Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 14.211987] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.210369] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available) [ 18.477412] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available) [ 19.414455] random: sshd: uninitialized urandom read (32 bytes read, 118 bits of entropy available) Warning: Permanently added 'ci-android-44-kasan-gce-4,10.128.0.50' (ECDSA) to the list of known hosts. [ 24.830020] random: sshd: uninitialized urandom read (32 bytes read, 124 bits of entropy available) 2017/12/19 14:26:30 fuzzer started 2017/12/19 14:26:30 dialing manager at 10.128.0.26:35187 [ 25.400543] random: nonblocking pool is initialized 2017/12/19 14:26:33 kcov=true, comps=false 2017/12/19 14:26:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000bc5000)={0x3, [0x23, 0x80000001, 0x4]}, &(0x7f000064b000-0x4)=0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000fbe000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000aba000-0x10)={0x2, &(0x7f000015c000)=[{0x20, 0x0, 0x0, 0xfffffefffffff000}, {0x100000006, 0x200000, 0x3, 0x2}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x100000000000000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) connect$inet(0xffffffffffffffff, &(0x7f0000561000)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) dup2(r2, r3) munlockall() ioprio_set$uid(0x0, 0x0, 0xffffffffffffffcd) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000237000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x100}) 2017/12/19 14:26:34 executing program 2: mmap(&(0x7f0000000000/0xd53000)=nil, 0xd53000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000d53000)='ns\x00') mkdirat(r1, &(0x7f00002e5000-0x8)='./file0\x00', 0x0) 2017/12/19 14:26:34 executing program 7: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x200000000002) read(r0, &(0x7f000040a000-0x18)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000296000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xfffffffffffffffc) 2017/12/19 14:26:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000001000-0xd0)={0xfffffffffffffd86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/19 14:26:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000b7a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_fuseblk_mount(&(0x7f00007f0000-0x8)='./file0\x00', &(0x7f00006c1000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000782000-0x28)=[{r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x2, &(0x7f0000291000-0x10)={0x0, 0x0}, &(0x7f00000dc000-0x8)={0x0}, 0x8) 2017/12/19 14:26:34 executing program 4: mmap(&(0x7f0000000000/0x908000)=nil, 0x908000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000901000-0x38)={0x0, 0x0, &(0x7f0000900000)={&(0x7f0000900000)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, []}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2017/12/19 14:26:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000ebd000-0x2)="") r0 = creat(&(0x7f00004c2000-0xc)='./file0/bus\x00', 0x0) lseek(r0, 0x0, 0x2) 2017/12/19 14:26:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000d0a000-0x80)="ff01000000000000000000000000000101000000", 0x14) [ 29.199820] IPVS: Creating netns size=2552 id=1 [ 29.420211] IPVS: Creating netns size=2552 id=2 [ 29.462351] IPVS: Creating netns size=2552 id=3 2017/12/19 14:26:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000049e000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000708000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000c38000)={0x20000000, 0x15, 0x2, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/19 14:26:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000f2000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00002ea000-0xbc)={0x99, 0x0, 'client0\x00', 0x0, "a39b4193498bbb4f", "bc6bb0ea74e2c3a07a82f1370ed859573704bd627f8f78d44c73863bfc02cb3e", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/19 14:26:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000e56000)={{{@in6=@loopback={0x0, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000d68000)=0xe8) mlock(&(0x7f0000cd2000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000d6a000-0x10)=[{&(0x7f00001a0000-0x1)='2', 0x1}], 0x1) 2017/12/19 14:26:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000d52000-0xe8)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) r1 = socket(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000e8c000)=0x0, 0x4) write(r1, &(0x7f0000639000)="020baf010200000000067bbc8e1d4048", 0x10) write(r1, &(0x7f0000001000-0x10)="0212a1250200000009e5000000000900", 0x10) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f000075a000-0x4)=0xffffffffffffffc2, 0x4) recvfrom$inet(r1, &(0x7f0000b5c000)=""/0, 0x0, 0x0, &(0x7f0000fcb000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 29.490706] IPVS: Creating netns size=2552 id=4 2017/12/19 14:26:35 executing program 2: mmap(&(0x7f0000003000/0xf95000)=nil, 0xf95000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000f95000-0x26)="26000000130047f10701c1b00ef900000700000000ffffdf09ef18ffff000700000014006e35", 0x26) 2017/12/19 14:26:35 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00004ec000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000fcf000)="18000000020001000000be8c5eff8c88a20000f1010300ec0000000006000e640002b933d898055bf74852bb6a8807567e59dba67e194700550400000067a1e2010067fc2163e000000000000004001f00000000000000c88ebbff060100000b01000000b121ec1474d722f542000700ec008bc5cfb7ebe7ec7ee87cccbcf6ba00b300024f0298e9e9f55606aa0110000004000000ccfad791a2ffe3c5632c1adb8a335bd8b2d17fff361b571068393d33b5affa00041ad0b4c2c23eef679567", 0xc0) 2017/12/19 14:26:35 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00004ec000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) [ 29.542373] PF_BRIDGE: RTM_SETLINK with unknown ifindex [ 29.543592] IPVS: Creating netns size=2552 id=5 [ 29.560927] PF_BRIDGE: RTM_SETLINK with unknown ifindex [ 29.567089] binder: 3587:3588 ioctl 40046205 ffffffffa223e81f returned -22 [ 29.593545] binder: 3598:3599 ioctl 40046205 ffffffffa223e81f returned -22 [ 29.608458] IPVS: Creating netns size=2552 id=6 [ 29.658693] IPVS: Creating netns size=2552 id=7 [ 29.701193] IPVS: Creating netns size=2552 id=8 [ 29.799414] mmap: syz-executor7 (3620) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2017/12/19 14:26:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000002000-0x3c)={0x0, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) 2017/12/19 14:26:35 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000004000/0x1000)=nil) remap_file_pages(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2017/12/19 14:26:35 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f0000006000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, &(0x7f0000005000-0x4)=0x58) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x10) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x10) 2017/12/19 14:26:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000096000)=[{&(0x7f00000ad000)="580000001400192300a14b80040d8c560a0600000000e076000543d8d8fe580000004eca7f64643e8900050028635a0004fbf5100002000000000000001c04ed5dfffff5000022000d0001000100080000ec6b0f536e06ce", 0x58}], 0x1) 2017/12/19 14:26:35 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00004ec000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000367000)="2600000024004348a5edff0001000000000000040100000000000200f1ffffffffff03c76e35", 0x26) 2017/12/19 14:26:35 executing program 1: mmap(&(0x7f0000000000/0xf9c000)=nil, 0xf9c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) syz_fuse_mount(&(0x7f0000274000-0xa)='./control\x00', 0x0, 0x0, 0x0, 0x0, 0x2000) 2017/12/19 14:26:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00008e8000)=@generic={0x0, 0x6, 0x6}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='E', 0x1) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000001000-0x28)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="00000000000002000003ffffff15e30000000000000005000449faf5238f7e23"}) 2017/12/19 14:26:35 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00004ec000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00009e3000-0x4)=0x0, 0x4) 2017/12/19 14:26:35 executing program 7: mmap(&(0x7f0000000000/0xff9000)=nil, 0xff9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000009000)=0x909, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f000000c000)=0x0, &(0x7f0000b51000)=0x4) [ 29.956781] binder: 3627:3628 ioctl 40046205 ffffffffa223e81f returned -22 [ 29.964465] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. [ 29.985507] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. 2017/12/19 14:26:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000099d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f000045c000-0x8)={0x0, 0x0, 0x0, 0x0}) 2017/12/19 14:26:35 executing program 7: r0 = eventfd2(0x0, 0x0) close(r0) 2017/12/19 14:26:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0xa) r1 = syz_open_dev$tun(&(0x7f0000b6b000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000fb2000-0x28)={@generic="c3ad8f354bd8492db006e05da054a324", @ifru_names=@common='tunl0\x00'}) 2017/12/19 14:26:35 executing program 6: waitid(0x0, 0x0, 0x0, 0x4000, &(0x7f000048d000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/19 14:26:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000fb8000-0xd)='/dev/snd/seq\x00', 0x0, 0x100000000008a001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000c7b000-0x8c)={0x0, 0x0, 0x0, "e365c3d232d12448c27f0905cebdbd09c0a763e204c2a32152615df55d05092d000000000000001f7eb802407bd891842608790b637ae5edf9d8b2ad232fc9dd", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(r0, &(0x7f000004f000)=[{0x0, 0xdd3, 0x0, 0x0, @tick=0x9, {0x0, 0x0}, {0x0, 0x0}, @connect={{0x0, 0x0}, {0x0, 0x0}}}], 0x30) clock_gettime(0x0, &(0x7f0000114000)={0x0, 0x0}) write$sndseq(r0, &(0x7f000003f000)=[{0x0, 0xfff, 0x0, 0x0, @time={r1, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @raw8={"24e03d703af79838fdb9610c"}}], 0x30) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r0, 0x0) 2017/12/19 14:26:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400000) 2017/12/19 14:26:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fa1000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000a31000-0x9b)=""/155) 2017/12/19 14:26:35 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00004ec000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) [ 30.002528] binder: 3641:3650 ioctl 40046205 ffffffffa223e81f returned -22 2017/12/19 14:26:35 executing program 6: clock_gettime(0x2, &(0x7f0000225000)={0x0, 0x0}) [ 30.032061] binder: 3663:3666 ioctl 40046205 ffffffffa223e81f returned -22 2017/12/19 14:26:35 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xad8f2fedb4f7c039, 0xffffffffffffffff, 0x0) 2017/12/19 14:26:35 executing program 1: mknodat(0xffffffffffffffff, &(0x7f0000e03000)='./file0\x00', 0xd000, 0x0) 2017/12/19 14:26:35 executing program 7: r0 = memfd_create(&(0x7f00007bf000-0xf4)="4b243a28766d6e49743100338378aac1e8e92489ad95e7dc97d484f0a3a1aefbe1685c30e713dc4df1563215da21f948f3781a26663ab2c735ed4e6a00feeda8560f8d206056a87cb3abe46308f7e5c6bdb2b4f3fb9db1be4c2187832af7a68c01342b3a90cda9c0ffb80d523e3a4d493fe86db488eb7da37f35ed64ed07dfa9b4465d970e83fc22c82e0382072b29bd8d0a035f2006a89d4092f0e769c79dec1d9062d63face78d35f6cd1c9935aeec8095c6cc224d712dad7e3d8f798afc9167b16e77b726a0c895c876dd676952f7c4d2be1ac7f39fde0efa0bf0390b975303059a4d38dc4f34083c950eab25c99905b1f392", 0x1) fallocate(r0, 0xfffffffffffffffd, 0x2, 0x2000ffff) unshare(0x20000200) r1 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) fallocate(r1, 0x1, 0x10001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000035000)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000007000-0x8)=0x0) lseek(0xffffffffffffffff, 0x0, 0x4) clone(0x0, &(0x7f0000141000)="", &(0x7f0000f13000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000961000)="") creat(&(0x7f0000677000)='./file0\x00', 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00004d1000-0x10)=[], 0x0) prlimit64(0x0, 0x4, 0x0, &(0x7f00009d9000)={0x0, 0x0}) clone(0x2100, &(0x7f000066c000)="", &(0x7f000024c000)=0x0, &(0x7f0000d6d000)=0x0, &(0x7f000027b000)="") 2017/12/19 14:26:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ebe000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000471000)={{0x0, 0x0}, 0x40, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/19 14:26:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000928000-0x10)='/dev/input/mice\x00', 0x0, 0x0) mkdir(&(0x7f0000bf6000-0xa)='./control\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x106, 0x0) writev(r0, &(0x7f0000457000)=[{&(0x7f00002dd000)="", 0x0}, {&(0x7f0000764000)="302caa8575778a2a8cabea71619f109e98fe5a0a794cb73cc5e514cb", 0x1c}], 0x2) 2017/12/19 14:26:35 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000fb8000-0xd)='/dev/snd/seq\x00', 0x0, 0x100000000008a001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000c7b000-0x8c)={0x0, 0x0, 0x0, "e365c3d232d12448c27f0905cebdbd09c0a763e204c2a32152615df55d05092d000000000000001f7eb802407bd891842608790b637ae5edf9d8b2ad232fc9dd", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(r0, &(0x7f000004f000)=[{0x0, 0xdd3, 0x0, 0x0, @tick=0x9, {0x0, 0x0}, {0x0, 0x0}, @connect={{0x0, 0x0}, {0x0, 0x0}}}], 0x30) clock_gettime(0x0, &(0x7f0000114000)={0x0, 0x0}) write$sndseq(r0, &(0x7f000003f000)=[{0x0, 0xfff, 0x0, 0x0, @time={r1, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @raw8={"24e03d703af79838fdb9610c"}}], 0x30) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r0, 0x0) 2017/12/19 14:26:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000234000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000690000-0xe)='./file0/file0\x00', &(0x7f0000848000-0x8)='./file0\x00', &(0x7f000071b000-0x6)='btrfs\x00', 0x0, &(0x7f0000e22000-0x38)="28e0de183e774a58367e1ae5486a6c98ebb94bf657a082675a282c") 2017/12/19 14:26:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f05000-0xd)='net/fib_trie\x00') preadv(r0, &(0x7f0000331000)=[{&(0x7f0000724000-0xe0)=""/1, 0x1}], 0x1, 0x102) 2017/12/19 14:26:35 executing program 1: mmap(&(0x7f0000000000/0xf14000)=nil, 0xf14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f000086f000-0x10)={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) bind$inet6(r0, &(0x7f0000a71000-0x1c)={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) 2017/12/19 14:26:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003000-0x1000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5c) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002000-0xc)={0x0, 0x0, 0x0}, &(0x7f00002f3000)=0xc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x1, 0x0, 0x0}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001000+0xfde)=0x0, 0x4) 2017/12/19 14:26:35 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f00002af000)=0x0, 0x88, 0x0, &(0x7f0000191000)={0x0, 0x989680}, &(0x7f0000001000-0x4)=0x0, 0x0) 2017/12/19 14:26:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) r2 = syz_open_procfs(0x0, &(0x7f000080a000)='net/if_inet6\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f00009fb000+0x79)=""/55, 0x37}], 0x1) 2017/12/19 14:26:35 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000228000-0x18)=@add_del={0x2, &(0x7f0000395000)=@common='bpq0\x00', 0x0}) socket$inet(0x2, 0x0, 0x0) r0 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) 2017/12/19 14:26:35 executing program 3: mmap(&(0x7f0000000000/0xceb000)=nil, 0xceb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000005c000)='./file0\x00', 0x3fd, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000ce2000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18, 0x0}, 0x0) r3 = dup(r2) mprotect(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0) recvmsg(r3, &(0x7f0000012000)={&(0x7f0000a09000-0xc)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000ce7000)=[], 0x0, &(0x7f000000d000-0x10)=""/20, 0x14, 0x0}, 0x0) 2017/12/19 14:26:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f000053a000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000077c000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0x6}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8932, &(0x7f0000012000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) 2017/12/19 14:26:36 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0xffffffffa223e81f) [ 30.147248] binder: 3686:3688 ioctl 40046205 ffffffffa223e81f returned -22 2017/12/19 14:26:36 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x1, 0x80000001}, {0x0, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0xffffffff}]}) tgkill(0x0, 0x0, 0x0) 2017/12/19 14:26:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000001d000)={0x2, &(0x7f0000006000)=[{0x28, 0x0, 0x0, 0xffffffffffeff010}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) sendto(r0, &(0x7f000002b000-0xd8)="", 0x0, 0x0, 0x0, 0x0) 2017/12/19 14:26:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000008000-0x17)={@common='gre0\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f00003db000)={0x0, 0x0, 0x0}}}) 2017/12/19 14:26:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00008bf000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 30.238424] device gre0 entered promiscuous mode 2017/12/19 14:26:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000bec000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)="") mount(&(0x7f0000374000)='./file0\x00', &(0x7f0000dcd000-0x8)='./file0\x00', &(0x7f00001ca000)='minix\x00', 0x20000, &(0x7f0000926000)="") mount(&(0x7f00001e1000-0x8)='./file0\x00', &(0x7f00006da000-0x1)='.', &(0x7f0000802000)='ramfs\f', 0xff8c, &(0x7f000066e000-0x3)="") 2017/12/19 14:26:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000908000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000553000)=@known='system.posix_acl_access\x00', &(0x7f00009ee000)=""/245, 0xf5) 2017/12/19 14:26:36 executing program 5: mmap(&(0x7f0000000000/0xd18000)=nil, 0xd18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@common='nr0\x00', @ifru_flags=0x0}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000d10000)=[{{0x0, 0x0, &(0x7f0000925000+0x8b6)=[], 0x0, &(0x7f0000d0e000)=""/0, 0x0, 0x0}, 0x0}, {{&(0x7f0000d16000-0x10)=@in={0x0, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000d10000)=[{&(0x7f0000d0f000-0x6e)=""/110, 0x6e}, {&(0x7f0000d16000)=""/234, 0xea}, {&(0x7f0000d0f000-0x53)=""/178, 0xb2}, {&(0x7f0000d16000-0x3a)=""/58, 0x3a}, {&(0x7f0000408000-0xd6)=""/214, 0xd6}, {&(0x7f0000d0e000)=""/48, 0x30}], 0x6, &(0x7f0000d16000)=""/156, 0x9c, 0x0}, 0x0}], 0x2, 0x0, 0x0) 2017/12/19 14:26:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000451000-0x18)=@known='system.posix_acl_access\x00') 2017/12/19 14:26:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000a9f000-0x1e)="441ffff1eeffffffdeffffc5140487d91305004c000000ffffff7f0000", 0x1d) 2017/12/19 14:26:36 executing program 1: mmap(&(0x7f0000000000/0xff8000)=nil, 0xff8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000eb5000-0x10)=[{&(0x7f0000ff4000)="390000001000093805bb61e12320f5210701000000000000ed0001078000801419001b0000000000f00c00da000602000000800004011e3a69", 0x39}], 0x1) 2017/12/19 14:26:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x40000000000036, &(0x7f0000ec9000)="dc13b51a5b31306e78dd581b71ab2144ece4740434cf0195f75d34c82d9d233f08008861ffccd64ade0e8ce0442fbc50974e8e1195c604f8800000040002663d75dd050000000000090000f2ffffffffa36611f99ef96f7d4ff812a8f9fc3f0729e6000000004f000000d300bdeb62e18a769c862f856d59f8b9f3aee345e59eee7026fe40be9cda06a2f10008c339d0fffdffffffffffff3d328501902d973e668fa3f9b8974fec92b836614657ade603936ca6556ddfaeda0896440f396f4ba23e752db8352780dff40bb45a788385", 0xd0) setsockopt$inet6_buf(r0, 0x29, 0x200000000000036, &(0x7f0000e37000)="", 0x0) 2017/12/19 14:26:36 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00006e0000-0x10)='/dev/sequencer2\x00', 0x301080, 0x0) r0 = socket(0x18, 0x0, 0x4) connect(r0, &(0x7f0000c82000-0xe)=@l2={0x1f, 0x0, {0x0, 0x0, 0x14, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe) 2017/12/19 14:26:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000098b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000205000-0xc)={0x4000000e, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00009a2000)={0x0, 0x0}) ppoll(&(0x7f00004b1000-0x40)=[{r1, 0x0, 0x0}], 0x1, &(0x7f0000ff9000)={0x0, 0x989680}, &(0x7f0000ae9000-0x8)={0x0}, 0x8) 2017/12/19 14:26:36 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:36 executing program 3: mmap(&(0x7f0000000000/0xef2000)=nil, 0xef2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4000000011, &(0x7f0000eef000)="9d", 0x1) 2017/12/19 14:26:36 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:36 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x2) fcntl$addseals(r0, 0x409, 0xa) fcntl$addseals(r0, 0x409, 0x9) close(0xffffffffffffffff) 2017/12/19 14:26:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000386000-0x10)='/dev/input/mice\x00', 0x0, 0x20e803) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) r1 = open$dir(&(0x7f00004be000)='./file0\x00', 0x880, 0x0) ppoll(&(0x7f0000726000-0x20)=[{r0, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x2, &(0x7f0000880000-0x10)={0x77359400, 0x0}, &(0x7f0000fb0000-0x8)={0x0}, 0x8) 2017/12/19 14:26:36 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:36 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) mknod(&(0x7f0000012000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/19 14:26:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000518000-0x38)={0x0, 0x0, &(0x7f0000500000-0x10)=[{&(0x7f000000f000-0x7a)=[{0x1a, 0x12, 0x101, 0x0, 0x0, "0a000700000000001367"}], 0x1a}], 0x1, &(0x7f0000007000)=[], 0x0, 0x0}, 0x0) 2017/12/19 14:26:36 executing program 0: prctl$intptr(0x20, 0x0) 2017/12/19 14:26:36 executing program 3: mmap(&(0x7f0000000000/0xd58000)=nil, 0xd58000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000c1b000)={0x0, 0x0, 0x0}) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00003e8000-0xc)={0x0, 0x80000, r0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000c7a000)={0x0, 0x0, &(0x7f0000498000)={&(0x7f0000542000)={0x2, 0xb, 0x6, 0x0, 0x11, 0x0, 0x5, 0x0, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x2, 0x1ff, @loopback={0x0, 0x1}, 0x3}, @in6={0xa, 0x2, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7ff}}, @sadb_x_sec_ctx={0x7, 0x18, 0x1, 0x3, 0x2e, "ae259085fc786fd7ccc624a1b55f2e7b29f24ed87889d20db4faf7fcaa7998662a146e816a0725b359afa13ddffb"}]}, 0x88}, 0x1, 0x0, 0x0, 0x0}, 0x50) syz_extract_tcp_res(&(0x7f0000d52000-0x8)={0x0, 0x0}, 0x0, 0x0) socket(0xd, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000d52000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000383000)=0xc) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00009d3000-0x10)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f000090d000)='/selinux/mls\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000c32000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000d54000-0x4)=0x14) accept4(0xffffffffffffffff, &(0x7f00004ed000)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, &(0x7f0000d57000-0x4)=0x58, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000d54000)=0x0, 0x4) 2017/12/19 14:26:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000d93000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00006f3000-0x28)={@common='gre0\x00', @ifru_names=@generic="8944f083d95c890aec7ba71f377081d2"}) 2017/12/19 14:26:36 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) 2017/12/19 14:26:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f00003aa000)=[{0x80, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) 2017/12/19 14:26:36 executing program 1: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000001000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001000-0x11)="617474722f736f636b63ff65617465fd4b") 2017/12/19 14:26:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000795000-0x4)=0x1, 0x4) bind$inet6(r0, &(0x7f00006b4000-0x1c)={0xa, 0x1, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f0000fb6000)="", 0x0, 0x8001, &(0x7f0000f54000-0x1c)={0xa, 0x1, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) recvfrom(r0, &(0x7f0000cc6000-0xfb)=""/251, 0xfb, 0x0, &(0x7f000092e000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) fsetxattr(0xffffffffffffffff, &(0x7f0000bd7000)=@known='system.sockprotoname\x00', &(0x7f0000f6a000-0x2)='@\x00', 0x2, 0x0) write(r0, &(0x7f000040c000-0x58)="450b290c1292055e00dab6d95842ad27170821bc280b51593ed08efabaca0d3a4b7c6966cc0c03c900006402fca5a2d88d3f905ee41bc05ca717284d18f08c993ab2fec7b8", 0x45) timer_create(0x0, &(0x7f0000fc4000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000e96000)=0x0) 2017/12/19 14:26:36 executing program 4: mmap(&(0x7f0000000000/0x4ef000)=nil, 0x4ef000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffa223e81f) [ 30.535976] audit: type=1326 audit(1513693596.326:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3811 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x452a09 code=0x0 [ 30.542215] kasan: CONFIG_KASAN_INLINE enabled [ 30.542223] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 30.542228] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 30.542232] Dumping ftrace buffer: [ 30.542236] (ftrace buffer empty) [ 30.542239] Modules linked in: [ 30.542247] CPU: 1 PID: 3819 Comm: syz-executor5 Not tainted 4.4.106-g1700518 #9 [ 30.542251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.542256] task: ffff8800aaebaf80 task.stack: ffff8800aaea0000 [ 30.542273] RIP: 0010:[] [] __list_del_entry+0x86/0x1d0 [ 30.542277] RSP: 0018:ffff8800aaea75a8 EFLAGS: 00010246 [ 30.542281] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8800aaf21610 [ 30.542285] RDX: 0000000000000000 RSI: ffffffff851bdd30 RDI: ffff8800aaf21618 [ 30.542289] RBP: ffff8800aaea75c0 R08: 0000000000000001 R09: 0000000000000000 [ 30.542293] R10: 0000000000000001 R11: 1ffff100155d4e84 R12: 0000000000000000 [ 30.542297] R13: ffff8800aaf215b9 R14: ffff8800aaf21638 R15: 00000000ffffffde [ 30.542302] FS: 00007f1ed4579700(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 [ 30.542307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.542311] CR2: 0000000020481000 CR3: 00000001d9c1d000 CR4: 00000000001406e0 [ 30.542318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.542322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.542323] Stack: [ 30.542331] ffff8800aaf21638 ffff8800aaf21610 ffff8801cfb4f3c0 ffff8800aaea75d8 [ 30.542339] ffffffff81d62d0d ffff8800aaf21610 ffff8800aaea75f8 ffffffff832ab16e [ 30.542346] ffff8801cf8c2a80 ffff8800aaf21610 ffff8800aaea7618 ffffffff832ca6b3 [ 30.542348] Call Trace: [ 30.542356] [] list_del+0xd/0x70 [ 30.542365] [] xfrm_state_walk_done+0x6e/0xa0 [ 30.542371] [] xfrm_dump_sa_done+0x73/0xa0 [ 30.542378] [] ? xfrm_dump_policy_start+0x20/0x20 [ 30.542385] [] netlink_dump+0x871/0xb40 [ 30.542392] [] __netlink_dump_start+0x52e/0x7c0 [ 30.542398] [] ? __netlink_ns_capable+0xe1/0x120 [ 30.542405] [] xfrm_user_rcv_msg+0x5bd/0x6b0 [ 30.542410] [] ? xfrm_user_rcv_msg+0x6b0/0x6b0 [ 30.542416] [] ? xfrm_dump_sa_done+0xa0/0xa0 [ 30.542422] [] ? xfrm_user_rcv_msg+0x6b0/0x6b0 [ 30.542428] [] ? xfrm_dump_policy_start+0x20/0x20 [ 30.542437] [] ? avc_has_perm_noaudit+0x460/0x460 [ 30.542444] [] ? mark_held_locks+0xaf/0x100 [ 30.542453] [] ? mutex_lock_nested+0x5d4/0x850 [ 30.542459] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 30.542466] [] ? mutex_lock_nested+0x560/0x850 [ 30.542474] [] ? xfrm_netlink_rcv+0x60/0x90 [ 30.542480] [] ? netlink_lookup+0xee/0x740 [ 30.542487] [] netlink_rcv_skb+0x13e/0x370 [ 30.542497] [] ? xfrm_dump_sa_done+0xa0/0xa0 [ 30.542504] [] xfrm_netlink_rcv+0x6f/0x90 [ 30.542511] [] netlink_unicast+0x522/0x760 [ 30.542517] [] ? netlink_unicast+0x44f/0x760 [ 30.542524] [] ? netlink_attachskb+0x6c0/0x6c0 [ 30.542531] [] netlink_sendmsg+0x8e8/0xc50 [ 30.542538] [] ? netlink_unicast+0x760/0x760 [ 30.542546] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 30.542553] [] ? security_socket_sendmsg+0x89/0xb0 [ 30.542559] [] ? netlink_unicast+0x760/0x760 [ 30.542567] [] sock_sendmsg+0xca/0x110 [ 30.542573] [] ___sys_sendmsg+0x6c1/0x7c0 [ 30.542581] [] ? copy_msghdr_from_user+0x550/0x550 [ 30.542587] [] ? do_futex+0x3e3/0x1670 [ 30.542595] [] ? __fget+0x20b/0x3b0 [ 30.542601] [] ? __fget+0x232/0x3b0 [ 30.542606] [] ? __fget+0x47/0x3b0 [ 30.542613] [] ? __fget_light+0xa1/0x1e0 [ 30.542619] [] ? __fdget+0x18/0x20 [ 30.542625] [] __sys_sendmsg+0xd3/0x190 [ 30.542632] [] ? SyS_shutdown+0x1b0/0x1b0 [ 30.542638] [] ? SyS_futex+0x210/0x2c0 [ 30.542644] [] ? fd_install+0x4d/0x60 [ 30.542651] [] ? move_addr_to_kernel+0x50/0x50 [ 30.542657] [] SyS_sendmsg+0x2d/0x50 [ 30.542665] [] entry_SYSCALL_64_fastpath+0x16/0x76 [ 30.542757] Code: c4 0f 84 94 00 00 00 48 b8 00 02 00 00 00 00 ad de 48 39 c3 0f 84 a5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 e8 00 00 00 4c 8b 03 49 39 c8 0f 85 9b 00 00 [ 30.542765] RIP [] __list_del_entry+0x86/0x1d0 [ 30.542767] RSP [ 30.542805] ---[ end trace af186e5648d39d87 ]--- [ 30.542809] Kernel panic - not syncing: Fatal exception in interrupt [ 30.560121] Dumping ftrace buffer: [ 30.560124] (ftrace buffer empty) [ 30.560126] Kernel Offset: disabled [ 31.047274] Rebooting in 86400 seconds..