[....] Starting enhanced syslogd: rsyslogd[ 13.586042] audit: type=1400 audit(1516987776.945:5): avc: denied { syslog } for pid=3501 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.522423] audit: type=1400 audit(1516987782.882:6): avc: denied { map } for pid=3641 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. 2018/01/26 17:29:49 fuzzer started [ 25.772155] audit: type=1400 audit(1516987789.131:7): avc: denied { map } for pid=3652 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/01/26 17:29:49 dialing manager at 10.128.0.26:45937 [ 29.398225] can: request_module (can-proto-0) failed. [ 29.407826] can: request_module (can-proto-0) failed. 2018/01/26 17:29:53 kcov=true, comps=true [ 29.949434] audit: type=1400 audit(1516987793.309:8): avc: denied { map } for pid=3652 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=8900 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/01/26 17:29:55 executing program 7: 2018/01/26 17:29:55 executing program 3: 2018/01/26 17:29:55 executing program 0: 2018/01/26 17:29:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:29:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000012000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000842000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$packet(r0, &(0x7f0000016000-0xbf)="", 0x0, 0x0, &(0x7f0000016000-0x14)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="901170f3a1da", [0x0, 0x0]}, 0x14) 2018/01/26 17:29:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f000050c000-0x38)={&(0x7f0000be6000-0xc)=@nl=@unspec={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000689000)=[{&(0x7f0000727000)='On', 0x2}], 0x1, 0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000937000-0x38)={&(0x7f0000403000-0x6)=@hci={0x1f, 0x9, 0x0}, 0x6, &(0x7f0000f47000-0x50)=[{&(0x7f00002b9000)="aea9400260aa3582fed53c06261f2064c6dfd6164f8fbda084d064a726b83bcb8ac9fb1ce91983dbcc18deacd38134b62c05a0cacf40c5c456a2dbbf22e1437f7ed84c0d57ee8fe748946b89bc017448b7f7481847ea45f15a067cb0c5739e8f73ffd344cc7d896cbae4fc0d0b3a05fa1e94e9897ec3555c222333988a5f2d2a48ece9e3e05719ea265ebf1f85abed5f26e418112e5909c3c8998945abbdd8790928b8b91910f34c3d33e59d5ed5ad29c25f10d7ba477ba9480c52c5628e6895394915a006e0f579f4a0b7d4117dc7919dc912c247", 0xd5}, {&(0x7f0000dd9000-0xbf)="58ac4d89016aa23ab8090d955f0bbc9b7790fee139f943ebd3492d44d76a3fe93ebcc0e87ba839490b88f708afa5b9b68cb5f550ebd14333bdc9c8a7c6141b92f483013a0f6cf4021c270954b122aa08d8350bb21727e486f9b66f34e5b19a788037e09c18e94d6b5d7e48bd6eedb5cceb8cc94ed011516b76e087d28f70e77b24d386615aea6fb61d173a043102ecb2d7045127edbf6b0582daa71488378ae83089ebc593b1c292f8497c7e234a4b0540e026fd75a2c4b66eb0c6b0ba3aaa", 0xbf}, {&(0x7f0000879000-0xb6)="0f2cd0df4c4caf24e7b6ae4352ead60207404ffdd6397f3c56866bb8146175cdf218e7d48a3c8137c9a4f6da62ce3667e998f1c22ac761d0dd83d0ef6f92bf906e8ac7b12315a440a4de30ded75f64889e1f52e4177629628330b6323e396cbe9635a37619e609179d6adc8d6b2ad11a727818640a184dfcf9f24eff90a62702ec3184702a78f4a466735518395dd60bcaac69eaed56b603e3718419c716c523b025e8dc2e39a67ce6beb187c2136dbe2aae37f38dc6", 0xb6}], 0x3, &(0x7f0000ed9000-0x18)=[], 0x0, 0x0}, 0x40) 2018/01/26 17:29:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f00008db000)="", 0x0, 0x0, &(0x7f0000728000-0x1c)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, 0x1c) 2018/01/26 17:29:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) perf_event_open(&(0x7f000057c000)={0x2, 0x78, 0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120205}, 0xc) getsockname(r1, &(0x7f000073d000-0x3a)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x0}, 0x0}}}, &(0x7f00005a6000)=0xfd25) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000027000-0x50)={@generic="1f2733281ba14a627d8ded09d843abb5", @ifru_mtu=0x400001}) [ 32.342121] audit: type=1400 audit(1516987795.701:9): avc: denied { map } for pid=3652 comm="syz-fuzzer" path="/root/syzkaller-shm011832968" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.393530] audit: type=1400 audit(1516987795.753:10): avc: denied { sys_admin } for pid=3694 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 32.594318] audit: type=1400 audit(1516987795.951:11): avc: denied { net_admin } for pid=3698 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 32.909986] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.389375] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.258215] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.548752] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.786957] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.887518] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.971562] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.047057] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.355647] audit: type=1400 audit(1516987798.715:12): avc: denied { sys_chroot } for pid=3698 comm="syz-executor1" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/26 17:29:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:29:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:29:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:29:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:29:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:29:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:29:58 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:29:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) [ 36.089493] audit: type=1400 audit(1516987799.447:13): avc: denied { net_raw } for pid=4506 comm="syz-executor4" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/26 17:30:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00008b3000)=0x0, &(0x7f00002fd000)=0x4) r1 = syz_open_dev$midi(&(0x7f00005d0000-0xb)='/dev/midi#\x00', 0x6, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000555000-0x10)={0x9, 0x9, 0xffff, 0xdfffffffffff6134}, 0x10) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f000060a000-0xe7)=""/231) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000373000)=0xfff) 2018/01/26 17:30:00 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:30:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000fd4000)="92", 0x1, 0x0, &(0x7f0000aa8000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x800000001}, 0x1c) listen(r0, 0x480) r1 = accept4$inet(r0, &(0x7f000038a000-0x10)={0x0, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000fd3000)=0x10, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00003df000)={0x0, 0x7d, 0x0}, &(0x7f0000b75000-0x4)=0x8) 2018/01/26 17:30:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x143) r1 = epoll_create(0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000000d000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000e000-0xc)={0x0, 0x0}) r4 = epoll_create(0x46c) r5 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000c7f000)={0x0, 0x0}) r6 = epoll_create(0x6) execve(&(0x7f00000f8000-0x8)='./file0\x00', &(0x7f0000430000-0x18)=[&(0x7f00004fe000)='\x00', &(0x7f0000a68000-0xd)='cpusetppp0::\x00', &(0x7f0000acf000)='$wlan0%\x00'], &(0x7f0000374000)=[&(0x7f0000803000-0x7)=',{eth0\x00', &(0x7f0000139000+0xf83)='#bdev\\,\x00', &(0x7f00005c6000)='selinuxselfmd5sum,\x00']) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5e000-0xc)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050b000-0xc)={0x0, 0x0}) 2018/01/26 17:30:00 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000a1a000-0x48)=@full={{0x0, {""/7}, 0x0}, [{""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}]}, &(0x7f0000001000-0x4)=0x48) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000b7a000)=0x0) rt_sigpending(&(0x7f00004a9000-0x8)={0x0}, 0x204a9000) 2018/01/26 17:30:00 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000d28000)='/dev/snd/pcmC#D#p\x00', 0x101, 0x8000) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00008ea000)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x7fffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r1, 0x100401000003) r2 = shmget$private(0x0, 0x4000, 0x400, &(0x7f00004e2000/0x4000)=nil) fstat(r1, &(0x7f0000af2000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00009ba000-0xc)=[0x0, 0xffffffffffffffff, 0x0]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000d60000)={0x0, 0x0, 0x0}, &(0x7f000084e000-0x4)=0xc) getresgid(&(0x7f0000941000)=0x0, &(0x7f000040a000)=0x0, &(0x7f0000d98000+0xae9)=0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000bc1000-0x4)=0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000182000)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000868000-0x70)={{0x6, r3, r4, r5, r6, 0x0, 0x7fff, 0x0, 0x0, 0x0}, 0x9, 0x76, 0x1aa7, 0xd6c, r7, r8, 0x8, 0x0, 0x0, 0x0}) r9 = accept$inet(r1, &(0x7f0000da9000-0x10)={0x0, 0xffffffffffffffff, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00002d3000)=0x10) write(r9, &(0x7f0000a96000-0xb6)="1f", 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000373000)={0x7, 0x0, 0x0, 0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000d0d000-0x8)={0x0, 0x2}, 0x8) write(r9, &(0x7f00007b0000)="01", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00002c2000)={0x0, 0x0}, 0x8) 2018/01/26 17:30:00 executing program 3: mmap(&(0x7f0000000000/0x56000)=nil, 0x56000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000056000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000012000)='*loppp1}keyring&em1}\x00', 0x4002000000) r1 = syz_open_dev$sndseq(&(0x7f0000054000-0xd)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(r0, &(0x7f0000045000-0x30)=[{0x0, 0x1, 0x0, 0x0, @tick=0x3, {0x0, 0x0}, {0x0, 0x0}, @ext={0x0, &(0x7f0000051000)=""}}], 0x30) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick=0x4b8, {0x0, 0x0}, {0x0, 0x0}, @ext={0x0, &(0x7f0000056000-0x2)=""}}], 0x30) 2018/01/26 17:30:00 executing program 5: perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000fd8000-0x8)={0x0, 0x0}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000a7d000-0x4)=0x0) r1 = syz_open_dev$midi(&(0x7f00004f7000)='/dev/midi#\x00', 0x1, 0x1) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000801000)=0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f000068c000-0x4)=0x0) syz_open_procfs(r2, &(0x7f00003a7000)='net/netstat\x00') 2018/01/26 17:30:00 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:30:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xf, 0x803, 0x2) write(r0, &(0x7f000080d000-0x10)="0222af000500040000000000000207e4", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000277000)={0x0, 0x0}) r2 = accept4(r1, &(0x7f0000881000-0x10)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000ed3000)=0x10, 0x800) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f000075a000)={{0xcb09, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x4, 0x5}, 0x2006}) mmap(&(0x7f0000000000/0xffd000)=nil, 0xffd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0xd, 0x803, 0x0) sendto(r3, &(0x7f0000cda000-0x12)="120000001600e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = getpid() perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x48a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r4, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x2f30, &(0x7f00002e9000)=""/0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = open(&(0x7f00009b8000)='./file0\x00', 0x440000, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f00008da000)=0x0) fcntl$notify(r5, 0x402, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$setstatus(r7, 0x4, 0x6000) ioctl$TCXONC(r6, 0x540a, 0x9) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000ffa000-0x18)=@get={0x1, &(0x7f00005ab000-0x1000)=""/4096, 0x1ff}) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f000034c000-0x28)={@common='ip6tnl0\x00', @ifru_data=&(0x7f0000feb000-0x20)="d87b092cef24cad3c720059387ee8721e5828c3cff0700008ddcfeb43ef0c0b3"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/01/26 17:30:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000bd5000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000613000)=0x0) msync(&(0x7f00008ed000/0x2000)=nil, 0x2000, 0x6) sched_getaffinity(r0, 0x8, &(0x7f00006f4000-0x8)=0x0) 2018/01/26 17:30:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:30:00 executing program 5: mmap(&(0x7f0000000000/0x75b000)=nil, 0x75b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00004c7000-0x68)={0x81, 0x0, [0x3, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f000062d000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x0, 0x0, 0x0, 0x0, 0x0}}]}) [ 37.176131] audit: type=1326 audit(1516987800.534:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4777 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 37.221114] audit: type=1326 audit(1516987800.563:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4777 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x452f19 code=0x7ffc0000 [ 37.246165] audit: type=1326 audit(1516987800.565:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4777 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 37.270681] audit: type=1326 audit(1516987800.566:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4777 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=26 compat=0 ip=0x452f19 code=0x7ffc0000 [ 37.297013] audit: type=1326 audit(1516987800.566:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4777 comm="syz-executor2" exe="/root/syz-executor2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 2018/01/26 17:30:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000068e000)='/dev/sg#\x00', 0x0, 0x8003) write(r0, &(0x7f0000971000-0x93)="59e6e4afdf78d7aa5737f010d8ae70a2eec0c5cd78c3e18cb06f394b7cde760c64baa03c381428dba2130cfd8f52b2181f86050aece8ec24a6e6aba22d38de121cf347e21a812c3ddc47f02346e180a3e0a58189ab7ce554", 0x58) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f00008f4000)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x30) write$evdev(r0, &(0x7f0000ccf000-0xf0)=[{{0x0, 0x0}, 0xfffffffffffffffe, 0x0, 0x0}, {{0x0, 0x0}, 0x80000000, 0x0, 0x6d}], 0x30) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000e21000-0x3)=0x1fba9b37, 0x4) creat(&(0x7f0000b07000)='./file0\x00', 0x115) 2018/01/26 17:30:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000831000)='./file0\x00', 0x3f9821a24c210557, 0x2) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00005d2000)=""/4096) r1 = syz_open_procfs(0x0, &(0x7f0000eca000-0xd)='net/psched\x00') sendfile(r1, r1, &(0x7f0000e48000)=0xffffe, 0x8) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f000067c000)={0x0, 0x0}) dup(r1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) 2018/01/26 17:30:00 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000b9c000)=0x0) getpgrp(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000ff1000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) r2 = getpid() r3 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000002000-0x94)={{0x80, 0x3f, 0x80, 0xfffffffffffffff7, 0x7, 0x800}, 0x81, 0xa4, 0x9, 0x8, 0x0, "a3f762e6793ace587e4ecd647a3895645e7755cc63c2289281d392d4a46f3959d5db4949d0f2ad3daa4f6640d471b4b3edf280ade5977e4fd661ab4a3cbace8b0b7b6ee754d6246f0c674d089e32d0839d668d176a79698d6e5ffee46fcc4fb472fc1815584e4b2e61e276b5d2af770b70d20e52be27a9bf45c1ec12ded20dde"}) sched_setaffinity(r2, 0x8, &(0x7f000082a000)=0x6) ioctl$TCGETA(r3, 0x5405, &(0x7f00009f7000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80, 0x0}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick=0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000505000)={0x0, 0x0, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00003ff000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCSCTTY(r3, 0x540e, 0x10001) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/01/26 17:30:00 executing program 4: r0 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$poke(0x4, r0, &(0x7f0000001000-0x8)=0x0, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000e0b000)='/dev/ppp\x00', 0xc0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000669000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000049000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000b1d000)={r2, 0x8001, 0x1000, "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"}, 0x1008) r3 = open(&(0x7f00003b7000-0x8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r3, 0x400, 0x0) rename(&(0x7f0000fde000-0x8)='./file0\x00', &(0x7f00007c7000)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000cee000)=""/20) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000de1000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) select(0x40, &(0x7f0000fe0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fe0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fe0000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fe0000-0x8)={0x77359400, 0x0}) creat(&(0x7f0000fdf000-0x8)='./file1\x00', 0x0) 2018/01/26 17:30:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:30:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00006c4000)='/dev/ppp\x00', 0xfffffffffffffffe, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000d2f000)=0x100000000) r1 = syz_open_dev$sg(&(0x7f0000cc9000)='/dev/sg#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r1) syz_open_dev$dmmidi(&(0x7f0000de6000)='/dev/dmmidi#\x00', 0x101, 0x20000) 2018/01/26 17:30:00 executing program 6: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000005000)={@random="cd3997030f00", @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x43ff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@mld={0x88, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}}}}}}, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x7, 0x806, 0x9, &(0x7f000000e000-0x8)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000009000)=0x379f, 0x4) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000000d000)={0x1000, {{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0x17}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) 2018/01/26 17:30:00 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000003000-0xe)='/dev/admmidi#\x00', 0xc901, 0x404000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)=0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000002000-0x20)={@generic="0344b71cdbb06d0faea67584f081d9db", @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2018/01/26 17:30:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:30:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000032d000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000424000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdir(&(0x7f0000136000)='./file0\x00', 0x8) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000a20000-0x8)={0x0, 0x5}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c96000-0x1f)={r2, 0x0, 0x2, r3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 17:30:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000be8000+0x3f6)=0x0, &(0x7f0000527000-0x4)=0x4) accept(r1, &(0x7f000067a000-0x80)=@generic={0x0, ""/126}, &(0x7f00004e0000)=0x80) 2018/01/26 17:30:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f00007ee000)='/dev/input/mice\x00', 0x0, 0x400) r2 = syz_open_dev$adsp(&(0x7f0000434000-0xb)='/dev/adsp#\x00', 0x2, 0x10000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dff000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000009b000)={&(0x7f0000dd2000)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}, @IFLA_MASTER={0x8, 0xa, 0x87}]}, 0x3c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 17:30:00 executing program 3: r0 = socket$packet(0x11, 0x1000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000f9000)=0x0, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00008c7000)='/dev/vga_arbiter\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000001000)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$audio(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/audio\x00', 0x10040, 0x0) faccessat(r1, &(0x7f0000d53000)='./file0\x00', 0x42, 0x100) 2018/01/26 17:30:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:30:00 executing program 7: mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000030000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000012000)={{{@in=@empty=0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000031000-0x4)=0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000030000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000030000)={@generic="b10d549201ccbcd95d9033a6f43e01c9", @ifru_addrs={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r2 = dup(r1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f000000b000)={0xe0f, 0x800000000000, 0xcc8, 0x9, 0x18000000000, 0x6}) [ 37.399254] kauditd_printk_skb: 10 callbacks suppressed [ 37.399263] audit: type=1400 audit(1516987800.758:29): avc: denied { dac_override } for pid=4810 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/26 17:30:00 executing program 0: mmap(&(0x7f0000000000/0xb4f000)=nil, 0xb4f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000b35000-0x8)={0x0, 0x0, 0x0}, &(0x7f0000b35000-0x4)=0xc) fchown(r0, r1, 0x0) munmap(&(0x7f0000a73000/0x1000)=nil, 0x1000) 2018/01/26 17:30:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:30:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) [ 37.543620] audit: type=1400 audit(1516987800.903:30): avc: denied { dac_read_search } for pid=3706 comm="syz-executor5" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/26 17:30:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x10000000002, 0x0) bind(r0, &(0x7f00003bc000)=@nfc_llcp={0x27, 0xdd7, 0x7, 0x7, 0x7ff, 0x5, "5055201bd072bd27625711b2f122eaa4a13cd65f6f0255298f8fe390ed7eb1b9c6c5f2bc413e74eefe0880ad02bcdd836791652f4c60912273753366fe1661", 0x7}, 0x60) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000e2d000-0x3c)=[@in6={0xa, 0x1, 0x212e, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, @in={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x3c) 2018/01/26 17:30:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0xfffffffffffffffd) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00005ed000-0x4)=0x2, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f000091b000-0x15)='/proc/self/net/pfkey\x00', 0xae1b83908edab9cb, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) syz_emit_ethernet(0x47, &(0x7f0000c8c000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x11, 0x11, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0x11, 0x0, "01ed2740debee3e48e"}}}}}}, &(0x7f0000fcb000)={0x0, 0x1, [0x0]}) write$selinux_user(r1, &(0x7f00009c7000-0x34)={'system_u:object_r:default_context_t:s0', 0x20, 'unconfined_u\x00'}, 0x34) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 2018/01/26 17:30:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f000099c000)='/dev/snd/seq\x00', 0x0, 0x400802) connect$inet(r0, &(0x7f0000d38000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00005bc000-0x4)=0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000598000-0x90)={0x1000000020000000, {{0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x17}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000b09000)=r2) ioctl$int_in(r0, 0x5452, &(0x7f0000e1d000)=0x20) sendto$inet(r0, &(0x7f000017d000-0x3)="03", 0x1, 0x100000004043, &(0x7f0000ee6000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f000065a000)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f000070a000)='/dev/ppp\x00', 0x4100, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f000004e000)=0x0, &(0x7f0000d5b000-0x4)=0x4) pipe(&(0x7f00002bc000-0x8)={0x0, 0x0}) ustat(0x3ff, &(0x7f00006b2000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000e8e000-0x28)=[], 0x0) 2018/01/26 17:30:00 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f000092b000)=@syzn={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x10) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f000041d000-0x4)=0x0, &(0x7f00009f6000)=0x4) r2 = socket(0x7, 0x80000, 0xfff) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000918000)=@assoc_value={0x0, 0xfff}, &(0x7f0000f05000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r3, @in6={{0xa, 0x3, 0x7, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1b, 0x0}, 0x98) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000089b000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) lremovexattr(&(0x7f0000425000-0x8)='./file0\x00', &(0x7f0000d64000-0x14)=@known='security.capability\x00') listxattr(&(0x7f0000280000)='./file0\x00', &(0x7f00006eb000)=""/6, 0x6) 2018/01/26 17:30:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f000005f000)={&(0x7f000057b000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00007bb000-0x10)={&(0x7f0000b01000-0x102c)={0x24, 0x21, 0xb01, 0xffffffffffffffff, 0xffffffffffffffff, {0x7, 0x0, 0x0}, [@nested={0x6, 0x2, [@typed={0xc, 0x0, @fd=0xffffffffffffffff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 17:30:00 executing program 7: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002000)='/selinux/enforce\x00', 0x400, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000002000)=0xec0b) r1 = gettid() process_vm_readv(r1, &(0x7f0000001000-0x20)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000000)=""/0, 0x0}, {&(0x7f0000001000)=""/51, 0x33}], 0x2, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000000)={&(0x7f0000001000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0}}, 0x26, &(0x7f0000003000-0x30)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/88, 0x58}, {&(0x7f0000001000-0x67)=""/103, 0x67}], 0x3, &(0x7f0000001000-0xc5)=""/197, 0xc5, 0x4}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000002000-0xb8)={0x0, 0x9, 0x7fff, 0x40, 0x59c, 0x0, 0x1f, 0x0, {0x0, @in={{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x10}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0xb6b, 0xffffffffffffaf39, 0x4, 0x7}}, &(0x7f0000000000)=0xb8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001000)={r2, 0xdd64, 0x1, 0x1000008, 0x4, 0x3f}, &(0x7f0000003000-0x4)=0x14) 2018/01/26 17:30:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:30:00 executing program 5: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000008000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f000000b000-0xe8)={0x0, 0xe0, "7320ba5752f46ab534da04ef9d2de247aacc71e07ca66c42fef621e1d44a961659a0912510e28b475fa9bbfdb74a343e60d24f1df788d25cd0e27400d78f3fba5968b6e7df2af311eae7665f5bd55476ca4794de4a8893cacf92b557e13b2c55e44c89ba5b602f399825f110971be79dacd4c37170fd6a997f26c15853e5913c8c8c8ff0d3eec2cd6c175138d87c21b8215a5e6c5e0e08f127ef468216d4fa00989aa5f93d3aea6a2b2c5dca9138c7af3afbf83b3f3dfd7074931945c528553c1deee033f54af4b2f540a82d20f046e492a50595a235b92bd9cee493d26d86fe"}, &(0x7f000000a000-0x4)=0xe8) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f000000c000-0x8)=0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000000b000-0x10)={r1, 0x9, 0x4, 0x3ff}, 0x10) ioctl(r0, 0x800000000000003, &(0x7f0000000000)="c5a60043a7469e6d802446faa4cae9f145b08b81be071fc835b9e86566c158cc9c3cd6903cc3eb598a637e60c99b7a34b3e0cdaee3b59c3727e5a2fb0223d0f9fef738a7d759d4b0a4b800463194ca0fcec12ac836199e025734a8e775cd724ddaae83eb21354c3a12db7dd19badac820596d3f59f8235599a1646a9dc3a48b482ac7d3fc0e2341c88ac04fe3b1c682c2bb1e44c005e29edb734ac3127d024a71c704ff9c3d2f353106939fa18250d1bb396c6026db88f21614e40969b385bb2b2b4f1926a590575099e8b6f8b2bd2615718fa2085eac2d72e0fbfd4d4919a93bb1d340dc45594d83403ecc012352efca77b725311d8212e0000d069a3bc8153ef2e240568be91b612d28836aeb474e477a29a19569c117aa20a61324761683e45964388edaafd59e8c723cbe248691710a2") mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000009000)='/selinux/enforce\x00', 0x3, 0x0) fcntl$setflags(r0, 0x2, 0x1) 2018/01/26 17:30:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f00003c2000)='rxrpc\x00', &(0x7f000065c000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f0000fe1000-0xa)='mime_type\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000318000-0x6)='logon\x00', &(0x7f0000532000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, 0x0, 0x0, r0) munlock(&(0x7f0000895000/0x3000)=nil, 0x3000) keyctl$unlink(0x1d, r1, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000ba2000)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, &(0x7f0000180000)=0xe) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00005c0000-0xa0)={0x0, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x18, 0x1, 0x6, 0x1}, &(0x7f0000263000-0x4)=0xa0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00003b7000)=r3, 0x4) r4 = add_key(&(0x7f0000f27000-0x6)='.dead\x00', &(0x7f0000532000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, 0x0, 0x0, 0x0) keyctl$unlink(0x1d, r4, 0x0) [ 37.623779] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pig=4868 comm=syz-executor0 [ 37.649389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pig=4881 comm=syz-executor0 [ 37.692325] audit: type=1326 audit(1516987801.051:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4861 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 37.717117] audit: type=1326 audit(1516987801.051:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4861 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 37.743067] audit: type=1326 audit(1516987801.059:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4861 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=198 compat=0 ip=0x452f19 code=0x7ffc0000 [ 37.768239] audit: type=1326 audit(1516987801.059:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4861 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 37.793977] audit: type=1326 audit(1516987801.059:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4861 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 37.820271] audit: type=1326 audit(1516987801.061:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4861 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=194 compat=0 ip=0x452f19 code=0x7ffc0000 2018/01/26 17:30:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9d000-0xc)={0x0, 0x0, 0x0}, &(0x7f000044c000)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000370000)='attr/current\x00') sendfile(r1, r1, &(0x7f00006c7000)=0x0, 0x2a) r2 = syz_open_dev$binder(&(0x7f0000010000+0x7d8)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f000098c000)=0x4, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$audion(&(0x7f000095c000-0xc)='/dev/audio#\x00', 0x4, 0x2000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x44, 0x0, &(0x7f0000012000-0xbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000-0x50)=[], &(0x7f0000011000)=[]}}], 0x0, 0x0, &(0x7f0000012000-0x5d)=""}) sendmsg$nl_generic(r1, &(0x7f00007b1000)={&(0x7f000009b000)={0x10, 0x0, 0x0, 0x1020400}, 0xc, &(0x7f00000fe000-0x10)={&(0x7f0000eea000-0x118)={0x118, 0x3c, 0x820, 0x2, 0x0, {0x19, 0x0, 0x0}, [@typed={0x9c, 0x1c, @binary="fa9d3825968b891bd3e6b02d2c867e9d311fefdc4704afbdba5dab9d365a60e177aed9cc6d937a50b13f7882e37d638fc276fa7cc0f2a870d38627545839c797004f3cff41326c28af0be6e0160092960aff4ce4cd33181e2d9b2c189b78c8208efcc63c41f05262050788d2dacc26ecffa304911bd35abfff50befca4f947d186e1744fe9b98940df4047ef867412fa844b53"}, @typed={0xc, 0x69, @ipv4=@empty=0x0}, @typed={0xc, 0x80, @ipv4=@dev={0xac, 0x14, 0x0, 0x13}}, @nested={0x50, 0x74, [@generic="95a40770c0e8fc206048a3ccec8b2e406e1b95d2d0e40c996539df11ad0a5f25450eca453db464afbd01247a139046787a30759bbb7acc31b15f493ab2a8dd15335e3264225f690393234524"]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 2018/01/26 17:30:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000019000)={&(0x7f000001e000-0x10)=@can={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f000001e000-0x20)=[{&(0x7f000000b000-0x21)=""/33, 0x21}], 0x1, &(0x7f000001e000-0x6b)=""/107, 0x6b, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000002000)={&(0x7f000001b000-0xc)={0x10, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000021000-0x10)={&(0x7f0000019000)={0x24, 0x1e, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x3, 0x0, 0x0}, [@typed={0x10, 0x1, @u64=0x0}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f0000319000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000418000-0x30)={0x0, 0x0, &(0x7f00008a1000)=[], 0x0, 0x0, &(0x7f000022f000-0xaf)=""}) 2018/01/26 17:30:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:30:01 executing program 4: mmap(&(0x7f0000000000/0xf90000)=nil, 0xf90000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000aa5000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00005d6000-0xe)=[{&(0x7f00005d6000-0x1)=';', 0x1}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000b69000)=""/175) vmsplice(r0, &(0x7f000044e000)=[], 0xc7, 0xb) 2018/01/26 17:30:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0xa, 0x3f, &(0x7f0000e21000-0x8)={0x0, 0x0}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00002cc000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f000032e000)={[{0x52, 0xff09, 0x80000000, 0x924, 0x1, 0xfc, 0xa50e, 0x6, 0xfff, 0xffffffffffffffff, 0x8, 0x7, 0x746}, {0x8e000000000000, 0x10, 0x8, 0x7, 0x100000000, 0x5f7be6f0, 0x6061, 0x2, 0x9, 0x1, 0x9, 0x101, 0x5}, {0x5, 0xfffffffffffff054, 0xffffffffffffd1cd, 0x9, 0x1, 0x80008, 0x1000, 0xffffffffffffffc8, 0x40000000fff, 0x5, 0x1, 0x3f, 0xfef7}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = add_key$keyring(&(0x7f0000c03000)='keyring\x00', &(0x7f00003d9000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000bce000)='\\*\x00', 0x2) keyctl$link(0x8, 0x0, r1) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f000074f000-0x8)={0x0, 0x0}) accept$llc(r2, &(0x7f0000925000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000d5c000-0x4)=0x10) 2018/01/26 17:30:01 executing program 6: mmap(&(0x7f0000000000/0xe72000)=nil, 0xe72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000b01000)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000008000-0x4)=0xb1c2, 0x4) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x0, 0x2, 0x0}}, 0x2e) sendto(r1, &(0x7f0000de8000-0x1000)="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", 0xfff, 0xc3fe68eda9554f8b, &(0x7f000064f000-0x10)=@ipx={0x4, 0x0, 0x800, "86462eb966dc", 0x8, 0x0}, 0x10) mmap(&(0x7f0000e72000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000e72000)='./file0\x00', 0x648002, 0x94) 2018/01/26 17:30:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000058000-0x12)='/dev/input/event#\x00', 0x0, 0x8000040000001) 2018/01/26 17:30:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x0, 0x2, 0x0}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002000-0xc)='net/rt_acct\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00004fb000)=[@in6={0xa, 0x3, 0x4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9}], 0x1c) read(r2, &(0x7f0000004000-0x74)=""/116, 0x74) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000a63000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000e71000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000e72000-0x4)=0x8) close(r1) socketpair(0x1b, 0xb, 0x7, &(0x7f0000e6f000)={0x0, 0x0}) ioctl$KDGETLED(r3, 0x4b31, &(0x7f000010b000)=0x0) syz_open_dev$amidi(&(0x7f0000c1b000)='/dev/amidi#\x00', 0x4, 0x600) close(r0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000c67000)=0x2) [ 37.845382] audit: type=1326 audit(1516987801.062:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4861 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 2018/01/26 17:30:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000426000-0x16)='/selinux/checkreqprot\x00', 0x100, 0x0) sendto$llc(r0, &(0x7f0000833000)="cabf40155f985ebc3aca4bf300acd97f817873aeccef93367fdfd57848f577117513f47ffd91bb643bc56d93e49e1bb8889352f499dc85a4fbf7fb449aa4e29955439b8135ec823054e1b495410a5aeedaf0bc3dfd6c892278b533bc885bc09d205eeddacf866e261d7f1fcb42ca42d6262e2bf9eadcea3adb527e0741a39bbebcd7c6aa64cd12cc84fde74a92d8558d5b886efee5fc51722b6c1b0f8b98d60176", 0xa1, 0x20040000, &(0x7f000062c000)={0x1a, 0x1a, 0x7, 0x2, 0x6, 0x10001, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000d6d000)='cgroup\x00') ioctl$TCSETAW(r0, 0x5407, &(0x7f0000c87000)={0x9, 0x3, 0x16f6, 0xfffffffffffffff7, 0x7ff, 0x7, 0x4b8, 0x2, 0x53a804c, 0xed9}) preadv(r1, &(0x7f0000b39000)=[{&(0x7f00003fc000)=""/1, 0x1}], 0x1, 0x0) 2018/01/26 17:30:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b18000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f000046a000)={0x1, {{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x13}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) r1 = getpgrp(0x0) futex(&(0x7f0000562000)=0x12000000000000, 0xd, 0x8000, &(0x7f000002b000-0x10)={0x0, 0x1c9c380}, &(0x7f0000763000-0x4)=0x3, 0x101) fcntl$setown(r0, 0x402, r1) 2018/01/26 17:30:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f00006a6000-0x74)="dbef803e3d9f5de1e22055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) write$evdev(r0, &(0x7f0000a59000)=[{{0x0, 0x7530}, 0x0, 0x0, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) writev(r0, &(0x7f0000d7e000-0x10)=[{&(0x7f0000b71000-0x1000)="8024904213615f1434a8b49210a885bee5b8d71f39c828a55b0a88d35a51010a31818833bfa2561ce5942dc549ad4e4d", 0x30}], 0x1) ioctl(r0, 0x2286, &(0x7f0000c96000-0x2)="") mq_notify(r0, &(0x7f0000190000-0x60)={0x0, 0xf, 0x0, @thr={&(0x7f00007b6000)="fcd45ce3edd42ab74b58cbb8f7142cf6b63f6f924579dbc8c50f3747660d9b857c01366ad92d38cca5f2bc65cecc27a78734d796dbc317e1227481b1699571175d4927d50532b71f4160e2936e0bb4bb5e28ce1f09fc990cb431f08d89c0d97b8d9855dc1c46ac8e02d2e9e82bbc1748d2a2a0894dd841527669465c8dce81101c735dc52d13f356cfb07995b5cb21d48064f9ae647f0d79c91e765643fda024015dbd2ae9203ad52a0305648dce190c6a7c", &(0x7f0000168000-0xd4)="9afc0e6c38bbdaff96573b9e8b94a07662064448106dd65d4db7da7803811bfb255f2d8757c86ddccc77c0bb0a1e97f8b05dce2768c95f9ebe5a9adbc71e539ca7911ce01ad56a4ed02cb2ec16cc8ee2758d7ee9309eaa3af637cbe0359f67eba42cc8cf2c445c94fcb97e9d6fb237cdd60abb2700370bea68dac9f33349f2dbf127a3a9dfddd5266dcf362a248bbefd4a10e04c465a842134d7c19ce3e3e566a6cd205d594b9c67a33f8e219ea88bc44d02a5ab474a7cd8f36cbdc416319c41a16bab9d29cf05a09c317fb8bd3098513d8a6e4d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 37.893570] audit: type=1326 audit(1516987801.062:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4861 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 2018/01/26 17:30:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000c1a000)="24000000200025f0006b000420edfc00020b00080110b5000010ffea08000100000000b7", 0x24) 2018/01/26 17:30:01 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000002000)='/dev/dmmidi#\x00', 0x10000, 0x400000) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000002000-0x8)=0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000001000-0x88)=@ethtool_test={0x1a, 0x0, 0x0, 0x0, []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 17:30:01 executing program 7: clone(0x0, &(0x7f00003ed000-0x90)="", &(0x7f0000e0b000-0x4)=0x0, &(0x7f00000d9000-0x4)=0x0, &(0x7f0000a53000-0x1e)="") setpgid(0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000d9a000)='/dev/sequencer2\x00', 0x8cc1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$ipx(r0, &(0x7f000095e000)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x10, 0x80800) 2018/01/26 17:30:01 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x2)='$\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x10001) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffe) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000003000)="f8", 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000002000)=0x0, 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) unlink(&(0x7f0000001000)='./file0\x00') lseek(r0, 0x0, 0x7) [ 37.939852] binder_alloc: 4891: binder_alloc_buf, no vma [ 37.939887] binder: 4891:4902 transaction failed 29189/-3, size 0-0 line 2903 [ 37.973977] binder: BINDER_SET_CONTEXT_MGR already set [ 37.973994] binder: 4891:4923 ioctl 40046207 0 returned -16 [ 37.975382] binder_alloc: 4891: binder_alloc_buf, no vma [ 37.975409] binder: 4891:4923 transaction failed 29189/-3, size 0-0 line 2903 [ 38.005102] binder: undelivered TRANSACTION_ERROR: 29189 [ 38.012134] binder: undelivered TRANSACTION_ERROR: 29189 [ 38.032884] ================================================================== [ 38.032905] BUG: KASAN: use-after-free in l2tp_session_create+0xa6d/0xc60 [ 38.032912] Read of size 4 at addr ffff8801c0fc83a8 by task syz-executor3/4896 [ 38.032914] [ 38.032923] CPU: 0 PID: 4896 Comm: syz-executor3 Not tainted 4.15.0-rc9+ #281 [ 38.032927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.032931] Call Trace: [ 38.032945] dump_stack+0x194/0x257 [ 38.032960] ? arch_local_irq_restore+0x53/0x53 [ 38.032972] ? show_regs_print_info+0x18/0x18 [ 38.032992] ? l2tp_session_create+0xa6d/0xc60 [ 38.033011] print_address_description+0x73/0x250 [ 38.033021] ? l2tp_session_create+0xa6d/0xc60 [ 38.033033] kasan_report+0x25b/0x340 [ 38.033052] __asan_report_load4_noabort+0x14/0x20 [ 38.033061] l2tp_session_create+0xa6d/0xc60 [ 38.033075] ? l2tp_tunnel_delete+0x50/0x50 [ 38.033087] ? trace_hardirqs_on+0xd/0x10 [ 38.033098] ? __local_bh_enable_ip+0x121/0x230 [ 38.033119] pppol2tp_connect+0xed7/0x1dd0 [ 38.033149] ? pppol2tp_recv_payload_hook+0x1b0/0x1b0 [ 38.033172] ? selinux_netlbl_socket_connect+0x76/0x1b0 [ 38.033192] ? selinux_socket_connect+0x311/0x730 [ 38.033203] ? lock_downgrade+0x980/0x980 [ 38.033220] ? selinux_socket_setsockopt+0x80/0x80 [ 38.033226] ? lock_release+0xa40/0xa40 [ 38.033237] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 38.033249] ? __check_object_size+0x25d/0x4f0 [ 38.033275] ? __might_sleep+0x95/0x190 [ 38.033305] ? security_socket_connect+0x89/0xb0 [ 38.033324] SYSC_connect+0x213/0x4a0 [ 38.033339] ? SYSC_bind+0x410/0x410 [ 38.033353] ? exit_to_usermode_loop+0x198/0x310 [ 38.033370] ? selinux_capable+0x40/0x40 [ 38.033407] ? syscall_return_slowpath+0x2ad/0x550 [ 38.033419] ? prepare_exit_to_usermode+0x340/0x340 [ 38.033431] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 38.033446] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 38.033465] SyS_connect+0x24/0x30 [ 38.033479] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 38.033487] RIP: 0033:0x452f19 [ 38.033491] RSP: 002b:00007f132b6fbc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002a [ 38.033500] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452f19 [ 38.033504] RDX: 000000000000002e RSI: 00000000205fafd2 RDI: 0000000000000014 [ 38.033509] RBP: 00000000000005d4 R08: 0000000000000000 R09: 0000000000000000 [ 38.033513] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f7c80 [ 38.033518] R13: 00000000ffffffff R14: 00007f132b6fc6d4 R15: 0000000000000000 [ 38.033552] [ 38.033556] Allocated by task 4896: [ 38.033564] save_stack+0x43/0xd0 [ 38.033571] kasan_kmalloc+0xad/0xe0 [ 38.033577] kmem_cache_alloc_trace+0x136/0x750 [ 38.033584] l2tp_tunnel_create+0x5e1/0x17f0 [ 38.033591] pppol2tp_connect+0x14b7/0x1dd0 [ 38.033597] SYSC_connect+0x213/0x4a0 [ 38.033603] SyS_connect+0x24/0x30 [ 38.033609] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 38.033610] [ 38.033613] Freed by task 4924: [ 38.033619] save_stack+0x43/0xd0 [ 38.033624] kasan_slab_free+0x71/0xc0 [ 38.033630] kfree+0xd6/0x260 [ 38.033638] rcu_process_callbacks+0xe94/0x17f0 [ 38.033647] __do_softirq+0x2d7/0xb85 [ 38.033649] [ 38.033656] The buggy address belongs to the object at ffff8801c0fc82c0 [ 38.033656] which belongs to the cache kmalloc-512 of size 512 [ 38.033663] The buggy address is located 232 bytes inside of [ 38.033663] 512-byte region [ffff8801c0fc82c0, ffff8801c0fc84c0) [ 38.033666] The buggy address belongs to the page: [ 38.033672] page:ffffea000703f200 count:1 mapcount:0 mapping:ffff8801c0fc8040 index:0x0 [ 38.033680] flags: 0x2fffc0000000100(slab) [ 38.033691] raw: 02fffc0000000100 ffff8801c0fc8040 0000000000000000 0000000100000006 [ 38.033700] raw: ffffea0007020320 ffffea00070204a0 ffff8801dac00940 0000000000000000 [ 38.033704] page dumped because: kasan: bad access detected [ 38.033707] [ 38.033709] Memory state around the buggy address: [ 38.033716] ffff8801c0fc8280: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 38.033723] ffff8801c0fc8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.033728] >ffff8801c0fc8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.033731] ^ [ 38.033737] ffff8801c0fc8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.033742] ffff8801c0fc8480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 38.033744] ================================================================== [ 38.033747] Disabling lock debugging due to kernel taint [ 38.033794] Kernel panic - not syncing: panic_on_warn set ... [ 38.033794] [ 38.033802] CPU: 0 PID: 4896 Comm: syz-executor3 Tainted: G B 4.15.0-rc9+ #281 [ 38.033805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.033807] Call Trace: [ 38.033817] dump_stack+0x194/0x257 [ 38.033829] ? arch_local_irq_restore+0x53/0x53 [ 38.033835] ? kasan_end_report+0x32/0x50 [ 38.033846] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 38.033855] ? vsnprintf+0x1ed/0x1900 [ 38.033864] ? l2tp_session_create+0xa10/0xc60 [ 38.033875] panic+0x1e4/0x41c [ 38.033883] ? refcount_error_report+0x214/0x214 [ 38.033907] ? l2tp_session_create+0xa6d/0xc60 [ 38.033915] kasan_end_report+0x50/0x50 [ 38.033924] kasan_report+0x144/0x340 [ 38.033938] __asan_report_load4_noabort+0x14/0x20 [ 38.033946] l2tp_session_create+0xa6d/0xc60 [ 38.033956] ? l2tp_tunnel_delete+0x50/0x50 [ 38.033964] ? trace_hardirqs_on+0xd/0x10 [ 38.033973] ? __local_bh_enable_ip+0x121/0x230 [ 38.033988] pppol2tp_connect+0xed7/0x1dd0 [ 38.034011] ? pppol2tp_recv_payload_hook+0x1b0/0x1b0 [ 38.034025] ? selinux_netlbl_socket_connect+0x76/0x1b0 [ 38.034039] ? selinux_socket_connect+0x311/0x730 [ 38.034047] ? lock_downgrade+0x980/0x980 [ 38.034058] ? selinux_socket_setsockopt+0x80/0x80 [ 38.034065] ? lock_release+0xa40/0xa40 [ 38.034074] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 38.034083] ? __check_object_size+0x25d/0x4f0 [ 38.034098] ? __might_sleep+0x95/0x190 [ 38.034121] ? security_socket_connect+0x89/0xb0 [ 38.034134] SYSC_connect+0x213/0x4a0 [ 38.034144] ? SYSC_bind+0x410/0x410 [ 38.034154] ? exit_to_usermode_loop+0x198/0x310 [ 38.034166] ? selinux_capable+0x40/0x40 [ 38.034186] ? syscall_return_slowpath+0x2ad/0x550 [ 38.034195] ? prepare_exit_to_usermode+0x340/0x340 [ 38.034204] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 38.034215] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 38.034230] SyS_connect+0x24/0x30 [ 38.034239] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 38.034245] RIP: 0033:0x452f19 [ 38.034249] RSP: 002b:00007f132b6fbc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002a [ 38.034257] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452f19 [ 38.034262] RDX: 000000000000002e RSI: 00000000205fafd2 RDI: 0000000000000014 [ 38.034265] RBP: 00000000000005d4 R08: 0000000000000000 R09: 0000000000000000 [ 38.034270] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f7c80 [ 38.034274] R13: 00000000ffffffff R14: 00007f132b6fc6d4 R15: 0000000000000000 [ 38.034749] Dumping ftrace buffer: [ 38.034754] (ftrace buffer empty) [ 38.034757] Kernel Offset: disabled [ 38.754815] Rebooting in 86400 seconds..