[....] Starting enhanced syslogd: rsyslogd[ 13.404492] audit: type=1400 audit(1517709736.965:4): avc: denied { syslog } for pid=3904 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts. 2018/02/04 02:02:49 fuzzer started 2018/02/04 02:02:49 dialing manager at 10.128.0.26:41117 2018/02/04 02:02:52 kcov=true, comps=false 2018/02/04 02:02:53 executing program 0: 2018/02/04 02:02:53 executing program 7: 2018/02/04 02:02:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000029e000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x3ffb}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89b0, &(0x7f0000a27000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_names=@generic="6b48f252d6780ba3712b64d613715f7f"}) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f000000f000-0x54)=""/84, &(0x7f000000d000-0x4)=0xffffff18) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00009bc000-0x4)) 2018/02/04 02:02:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) sendmmsg(r0, &(0x7f0000ad9000)=[{{0x0, 0x23a, &(0x7f0000664000)=[], 0x0, &(0x7f0000cc4000-0x18)=[{0x10}], 0x10}}], 0x1, 0x0) 2018/02/04 02:02:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1d, &(0x7f000072c000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, ')#2', 0x8, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, &(0x7f0000efe000)={0x0, 0x1, [0x0]}) 2018/02/04 02:02:53 executing program 6: mmap(&(0x7f0000000000/0xff6000)=nil, 0xff6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000006000)={@generic="010203100143c42354ccd0b8a14e1ad7", @ifru_settings={0x0, 0x0, @fr_pvc_info=&(0x7f0000006000)={0x0, @syzn={0x73, 0x79, 0x7a, 0x0}}}}) 2018/02/04 02:02:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x227c, &(0x7f000035c000-0x44)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @empty}, 0x0, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @generic="980edbe34139704e389db349f728ad25"}) 2018/02/04 02:02:53 executing program 2: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000002000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) syzkaller login: [ 50.146983] audit: type=1400 audit(1517709773.705:5): avc: denied { sys_admin } for pid=4133 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 50.182144] IPVS: Creating netns size=2536 id=1 [ 50.199422] audit: type=1400 audit(1517709773.755:6): avc: denied { net_admin } for pid=4136 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 50.227233] IPVS: Creating netns size=2536 id=2 [ 50.263751] IPVS: Creating netns size=2536 id=3 [ 50.307292] IPVS: Creating netns size=2536 id=4 [ 50.356093] IPVS: Creating netns size=2536 id=5 [ 50.404474] IPVS: Creating netns size=2536 id=6 [ 50.445866] IPVS: Creating netns size=2536 id=7 [ 50.513233] IPVS: Creating netns size=2536 id=8 [ 51.974887] audit: type=1400 audit(1517709775.535:7): avc: denied { sys_chroot } for pid=4136 comm="syz-executor3" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 52.070968] device syz3 entered promiscuous mode 2018/02/04 02:02:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f000002d000)={0x900, 0x3, 0x2, 0x8, 0x0, 0x35e4, 0x0, 0x100}, &(0x7f0000132000)={0x47d2, 0x7, 0x7, 0xffff, 0x100, 0xffffffffffffffff, 0xfffffffffffffffe, 0x5}, &(0x7f00000c6000-0x40)={0x200, 0x7, 0x9, 0x5316, 0x940000000, 0x6, 0x1, 0x534}, &(0x7f0000cda000)={0x0, 0x7530}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)={0x400000000001}) r2 = open(&(0x7f0000eee000-0x8)='./file0\x00', 0x800, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000fb8000-0x68)) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000f74000-0x10)={0x0, 0x0}) ppoll(&(0x7f000004f000-0x40)=[{r0, 0x1301}, {r1}], 0x2, &(0x7f000005b000+0xd56)={0x0, r4+10000000}, &(0x7f000005b000), 0x8) timer_settime(0x0, 0x0, &(0x7f000020b000-0x20)={{}, {0x0, 0x9}}, &(0x7f0000002000-0x20)) 2018/02/04 02:02:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00006c8000), 0x800) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f00009e1000-0x10)={0x20006, 0x5}) r0 = memfd_create(&(0x7f000003b000-0x2a)='bdevkeyring\a-GPLvboxnet0\'{wlan1&em1vmnet0\x00', 0x0) writev(r0, &(0x7f0000037000)=[{&(0x7f000003a000)='X', 0x1}], 0x1) 2018/02/04 02:02:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000778000)={0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00007b2000-0x4)=0x0) fcntl$lock(r0, 0x5, &(0x7f0000bb3000)={0x2, 0x2, 0x0, 0x5, r1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000099d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000037000-0x10)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000261000-0x44)={{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xf}}, {0x1, @empty}, 0x0, {0x2, 0x3, @rand_addr=0x82e}, @common='bpq0\x00'}) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f000063e000)={0x0, 0x0, 0x1ff, 0xffffffffffff08b4}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000975000)) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000aa6000)=""/55) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f000045c000-0x8)) 2018/02/04 02:02:55 executing program 4: r0 = socket(0x13, 0xa, 0xffff) sendto$unix(r0, &(0x7f000094c000-0x94)="3122ab66cf9d837afe238bdedd04a6fc290706416dbaed9a6095a08fc8248b3d93bd00c440f406578aa6d7cc1fe96b7c6abe7721217bcdf021703035b26a00fa0733ea5a475854dff1c4f5f0fe92cbc35cffbd8ea2198adc85c6da3a7c1b45b92ce2232d93c182f0f90e72bac831afc4809f490ce7a04572ccb143adf00a4e6ba1c539c6229e28683dce01892c211d203b0387a3", 0x94, 0x40480c0, &(0x7f0000178000)=@abs={0x1, 0x0, 0x0}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002d3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000d15000)={0x53, 0x101, 0xffffffffe21e685e, {0x6}, {0x1, 0x4}, @rumble={0x7, 0x307}}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000734000-0x4)=0x0) r5 = dup2(r2, r1) fcntl$lock(r1, 0x7, &(0x7f000043e000)={0x1, 0x0, 0x0, 0x0, r4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000ffd000-0x4c)={0x7, 0xfffffffffffff800, 0x5}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f000035f000-0x20)={0xb2, 0x7fff, 0x8, 0x8d24, 0x40, 0x6, 0x7, 0x8, 0x0}, &(0x7f000046f000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00007ff000-0x20)={0x80000000, 0xffffffffffffff80, 0xf, 0x0, 0x5, 0x242f, 0x3f, 0x4, r6}, &(0x7f000019e000-0x4)=0x20) getpeername$ax25(r5, &(0x7f0000dd7000), &(0x7f0000036000)=0x10) fcntl$lock(r2, 0x400000000000007, &(0x7f0000c0f000-0x20)={0x0, 0x0, 0x4, 0xfffffffffffffffd}) fcntl$lock(r1, 0x7, &(0x7f0000dd8000-0x20)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4) 2018/02/04 02:02:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000001000-0x1002)=@un=@file={0x0, ""/4096}, &(0x7f0000549000)=0x1002) mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7687) readv(r1, &(0x7f0000005000)=[{&(0x7f0000005000)=""/213, 0xd5}], 0x1) 2018/02/04 02:02:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000620000)={{{@in6=@mcast1, @in=@remote, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000334000-0x4)=0xe8) fcntl$getownex(r0, 0x10, &(0x7f000054e000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00007f5000)={0x0, 0x0}) r4 = getuid() r5 = getegid() socket$nl_route(0x10, 0x3, 0x0) r6 = open(&(0x7f00000b4000-0x8)='./file0\x00', 0x80800, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f000077b000-0x50)={{0x101}, {0x4f, 0xfff}, 0x7, 0x2, 0x52}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000107000)={0x8, [0x800, 0x6, 0x2, 0x100000000, 0x6, 0x800, 0x2, 0x8c]}, &(0x7f000097d000-0x4)=0x14) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000a18000)=0x8) sendmsg$netlink(r0, &(0x7f0000ce0000)={0x0, 0x0, &(0x7f0000757000-0x50)=[{&(0x7f0000270000-0x12f8)={0x12f8, 0x1f, 0x10, 0x4, 0x1, "", [@typed={0xc, 0x2f, @fd=r0}, @typed={0xc, 0x92, @u32=0x5}, @generic="eb318f97624a99da9bf3db442c643fab26189dd897332ffe13a2152ff113cbc0a400cb5af5e445b28c9c115b05e9669c5a4fa7ee53b1484e4843a85c096510e7c066ddd00f70232a498766ee67725166f7ba4e6665e2e74303dec981cb26fb3852174853463f11be90efd15322044122437be2ed2ffeab1aa62e889513cbb9f7b9eb9753ef815d181c9c80", @nested={0xb0, 0x12, [@generic, @generic="c12472fe618cf18c71228ecb98e5b03e835fb0d1bb74a865fcbb248d8d45c175933ec394a613acd46a1275c1d8a833120471bce72081afffffa4976435489c51eeb28f1a9945d7bcc31fc8c46ee0a15624f5d14c0f23e65aec18ded0d9df86bdd5dbb622460162258e8dcc55dff9bdbabd5f91d31f8454d60cea269e35f13a61c6bdec8bccbebd75f722f5abf05f5a860a9e1fb7a71f256091eaab1b670092bce57eab09cf5b9524351a"]}, @typed={0x18, 0x10, @ipv6=@dev={0xfe, 0x80, [], 0x0, 0x15}}, @nested={0x1164, 0x10, [@generic="772737d13b5d23dc93ec768ad82d2c6aab438c3578fc044ecec2cd070efa2a448e23de1d3c2c09ce4201fd3daa01898bf6cc566759f1c8e1ae87fe409e963f77e5beddf6ee2abcdb3ddac8946e2dc7bebe9185a2137d19da9b6a5a41552d215a4693070723c64ad9126e36777652249e67f4af2e4490cfe5be2711d5543fa79bb491b96e6cda894193e81c870938d46047f312302e8dfccb14", @generic="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", @generic="3a13647971b4fadf8cbe07a5cff9328e44c3da6483a9c00ca21fe45345317021ad62fb447dd10d7499ceaa99e0bb5bd3e65b7c4589d41c011f267198a67244966c2e2193d3fa9ebcfff06c12cd2e7ee4b654314403f15ac855b24b3048aead49635c69ef197269e05eccb81f79384722287949381080c4bf9f101c63544913f7c70726f8bb8d90e5848f5ba95b97b46ea0790f0be7306f1b9289f43ddbd387092ca200cdebb03fee5d6616cadda208ee555adbfbd910a361311b18c56d5a0067d500ba014b"]}, @nested={0x18, 0x2, [@typed={0x8, 0x47}, @typed={0xc, 0x20, @str='\x00'}]}]}, 0x12f8}, {&(0x7f0000cee000)={0xdc, 0x1f, 0x300, 0x6, 0x0, "", [@generic="0af5bd78560fe039898436b494d9295c8306e65f67d9f39252e2e2e80900f3d0540a8948470c83d47fa9", @generic="8640f94b6ccc91d22582112203b0f39bcdb54d53bf54a59f197223b727d60430813ecc60b45d807e2e36af91b7224fd7923709b5f51dfdb25ac7d86d1ce2c58c4807820ea19cf7ea627da91f8c0294eec79f115be887fc1989ae6aaf2b18d49bbbe18b8837f16bd5adde6350afcef68a1827dbbfacf0d2226ba32900b436ff2bb405d3973ee4c39f0fbc13fe7e6610483ea18186bc1956000f568b3a44862b4dc1"]}, 0xdc}, {&(0x7f0000440000-0x10)={0x10, 0x22, 0xa0c, 0x6, 0x2, "", []}, 0x10}, {&(0x7f0000021000)={0x28, 0x3e, 0x2, 0x4, 0x0, "", [@typed={0xc, 0x48, @uid=r1}, @typed={0xc, 0x5a, @pid=r2}]}, 0x28}, {&(0x7f00006da000-0xac)={0xac, 0x37, 0x704, 0x7, 0x3, "", [@typed={0x14, 0x32, @binary="8e32666145a3052c1ef7"}, @generic="71d44e545cf1e75d611176f471c3f5309404d171c4c8bc9becf6e4e90c9c4781666f4c55a9a1f2f5e1295a842a0c1bd18065fb3c38df068267b8745c95c62b71a1a8b8bc01b2f9cf98de19434b917142a2f029d427cc2cbebe01a050597e31f839f0857d5b85e26f2c714d581f70676d8083b11eff4e3edb928e48327e04837d96ab12819e05135c"]}, 0xac}], 0x5, &(0x7f00002d4000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}], 0x50, 0x40}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f000016a000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000da8000)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/04 02:02:55 executing program 6: r0 = socket$pptp(0x18, 0x1, 0x2) fallocate(r0, 0x1, 0x3, 0x7) mmap(&(0x7f0000000000/0xf88000)=nil, 0xf88000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) mmap(&(0x7f0000f88000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000f89000-0x8)={0x0}) mmap(&(0x7f0000f88000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f88000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000f89000-0xc)={@multicast1, @multicast2, @dev}, &(0x7f0000f88000)=0xc) mmap(&(0x7f0000f88000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000f89000-0x4)=0x4, 0x4) recvmsg(r1, &(0x7f0000f88000-0x38)={&(0x7f0000f87000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, 0x3a, &(0x7f0000513000)=[{&(0x7f0000f88000-0xe)=""/119, 0x77}], 0x1, &(0x7f0000f88000-0xcf)=""/207, 0xcf}, 0x0) mmap(&(0x7f0000f89000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f89000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f89000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f89000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f89000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f8a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$inet(r3, &(0x7f0000f8a000)={0x0, 0xffffffffffffffff, @loopback}, &(0x7f0000e67000)=0x10) mmap(&(0x7f0000f89000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000f89000)={0x0, 0x0, &(0x7f0000f89000)=[{&(0x7f00004d0000)="a2f1af4df5cb9acd72abdf24f5079ebe24ac1719a2a1da5e072643aeb1ce51ce682e8fd406955e6c5fad83d98a7f2da57c35ffd5781bc8ccb8723a3d6ca64eb63ca8b052efe7dc59fac827c722df949b08fb431e873f0a4b2368998f06f97ede5f91867e4ca65958e4a69d1c930b439fa638656031a6c2d5d3eac41ab5c9c9c1b51eb8a99ab0614bcf2e09bd1fb7946b83371ca00e7ecbd7fbf42abe2c7f76b3a1c6c9411c0720214330216bf73b2930d456c6b64efc1eb9082f03d2b734c6285fe5ac56e494a7fa0e6ab65ece5ac0c0621a14862e91660d26bc44b03529eae41f92ccfaae0f24", 0xe7}, {&(0x7f0000f89000)="254a0d2bc83d899853f0f1ea2333abbbb06bb9763967e3ad96c4aed1eae099cef2a2d59b535c255d2993ed2224c8f5ef515b302bdd22e74f9a453f15469be8953f5d801a96730cb7df60253cb87480cac7e6a6", 0x53}, {&(0x7f0000149000-0x51)="a68d5b8f3e7a723202b830fc77ed4cb73f306121b26732ef5a92278954db1d336059bde05d31f10ec0c8be7572045a989cf38f472864d13651df88b18dc97bb3067d8c23e4d668ba2b906ba131036b9ecc", 0x51}, {&(0x7f000010f000-0x7a)="2d2482b62ad5cce0acabf774cc139e834382fbc8367202f4c19e7873ae37bf0b346733bbf4fad91e1f0c9933b0424940bde6cfac129f5bd42b44f68b1c0b02c2426d1d6026d1aa54b5a7e4393090b2603432e907448aa54403d25f0fa27b492c5e614fb7dcd84c03f95cc9460ce1985a04678182eae49c0c0580", 0x7a}, {&(0x7f00003ee000-0x10)="e9e066eb01b15d584d0d667727d027ee", 0x10}, {&(0x7f000070e000-0x1e)="bce7b67815d2757b5ac7541de175321e96cb999d60e56d88255cf9a6e4dc", 0x1e}, {&(0x7f0000f89000)="69238c42d5ea6482c9ef179f689c9aac0bcb2e945d4657e46130e5ad01f337d501331be883749fbf8e198cdda1932e9e3151fba7d6e7abc0d00c2e2ec2c8502b224558dc5610a527d1de22ddd9b4bd8eb37f0bfdd184415003175132d010ff33eb01c0ef7c38124a7b79a7950389720d45d1cc92dd5d28c872765a9b323f7e", 0x7f}, {&(0x7f0000f89000)="832c0d5a72b0986d", 0x8}, {&(0x7f0000198000-0x7e)="c6f458d6ec3a0c7f6124b1cba909c7f5c325b0112b85dd1e60b25fbbe6506e8520da7f30e5ab6b98559d78e7b02f12b94759e8ff14109c2cbb9c47ab4aca4863e915917a25260c6eb83a27ab63cb71de7c9fcd854e8c6b9febe16dd37eb089e2658839a11d0cc11a7a68eea0fa5b2064ec8e51d090bbd017a9119e5292b5", 0x7e}, {&(0x7f0000f89000)="76226fb957259f8b6bfb8df9c440f8ee525c5236a940925cc2d0e843d11b414861846c0adf1c0f342351ae4b0eff568eb41b56b172a6769beb8b136fdd87b284d34e89135e57ce560f2a91f3eeefd5317230c0ded4778d6c2d50037058f0cb5ff2e08af8da08f1ebabef9c26659d8cfa306414ae075124042316e645fbddd740dfece738eade52ca70335ce02078f7613366673002184f879789b572ec38f1c3b0aec95f1929e8d1bedb120dfd9388b7eff1e0d2cb119173c0cf4f1f537b0a2a4854ce83fc67aee7061ef68c5974319d7de769798c1860f956b88019c3b5cf5e38aec09e89f326f879c2b45c41742ab5ea4a6b2269", 0xf5}], 0xa, &(0x7f0000187000-0x2c8)=[{0x110, 0x1, 0xf5c, "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"}, {0xb0, 0x119, 0x7, "d61632ae4404177bd5e0d8464d3601a47c27707ffc57f5c48a47ee8a1c59a2c53a2dc0b55481e1feed276c1e60a28bece99245aec9644453f1daf44a89eb53d7dafec4fd9a8428be0e34a191798694e1d8f2f78a17c9760a317cd8da6a4ca5897ef7a870c6e2ef30e6d2611f0b566359f4b3d46d384f715f669728b7203b8b2c3aae464c4f27c8827af5b06addda5c45991ac509022103f166d91f105b"}, {0x108, 0x10d, 0x5, "967d2fc28597d25b18e0da294debc1cbe29c1bcc7e7c6e726db3bddfca8f80a9fa21fa68468f428b45487eaaf0637a3f8f991f865f46a901fbbd3578127e843fba6ae4edc57b93b990997d303777aaad74e64b39ba6de85bf44567bf7994014128add25156d9c4461e0b18e0417b03128714e383c8de6543c25b19aec4ed6766d082ddeb4144429d73657b0a8bf863151f6bf2131fe5e115fecd60134730f83487ad8435a1e148df67820a74312ce85abdc1eb0bb78f3034ed29d732c742112318964d58cdc19db3e805c5e5bfbdb2d9eda8c986837ac992b8bbfe8571779712d95db3b5c4f2a70a873721a78dfa5d64245ed1"}], 0x2c8, 0x2400c800}, 0x4000090) 2018/02/04 02:02:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000548000-0x4)=0x0) eventfd(0x100000001) sched_getscheduler(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f00006ea000-0x64)=""/100, 0x64, 0x0) sendmsg$nl_route(r1, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3c000-0x8)={&(0x7f0000a17000-0x48)=@ipmr_newroute={0x2c, 0x18, 0xc21, 0xffffffffffffffff, 0xffffffffffffffff, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MARK={0x0, 0x10}, @RTA_FLOW={0x8, 0xb}]}, 0x2c}, 0x1}, 0x0) 2018/02/04 02:02:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000e3f000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x16) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f000087f000-0x16)={0x3, 0x1, 0x1000, 0x4a, 0xf9, 0x6}) accept4$ax25(r0, &(0x7f0000f24000-0x10), &(0x7f00007b7000)=0x10, 0x80000) openat$ppp(0xffffffffffffff9c, &(0x7f00002fa000-0x9)='/dev/ppp\x00', 0xd00, 0x0) bind$unix(r0, &(0x7f0000eca000)=@abs={0x1, 0x0, 0x0}, 0xfffffffffffffecd) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000bce000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f000019c000)={0x790, 0x87de, 0x10000, 0x8, 0x7, 0x37, 0xffffffff, 0x7f, 0x9}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006b9000)='/dev/sequencer\x00', 0x48002, 0x0) write$sndseq(r2, &(0x7f0000e7f000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x5, 0xb5}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32={[0x5]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @queue={0x0, {0x0, 0x5}}}], 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000e29000-0x8)) 2018/02/04 02:02:55 executing program 2: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xb, 0xa, 0xb33b) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000006000+0xd1e)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000006000)={0x2, 0x6, 0x3, 0x5, 0x16, 0x0, 0x2, 0x3, [@sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0xf, 0xffff, {0x6, 0x2b, 0x6, 0x9, 0x0, 0x1, 0x0, @in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, @in6=@loopback={0x0, 0x1}}}, @sadb_lifetime={0x4, 0x2, 0x1, 0x6, 0x5, 0x81}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x1, 0x3, @local={0xfe, 0x80, [], 0x0, 0xaa}}, @in6={0xa, 0x3, 0x40, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0xb0}, 0x1}, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000003000-0x30)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sa2={0x1, 0x13}]}, 0x20}, 0x1}, 0x0) 2018/02/04 02:02:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80807, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000874000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) getpeername(r0, &(0x7f0000cc8000)=@vsock={0x0, 0x0, 0x0, @any}, &(0x7f0000a03000-0x4)=0x10) r1 = open(&(0x7f00009c9000)='./file0\x00', 0x99e0499f70f5be10, 0x4) getsockname$llc(r1, &(0x7f0000f8e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000c62000-0x4)=0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000214000-0x88)={0xbd5, {{0xa, 0x0, 0x8, @empty, 0x101}}}, 0x88) 2018/02/04 02:02:56 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f000047b000)='/dev/usbmon#\x00', 0x2, 0x400000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x4, 0x4, 0x80000000, 0x2bf, 0x11}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00001ab000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = memfd_create(&(0x7f0000858000-0x1)='\t', 0x0) r3 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r3, r2) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000b91000)) write$sndseq(r2, &(0x7f0000d82000-0x30)=[{0x23, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x1b6) 2018/02/04 02:02:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000ac6000)={0x0}, &(0x7f0000a89000-0x4)=0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000b96000-0x4)) r2 = syz_open_procfs(r0, &(0x7f000085c000)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f000079d000-0xc)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000dd8000)={r3}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000970000)={{0x3, 0x3, 0x401}, 0xfffffffffffffff7, 0x9b27, 'id0\x00', 'timer0\x00', 0x0, 0x2, 0x4, 0x3, 0xd2}) 2018/02/04 02:02:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000961000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x2276, 0xfffffffffffffff7) r1 = getpgid(0xffffffffffffffff) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00001e2000)=r1) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000f6b000)=0x8, 0x4) 2018/02/04 02:02:56 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f000069d000-0x1c)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000c78000-0x4)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00001a0000-0x17)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000d3c000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000f72000)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) close(r2) [ 52.486060] audit: type=1400 audit(1517709776.045:8): avc: denied { dac_override } for pid=5259 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/04 02:02:56 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000d25000)='/dev/rfkill\x00', 0x125000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000acc000-0x10)={0x0, 0xbed4, 0x252}) getsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f000000f000-0x54)=""/84, &(0x7f000000d000-0x4)=0x54) 2018/02/04 02:02:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000055a000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000b9000)='net/rfcomm\x00') getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000431000-0x8)={0x0, 0x39}, &(0x7f000016c000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f000004e000-0x8)={r2, 0x40}, 0x8) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000a67000)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 2018/02/04 02:02:56 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f000051a000-0x8)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000e5c000-0x5)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001000-0xe)='/dev/keychord\x00', 0x57bffdfb4bf4c6ef, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000001000-0xb0)={{0x80000001, 0x5}, 'port1\x00', 0xa0aee18fb0b09426, 0x20040, 0x3, 0x2, 0x9, 0x5, 0x80, 0x0, 0x1, 0xb19}) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001000-0x2)='+\x00', 0xfffffffffffffffa) r2 = gettid() mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) syz_open_procfs(r2, &(0x7f0000001000)='net/ip_tables_targets\x00') 2018/02/04 02:02:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) recvmmsg(0xffffffffffffff9c, &(0x7f0000419000)=[{{&(0x7f0000b17000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @mcast1}}}, 0x32, &(0x7f0000607000-0x40)=[{&(0x7f0000399000-0xe)=""/14, 0xe}, {&(0x7f0000c63000-0xce)=""/206, 0xce}, {&(0x7f000000b000-0x1000)=""/4096, 0x1000}, {&(0x7f0000e2d000)=""/90, 0x5a}], 0x4, &(0x7f0000f90000+0xff3)=""/139, 0x8b, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000e8c000)=[{&(0x7f00003f2000)=""/251, 0xfb}, {&(0x7f00003eb000)=""/178, 0xb2}, {&(0x7f0000818000)=""/135, 0x87}, {&(0x7f00003c7000)}], 0x4, &(0x7f0000f58000)=""/154, 0x9a, 0x101}, 0x5c59}, {{0x0, 0x0, &(0x7f000016e000)=[{&(0x7f0000194000-0x85)=""/133, 0x85}, {&(0x7f000013c000)}, {&(0x7f0000271000)=""/45, 0x2d}, {&(0x7f0000375000-0xff)=""/255, 0xff}, {&(0x7f0000d04000-0xb0)=""/176, 0xb0}], 0x5, &(0x7f0000e08000)=""/8, 0x8}, 0x8}, {{&(0x7f0000190000)=@in={0x0, 0xffffffffffffffff, @rand_addr}, 0x10, &(0x7f0000a9f000-0x10)=[{&(0x7f00001c7000)=""/102, 0x66}], 0x1, &(0x7f0000e0c000-0xaf)=""/175, 0xaf, 0x40}, 0x3}, {{&(0x7f0000d77000)=@vsock={0x0, 0x0, 0x0, @my}, 0x10, &(0x7f0000ad1000)=[{&(0x7f0000eef000)=""/11, 0xb}, {&(0x7f0000242000)=""/63, 0x3f}, {&(0x7f0000c78000)=""/110, 0x6e}, {&(0x7f00003a7000-0xa5)=""/165, 0xa5}, {&(0x7f0000ef6000+0xee4)=""/99, 0x63}], 0x5, &(0x7f0000173000-0x1000)=""/4096, 0x1000, 0x7}, 0x566}, {{&(0x7f00000ed000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10, &(0x7f0000554000-0x30)=[{&(0x7f0000c8e000)=""/113, 0x71}, {&(0x7f0000443000)=""/41, 0x29}, {&(0x7f0000453000-0x87)=""/135, 0x87}], 0x3, &(0x7f00000b7000)=""/21, 0x15, 0x7}, 0x9}, {{&(0x7f00007c3000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x26, &(0x7f0000aa5000)=[{&(0x7f00002b6000)=""/43, 0x2b}, {&(0x7f0000852000-0xed)=""/237, 0xed}, {&(0x7f0000165000-0xec)=""/236, 0xec}, {&(0x7f0000d72000)=""/4096, 0x1000}], 0x4, &(0x7f00001cd000-0x87)=""/135, 0x87, 0x8}, 0x6}, {{&(0x7f0000528000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x3a, &(0x7f0000e8f000-0x40)=[{&(0x7f0000266000)=""/184, 0xb8}, {&(0x7f0000e84000)=""/4096, 0x1000}, {&(0x7f00008af000-0x2f)=""/47, 0x2f}, {&(0x7f0000bf6000)=""/4096, 0x1000}], 0x4, &(0x7f0000cb1000-0x9f)=""/159, 0x9f, 0x80000000}, 0x3}], 0x8, 0x2100, &(0x7f0000563000-0x10)) getpeername$packet(0xffffffffffffffff, &(0x7f0000229000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000e5a000-0x4)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00007dc000-0x14)={@local={0xfe, 0x80, [], 0x0, 0xaa}, r1}, 0x14) umount2(&(0x7f0000002000)='./file0\x00', 0x0) 2018/02/04 02:02:56 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001000-0xe8)={{{@in6=@mcast1, @in6=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000001000-0x4)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) quotactl(0x8, &(0x7f0000492000)='./file0\x00', r0, &(0x7f0000001000-0x22)="6472afbb066f78a645be53fb0ebb193048df5f76726ee7fc9215a2a3272d96c1668f") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000000000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d4f000-0x2)='..', &(0x7f00002cc000-0x11)=@known='security.selinux\x00', &(0x7f000059b000-0x2b)='system_u:object_r:system_dbusd_var_lib_t:s0', 0x2b, 0x3) 2018/02/04 02:02:56 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000062000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xaf4000)=nil, 0xaf4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000af4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f000076c000-0x85)=""/133, 0x85, 0x2, &(0x7f0000af4000)={0xa, 0x0, 0x7, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x400}, 0x1c) bind$inet6(r1, &(0x7f0000ae7000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000ae6000-0xb), 0x0, 0x200418d4, &(0x7f0000ad6000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/02/04 02:02:56 executing program 3: gettid() clock_settime(0x8005, &(0x7f0000c37000)) 2018/02/04 02:02:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0xa) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000075b000-0x30)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd2000-0x48)=[], &(0x7f0000a82000-0x18)=[]}}}], 0x0, 0x0, &(0x7f000005b000-0x82)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f00009f3000)=[@dead_binder_done={0x40086310, 0x1}], 0xfffffdea, 0x0, &(0x7f00001ab000-0x1)="e7"}) 2018/02/04 02:02:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) accept4$inet(r0, 0x0, &(0x7f0000e22000), 0x80800) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000ce8000-0x20)={{}, {0x0, 0x1c9c380}}, &(0x7f0000e89000-0x20)={{}, {0x0}}) write$evdev(r1, &(0x7f0000001000)=[{{r2, 0x6}}, {{}, 0x0, 0x0, 0x7}, {{0x0, 0x2710}}, {}], 0x60) readv(r1, &(0x7f00004ea000-0x30)=[{&(0x7f0000f0f000)=""/1, 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00003c6000-0x14)={0x0, 0x1, 0xfffffffffffffff7, 0x5, 0x2, 0xdf93}, &(0x7f00001dd000-0x4)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00005fd000)={0x7, 0x8000, 0x107, 0x20, r3}, 0x10) ioctl$TCSETAW(r0, 0x5407, &(0x7f000031a000)={0xfffffffffffffffe, 0x29, 0x80000001, 0xbf, 0x5, 0x10001, 0xd0, 0x9, 0x0, 0x80}) 2018/02/04 02:02:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000a34000)='cmdline\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read(r0, &(0x7f0000ee1000-0x1), 0x0) 2018/02/04 02:02:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000817000-0x8)='./file0\x00', 0x90002, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f000043a000)=@assoc_id=0x0, &(0x7f0000ee7000)=0x4) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000dd3000)={r1, 0x84, 0xa, [0xfffffffffffffff9, 0x7, 0x2, 0x9, 0xfc0000000, 0x7, 0xfff, 0x7, 0xc549, 0x800]}, 0x1c) r2 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000b23000)=0x6, 0x4) sendmsg$inet_sctp(r2, &(0x7f00005bd000-0x38)={&(0x7f000064e000)=@in6={0xa, 0x1, 0x1, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c, &(0x7f0000105000)=[], 0x0, &(0x7f0000fbb000)=[@init={0x18, 0x84, 0x0, {0x0, 0x0, 0x5}}], 0x30}, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00007d4000-0x4), &(0x7f0000461000)=0x4) [ 52.683011] audit: type=1400 audit(1517709776.235:9): avc: denied { set_context_mgr } for pid=5287 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 52.707724] syz-executor2 (5297) used greatest stack depth: 24160 bytes left [ 52.720031] audit: type=1400 audit(1517709776.285:10): avc: denied { net_raw } for pid=5310 comm="syz-executor1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 52.722038] audit: type=1400 audit(1517709776.285:11): avc: denied { call } for pid=5287 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 52.722564] binder: 5287:5295 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 52.723950] binder_alloc: binder_alloc_mmap_handler: 5287 20000000-20002000 already mapped failed -16 [ 52.729308] binder: BINDER_SET_CONTEXT_MGR already set [ 52.729315] binder: 5287:5295 ioctl 40046207 0 returned -16 [ 52.731026] binder: 5287:5311 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 52.731094] binder_alloc: 5287: binder_alloc_buf, no vma [ 52.731108] binder: 5287:5295 transaction failed 29189/-3, size 0-0 line 3127 [ 52.743790] ================================================================== [ 52.743808] BUG: KASAN: use-after-free in __lock_acquire+0x2eff/0x3640 [ 52.743814] Read of size 8 at addr ffff8801d8918d38 by task syz-executor6/5295 [ 52.743815] [ 52.743822] CPU: 0 PID: 5295 Comm: syz-executor6 Not tainted 4.9.79-g47af77b #26 [ 52.743826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.743837] ffff8801d8d1f610 ffffffff81d94b09 ffffea0007624600 ffff8801d8918d38 [ 52.743845] 0000000000000000 ffff8801d8918d38 ffff8801d8918d38 ffff8801d8d1f648 [ 52.743853] ffffffff8153e083 ffff8801d8918d38 0000000000000008 0000000000000000 [ 52.743855] Call Trace: [ 52.743863] [] dump_stack+0xc1/0x128 [ 52.743873] [] print_address_description+0x73/0x280 [ 52.743879] [] kasan_report+0x275/0x360 [ 52.743886] [] ? __lock_acquire+0x2eff/0x3640 [ 52.743893] [] __asan_report_load8_noabort+0x14/0x20 [ 52.743900] [] __lock_acquire+0x2eff/0x3640 [ 52.743907] [] ? __lock_acquire+0x629/0x3640 [ 52.743914] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.743922] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.743928] [] ? __lock_is_held+0xa1/0xf0 [ 52.743934] [] lock_acquire+0x12e/0x410 [ 52.743940] [] ? remove_wait_queue+0x14/0x40 [ 52.743948] [] _raw_spin_lock_irqsave+0x4e/0x70 [ 52.743954] [] ? remove_wait_queue+0x14/0x40 [ 52.743960] [] remove_wait_queue+0x14/0x40 [ 52.743967] [] ep_unregister_pollwait.isra.6+0xaf/0x240 [ 52.743974] [] ? ep_unregister_pollwait.isra.6+0x12a/0x240 [ 52.743980] [] ep_remove+0x41/0x290 [ 52.743986] [] eventpoll_release_file+0xc5/0x140 [ 52.743992] [] __fput+0x5a8/0x6e0 [ 52.743998] [] ____fput+0x15/0x20 [ 52.744004] [] task_work_run+0x115/0x190 [ 52.744011] [] do_exit+0x7e7/0x2a40 [ 52.744019] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.744025] [] ? release_task+0x1240/0x1240 [ 52.744032] [] ? get_futex_key+0x1050/0x1050 [ 52.744038] [] ? __dequeue_signal+0xa3/0x550 [ 52.744045] [] ? recalc_sigpending+0x72/0x90 [ 52.744052] [] do_group_exit+0x108/0x320 [ 52.744058] [] get_signal+0x4d4/0x14e0 [ 52.744066] [] do_signal+0x87/0x1a00 [ 52.744073] [] ? binder_ioctl_write_read.isra.55+0x9a0/0x9a0 [ 52.744080] [] ? do_vfs_ioctl+0x458/0x1140 [ 52.744086] [] ? setup_sigcontext+0x7d0/0x7d0 [ 52.744092] [] ? ioctl_preallocate+0x220/0x220 [ 52.744098] [] ? selinux_file_ioctl+0x355/0x530 [ 52.744104] [] ? selinux_capable+0x40/0x40 [ 52.744110] [] ? SyS_futex+0x22e/0x2d0 [ 52.744115] [] ? do_futex+0x15c0/0x15c0 [ 52.744122] [] ? exit_to_usermode_loop+0xac/0x120 [ 52.744128] [] exit_to_usermode_loop+0xe1/0x120 [ 52.744134] [] syscall_return_slowpath+0x1a0/0x1e0 [ 52.744140] [] entry_SYSCALL_64_fastpath+0xe6/0xe8 [ 52.744142] [ 52.744145] Allocated by task 5311: [ 52.744151] save_stack_trace+0x16/0x20 [ 52.744156] save_stack+0x43/0xd0 [ 52.744160] kasan_kmalloc+0xad/0xe0 [ 52.744165] kmem_cache_alloc_trace+0xfb/0x2a0 [ 52.744169] binder_get_thread+0x15d/0x750 [ 52.744174] binder_poll+0x4a/0x210 [ 52.744179] SyS_epoll_ctl+0x11d7/0x2190 [ 52.744183] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 52.744184] [ 52.744187] Freed by task 5311: [ 52.744191] save_stack_trace+0x16/0x20 [ 52.744196] save_stack+0x43/0xd0 [ 52.744201] kasan_slab_free+0x72/0xc0 [ 52.744205] kfree+0x103/0x300 [ 52.744211] binder_thread_dec_tmpref+0x1cc/0x240 [ 52.744216] binder_thread_release+0x27d/0x540 [ 52.744220] binder_ioctl+0x9c0/0x11b0 [ 52.744224] do_vfs_ioctl+0x1aa/0x1140 [ 52.744229] SyS_ioctl+0x8f/0xc0 [ 52.744233] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 52.744235] [ 52.744239] The buggy address belongs to the object at ffff8801d8918c80 [ 52.744239] which belongs to the cache kmalloc-512 of size 512 [ 52.744244] The buggy address is located 184 bytes inside of [ 52.744244] 512-byte region [ffff8801d8918c80, ffff8801d8918e80) [ 52.744246] The buggy address belongs to the page: [ 52.744253] page:ffffea0007624600 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 52.744258] flags: 0x8000000000004080(slab|head) [ 52.744260] page dumped because: kasan: bad access detected [ 52.744261] [ 52.744263] Memory state around the buggy address: [ 52.744268] ffff8801d8918c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.744273] ffff8801d8918c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.744277] >ffff8801d8918d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.744279] ^ [ 52.744284] ffff8801d8918d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.744288] ffff8801d8918e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.744290] ================================================================== [ 52.744291] Disabling lock debugging due to kernel taint [ 52.744294] Kernel panic - not syncing: panic_on_warn set ... [ 52.744294] [ 52.744299] CPU: 0 PID: 5295 Comm: syz-executor6 Tainted: G B 4.9.79-g47af77b #26 [ 52.744303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.744312] ffff8801d8d1f568 ffffffff81d94b09 ffffffff8419709f ffff8801d8d1f640 [ 52.744319] 0000000000000000 ffff8801d8918d38 ffff8801d8918d38 ffff8801d8d1f630 [ 52.744327] ffffffff8142f531 0000000041b58ab3 ffffffff8418ab10 ffffffff8142f375 [ 52.744329] Call Trace: [ 52.744335] [] dump_stack+0xc1/0x128 [ 52.744342] [] panic+0x1bc/0x3a8 [ 52.744350] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 52.744356] [] ? add_taint+0x40/0x50 [ 52.744362] [] kasan_end_report+0x50/0x50 [ 52.744368] [] kasan_report+0x167/0x360 [ 52.744375] [] ? __lock_acquire+0x2eff/0x3640 [ 52.744382] [] __asan_report_load8_noabort+0x14/0x20 [ 52.744389] [] __lock_acquire+0x2eff/0x3640 [ 52.744396] [] ? __lock_acquire+0x629/0x3640 [ 52.744403] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.744411] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.744417] [] ? __lock_is_held+0xa1/0xf0 [ 52.744423] [] lock_acquire+0x12e/0x410 [ 52.744429] [] ? remove_wait_queue+0x14/0x40 [ 52.744435] [] _raw_spin_lock_irqsave+0x4e/0x70 [ 52.744441] [] ? remove_wait_queue+0x14/0x40 [ 52.744448] [] remove_wait_queue+0x14/0x40 [ 52.744455] [] ep_unregister_pollwait.isra.6+0xaf/0x240 [ 52.744461] [] ? ep_unregister_pollwait.isra.6+0x12a/0x240 [ 52.744466] [] ep_remove+0x41/0x290 [ 52.744477] [] eventpoll_release_file+0xc5/0x140 [ 52.744481] [] __fput+0x5a8/0x6e0 [ 52.744487] [] ____fput+0x15/0x20 [ 52.744492] [] task_work_run+0x115/0x190 [ 52.744499] [] do_exit+0x7e7/0x2a40 [ 52.744506] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.744512] [] ? release_task+0x1240/0x1240 [ 52.744518] [] ? get_futex_key+0x1050/0x1050 [ 52.744524] [] ? __dequeue_signal+0xa3/0x550 [ 52.744531] [] ? recalc_sigpending+0x72/0x90 [ 52.744538] [] do_group_exit+0x108/0x320 [ 52.744544] [] get_signal+0x4d4/0x14e0 [ 52.744551] [] do_signal+0x87/0x1a00 [ 52.744558] [] ? binder_ioctl_write_read.isra.55+0x9a0/0x9a0 [ 52.744563] [] ? do_vfs_ioctl+0x458/0x1140 [ 52.744570] [] ? setup_sigcontext+0x7d0/0x7d0 [ 52.744576] [] ? ioctl_preallocate+0x220/0x220 [ 52.744581] [] ? selinux_file_ioctl+0x355/0x530 [ 52.744587] [] ? selinux_capable+0x40/0x40 [ 52.744592] [] ? SyS_futex+0x22e/0x2d0 [ 52.744598] [] ? do_futex+0x15c0/0x15c0 [ 52.744604] [] ? exit_to_usermode_loop+0xac/0x120 [ 52.744610] [] exit_to_usermode_loop+0xe1/0x120 [ 52.744616] [] syscall_return_slowpath+0x1a0/0x1e0 [ 52.744622] [] entry_SYSCALL_64_fastpath+0xe6/0xe8 [ 52.767050] Dumping ftrace buffer: [ 52.767053] (ftrace buffer empty) [ 52.767055] Kernel Offset: disabled [ 53.673058] Rebooting in 86400 seconds..