000-0x10)={0x77359400, 0x0}) 2017/12/19 14:05:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000c82000)='/dev/vga_arbiter\x00', 0x4002, 0x0) [ 32.906001] binder: 3706:3712 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 32.913053] binder: 3706:3717 Release 1 refcount change on invalid ref 0 ret -22 2017/12/19 14:05:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000014d000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000a6000)=0x0) [ 32.968600] audit: type=1326 audit(1513692313.222:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3728 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x452a09 code=0x7ffc0000 2017/12/19 14:05:13 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x2283, &(0x7f000000e000-0x1)="a6") write$evdev(r0, &(0x7f0000002000-0x24)=[{{0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x2710}, 0x0, 0x0, 0x0}], 0x30) 2017/12/19 14:05:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000272000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x100000806, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x80000000000001, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @rand_addr=0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @local={0xac, 0x14, 0x0, 0xaa}}}}}, 0x0) 2017/12/19 14:05:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000827000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) r1 = dup(r0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000041000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, @remote={0xac, 0x14, 0x0, 0xbb}}, 0xc) 2017/12/19 14:05:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000001000-0x5)='eth0\x00', 0x0, 0x0, &(0x7f0000213000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedreceive(r0, &(0x7f00006a3000-0x8f)=""/12, 0xc, 0x20000101, &(0x7f0000faa000-0x10)={0x77359400, 0x0}) 2017/12/19 14:05:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000f81000)="1f00000010003308000000000000000e1e0500020a00010006c716e804dcff", 0x1f) 2017/12/19 14:05:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_fuse_mount(&(0x7f0000026000-0x8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x800000) 2017/12/19 14:05:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00009c0000)=[{&(0x7f00006b9000)="2900000018001900013d0000000000060200001615de1005000000040d000a00000000000010000008", 0x29}], 0x1) 2017/12/19 14:05:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000d13000)={&(0x7f0000030000-0x60)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 33.030028] audit: type=1326 audit(1513692313.282:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3728 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x452a09 code=0x7ffc0000 2017/12/19 14:05:13 executing program 3: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000)='\x00', 0x2) fcntl$addseals(r0, 0x409, 0x8) 2017/12/19 14:05:13 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() fcntl$notify(r0, 0x0, 0x101) memfd_create(&(0x7f0000001000)='/selinux/mls\x00', 0x0) 2017/12/19 14:05:13 executing program 1: mmap(&(0x7f0000000000/0xf72000)=nil, 0xf72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet(r0, &(0x7f0000f61000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet6(r0, &(0x7f0000f63000)="", 0x0, 0x8884, &(0x7f0000f6c000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000f6c000)=0x0, 0x4) 2017/12/19 14:05:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1e, &(0x7f0000d6a000)=""/4096, &(0x7f0000000000)=0x1000) 2017/12/19 14:05:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000b9000)=""/4096, &(0x7f0000000000)=0x1000) 2017/12/19 14:05:13 executing program 3: mmap(&(0x7f0000000000/0x57000)=nil, 0x57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x0, 0x0, &(0x7f000004b000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) select(0x40, &(0x7f0000039000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000012000)={0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000032000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000004c000)={0x77359400, 0x0}) 2017/12/19 14:05:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000001000-0x5)='eth0\x00', 0x42, 0x0, &(0x7f0000213000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedsend(r0, &(0x7f000050b000-0xdc)="", 0x0, 0x0, 0x0) 2017/12/19 14:05:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000e87000-0x4)=0x40000000000003fe, 0x4) bind$inet6(r0, &(0x7f0000895000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f0000d46000)="", 0x0, 0xfffffefffffffffe, &(0x7f0000e42000-0x8)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) [ 33.076452] kasan: CONFIG_KASAN_INLINE enabled [ 33.084666] kasan: GPF could be caused by NULL-ptr deref or user memory access[ 33.098888] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor0/3772 [ 33.107427] caller is __this_cpu_preempt_check+0x1c/0x20 [ 33.112866] CPU: 1 PID: 3772 Comm: syz-executor0 Not tainted 4.4.106-g1700518 #9 2017/12/19 14:05:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000f76000)={0x0, 0x0, 0x0, 0x0, 0x0}) execveat(0xffffffffffffffff, &(0x7f0000ff7000)='./file0\x00', &(0x7f000038d000-0x10)=[], &(0x7f000034c000-0x8)=[], 0x0) 2017/12/19 14:05:13 executing program 3: 2017/12/19 14:05:13 executing program 3: 2017/12/19 14:05:13 executing program 1: [ 33.120378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.129713] 0000000000000000 49ee566845d738ea ffff8801c674f6c8 ffffffff81d02f7d [ 33.137728] 0000000000000001 ffffffff839fd4a0 ffffffff83d093a0 ffff8801c6740000 [ 33.145733] 0000000000000003 ffff8801c674f708 ffffffff81d62904 ffff8801c674f720 [ 33.153727] Call Trace: [ 33.156300] [] dump_stack+0xc1/0x124 [ 33.161647] [] check_preemption_disabled+0x1d4/0x200 [ 33.164642] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 33.164647] Dumping ftrace buffer: [ 33.164650] (ftrace buffer empty) [ 33.164654] Modules linked in: [ 33.164661] CPU: 0 PID: 3762 Comm: syz-executor5 Not tainted 4.4.106-g1700518 #9 [ 33.164664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.164668] task: ffff8800bbaf17c0 task.stack: ffff8800bb198000 [ 33.164682] RIP: 0010:[] [] netlink_unicast+0x1c0/0x760 [ 33.164686] RSP: 0018:ffff8800bb19f7f8 EFLAGS: 00010212 [ 33.164690] RAX: dffffc0000000048 RBX: dffffc0000000000 RCX: ffffffff82f84109 [ 33.164694] RDX: 000000000000041a RSI: ffffc900013ad000 RDI: ffff8801d3b88718 [ 33.164698] RBP: ffff8800bb19f8b8 R08: ffffed00159e4807 R09: ffffed00159e4807 [ 33.164701] R10: 0000000000000005 R11: ffffed00159e4806 R12: 0000000000000000 [ 33.164705] R13: dffffc0000000000 R14: ffff8801d3b88640 R15: dffffc0000000006 [ 33.164711] FS: 00007fb548578700(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 33.164715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.164719] CR2: 000000000071c000 CR3: 00000001cedd6000 CR4: 00000000001406f0 [ 33.164726] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.164729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.164731] Stack: [ 33.164738] 1ffff10017633f06 ffff8800acf24000 0000000000000240 0000000000000030 [ 33.164746] 1ffff10017633f06 dffffc0000000048 0000000000000015 0000000041b58ab3 [ 33.164754] ffffffff83ffd4e6 ffffffff82f83f50 ffff8800bb19f870 0000000000000000 [ 33.164755] Call Trace: [ 33.164763] [] ? netlink_attachskb+0x6c0/0x6c0 [ 33.164769] [] ? __nlmsg_put+0x14c/0x1b0 [ 33.164776] [] netlink_ack+0x231/0x4b0 [ 33.164784] [] nfnetlink_rcv+0xaa2/0x1070 [ 33.164791] [] netlink_unicast+0x522/0x760 [ 33.164797] [] ? netlink_unicast+0x44f/0x760 [ 33.164804] [] ? netlink_attachskb+0x6c0/0x6c0 [ 33.164811] [] netlink_sendmsg+0x8e8/0xc50 [ 33.164818] [] ? netlink_unicast+0x760/0x760 [ 33.164827] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 33.164835] [] ? security_socket_sendmsg+0x89/0xb0 [ 33.164841] [] ? netlink_unicast+0x760/0x760 [ 33.164849] [] sock_sendmsg+0xca/0x110 [ 33.164855] [] sock_write_iter+0x226/0x3b0 [ 33.164862] [] ? avc_has_perm_noaudit+0x460/0x460 [ 33.164868] [] ? sock_sendmsg+0x110/0x110 [ 33.164875] [] ? iov_iter_init+0xaf/0x1d0 [ 33.164884] [] __vfs_write+0x33c/0x450 [ 33.164891] [] ? __vfs_read+0x440/0x440 [ 33.164898] [] ? selinux_file_permission+0x348/0x460 [ 33.164905] [] ? rw_verify_area+0x100/0x2f0 [ 33.164912] [] vfs_write+0x18a/0x530 [ 33.164919] [] SyS_write+0xd9/0x1b0 [ 33.164926] [] ? SyS_read+0x1b0/0x1b0 [ 33.164933] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 33.164942] [] entry_SYSCALL_64_fastpath+0x16/0x76 [ 33.165041] Code: d7 88 3d fe 48 8d 55 98 4c 89 e1 4c 89 f6 48 89 df e8 95 f7 ff ff 83 f8 01 0f 85 e1 03 00 00 e8 b7 88 3d fe 48 8b 85 68 ff ff ff <0f> b6 00 84 c0 74 08 3c 03 0f 8e 63 05 00 00 41 80 3f 00 41 0f [ 33.165049] RIP [] netlink_unicast+0x1c0/0x760 [ 33.165051] RSP [ 33.165113] ---[ end trace bc23b23ed0aa6d5e ]--- [ 33.165117] Kernel panic - not syncing: Fatal exception [ 33.513647] [] __this_cpu_preempt_check+0x1c/0x20 [ 33.520111] [] ipcomp_init_state+0x19a/0x970 [ 33.526139] [] ipcomp4_init_state+0xb0/0x7d0 [ 33.532166] [] __xfrm_init_state+0x3e7/0xb30 [ 33.538192] [] xfrm_init_state+0x1a/0x20 [ 33.543873] [] pfkey_add+0x1fbb/0x3490 [ 33.549385] [] ? pfkey_delete+0x370/0x370 [ 33.555149] [] ? pfkey_add+0x3490/0x3490 [ 33.560830] [] ? __skb_clone+0x24a/0x7d0 [ 33.566511] [] ? pfkey_delete+0x370/0x370 [ 33.572277] [] pfkey_process+0x61e/0x730 [ 33.577957] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 33.584766] [] pfkey_sendmsg+0x3a9/0x760 [ 33.590444] [] ? pfkey_spdget+0x820/0x820 [ 33.596210] [] sock_sendmsg+0xca/0x110 [ 33.601712] [] ___sys_sendmsg+0x6c1/0x7c0 [ 33.607479] [] ? copy_msghdr_from_user+0x550/0x550 [ 33.614030] [] ? do_futex+0x3e3/0x1670 [ 33.619537] [] ? __fget+0x20b/0x3b0 [ 33.624780] [] ? __fget+0x232/0x3b0 [ 33.630025] [] ? __fget+0x47/0x3b0 [ 33.635181] [] ? __fget_light+0xa1/0x1e0 [ 33.640858] [] ? __fdget+0x18/0x20 [ 33.646017] [] __sys_sendmsg+0xd3/0x190 [ 33.651611] [] ? SyS_shutdown+0x1b0/0x1b0 [ 33.657375] [] ? SyS_futex+0x210/0x2c0 [ 33.662879] [] ? fd_install+0x4d/0x60 [ 33.668296] [] ? move_addr_to_kernel+0x50/0x50 [ 33.674497] [] SyS_sendmsg+0x2d/0x50 [ 33.679833] [] entry_SYSCALL_64_fastpath+0x16/0x76 [ 33.686809] Dumping ftrace buffer: [ 33.690321] (ftrace buffer empty) [ 33.693999] Kernel Offset: disabled [ 33.697588] Rebooting in 86400 seconds..