[....] Starting enhanced syslogd: rsyslogd[ 11.731351] audit: type=1400 audit(1520556167.278:4): avc: denied { syslog } for pid=3635 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts. 2018/03/09 00:42:54 fuzzer started 2018/03/09 00:42:54 dialing manager at 10.128.0.26:46025 2018/03/09 00:42:59 kcov=true, comps=false 2018/03/09 00:43:00 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000b85000)={0x0, 0x989680}, &(0x7f0000443000)) r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x4, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) socket$inet_icmp(0x2, 0x2, 0x1) tkill(r0, 0x14) clone(0x0, &(0x7f0000000080), &(0x7f0000001880), &(0x7f00000018c0), &(0x7f00000000c0)) sched_getparam(0x0, &(0x7f0000000000)) tkill(r0, 0x15) 2018/03/09 00:43:00 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x3, 0x4) 2018/03/09 00:43:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000c06c9120000000000d6776a237dbfc659dea976f3791a712b000000"], 0x20}, 0x1}, 0x0) 2018/03/09 00:43:00 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 2018/03/09 00:43:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x5}, 0xc) 2018/03/09 00:43:00 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)="fd", 0x1}], 0x1, &(0x7f00000010c0)}}, {{&(0x7f0000002840)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002e80)}}], 0x2, 0x0) 2018/03/09 00:43:00 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 2018/03/09 00:43:00 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000b85000)={0x0, 0x989680}, &(0x7f0000443000)) r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)) timer_settime(0x0, 0x4, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) tkill(r0, 0x14) clone(0x0, &(0x7f0000000080), &(0x7f0000001880), &(0x7f00000018c0), &(0x7f00000000c0)) sched_getparam(0x0, &(0x7f0000000000)) tkill(r0, 0x15) syzkaller login: [ 25.077892] audit: type=1400 audit(1520556180.628:5): avc: denied { sys_admin } for pid=3842 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 25.112766] IPVS: Creating netns size=2536 id=1 [ 25.126487] audit: type=1400 audit(1520556180.678:6): avc: denied { net_admin } for pid=3844 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 25.172915] IPVS: Creating netns size=2536 id=2 [ 25.212503] IPVS: Creating netns size=2536 id=3 [ 25.250015] IPVS: Creating netns size=2536 id=4 [ 25.288985] IPVS: Creating netns size=2536 id=5 [ 25.336536] IPVS: Creating netns size=2536 id=6 [ 25.395082] IPVS: Creating netns size=2536 id=7 [ 25.460225] IPVS: Creating netns size=2536 id=8 [ 27.486247] audit: type=1400 audit(1520556183.038:7): avc: denied { sys_chroot } for pid=3844 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 27.794547] audit: type=1400 audit(1520556183.338:8): avc: denied { create } for pid=5147 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/03/09 00:43:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='autofs\x00', 0x0, &(0x7f0000000340)) 2018/03/09 00:43:03 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0xfdf2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) [ 27.827734] audit: type=1400 audit(1520556183.378:9): avc: denied { write } for pid=5148 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/03/09 00:43:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'lo\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b}}) 2018/03/09 00:43:03 executing program 7: r0 = perf_event_open(&(0x7f0000cccf88)={0x2, 0x78, 0xe12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/03/09 00:43:03 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) close(r0) 2018/03/09 00:43:03 executing program 1: mkdir(&(0x7f0000ac6000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000cd3000)='ramfs\x00', 0x1, &(0x7f000056a0e2)) mount(&(0x7f0000802ff8)='./file0\x00', &(0x7f0000b16000)='./file0\x00', &(0x7f0000905000)='devtmpfs\x00', 0x85030, &(0x7f0000e99f87)) 2018/03/09 00:43:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000f84000), 0xffffffffffffff91, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/03/09 00:43:03 executing program 7: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') [ 27.895765] audit: type=1400 audit(1520556183.448:10): avc: denied { dac_override } for pid=3854 comm="syz-executor4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 27.919569] audit: type=1400 audit(1520556183.448:11): avc: denied { net_raw } for pid=5193 comm="syz-executor6" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/09 00:43:03 executing program 1: mkdir(&(0x7f0000ac6000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000cd3000)='ramfs\x00', 0x1, &(0x7f000056a0e2)) mount(&(0x7f0000802ff8)='./file0\x00', &(0x7f0000b16000)='./file0\x00', &(0x7f0000905000)='devtmpfs\x00', 0x85030, &(0x7f0000e99f87)) 2018/03/09 00:43:03 executing program 2: socketpair(0x10, 0x3, 0x0, &(0x7f0000000140)) 2018/03/09 00:43:03 executing program 7: r0 = socket$inet6_sctp(0xa, 0x4000000000001, 0x84) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/03/09 00:43:03 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)) 2018/03/09 00:43:03 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) 2018/03/09 00:43:03 executing program 4: mkdir(&(0x7f0000109282)='./file0\x00', 0x0) r0 = creat(&(0x7f00000ec000)='./file0/bus\x00', 0x0) ftruncate(r0, 0x1000) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) 2018/03/09 00:43:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x1af) 2018/03/09 00:43:03 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000b85000)={0x0, 0x989680}, &(0x7f0000443000)) r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000180)) timer_settime(0x0, 0x4, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) tkill(r0, 0x14) clone(0x0, &(0x7f0000000080), &(0x7f0000001880), &(0x7f00000018c0), &(0x7f00000000c0)) sched_getparam(0x0, &(0x7f0000000000)) tkill(r0, 0x15) 2018/03/09 00:43:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback=0x7f000001}, {0x304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @rand_addr}, "00080000001429f865e6fa188f020409"}) 2018/03/09 00:43:03 executing program 1: syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x0) 2018/03/09 00:43:03 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '**\x00'}) 2018/03/09 00:43:03 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) tkill(r0, 0x15) 2018/03/09 00:43:03 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 2018/03/09 00:43:03 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a63fff), 0x0, 0x20020004, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000140)=0xfffffffffffffffc, 0xffc8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000100fa4)="80", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) 2018/03/09 00:43:03 executing program 2: mmap(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/03/09 00:43:03 executing program 5: r0 = socket$inet(0x2, 0x805, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) listen(r0, 0x40000800000004) connect$inet(r0, &(0x7f0000f7e000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/03/09 00:43:03 executing program 6: unshare(0x40600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000300)="df", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000003c0)=0x62, 0x4) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000003bc0), 0xe4, &(0x7f0000003c00)=""/69, 0x45}}, {{&(0x7f0000003c80)=@nfc, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/119, 0x77}], 0x0, &(0x7f0000003e00)=""/158, 0x9e}}], 0x2, 0x0, 0x0) 2018/03/09 00:43:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x400080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/8, 0x8) 2018/03/09 00:43:03 executing program 0: syz_emit_ethernet(0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8004000000000000000000000000aafe8000000000000000000000000000aa4e204620", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 2018/03/09 00:43:03 executing program 4: perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() 2018/03/09 00:43:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000586000)="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", 0x7f8, 0x4c080, &(0x7f00005fa000)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000a86ffc)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/03/09 00:43:03 executing program 4: mmap(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) mmap(&(0x7f0000ad4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000057c000)={0x2, 0x78, 0x48, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000ad4000)=""/27) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000ad2000), &(0x7f0000ad3ffd)=0x4) 2018/03/09 00:43:03 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000a75000)) 2018/03/09 00:43:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x14, 0x3, 0x6, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/03/09 00:43:03 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getresuid(&(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300)) 2018/03/09 00:43:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000013db4)={0x20, 0x20, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, @fd}]}, 0x20}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x26, &(0x7f00000004c0), 0x0, &(0x7f0000000540)=""/226, 0xe2}, 0x0) getsockname(r0, &(0x7f0000000180)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x4030582a, &(0x7f00000000c0)={'lo\x00', r2}) 2018/03/09 00:43:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") syncfs(r0) setrlimit(0xb, &(0x7f00003e3000)) [ 28.266655] ------------[ cut here ]------------ [ 28.271479] WARNING: CPU: 1 PID: 5287 at net/core/dev.c:2466 skb_warn_bad_offload+0x2af/0x390 [ 28.280154] lo: caps=(0x000000a2803b7c69, 0x0000000000000000) len=2102 data_len=2040 gso_size=1992 gso_type=2 ip_summed=0 [ 28.291243] Kernel panic - not syncing: panic_on_warn set ... [ 28.291243] [ 28.298599] CPU: 1 PID: 5287 Comm: syz-executor0 Not tainted 4.9.86-g00db063 #52 [ 28.306118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.315455] ffff8801c1ccef60 ffffffff81d956f9 ffffffff83a480c0 ffff8801c1ccf038 [ 28.323452] ffffffff83ee3400 ffffffff82f3634f 0000000000000009 ffff8801c1ccf028 [ 28.331423] ffffffff8142f531 0000000041b58ab3 ffffffff8418b470 ffffffff8142f375 [ 28.339414] Call Trace: [ 28.341978] [] dump_stack+0xc1/0x128 [ 28.347314] [] ? skb_warn_bad_offload+0x2af/0x390 [ 28.353778] [] panic+0x1bc/0x3a8 [ 28.358764] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 28.366963] [] ? vprintk_emit+0x3ad/0x750 [ 28.372730] [] ? __warn+0x1a9/0x1e0 [ 28.377979] [] ? skb_warn_bad_offload+0x2af/0x390 [ 28.384438] [] __warn+0x1c4/0x1e0 [ 28.389509] [] warn_slowpath_fmt+0xc4/0x110 [ 28.395448] [] ? __warn+0x1e0/0x1e0 [ 28.400696] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 28.407592] [] ? ___ratelimit+0x53/0x460 [ 28.413274] [] skb_warn_bad_offload+0x2af/0x390 [ 28.419562] [] __skb_gso_segment+0x541/0x680 [ 28.425588] [] validate_xmit_skb+0x44e/0x980 [ 28.431618] [] ? check_preemption_disabled+0x3b/0x200 [ 28.438426] [] ? check_preemption_disabled+0x3b/0x200 [ 28.445235] [] __dev_queue_xmit+0xb2c/0x20a0 [ 28.451262] [] ? __dev_queue_xmit+0x1e2/0x20a0 [ 28.457461] [] ? netdev_pick_tx+0x300/0x300 [ 28.463403] [] ? memcpy+0x45/0x50 [ 28.468474] [] dev_queue_xmit+0x17/0x20 [ 28.474069] [] neigh_resolve_output+0x469/0x770 [ 28.480358] [] ? ip6_finish_output2+0x930/0x1d20 [ 28.486735] [] ? eth_mac_addr+0x1a0/0x1a0 [ 28.492503] [] ip6_finish_output2+0x930/0x1d20 [ 28.498701] [] ? ip6_finish_output2+0x175/0x1d20 [ 28.505078] [] ? ip6_sk_dst_lookup_flow+0x590/0x590 [ 28.511716] [] ? check_preemption_disabled+0x3b/0x200 [ 28.518523] [] ? ip6_mtu+0x209/0x340 [ 28.523857] [] ip6_finish_output+0x2e6/0x750 [ 28.529881] [] ip6_output+0x1f3/0x6a0 [ 28.535298] [] ? ip6_output+0x40c/0x6a0 [ 28.540891] [] ? ip6_finish_output+0x750/0x750 [ 28.547091] [] ? ip6_fragment+0x3390/0x3390 [ 28.553032] [] ip6_local_out+0x95/0x170 [ 28.558629] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 28.564743] [] ip6_send_skb+0xa1/0x340 [ 28.570248] [] udp_v6_send_skb+0x301/0xeb0 [ 28.576104] [] udp_v6_push_pending_frames+0x22f/0x340 [ 28.582911] [] ? udpv6_destroy_sock+0xd0/0xd0 [ 28.589026] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 28.595141] [] udpv6_sendmsg+0x1f38/0x2540 [ 28.600994] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 28.607106] [] ? udp_v6_rehash+0xa0/0xa0 [ 28.612788] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 28.619771] [] ? sock_has_perm+0x1c2/0x3e0 [ 28.625623] [] ? sock_has_perm+0x292/0x3e0 [ 28.631478] [] ? sock_has_perm+0x9f/0x3e0 [ 28.637244] [] ? selinux_file_send_sigiotask+0x310/0x310 [ 28.644313] [] ? check_preemption_disabled+0x3b/0x200 [ 28.651126] [] ? inet_sendmsg+0x201/0x4c0 [ 28.656894] [] inet_sendmsg+0x2bc/0x4c0 [ 28.662485] [] ? inet_sendmsg+0x73/0x4c0 [ 28.668165] [] ? inet_recvmsg+0x4c0/0x4c0 [ 28.673935] [] sock_sendmsg+0xca/0x110 [ 28.679442] [] SYSC_sendto+0x2c8/0x340 [ 28.684950] [] ? SYSC_connect+0x310/0x310 [ 28.690716] [] ? __might_fault+0xe4/0x1d0 [ 28.696481] [] ? udp_lib_setsockopt+0x17a/0x560 [ 28.702771] [] ? SyS_futex+0x22e/0x2d0 [ 28.708279] [] ? do_futex+0x15c0/0x15c0 [ 28.713871] [] ? move_addr_to_kernel+0x50/0x50 [ 28.720070] [] SyS_sendto+0x40/0x50 [ 28.725318] [] ? SyS_getpeername+0x30/0x30 [ 28.731174] [] do_syscall_64+0x1a4/0x490 [ 28.736858] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 28.744301] Dumping ftrace buffer: [ 28.747851] (ftrace buffer empty) [ 28.751533] Kernel Offset: disabled [ 28.755137] Rebooting in 86400 seconds..