Starting mcstransd: [ 19.530350] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 20.315322] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [ 20.585944] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.509968] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. 2018/02/20 01:16:48 fuzzer started 2018/02/20 01:16:48 dialing manager at 10.128.0.26:40885 2018/02/20 01:16:51 kcov=true, comps=false 2018/02/20 01:16:51 executing program 0: syz_emit_ethernet(0x2a, &(0x7f000082cfd6)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @random="4c70c290b6dc", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @icmp=@address_request={0x11}}}}}, &(0x7f0000adaff4)={0x0, 0x1, [0x0]}) 2018/02/20 01:16:51 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x5, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x0, []}, 0x90) 2018/02/20 01:16:51 executing program 3: 2018/02/20 01:16:51 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000822000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000632ff9)=""/122) 2018/02/20 01:16:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0}) close(r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/02/20 01:16:51 executing program 1: r0 = syz_open_dev$random(&(0x7f0000b4d000)='/dev/random\x00', 0x0, 0x842) readv(r0, &(0x7f000014d000)=[{&(0x7f0000a48000)=""/15, 0xf}], 0x1) 2018/02/20 01:16:51 executing program 6: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000100)="006574010001005f000000006c616265360056") lseek(r1, 0x19, 0x0) getdents(r1, &(0x7f0000000fd0)=""/48, 0x19a) 2018/02/20 01:16:51 executing program 2: r0 = socket$inet(0x10, 0x2, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x10e, 0x2, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x1, 0x250, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], 0x0, &(0x7f0000000080), &(0x7f0000000000)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, @common='nr0\x00', @syzn={0x73, 0x79, 0x7a}, @common='syzkaller1\x00', @syzn={0x73, 0x79, 0x7a}, @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], 0xc0, 0x1f0, 0x220, [@helper={'helper\x00', 0x28, {{0x0, 'sip-20000\x00'}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:crond_exec_t:s0\x00'}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}]}, 0x2c8) [ 30.905997] IPVS: Creating netns size=2552 id=1 [ 30.935735] IPVS: Creating netns size=2552 id=2 [ 31.015156] IPVS: Creating netns size=2552 id=3 [ 31.074931] IPVS: Creating netns size=2552 id=4 [ 31.150395] IPVS: Creating netns size=2552 id=5 [ 31.236917] IPVS: Creating netns size=2552 id=6 [ 31.356999] IPVS: Creating netns size=2552 id=7 [ 31.494365] IPVS: Creating netns size=2552 id=8 [ 32.074999] ip (4193) used greatest stack depth: 24088 bytes left 2018/02/20 01:16:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setsig(r0, 0xa, 0x15) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f0000000ffc)=0x81, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r0, &(0x7f000020e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00002ba000), 0x0, 0x20000008, &(0x7f000022efe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040), 0x4) 2018/02/20 01:16:54 executing program 3: 2018/02/20 01:16:54 executing program 3: 2018/02/20 01:16:54 executing program 3: 2018/02/20 01:16:54 executing program 1: 2018/02/20 01:16:54 executing program 3: 2018/02/20 01:16:54 executing program 1: 2018/02/20 01:16:54 executing program 3: [ 34.311400] audit: type=1400 audit(1519089415.266:5): avc: denied { create } for pid=4943 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 34.337247] audit: type=1400 audit(1519089415.296:6): avc: denied { setopt } for pid=4943 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/20 01:16:55 executing program 0: 2018/02/20 01:16:55 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fsetxattr(r0, &(0x7f0000ac7fe6)=@known='com.apple.system.Security\x00', &(0x7f0000a7a000)="656d3073656c66a673656c696e757800", 0x4, 0x0) 2018/02/20 01:16:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0}) close(r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/02/20 01:16:55 executing program 4: 2018/02/20 01:16:55 executing program 6: 2018/02/20 01:16:55 executing program 2: 2018/02/20 01:16:55 executing program 1: 2018/02/20 01:16:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000057c000)={0x2, 0x78, 0x48, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001140)=0x4000000000008) getpeername$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, ""/4096}, &(0x7f0000000300)=0x1002) 2018/02/20 01:16:55 executing program 6: 2018/02/20 01:16:55 executing program 1: 2018/02/20 01:16:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000097e000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000dfffe0)={@loopback={0x0, 0x1}, 0x400, 0x0, 0x840200000000101}, 0x20) 2018/02/20 01:16:55 executing program 5: 2018/02/20 01:16:55 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x0) 2018/02/20 01:16:55 executing program 1: perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x48, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000a288dc)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f00006dbff8), 0x401) [ 34.432235] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) 2018/02/20 01:16:55 executing program 0: 2018/02/20 01:16:55 executing program 5: r0 = memfd_create(&(0x7f0000b88ff0)="200000000000000031253a000030f10b", 0x2) fcntl$addseals(r0, 0x409, 0x0) 2018/02/20 01:16:55 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000c6eff4)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f00006dadb0)={0x14, 0x3, 0x1000000000000001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f0000db9000)=[{&(0x7f0000520000)=""/4096, 0x1000}], 0x1) 2018/02/20 01:16:55 executing program 3: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800, 0x8}) mq_getsetattr(r0, &(0x7f0000000080)={0x0, 0x40000000000000}, 0x0) 2018/02/20 01:16:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000007000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) connect$inet6(r0, &(0x7f0000012000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)=@generic, 0x80, &(0x7f00000010c0)=[], 0x0, &(0x7f0000001100)=""/115, 0x73}, 0x0) sendmsg(r0, &(0x7f0000001980)={0x0, 0xfffffffffffffdf5, &(0x7f0000000080)=[], 0x111}, 0x0) 2018/02/20 01:16:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000f98000)='net/ip_tables_names\x00') sendfile(r0, r0, &(0x7f0000000000)=0x6, 0x5d) 2018/02/20 01:16:55 executing program 7: 2018/02/20 01:16:55 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000b8f000)='attr/exec\x00') pwritev(r1, &(0x7f0000e0e000)=[{&(0x7f0000000000)="ea60d3e0f8e85e6fe931079f4d76c4520831e70a3c7d8be9b0b83aebbf6ccbdcf44f0dcb59a895987d96fde920726b", 0x2f}], 0x1, 0x0) [ 34.459289] audit: type=1400 audit(1519089415.416:7): avc: denied { write } for pid=4952 comm="syz-executor7" name="map_files" dev="proc" ino=12687 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 34.485459] audit: type=1400 audit(1519089415.456:8): avc: denied { setattr } for pid=4952 comm="syz-executor7" name="map_files" dev="proc" ino=12687 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 2018/02/20 01:16:55 executing program 0: 2018/02/20 01:16:55 executing program 3: 2018/02/20 01:16:55 executing program 7: 2018/02/20 01:16:55 executing program 5: 2018/02/20 01:16:55 executing program 0: 2018/02/20 01:16:55 executing program 5: 2018/02/20 01:16:55 executing program 7: 2018/02/20 01:16:55 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9513, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 2018/02/20 01:16:55 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000b8f000)='attr/exec\x00') pwritev(r1, &(0x7f0000e0e000)=[{&(0x7f0000000000)="ea60d3e0f8e85e6fe931079f4d76c4520831e70a3c7d8be9b0b83aebbf6ccbdcf44f0dcb59a895987d96fde920726b", 0x2f}], 0x1, 0x0) 2018/02/20 01:16:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00004d5000)=0xfffffffffffffbff, 0x4) sendto$inet(r0, &(0x7f0000a92000), 0xfffffffffffffc5d, 0x800000020000001, &(0x7f0000303000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x46) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) writev(r0, &(0x7f0000793fa0)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) [ 34.519339] audit: type=1400 audit(1519089415.476:9): avc: denied { create } for pid=4977 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 34.583865] audit: type=1400 audit(1519089415.546:10): avc: denied { write } for pid=4977 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/20 01:16:55 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00003a0fd8)={@common='lo\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f000008c000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000b24000)="0001000007000000000000000022b8d7004f6f3bcb7d85008d1b4453184465068f06e3ad74cf3a9291029dcd52e23bb743a34e9e86714a651153050000020000008399cac2920d05a6945d0ef4f7bd1a55fc89455653a43fd992eeb7ef56739c191d84b0e2ce9694663cc030253ee6a688bea25290ed00cdf629177b7089b9b83259a6922a8e92b5", 0x88, 0x0, &(0x7f00006fe000)={0x11, 0x80000000800, r1, 0x1, 0x80000000, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) 2018/02/20 01:16:55 executing program 1: syz_emit_ethernet(0x2c, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@random, @current}, {@random, @random="d8815c5dfe90"}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x0]}) 2018/02/20 01:16:55 executing program 3: perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x47, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) close(r0) 2018/02/20 01:16:55 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) 2018/02/20 01:16:55 executing program 2: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0x0) 2018/02/20 01:16:55 executing program 0: 2018/02/20 01:16:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000061f000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00004a1fec)={@multicast2=0xe0000002, @dev={0xac, 0x14}, 0x0, 0x0, []}, 0x10) 2018/02/20 01:16:55 executing program 5: 2018/02/20 01:16:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000007000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) connect$inet6(r0, &(0x7f0000012000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)=@generic, 0xff3c, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0xffe4}], 0x1, &(0x7f0000001100)=""/115, 0x73}, 0x0) sendmsg(r0, &(0x7f0000001980)={0x0, 0xfffffffffffffdf5, &(0x7f0000000080)=[], 0x111}, 0x0) sendmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000013c0)="e0", 0x1}], 0x1}, 0x0) [ 34.584137] audit: type=1400 audit(1519089415.546:11): avc: denied { read } for pid=4977 comm="syz-executor6" path="socket:[12202]" dev="sockfs" ino=12202 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/20 01:16:55 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x20001) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$ax25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000938ff4)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}}, 0xc) write$tun(r0, &(0x7f0000430fda)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @igmp={0x11, 0x0, 0x0, @broadcast=0xffffffff}}}, 0x26) socket$inet_tcp(0x2, 0x1, 0x0) 2018/02/20 01:16:55 executing program 1: 2018/02/20 01:16:55 executing program 2: 2018/02/20 01:16:55 executing program 7: prctl$seccomp(0x16, 0x1, &(0x7f0000692000)={0x0, &(0x7f000098c000)=[]}) 2018/02/20 01:16:55 executing program 2: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) mkdir(&(0x7f0000027000)='./file0\x00', 0xffffffff7ffffffe) creat(&(0x7f000002cff4)='./file0/bus\x00', 0x0) truncate(&(0x7f0000011ff4)='./file0/bus\x00', 0x0) 2018/02/20 01:16:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000001000)='ns/user\x00') r0 = syz_open_procfs(0x0, &(0x7f000040cff9)='ns/mnt\x00') ioctl$VT_RELDISP(r0, 0xb701) 2018/02/20 01:16:55 executing program 3: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002000)="0d576aa5b72ceb3f97738795af87125e", 0x10) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendto(r0, &(0x7f0000004000), 0xfffffffffffffedc, 0x0, 0x0, 0x0) [ 34.695640] audit: type=1326 audit(1519089415.656:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=5033 comm="syz-executor7" exe="/root/syz-executor7" sig=9 arch=c000003e syscall=202 compat=0 ip=0x453da9 code=0x0 2018/02/20 01:16:55 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00003a0fd8)={@common='lo\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f000008c000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000b24000)="0001000007000000000000000022b8d7004f6f3bcb7d85008d1b4453184465068f06e3ad74cf3a9291029dcd52e23bb743a34e9e86714a651153050000020000008399cac2920d05a6945d0ef4f7bd1a55fc89455653a43fd992eeb7ef56739c191d84b0e2ce9694663cc030253ee6a688bea25290ed00cdf629177b7089b9b83259a6922a8e92b5", 0x88, 0x0, &(0x7f00006fe000)={0x11, 0x80000000800, r1, 0x1, 0x80000000, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) 2018/02/20 01:16:55 executing program 0: r0 = memfd_create(&(0x7f0000002ffe)="1f00", 0x0) fallocate(r0, 0x8, 0x0, 0x10001) 2018/02/20 01:16:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00004ce000), 0x0, 0x0, &(0x7f0000e26fe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/20 01:16:55 executing program 2: r0 = gettid() capget(&(0x7f0000514ff8)={0x20080522, r0}, &(0x7f0000eaafe8)) 2018/02/20 01:16:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000992ffb)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000d56000)=@ethtool_modinfo={0x42, 0x0, 0x0, "45f6921cb880199a"}}) 2018/02/20 01:16:55 executing program 1: 2018/02/20 01:16:55 executing program 7: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f00007e3000)='./file0\x00', &(0x7f0000075000)='./control/file0\x00') 2018/02/20 01:16:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000d4eff7)='net/snmp\x00') r1 = syz_open_dev$sndtimer(&(0x7f00006a5ff1)='/dev/snd/timer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/02/20 01:16:55 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002000)={0x0}, &(0x7f0000000ffc)=0xc) r1 = syz_open_procfs(r0, &(0x7f00004a8000)='comm\x00') fchmod(r1, 0x0) 2018/02/20 01:16:55 executing program 0: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000)) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000d1aff6)='./control\x00', 0x7) 2018/02/20 01:16:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr(r0, &(0x7f000077ffef)=@known='security.selinux\x00', &(0x7f0000160ffe)="dc00", 0x2, 0x0) 2018/02/20 01:16:55 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000404feb)='net/ip6_tables_names\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) ftruncate(r0, 0x3d) 2018/02/20 01:16:55 executing program 5: 2018/02/20 01:16:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00003ad000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000011ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff030}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000017fc8)=[{&(0x7f000001aff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000012fa0)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/20 01:16:55 executing program 2: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000a, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000fdbfed)={@loopback={0x0, 0x1}}, 0x14) 2018/02/20 01:16:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000009000)={0x2, 0x9, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0xffffffffffffffff, @rand_addr}, @in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0x70}, 0x1}, 0x0) [ 34.823697] audit: type=1401 audit(1519089415.786:13): op=setxattr invalid_context=DC 2018/02/20 01:16:55 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00003bbff7)='/dev/rtc\x00', 0x800, 0x0) readv(r0, &(0x7f0000021000)=[{&(0x7f0000f8d000)=""/168, 0xa8}], 0x1) 2018/02/20 01:16:55 executing program 0: syz_open_dev$loop(&(0x7f0000009000)='/dev/loop#\x00', 0x0, 0x80082) syz_open_dev$loop(&(0x7f0000020000)='/dev/loop#\x00', 0x0, 0x281) 2018/02/20 01:16:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303a"}) mmap$binder(&(0x7f0000dbd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/02/20 01:16:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000062bfc8)={&(0x7f0000315ff5)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f00000e5ef0)=@getpolicy={0x5c, 0x15, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@loopback={0x0, 0x1}, @in=@loopback=0x7f000001}}, [@policy_type={0xc, 0x10}]}, 0x5c}, 0x1}, 0x0) 2018/02/20 01:16:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000864000)='net/route\x00') 2018/02/20 01:16:55 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000f1aff5)='/dev/hwrng\x00', 0x0, 0x0) readv(r0, &(0x7f000081f000)=[{&(0x7f0000b75000)}, {&(0x7f000012e000)=""/59, 0x3b}], 0x2) 2018/02/20 01:16:55 executing program 2: r0 = socket(0x2000000011, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f000051efb0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}}) 2018/02/20 01:16:55 executing program 5: timer_create(0x2, &(0x7f000099ffa0)={0x0, 0x22, 0x0, @thr={&(0x7f0000fc0f3c), &(0x7f0000fc1000)}}, &(0x7f0000ce0ffc)) clock_gettime(0x0, &(0x7f0000666000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000001fe0)={{}, {0x0, r0+10000000}}, &(0x7f0000001fe0)) timer_gettime(0x0, &(0x7f0000182000)) 2018/02/20 01:16:55 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000471ff8)={0x0}) bind$unix(r0, &(0x7f0000965000)=@abs={0x1}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f000001dff7)='net/unix\x00') sendfile(r1, r1, &(0x7f00004db000), 0x1000000000ff) [ 34.972226] binder: release 5091:5103 transaction 2 in, still active [ 34.978757] binder: send failed reply for transaction 2 to 5091:5112 [ 34.986006] binder: BINDER_SET_CONTEXT_MGR already set [ 34.991704] binder: 5091:5112 ioctl 40046207 0 returned -16 [ 34.999964] binder_alloc: 5091: binder_alloc_buf, no vma [ 35.007647] binder: 5091:5112 transaction failed 29189/-3, size 0-0 line 3128 2018/02/20 01:16:55 executing program 6: r0 = memfd_create(&(0x7f0000485000)="402670726f626b7379721a6e6700", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000af8000)) 2018/02/20 01:16:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/20 01:16:55 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000f57000)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c25ff4)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) epoll_wait(r2, &(0x7f000099a000)=[{}], 0x1, 0x800) recvmmsg(r0, &(0x7f0000525000)=[{{&(0x7f0000df9ff2)=@l2, 0xe, &(0x7f0000f81fe0)=[], 0x0, &(0x7f0000239000)}}], 0x1, 0x0, 0x0) 2018/02/20 01:16:55 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000fd0ff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x5421, &(0x7f0000643ff0)=@generic="53e729004a31040260a942089e00005f") 2018/02/20 01:16:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025bfc8)={&(0x7f0000b9343a)={0x10}, 0xc, &(0x7f00005a1000)={&(0x7f0000f7ffa8)=@ipv4_delroute={0x24, 0x19, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x1, 0x800000000000ff}, [@RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) 2018/02/20 01:16:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x80e, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000002ff8)) 2018/02/20 01:16:55 executing program 7: r0 = memfd_create(&(0x7f0000a08000)=',Z\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) 2018/02/20 01:16:55 executing program 2: r0 = socket(0x18, 0x0, 0x4) recvfrom(r0, &(0x7f0000001f15), 0x0, 0x0, 0x0, 0x0) 2018/02/20 01:16:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000663fe8)=[{r0}], 0x1, 0x299b) ioctl$TCXONC(r0, 0x540a, 0x2) 2018/02/20 01:16:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) dup3(r2, r1, 0x0) [ 35.018035] binder: undelivered TRANSACTION_ERROR: 29189 [ 35.033725] binder: undelivered TRANSACTION_COMPLETE [ 35.053742] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/20 01:16:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000184ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000768fe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) 2018/02/20 01:16:56 executing program 5: mkdir(&(0x7f0000dda000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f0000c5eff4)='./file0/bus\x00', 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f00005bf02f)="e80e5e3ed6326fe63143386aee13fa4498a285b11bebfc3e2f0df5e9b7f1bbf299c371d1c8524203f78fb953e33ed644790827cc5d8cb090021419305c8c240527b323d452bfdf9520db8cd0e8f0cee63220a24cd2ef83394259338437568ada2051a8580d64e07291f154dd25ba2869e25b0c6cf3e193183c06ed369e860f3b8513c9110ba6f5e4c94670e2199333335110808ae6bef45501d33b8ff92683ae3f8c68f11c1bbf9425c045d9b66acb640e104f830281f34acb55c20cabcd2bd4cf71c71ed78edfafb757149f5eb4b94ac572d9556ece8a8381e9f670798ce22fea050d9396877d83a7e77fdcb884d75ed0c9ce4809234bc25f47c202de08937ba50dbf64e57f24bf2890f12fb0a71ad249ac477de1a72e51486bf06222999494a50a9129c01afadfa4d1e9b275264352369e1931cbff288bbb024c66b973801da3e4a46ba668233a05ea203d8ed9cecd761cc7305e9717f3d787fc3acf60c9a2cf46b815a2cd49df3a09edc0e19b768df06678eb9a2fe6c9cc6f4509bbb22554df84bd1973f8d3c862995ab18034acb8785fae3867f1fdd9a1a65dc32f7f2c411b3905f6c526204264e80cbd8b1d48e06def68c6c5c6ea14b9b64246cb5b2435b571ee249174a0dca0dac04e728c8f37d1a12a7350f8a897489b37e9d3c60386ef3f1c528974e34cc5106f5b3849efe4825a4fa70cd9fb75ab0b45b00e5029771412c6454a4ecd0baa6d60830613b227af3bb77e0a3d654d407774a7f7d3c3e380b8a6f8418a5a5504232684e13e17f68306f1adda24634fa32f21f899ca8f03a157eaa7334615f86e9183210305d039eb40d545fac5ac63ef12dd7dc63a3db7dcd55b9d62cd7d483610f1eb4dc9a4624554f8d4009e0c79ed2ff2a5b19d8e10506237413ddc32dd5886c2284792f69f5c06501ba62488d6dc7bcab73ea439d36b9b3301f747861eb52e7645b4fe665e61be86d7e5495f629b976d431316f869311547762aa6387c060d936701f3c40791c1dee205258ddde38d105ed482c8144b9ab2361945dd72ddb87e507d07f954966fc903107dc9e41f019f6881bbf72e71eb4c6cc3cc6d2135f1e4fb1ad9b438876496c9c63d9998616c7a0c5131e8819977598e0deaed1da55516d25cb11e88555a0d15c7cb0edb3ffa949f11c36d01fb9199883458a80b36230cd97c702960cc6fa0f3cb7f08753f3093612a97817547aaa5bbc51f85d4f3e1418d25e10c876323523c45911ec6b327721384e25e496dd77db8eefb7eb04bd6e268cbf5f0c5ae6a9303406568eee0a5ed7c9cc8b09a830171f783c95f8dc0fcb859900d71b0f033cc91980e3a5ea5b16846a67da135a51ad328a52f29996c89574edf8aa3e8cfaa00e2a5116f05eb4b174e1a2648a48b4fdb52dad9edef773e3f9093813a4074f9d31a27171f7f183b7baed0a949148d9b658f2930c02dcc2cbe2b86ca9c651dd9b11232aee127d77737b0573f0f69aa7689283e6719397321baed98e068ba23c4eaaa87b58235b9dc3fea985f370dc872ac9789aa17d4ecae55cce800a8f05c4b38a66130cd53167cd31b2aa6e73e7293b5ea42988bb3e3a0b49975dcbf30b1fe29b0f92b6cc64c67883961e8c48c3f0a1c94c79fe723eadaab53529bd8e1505e8558dd524b21e06dcf7b335bf8911c9812c749565dd78063c7f1826c029bdb59476cbc2f2c4fa09d7a7f93cec44e854bd02f5f1657716e979cb6104ae0e7899deed4c6b1a816c95f2e09ec6d9af44b07eb3ebfd8efc88cae745ee110c5a5aadc6a817663afc96b41f57d35cd54a6dca8fbca61ad35d4ad8e812fac3608abd214724ad989935cc5396fd2427e33ce7b6550dcb86b2ae8346adf39a41c46a12b88588f4dcb44fcc784808f6f60f5b454d5fa03ef642760ee372dbcf192b4cd7d9275bd15538e37d58c17d788e02e19dba9b7fc72cf510344fb77edf5dede6fa3095c7b27db31ec205dac05cb5d5e58a80b8d369ae748121c623ae4ea80711ae74d1fe45fd67b261d7f7abd17c09dd472eae7bab0855d8244ed474bec5cbbc501bc8cde4652cc9c0714c4f18803e2494680150d8b42041f30e12b9f619f552872d88815c07ddc0b99e0ab21986e934dbe0756ddd04562f4edacc7faffdc33495ede0b2ca327c7cf6e792b112791ab49a61cd3ee4ad5f170c6249a868aa67d45d9a83a93d99c0bdb8516d527ad4d6badc5a63c17790223ffe51d884f5ce56703787c47f6ed287016334cb9f960ecc0d2f006da32683abbbb3a06151311aaa169ae28f0211b0fe4409b6ae5fd653ba64268e2229fedd5805b6394b79da224464cf38dbceaaa54f6297a7caccf2c054888e52c319ae34115a50edb4a45e63417811c92b615ec1d1d01ef5b4cd344218d3a8d94e5a88e77aa67d4734c63bdbfb0fa20ab9048ea7ed974fe170871f1d49b2e59b6a7ce76d106b03dbcae3acd473494486f300e38f8085087b81b8d88262c95328e6c50b5a7a1c7e64534febc7150e3ab435f33301b664261bc28fb56f86d4fe170a5558300fe4732356aad7e292d86a2ee88901d7624910e40a42d544ef50390aad799a9310e797222cce5718d35f54bb37b03c82218ed5e142774bdf7d9b20b64ba07cedcf1fcc4a8ab9b0a26916aaf5a875195180426fd30844ae065507d12a9f352ce50e391cf1d9a91336de67956da2dfc2881314695d366fa1bd5f2c1b144697455d53c2b935ab650eb73a673113dbb7e66283edc298e6abaa6dce86c561796a57a147d0b391c173e65f9ee0bcd0251fafc1cae80f3ec4bd443ebd98ca3d7a803183c811d707605fe50d0433e38b532cfaaa8bd260de9c179972b9fdca0d5a5cbf6810a24b3c29d050df94113e35172cc2631cdbe4660024bbe5a45c2ce92fd0fb88e9daa30a808145811bd6f0c6e4feba84f9d065bf726f3b160727306b8fb14d2229654723ae005cca97767dc19c09817863da75a1d43655405dbf3fca1904b482a160599260e2650f040389016905e2e95ab5f76f0b9d22db66f38878248d1268688ca4b97b60ef15eab2a264c3ccdeeda2c69a8a44548df9f1bab1f92f2a7fe4c8017631d22c3e083d96b3ef93a579dc6eb6f774d54163cab469679ec7023b922e479e33ea17b64484696954738b1b45e5419761e1a7d790c3b56edefa23fd07c781114ab8aedf98a38cd195fc253570f65fc9a1c4532039859296a69501510bf4dcb01582fa8adafacbc6f56eb91e81383f980ff95e2269b33cea8c8fa0143d198a23292c3bf0b6f54656e5edbe88d91029bc23919fae9f3401725b43dc5bdae00dbc20931f43ae5f5bae336c7340cdb731d0d8dc7682cf93fa9f64969763fb84d23ec8e1b00d6a4e986375bd5c066ae6d78c2c121641ebe4022a9366c145f2dddde95e19d38fb5a3c12270f1266484b17970befc40b5de6613cd5fee5e5fefd539e8b748ab6d61494675f9a96bbc91739de2c8a91e0bbba35e4cff90008348ec3b01822e85f3cce16f5f0013e063cbe49e1a9678981e1b5c6583f8899070298f0233611b04eeb5f8591311bebcac002c30de57ba6a5c3ec4ce91183d41828933af856506c30a5a90c6b6625e8b73d4f9c77596c13d584961c03d306fc65a5661fbc15973efbdb15a600d1f9c2f61ef1518c8f7d6707abe4fcf83d1762f3240faf7211c83769ca2c3178cc5883e76e7ad50ec48483c91fdac295908802bdb516ff26e0ab93d5616e0d22fb681590a70d779484efd9da5a1c67b719356a8d4e03599d20cad67a76dc2d4d91f8221464fd3439d5bcd44e996ece42ca2224e489dea08ad1ebf591b4d44d3e559596fd6b3ca4aebccfd9dfbcb1089108efe5dee6e01dd2053bb0e2d0fcf2c6fb60572f9ee0ee39a0d2f51515ab079d7739d2658dc588947860767adf8de0eca57c5588e12e0198c87b5a90ed060ba52424c2ea164119262a083f86299c588ae24bda71de1303b246ab66a9dbec3f8658d749a2d921c87fb5fbe8781ecb2cb14b0cb7b1c3fa7f95da2f15b707176c94f07338937396036538196b6192e3b21557006ab903890b4a8f56fa3a0224569ce21d6d94a6bb46d666f42c3179cc9732ec7b1aead038108026768db970953cb5eaf56a586140b0a92748aee44aaf82d616f51df81f519f1cd73ac4bf6db7f35301cebedfc264d8f64306b00e348e29b179925630bffcfcad189853218af47e4387bf0bd6b5b95f913cd8cfb083a5383fecddb04c8d5359df9327a0cfa0111e9bfc6775b65d7cbe841b3e0af17051be2ead8aa01bb0a55c93833d6cd46041c9b5eb8a61548535cd8d0c533230a5826d6a3fbadf8b01501f45b0bce8fa405e812784e3540f00a1c41cd52e0aa378f1e1308796dd8560230372e63f7cca2de4236c3ae414ba49b31db5a78b7d00178da89eafdc3ef99536a3e9e1debf2e4ddecdc3992c18924d3e82629afb87a0e40e8fbcc2cad5abe34233a0437acab1c795cf6b38e8e0c050eff52618657169cf16960eaeadec8849b2cd3f268e505ac946a7bfed78e94208cfc4b1e40ea48fec9f30c0ab85b52c5a97729c7bc6d0cfe9f724b93a7b4f0c47bf23dd58ac6eb58f971679ac9c4fb3e42c4de48015b22acceb5d5274576bff4fe7f179aa69a116abce5eb0941f7bd9b391b59340ef8da35f3e948951d16f29fa502f2d7f78ce21a8ae801e4b8188cd912ae4895ce632eee2ad13765a2598c56c1e222581619fb9f632247c88db12f2efefdb64eecb441f4f7f8f596a5afb6a4be8b77bd35cb95c570ed0c8e8906df6e94b4ce531011b6b062232cdc271c6553aaf5dcef12065e8cba569b00f749ef6a650f0c90e01a5628c2394e7940c6daecdabc2e89c2cf2e87cf4471a77f099a4bad085d0552d1c79803bab8681e740601e4d18055992f0e23e7b5cfebf5732eccb14195307df48a6b3423c13dd18195ce8a16ed991a8f7499b8029103554662045573f4a53e665de4acc4c006f16f4b0f394d6742c2ffafdd94ec1734792508b50ef04c8b46e290ece9e21607e52fe3e3e8b88f89af0fec13288f00d1ba7022e26f7fe48c6d29a591527f207dd57583d86f1bb20622c96b5941bed00540a712619c5feb64c21303fca15ce21e3fe92706fad73f6a2f9bcb4700dae3ce30a75ab0fa77c3ab83f301a9e20c4bb534ae5f22bb6d859386432c0ee748c7287a1fdc7a55af50d8ada1ba5464ccded9363839e976a6cc6f718a41d546d541b7d7192cdd1d01da82818f620cca06082ff8baae358d7862d5bd32d340729d95a62c0e0d597c236f9e418c03dc00b3ff52bd7ea7f2a4e77b44f8e7f2db542fffedeb2c4fc9f1b42b2535b59bfdf6bec62f91614b70f3a7d57afc44f35f5e0dafbae5c9f3e62c0d4fc037c89c443810eaeeb31d4585a15a0e9d758fd15aeff5ecce5347f59d6b02804bf6bc0e8b956422a896bb449ee49d456f434882af02ba19ea42c0a3c6ad4d53b36155762a1f16d6257c00ac10d0b3fa81fed38db0e29c563405ed745012441b4e6309d1bf30497ff0d52346ffc3fd5fbb38760d9c81e3f0f3ddb17761c0f40353f6b52156e01eae69820676ae6c87f766f2a9411d86bc856c8a656728e73cf5b913c38f39de3c6bf7579dcddb6894cf105e1754e2e9d6949126c81932ea4bdb72f763f345639f69bcb28161b84f490271a49018ce32abc4e6ac9ce91d01b1885b5f4f10b50492a930b4b6191a76204dede4543d6b327866352", 0xfd1, 0x0, &(0x7f0000adcff0)) 2018/02/20 01:16:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000fc5fc0)=[{&(0x7f0000540000)=""/4096, 0x1000}], 0x1, 0x0) 2018/02/20 01:16:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) dup3(r1, r0, 0x0) 2018/02/20 01:16:56 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000619ff3)='/dev/snd/seq\x00', 0x0, 0x80001) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b11000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000e50000)={0x400000000000015}) 2018/02/20 01:16:56 executing program 0: mkdir(&(0x7f0000676000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000002c000)) creat(&(0x7f0000419ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f000002c000)='./file0/bus\x00', 0x0, 0x0) preadv(r0, &(0x7f00005b4ff0)=[{&(0x7f000043b000)=""/4096, 0x1000}], 0x1, 0x0) truncate(&(0x7f00003f1ff4)='./file0/bus\x00', 0x2002) 2018/02/20 01:16:56 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000003000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x400020000000000}) 2018/02/20 01:16:56 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000c0d000), 0x4) 2018/02/20 01:16:56 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r1, 0x0, 0x4) write$fuse(r1, &(0x7f00009ddfd8)={0x28, 0x0, 0x0, @fuse_notify_delete_out}, 0x28) close(r0) 2018/02/20 01:16:56 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000002ffc)=0x10, 0x4) bind$netlink(r0, &(0x7f0000003ff4)={0x10, 0x0, 0xffffffffffffffff, 0x10}, 0xc) 2018/02/20 01:16:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00008f1000)={&(0x7f0000383ff4)={0x10}, 0xc, &(0x7f00003bbff0)={&(0x7f0000210000)=@getspdinfo={0x14, 0x25, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}, 0x14}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 0: mkdir(&(0x7f0000676000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000002c000)) creat(&(0x7f0000419ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f000002c000)='./file0/bus\x00', 0x0, 0x0) preadv(r0, &(0x7f00005b4ff0)=[{&(0x7f000043b000)=""/4096, 0x1000}], 0x1, 0x0) truncate(&(0x7f00003f1ff4)='./file0/bus\x00', 0x2002) 2018/02/20 01:16:56 executing program 4: mkdir(&(0x7f0000030ffa)='./bus\x00', 0x0) r0 = open(&(0x7f000001dff4)='./bus/file0\x00', 0x880c0, 0x0) mmap(&(0x7f0000004000/0xc000)=nil, 0xc000, 0x3, 0x12, r0, 0x0) 2018/02/20 01:16:56 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) dup3(r1, r0, 0x0) 2018/02/20 01:16:56 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000b5f000)="0705040000", 0x5) 2018/02/20 01:16:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000184ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000768fe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) 2018/02/20 01:16:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000009ffb)='comm\x00') mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000002000)=[{&(0x7f0000011000)='`', 0x1}], 0x1) 2018/02/20 01:16:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000012f70)=[], 0x0, &(0x7f0000031fd8)=[{0x28, 0x29, 0x39, "270202010000007eadf2480cc5e47c6852"}], 0x28}, 0x0) 2018/02/20 01:16:56 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/02/20 01:16:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 5: r0 = gettid() pipe(&(0x7f0000d8bff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e12ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000bdbff4)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) fcntl$setown(r2, 0x8, r0) fcntl$setsig(r5, 0xa, 0x12) r6 = gettid() tkill(r6, 0x100000000000016) 2018/02/20 01:16:56 executing program 6: r0 = epoll_create1(0x0) unshare(0x40600) signalfd4(r0, &(0x7f0000057000), 0x8, 0x0) 2018/02/20 01:16:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000751000)='/dev/binder#\x00', 0xffffffffffffffff, 0x804) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x1b, 0x0, &(0x7f0000c9ffbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000387000)=[@flat, @fd={0x66642a85, 0x0, 0xffffffffffffffff}], &(0x7f000000afd0)=[]}}], 0x4e, 0x0, &(0x7f0000009000)}) 2018/02/20 01:16:56 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9cff4)={0x0}, &(0x7f000044c000)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000d76000)='attr/current\x00') write$selinux_context(r1, &(0x7f0000c93fd9)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27) 2018/02/20 01:16:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, &(0x7f0000664fc0)) 2018/02/20 01:16:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x0, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000012f70)=[], 0x0, &(0x7f0000031fd8)=[{0x28, 0x29, 0x39, "270202010000007eadf2480cc5e47c6852"}], 0x28}, 0x0) 2018/02/20 01:16:56 executing program 0: pipe(&(0x7f0000eb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0xfff, 0x2) 2018/02/20 01:16:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00001e0ff7)='pagemap\x00') lseek(r0, 0xfffffffffffffffe, 0x0) read(r0, &(0x7f0000957000)=""/221, 0xdd) 2018/02/20 01:16:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000be3ff0)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) [ 35.360270] binder: 5211:5212 transaction failed 29189/-22, size 40-8 line 3005 2018/02/20 01:16:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x0, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 6: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000f79000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000f72fc8)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000747000)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000012f70)=[], 0x0, &(0x7f0000031fd8)=[{0x28, 0x29, 0x39, "270202010000007eadf2480cc5e47c6852"}], 0x28}, 0x0) 2018/02/20 01:16:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000)={0x2, &(0x7f0000002000)=[{0x64}, {0x6}]}, 0x10) sendto$unix(r1, &(0x7f000000ff57), 0x0, 0x0, &(0x7f0000013ff8)=@abs, 0x8) 2018/02/20 01:16:56 executing program 7: select(0x40, &(0x7f00008be000), &(0x7f000030c000), &(0x7f0000678000), &(0x7f0000f2f000)={0x0, 0x7530}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/02/20 01:16:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f00006b8ff0)={&(0x7f000058e000)={0x14, 0x22, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000ee9000)=0x40000000000800, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000011ffd)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000092000)=0x814e1, 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eec000)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x40002106) 2018/02/20 01:16:56 executing program 5: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f0000bd1ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@mark={0x0, 0x15}]}, 0x4c}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000f66000)={0x10, 0x0, 0xffffffffffffffff, 0x9}, 0xc) 2018/02/20 01:16:56 executing program 2: r0 = open(&(0x7f00001a8ff8)='./file0\x00', 0x10442, 0x0) ioctl$TIOCLINUX2(r0, 0x40305828, &(0x7f0000e1b000)={0x2, 0x2}) 2018/02/20 01:16:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000366000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5eff5)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clone(0x40000000, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) shutdown(r0, 0x1) 2018/02/20 01:16:56 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000feef6f), 0x0, 0x20000000, &(0x7f0000fd3000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000583ffc)) readv(r0, &(0x7f000031cfc0)=[{&(0x7f0000344000)=""/217, 0xd9}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) recvmmsg(r0, &(0x7f0000eb7f88)=[{{&(0x7f000011b000)=@nl=@proc, 0xc, &(0x7f0000b46fb0)=[{&(0x7f0000907000)=""/4096, 0x1000}], 0x1, &(0x7f00005fc000)=""/90, 0x5a}}], 0x1, 0x0, &(0x7f000062d000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() tkill(r1, 0x15) 2018/02/20 01:16:56 executing program 4: 2018/02/20 01:16:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x0, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000012f70)=[], 0x0, &(0x7f0000031fd8)=[{0x28, 0x29, 0x39, "270202010000007eadf2480cc5e47c6852"}], 0x28}, 0x0) 2018/02/20 01:16:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000892f94)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270195d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000865ff5)='projid_map\x00') sendfile(r1, r0, &(0x7f0000317ff8)=0xf, 0x400000ff) 2018/02/20 01:16:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000529fee)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000102fc0)=[{&(0x7f00005f1f20)=""/224, 0xe0}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 2018/02/20 01:16:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00002cd000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5402, &(0x7f0000657000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x7f}) 2018/02/20 01:16:56 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000012f70)=[], 0x0, &(0x7f0000031fd8)=[{0x28, 0x29, 0x39, "270202010000007eadf2480cc5e47c6852"}], 0x28}, 0x0) 2018/02/20 01:16:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e63000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x1, 0x14, &(0x7f0000e64ff7)="d7fdaf62070179890fddd5a45d3f32e5", 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00006f5000), &(0x7f00007dbffc)=0x10) 2018/02/20 01:16:56 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00008b5fb0)={{0xff, 0x80009}}) 2018/02/20 01:16:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f000090e000)=@newsa={0x140, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@empty, @in=@multicast2=0xe0000002}, {@in6=@dev={0xfe, 0x80}, 0xffffffffffffffff, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@tfcpad={0x8, 0x16}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1}, 0x0) 2018/02/20 01:16:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003f4ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x200000) close(r1) 2018/02/20 01:16:56 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000012f70)=[], 0x0, &(0x7f0000031fd8)=[{0x28, 0x29, 0x39, "270202010000007eadf2480cc5e47c6852"}], 0x28}, 0x0) 2018/02/20 01:16:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) [ 35.556995] IPVS: Creating netns size=2552 id=9 [ 35.558477] sock: sock_set_timeout: `syz-executor7' (pid 5281) tries to set negative timeout [ 35.561214] sock: sock_set_timeout: `syz-executor7' (pid 5281) tries to set negative timeout [ 35.638838] pktgen: kernel_thread() failed for cpu 0 [ 35.644544] pktgen: Cannot create thread for cpu 0 (-4) [ 35.649932] pktgen: kernel_thread() failed for cpu 1 [ 35.655822] pktgen: Cannot create thread for cpu 1 (-4) [ 35.662150] pktgen: Initialization failed for all threads [ 35.713497] kasan: CONFIG_KASAN_INLINE enabled [ 35.717916] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 35.730995] Dumping ftrace buffer: [ 35.734591] (ftrace buffer empty) [ 35.738270] Modules linked in: [ 35.741546] CPU: 0 PID: 5290 Comm: syz-executor2 Not tainted 4.4.115-g55a366596 #14 [ 35.749315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.758647] task: ffff8801c6cce000 task.stack: ffff8800ab830000 [ 35.764673] RIP: 0010:[] [] nfqnl_nf_hook_drop+0x190/0x3a0 [ 35.773608] RSP: 0018:ffff8800ab837998 EFLAGS: 00010202 [ 35.779025] RAX: 0000000000000007 RBX: 0000000000000003 RCX: ffffffff82f9d209 [ 35.786264] RDX: 0000000000010000 RSI: ffffc90004802000 RDI: ffffffff84418180 [ 35.793513] RBP: ffff8800ab8379c8 R08: 0000000000000000 R09: 0000000000000000 [ 35.800755] R10: ffffffff83844400 R11: 1ffff10015706efe R12: dffffc0000000000 [ 35.808002] R13: ffff8801c8810ae8 R14: 0000000000000038 R15: 00000000000000b8 [ 35.815244] FS: 00007feac1e5c700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 35.823442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.829294] CR2: 000000002064effb CR3: 00000001d22b4000 CR4: 0000000000160670 [ 35.836535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.843774] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.851014] Stack: [ 35.853131] ffffffff82f9d180 ffffffff83cc6720 ffff8801c4c7da00 ffff8801c8810ae8 [ 35.861110] ffff8801c8810ae8 ffff8801c8810ae0 ffff8800ab8379f8 ffffffff82f950ce [ 35.869076] ffffffff82f95010 ffffffff843e37e0 ffff8801c4c7e4b8 dffffc0000000000 [ 35.877051] Call Trace: [ 35.879613] [] ? nfqnl_nf_hook_drop+0x100/0x3a0 [ 35.885904] [] nf_queue_nf_hook_drop+0xbe/0x1d0 [ 35.892192] [] ? nf_queue_entry_release_refs+0x150/0x150 [ 35.899264] [] nf_unregister_net_hook+0x2ab/0x350 [ 35.905728] [] netfilter_net_exit+0x40/0xb0 [ 35.911671] [] ? nf_unregister_net_hooks+0x60/0x60 [ 35.918221] [] ops_exit_list.isra.4+0xae/0x150 [ 35.924436] [] setup_net+0x221/0x3e0 [ 35.929770] [] ? ops_init+0x3a0/0x3a0 [ 35.935190] [] ? kasan_slab_alloc+0x12/0x20 [ 35.941132] [] copy_net_ns+0xd2/0x190 [ 35.946555] [] create_new_namespaces+0x2f6/0x610 [ 35.952935] [] copy_namespaces+0x291/0x320 [ 35.958796] [] ? copy_namespaces+0x3e/0x320 [ 35.964738] [] copy_process+0x1d98/0x6120 [ 35.970518] [] ? trace_hardirqs_on+0xd/0x10 [ 35.976459] [] ? __cleanup_sighand+0x50/0x50 [ 35.982485] [] _do_fork+0x151/0xe00 [ 35.987731] [] ? fork_idle+0x270/0x270 [ 35.993833] [] ? do_futex+0x15d0/0x15d0 [ 35.999434] [] ? security_file_ioctl+0x89/0xb0 [ 36.005646] [] SyS_clone+0x37/0x50 [ 36.010809] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 36.017353] Code: df 83 01 00 0f 84 d8 00 00 00 4d 8d 77 38 49 bc 00 00 00 00 00 fc ff df 49 81 c7 b8 00 00 00 e8 67 3b 3c fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 0f 85 f4 01 00 00 49 8b 1e e8 7d 8c 2e fe 48 85 [ 36.043930] RIP [] nfqnl_nf_hook_drop+0x190/0x3a0 [ 36.050510] RSP [ 36.055033] ---[ end trace 54243c873bc696a2 ]--- [ 36.059783] Kernel panic - not syncing: Fatal exception [ 36.065543] Dumping ftrace buffer: [ 36.069057] (ftrace buffer empty) [ 36.072736] Kernel Offset: disabled [ 36.076332] Rebooting in 86400 seconds..