[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 17.680709] audit: type=1400 audit(1518111642.644:6): avc: denied { map } for pid=4152 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.197' (ECDSA) to the list of known hosts. 2018/02/08 17:41:14 fuzzer started syzkaller login: [ 49.036733] audit: type=1400 audit(1518111674.000:7): avc: denied { map } for pid=4167 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/08 17:41:14 dialing manager at 10.128.0.26:38467 [ 52.889230] can: request_module (can-proto-0) failed. [ 52.898209] can: request_module (can-proto-0) failed. 2018/02/08 17:41:18 kcov=true, comps=true [ 53.439701] audit: type=1400 audit(1518111678.403:8): avc: denied { map } for pid=4167 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9084 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/08 17:41:20 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000352000-0x11)='/selinux/enforce\x00', 0x200000, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000cd1000)=""/152) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000de9000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000224000)=""/200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) move_pages(r2, 0x2, &(0x7f0000b7e000-0x10)=[&(0x7f0000ef3000/0x3000)=nil, &(0x7f00001db000/0x13000)=nil], 0x0, &(0x7f0000001000-0x1c)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000001000-0x3)=0x9) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) read(r1, &(0x7f0000000000)=""/73, 0x49) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000001000-0x10)={0x6, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000001000)={r3, &(0x7f0000000000)=""/235}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000)='/dev/sequencer\x00', 0x8840, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000001000)={0x5}, 0x4) dup(r4) getpid() mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000003000)=""/78) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000003000)=@get={0x1, &(0x7f0000000000)=""/89, 0x8000}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000003000)=0x16d000, &(0x7f0000004000)=0x2) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000006000-0x4)=r2) syz_open_procfs(r2, &(0x7f0000005000-0x8)='net/hci\x00') mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000007000-0x20)={0x3, 0x3, 0x55a3, 0x4d, r2}) 2018/02/08 17:41:20 executing program 7: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000308000-0x8)={0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@dev, @dev}, &(0x7f0000000000)=0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/autofs\x00', 0x80040, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0}, &(0x7f0000002000-0x4)=0xc) perf_event_open(&(0x7f0000000000)={0x3, 0x78, 0x6, 0x401, 0x100000001, 0x0, 0x0, 0x400, 0x40000, 0x2, 0x9, 0x4e7, 0x7ff, 0x0, 0x2, 0xfffffffffffeffff, 0x5, 0x9, 0x100000000, 0x100000001, 0xfffffffffffffff7, 0x10001, 0x1, 0x5, 0x2, 0x3, 0x5, 0x0, 0x9, 0x0, 0xffffffff80000000, 0x3, 0x10001, 0x100000000, 0x6, 0x7fffffff, 0x8, 0x8, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0xffff}, 0x8, 0x35, 0x0, 0x6, 0x4, 0x70, 0x1}, r2, 0xffffffff, r1, 0x1) sched_setparam(r2, &(0x7f0000000000)=0x12c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000003000-0xe)=@l2, &(0x7f0000002000)=0xe) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @empty}, 0x0, 0xc5, 0x0, 0x0, 0xa, 0x20, 0x80, 0xff, 0x0, r3}, {0x6, 0x7, 0x2, 0xffffffffffffff4f, 0x9, 0x6, 0x80, 0x6}, {0x0, 0xa24, 0x20d76296, 0x55}, 0x7, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x3}, {{@in=@broadcast=0xffffffff, 0x0, 0x2b}, 0xa, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x3, 0x3, 0x0, 0x8, 0x80000000, 0x3, 0x81}}, 0xe8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000004000), &(0x7f0000000000)=0xb) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = request_key(&(0x7f0000005000)='rxrpc\x00', &(0x7f0000005000-0x5)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000005000)='user\x00', 0xfffffffffffffff9) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = add_key(&(0x7f0000003000-0xc)='cifs.spnego\x00', &(0x7f0000004000-0x5)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000006000-0x22)="c2cbddccad1ccf9ff7c724aabe82ce0a3b2953dc68611e45d117cbda172cce7c8381", 0x22, 0xfffffffffffffffa) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = add_key(&(0x7f0000005000)='rxrpc\x00', &(0x7f0000006000-0x5)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000003000-0x9d)="62b78a6add745a54fa8c0c3b147716a15f707091908baafbc8c634ab93607c6f899d3064ee8120d910d4e71adb4b95b8889be97661431c14c23d02c737d90128cfc6932e82309c8b855dc193a894b4ad0ba618d027685012ac8517328cb58c179be48250e9a857621e9844ea9d5af59f7210574df6f24f9d486fd92b5492250972e97fc4ecbfb3b522f88651351bac13ab884c9c8de9162a17ecdf83d6", 0x9d, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000003000-0xc)={r4, r5, r6}, &(0x7f0000002000-0x8f)=""/143, 0x8f, &(0x7f0000006000-0x38)={&(0x7f0000005000)={'tgr160\x00'}, &(0x7f0000005000-0x66)="fa5bbffb117dbf940d45373ddcd8b9e099acbd34a8e7b37037556a7a4184fc9f267a483a1355deb3a0e44889a73406d4f1b15303b4abbdc4b7fa9a4143a449c336d61849b8984969ddb475ea326192f1ac87b9ecacb01ad342b60c2b844da1cdf29dcbcf91fa", 0x66}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000006000)={r7, 0x1}) 2018/02/08 17:41:20 executing program 1: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000c0000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r0, 0x0, &(0x7f0000001000-0x6)={&(0x7f0000000000)=""/29, 0x1d}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/dev/vga_arbiter\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001000)={0x0, 0x0, 0xa, [0x2, 0x6, 0x80000000, 0x100000000, 0xffffffff, 0x1, 0x1, 0x10000, 0x1, 0x100000000]}, &(0x7f0000001000+0xac9)=0x1c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000000)={r2, @in={{0x2, 0x1, @multicast1=0xe0000001}}, 0x6, 0xfff, 0x3, 0x5, 0x2}, &(0x7f0000002000-0x4)=0xa0) bind$vsock_stream(r1, &(0x7f0000001000)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001000-0x4)=0x10000) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002000-0xc)='/dev/rfkill\x00', 0x10a01, 0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000001000-0x4)=r0) timerfd_create(0x7, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet6(r1, &(0x7f0000002000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000003000-0x4)=0x1c) ioctl$TIOCSCTTY(r1, 0x540e, 0x7) ptrace$setopts(0x4206, r0, 0x427, 0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000003000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20001) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000002000)) ioctl$TIOCCONS(r4, 0x541d) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000000)={0xb2, 0xf36, 0x4, 0x80, 0x40, 0x200, 0x3, 0x8}, &(0x7f0000005000-0x40)={0x3e, 0x40, 0xfffffffffffffffb, 0x4, 0x2, 0x7fffffff, 0x8, 0x8001}, &(0x7f0000005000-0x40)={0x7, 0x9, 0xfffffffffffffffb, 0x4f4, 0x101, 0xfe6d, 0x6, 0x80}, &(0x7f0000005000-0x10)={r5, r6/1000+30000}) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000004000)=""/197) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000005000)) 2018/02/08 17:41:20 executing program 2: openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00008e7000)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000001000-0xd)='/dev/dmmidi#\x00', 0x60000, 0x200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x1, 0x0}, &(0x7f0000de2000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000792000)={r1, 0x6}, 0x6) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000000)=""/7, 0x7) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001000-0x8)={r1, 0x3}, &(0x7f0000001000)=0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001000-0x4)) lookup_dcookie(0x100000000, &(0x7f0000002000-0xfb)=""/251, 0xfb) r3 = getuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in=@broadcast=0xffffffff, @in=@multicast2=0xe0000002, 0x3, 0x0, 0x0, 0x2, 0xa, 0x80, 0x20, 0x0, 0x0, r3}, {0x8, 0x8, 0x9, 0x7, 0xe2, 0x3, 0xffffffffffffffe1, 0x10000}, {0x9, 0xffffffffffffa2ba, 0xd0, 0x81}, 0x81, 0xf, 0x0, 0x1, 0x6a839e11c3c0dcd8}, {{@in=@loopback=0x7f000001, 0x2, 0x3b}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x0, 0xa}, 0x1, 0x3, 0x3, 0x9, 0x9, 0x8000, 0x8}}, 0xe8) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001000)=@common='erspan0\x00') mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$packet(r0, &(0x7f0000003000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000003000-0xc)={r4, @empty, @dev={0xac, 0x14, 0x0, 0x13}}, 0xc) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001000-0xb)={r4, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}}, 0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004000-0x10)={0x3, &(0x7f0000004000-0x18)=[{0x2, 0x83b2, 0xdb4d, 0xffc}, {0xfffffffffffffffd, 0x2, 0x102, 0x5}, {0x5, 0x3f, 0x0, 0x7fffffff}]}, 0x10) connect$bt_sco(r0, &(0x7f0000003000-0x8)={0x1f, {0x1, 0x3, 0x81, 0x9, 0x0, 0x469ac00}}, 0x8) connect$ax25(r0, &(0x7f0000003000-0x10)={0x3, {"1339b4e9fee657"}, 0x5}, 0x10) sendto(r0, &(0x7f0000003000-0xea)="b19e1607bd28a9c71225d515a44c41a4f7fd671d314d3adfa63d5cd122a59f3a0976856bd22565d9718ffb3671fabc5da51bd16e3d3af6accab9275f69fe9cd81bc9a93671b1935f34785309415b6b485f7aad5cd2de2e5c60e570151b26800f9fb438d8a7d89d3423bb2c674d547e8ffa0f8844b7b3d7774142932b9517f9d40388be11d35959636ed183cd64700a667d09800d449ce51f0089e55a1dc0f6852ed01f354ad403ded5628c0eba5bdd9467c8d48b92075227fee72d08c083671f7a63c78c073959b222fe8c3d07909659b07dc1b17d956785a78233308275ed7e52351270d1044a9f5f94", 0xea, 0x40, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000001000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) fstat(r2, &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000005000-0x1)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000001000-0xc)=[r5, r6, r7]) 2018/02/08 17:41:20 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$ax25(r0, &(0x7f0000001000-0x10)={0x3, {"7c4ff5ad31a3fe"}, 0x2}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000002000-0x8)={@empty, @rand_addr=0x6}, 0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000003000-0x8)='./file0\x00') mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000004000-0xc)={@empty, @multicast2, 0x0}, &(0x7f0000002000)=0xc) lstat(&(0x7f0000003000-0xe)='./file0/file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002000)={{{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, @in6=@empty, 0x2, 0x6, 0x3, 0x0, 0xa, 0x20, 0x0, 0x6, r1, r2}, {0x1f, 0x1, 0x361c, 0xffffffffffffffff, 0x4, 0x3, 0x8, 0x1000}, {0x248, 0x9, 0x100000001, 0x3}, 0x2, 0x2, 0x1, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x0}, 0x2, @in=@empty, 0x6, 0x2, 0x3, 0x1f, 0x4, 0x5, 0x1}}, 0xe8) r3 = inotify_init1(0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000005000-0x90)) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000006000-0xc)={@remote, @multicast2, 0x0}, &(0x7f0000005000)=0xc) setsockopt$inet6_dccp_int(r0, 0x21, 0x1b, &(0x7f0000002000)=0x7, 0x4) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001000)=0x8, 0x4) r5 = fcntl$getown(r0, 0x9) tkill(r5, 0x28) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000005000)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x240, 0x240, 0x98, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f0000001000), {{{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x98}}, [{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x0, 0x2, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, 0xffffff00, 0xff000000, @common='eql\x00', @syzn={0x73, 0x79, 0x7a, 0x0}, {0xff}, {}, 0x62, 0x3, 0x16}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xb, 0x100000001, 0xa00000000000, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@loopback=0x7f000001, @broadcast=0xffffffff, 0x0, 0xff, @generic="4008d2c5d0d0614ec627f240db859b86", @syzn={0x73, 0x79, 0x7a, 0x0}, {0xff}, {}, 0x84, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ah={0x28, 'ah\x00', 0x0, {0x2, 0x3}}, @common=@icmp={0x28, 'icmp\x00', 0x0, {0xf, 0x0, 0x7, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x7fffffff, 0xf800000000000000, [0x1c32, 0x0, 0xe6, 0xffffffffffff2ad2, 0x3aeb, 0xfffffffffffffed2, 0xd9e, 0x3, 0x5, 0xa5, 0x5, 0xfff, 0x57ce, 0x6, 0x6, 0x1], 0x1, 0x4f8, 0x80}}}]}}, 0x3c0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000004000)={&(0x7f0000006000-0xc)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006000)={&(0x7f0000005000)=@ipmr_newroute={0x70, 0x18, 0x10, 0x2, 0x2, {0x80, 0xb4, 0x10, 0x7, 0xfc, 0x4, 0xff, 0xb, 0x800}, [@RTA_MULTIPATH={0x2c, 0x9, [{0x100000000, 0x7, 0x7, r4}, {0x9, 0x1000, 0x1f, r4}, {0x4, 0x9, 0x6, r1}, {0x20, 0x100, 0x2, r1}, {0x95, 0x9, 0x5, r4}]}, @RTA_UID={0x8, 0x19, r2}, @RTA_MARK={0x8, 0x10, 0x2}, @RTA_PRIORITY={0x8, 0x6, 0xf3e0}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_GATEWAY={0x8, 0x5, @multicast1=0xe0000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x400d0}, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002000-0x8)={0x0, 0x3}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000008000-0x8)={r7, 0x3, 0x9}, &(0x7f0000003000-0x4)=0x8) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000007000-0x4)) 2018/02/08 17:41:20 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000351000)='/dev/audio#\x00', 0x5, 0x40040) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$fuse(r0, &(0x7f0000000000+0x55a)={0x50, 0x1, 0xa, @fuse_init_out={0x7, 0x1a, 0x8, 0x7, 0x3a, 0x1000, 0x80000001}}, 0x50) madvise(&(0x7f0000119000/0x3000)=nil, 0x3000, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000002000-0x6)=""/6) getsockname$llc(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000003000-0xa0)={0x0, @in6={{0xa, 0x0, 0x3ff, @dev={0xfe, 0x80, [], 0x0, 0x17}, 0x8}}, 0x1, 0x200, 0x4, 0x1, 0x20}, &(0x7f0000002000-0x4)=0xa0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001000)={r1, 0x8, 0x1b5b, 0x40000000, 0x26, 0x9}, &(0x7f0000003000-0x4)=0x14) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000003000-0xe)={r2, 0xfffffffffffffffd, 0x3, [0x1, 0x9, 0xfffffffffffff0a9]}, &(0x7f0000001000-0x4)=0xe) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000004000-0x10)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000001000)=0x2, 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000005000-0xa2)=""/162, 0xa2, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$ax25(r3, &(0x7f0000005000), &(0x7f0000006000-0x4)=0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000002000)={r1, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x1, 0x200}, 0x98) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000006000-0x4)=0x7) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000007000-0x8)={r1, 0x53}, &(0x7f0000006000)=0x8) ioctl$KDDISABIO(r0, 0x4b37) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000004000)=""/166, &(0x7f0000007000)=0xa6) 2018/02/08 17:41:20 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000b58000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f000010a000-0xc)='/dev/autofs\x00', 0x200800, 0x0) r2 = fcntl$getown(r1, 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r2, 0x7, &(0x7f0000000000)={&(0x7f00003a8000)="f0f7b2bc50dcba75473785bf1598a46d5ce260478f0dbd7ba493c278790a3adc67784800f83c1a175983b85c02b312998cacd81c0041e17b3387e4191ad9c6fed2b1ca9ada0ad41328cd49412a56f8d38c319087a341fb202553851da0f25bf6155098e1da8e97d83cf23b56ae6e03e9037d2a19a2f04a92b8532410fc8e3ad69b4f62c7a31ce84a33e78f7eead717a560a379a9ac8c7342d59a21ca5639329228eb39afc830d43a33c704fadb7d05316c6c508489602790dec95d331452c3e3a5fc35559ee515e33fb533559f4fb780bdc55c601b1ec437947c51862c742b18331216ee47fa", 0xe6}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000001000)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000003000-0x8)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001000)) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000004000-0x4), &(0x7f0000001000)=0x4) exit_group(0x7) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setlease(r3, 0x400, 0x0) semget(0x1, 0x0, 0x80) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000003000), &(0x7f0000005000-0x4)=0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000006000-0x38)=""/56, 0x38) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000007000-0x78)={0x7, 0x78, 0x401, 0x4, 0x7, 0x7, 0x0, 0xfffffffffffffffb, 0x880, 0x8, 0x0, 0xda3, 0x3, 0x9, 0x4, 0x9e77, 0x3, 0x401, 0x1000, 0x20, 0x8, 0x8001, 0x4, 0x4000, 0xffffffff00000000, 0x400, 0x9, 0x6f, 0x1ff, 0x0, 0xffffffffffffffe1, 0x9, 0x514, 0x55, 0x1462, 0x4, 0x4, 0x56c8, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0x7}, 0x8000, 0x3f, 0x3, 0x5, 0x80000000, 0x4, 0x6}, r2, 0x80, r0, 0x8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000008000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005000-0x8)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, r5) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000008000)={&(0x7f0000007000/0x1000)=nil, 0x6, 0x5, 0x1, &(0x7f0000004000/0x3000)=nil, 0x202}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000009000)={0x1, &(0x7f0000005000-0x1)='Z'}) 2018/02/08 17:41:20 executing program 6: pipe2(&(0x7f000038f000)={0x0, 0x0}, 0x84000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000a79000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000001000-0x4), &(0x7f0000000000), &(0x7f0000000000)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00007fe000-0xe8)={{{@in6=@dev={0xfe, 0x80, [], 0x0, 0x10}, @in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x1, 0x3, 0x3, 0x9, 0xa, 0xa0, 0x80, 0xff, r2, r3}, {0x7, 0x5, 0x1, 0xfffffffffffffffc, 0x674, 0x1, 0x5, 0x6}, {0x5, 0x0, 0x8, 0x14}, 0x8, 0xd, 0x3, 0x0, 0x2, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x7e}, 0xa, @in=@loopback=0x7f000001, 0x7, 0x4, 0x1, 0x3, 0x7, 0x2, 0x100000001}}, 0xe8) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001000)="b13d67abaeac0ab460d51b6f5b29233678e4430e927e6b927ffe29840aeb29cf9a78072a55", 0x25, 0xfffffffffffffffb) keyctl$revoke(0x3, r4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000001000)=@common='ip6tnl0\x00') mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000002000)={r4, r4, r4}, &(0x7f0000000000)=""/68, 0x44, &(0x7f0000000000)={&(0x7f0000001000)={'sha256-generic\x00'}}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000004000-0x4)=0x3) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002000-0xb)='/dev/hwrng\x00', 0x10000, 0x0) r6 = semget(0x0, 0x7, 0x52) semctl$SEM_INFO(r6, 0x1, 0x13, &(0x7f0000003000)) r7 = getpgid(0x0) sched_getaffinity(r7, 0x8, &(0x7f0000003000)) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 55.524256] audit: type=1400 audit(1518111680.488:9): avc: denied { map } for pid=4167 comm="syz-fuzzer" path="/root/syzkaller-shm721041944" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 sendmsg$nl_netfilter(r1, &(0x7f0000004000)={&(0x7f0000003000-0xc)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002000-0x10)={&(0x7f0000003000)={0x46c, 0x13, 0x4, 0x700, 0x5, 0x0, {0xa}, [@nested={0x13c, 0x0, [@typed={0x18, 0x31, @ipv6=@empty}, @generic="fbaa70df7f2147a62054d9549fef9027fbf5009de05ebc4e971f60e7c2417468653258fc01855590a80f5653119e38650956cca54d62e245d7b32d43f8ae7f91d3cee087b140e3ae3a41c31feee157c6c6808b2ad3be90cbfea76616b51da1aaea0ce1d3efd7bfa248032ae2113c6de6eb80d0c224e9790fd50fd16159222fedc15389600415a79e875cf99793cc49af477e87320948b1b3e5a8fff693b25e28433824a4391ace646667dd2547f39f61ef789e22cc53372dc758", @generic="92e5ff8259a08361ee476cdaf01962537ce0f52eed66afd45ce7129aa58c0beed7856ed0287090582ab0cba847ced14d7f472b9fb399183cb34a5aa0413b0d8225befdd820a5ed5dadb25ed268868de2187b233db2d8f4ecc9d5e7469852c81a041294e7fa"]}, @typed={0xc, 0x58, @ipv4=@loopback=0x7f000001}, @nested={0x2dc, 0x6c, [@generic="d7d63345ef0dba1e12f337380914e76e2ded4d2ab3c35fee8d6dcf10e897eb7612722df516fc6f8aeb77bdf2d5816b9b7f5f7c81861146c4e162f125e281562b35c80253661c2796b686f8d8ed7a951a447bef128045aacfb81805404b4bb085080f479d1791d28f6da380ebdfa041021d6b982cce31f3ac5f37616806cc37b366d76003e883b1fb53310cc5e29867ff62ba32e75ebbd41ba3fe95f0e15a76f66a9ec1633483975f224f3090ae760caf2e6e146b6d8233f06f96344b71fcb0e1241169ea3ddf8e8333fba9041eb7497cbfec0d2c34bc2606ce70a8088b976b8b", @typed={0x30, 0x6c, @binary="f805e28d50838e1091f7c21b1fe71a06ea040165da60dbf246d0ffc8c2e67f0aaf658055269f4177"}, @generic="cf052cede37ed64114a8eb8c6bd57e66697d5b99fe4c4e32303e0bcaecc7cce4a6246a7fec159d5092d002badf463fc3fb79acf7395ff2aa3712fe3a8b1b13f29f8231ed822b463acfbf6dce71bfe7c0ffd77d9d98a0b7802ff9eac6cb2f367f6e57990ff8cd53aa6f6b3faa83814e496fdcddb9410b5140c66e7fb791b9724055699d7b24f331af5ba83c0f331c8b098d", @typed={0xc, 0x3b, @u32=0x7fffffff}, @generic="deddaa813ad95f29f2582d64a71eccab7629933a6d653f6116490237b1dedc407efbd21d755755e511d588a472bf19bca8606f", @generic="d303467b72a853f2da9b283a97d7cd62ca9feb281b1c80cf4789ef0f8a97432fb23083a7aac3935047f3619a1822eb18cab0c7e17d8591d74fcddd4d93d1dc83f3737a5412f9b897e28cbb0e71f33818071784a41db5e1d0f63a0b649b27f514ad135e981d723e6723372e300a5c873cd918e9d56ed00b20acbd952425bb355b223eec5a1b9c72ab1fee64ea6ca9894f6ca50c5cf4c04633eef84310cdeba3d5150aeb9e260408609034bd40aa66edd296f2a348b9e4208f68ec1f2374fce0ab4476ecb8fe459cd1b35c61ae746daae5b60e020d9a004de6030da0815e9660da1a61475df15932d911780bae8afc40399cf3c7eeaa06"]}, @typed={0x10, 0x87, @str='user\x00'}, @nested={0x24, 0x83, [@typed={0x20, 0x54, @str='wlan1\\$cgroup%cgroup)\x00'}]}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4010}, 0x80) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000005000-0xa)={0x0, 0x1, 0x1, 0x6d9}, &(0x7f0000003000-0x4)=0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000006000-0x10)={r8, 0x91, 0x647b, 0xffffffffffff07e2}, &(0x7f0000006000-0x4)=0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netrom(r0, &(0x7f0000003000-0x10)=@ax25, &(0x7f0000006000)=0x10) [ 55.576835] audit: type=1400 audit(1518111680.540:10): avc: denied { sys_admin } for pid=4207 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 55.594926] IPVS: ftp: loaded support on port[0] = 21 [ 55.672946] IPVS: ftp: loaded support on port[0] = 21 [ 55.674555] audit: type=1400 audit(1518111680.633:11): avc: denied { net_admin } for pid=4211 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 55.708951] IPVS: ftp: loaded support on port[0] = 21 [ 55.755543] IPVS: ftp: loaded support on port[0] = 21 [ 55.809369] IPVS: ftp: loaded support on port[0] = 21 [ 55.900569] IPVS: ftp: loaded support on port[0] = 21 [ 56.012556] IPVS: ftp: loaded support on port[0] = 21 [ 56.120565] IPVS: ftp: loaded support on port[0] = 21 [ 56.935740] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.025152] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.067619] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.139365] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.294476] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.447500] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.585638] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.593122] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 59.412158] audit: type=1400 audit(1518111684.375:12): avc: denied { sys_chroot } for pid=4211 comm="syz-executor2" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/08 17:41:24 executing program 2: ioprio_set$pid(0x0, 0x0, 0x58f9) r0 = getpgid(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f0000001000-0x4), 0x6, &(0x7f0000001000-0x90)) [ 59.501010] audit: type=1400 audit(1518111684.430:13): avc: denied { net_raw } for pid=5148 comm="syz-executor2" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/08 17:41:24 executing program 2: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x5, &(0x7f0000007000)="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") mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000009000-0xb0)={{0x8}, 'port1\x00', 0x8, 0x8000a, 0x0, 0x0, 0x7, 0xeb9, 0x1, 0x0, 0x4, 0xfe}) read(r0, &(0x7f0000002000)=""/4096, 0x1000) 2018/02/08 17:41:24 executing program 2: mmap(&(0x7f0000000000/0xfb0000)=nil, 0xfb0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000fb1000-0x1e)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, [], {@can={0xc, {{0x3, 0x100, 0x7, 0xa24d}, 0x4, 0x3, 0x0, 0x0, "6b1f846988492efe"}}}}, &(0x7f00000ed000)={0x0, 0x1, [0xdc4]}) r1 = socket(0x4, 0x5, 0xfffffffffffffffb) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00009c8000)=0x9, &(0x7f0000cf1000-0x4)=0x4) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000003000)="f5", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f000073a000-0xf), &(0x7f0000004000-0x4)) [ 59.617916] audit: type=1400 audit(1518111684.581:14): avc: denied { create } for pid=5182 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 2018/02/08 17:41:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) pipe(&(0x7f0000b70000-0x8)={0x0, 0x0}) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00006ff000-0x8)) connect$unix(r0, &(0x7f00000bc000)=@abs={0x0, 0x0, 0x0}, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) setsockopt(r2, 0x0, 0x9d8f, &(0x7f000059d000+0x37a)="215cd9f3860d741c4c323645e9b26fce04c179172042a445484dc595e780", 0x1e) recvmmsg(r0, &(0x7f00003bd000-0x1e0)=[{{&(0x7f0000be7000-0x8)=@sco, 0x8, &(0x7f0000955000)=[], 0x0, &(0x7f00005ed000)}}], 0x1, 0x22, &(0x7f00007a7000)) r4 = syz_open_dev$vcsa(&(0x7f0000239000)='/dev/vcsa#\x00', 0x63f0000000000000, 0xfbfffffffffffffd) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000a0a000-0x18)={0x0}) lstat(&(0x7f0000e70000)='./file0\x00', &(0x7f00000bc000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000d4c000)='./file1\x00', &(0x7f00009b5000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000914000-0x8)='./file0\x00', r6, r7, 0x100) r8 = mmap$binder(&(0x7f0000739000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, 0xffffffffffffff9c, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000a3a000-0x4)=0x40) mq_timedsend(r3, &(0x7f0000fa1000-0x2d)="f55ee5efef81662e7623020ef57f978b0baab5236522de08db6a60062d48e463924050d630f1e612cc6baa0ed6", 0x2d, 0x7, 0x0) r9 = request_key(&(0x7f0000f46000-0x8)='keyring\x00', &(0x7f0000b7b000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000a20000-0x1f)='ppp1*systemnodevmime_typewlan0\x00', 0x0) keyctl$update(0x2, r9, &(0x7f000083c000)="0ac9082f75983ea4b3236df4e60b7234302bfcb78f7cf30dfc82572f288f94b648a79c702d58a687504ebb031c9ebcb7dc90a0ebdb8876e945260dd022d34527b17630bf8d9c3ebbb3bb072768b020a38d29690953", 0x55) readlink(&(0x7f0000dbc000)='./file0\x00', &(0x7f000071a000)=""/63, 0x3f) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00004c0000-0x30)={0xbc, 0x0, &(0x7f00006de000)=[@request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x50, 0x40, &(0x7f000087c000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fda={0x66646185, 0x7, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r1}], &(0x7f0000491000-0x40)=[0x78, 0x30, 0x28, 0x48, 0x0, 0x20, 0x0, 0x0]}, 0x2}}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x50, 0x50, &(0x7f0000672000)=[@flat={0x776a2a85, 0x10a, r5, 0x4}, @fda={0x66646185, 0x3, 0x3, 0x17}, @flat={0x776a2a85, 0x1, r8}], &(0x7f00002c0000)=[0x78, 0x28, 0x20, 0x38, 0x0, 0x0, 0x58, 0x30, 0x70, 0x30]}, 0x3}}, @exit_looper={0x630d}, @exit_looper={0x630d}, @dead_binder_done={0x40086310, 0x4}], 0x2e, 0x0, &(0x7f0000130000)="98814003d3d6f32cab73af78168bf144844e83585bcf7da0908ebe55f9e6a06210e14ff523495d8baf090dd591e9"}) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00003d5000)=[0xfff, 0x7d]) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000c66000-0x8)={0x0, 0x401}, &(0x7f0000031000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f000053e000-0x8)={r10, 0x7}, &(0x7f0000e00000-0x4)=0x8) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000527000-0x88)={0x0, {{0xa, 0x0, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x7f}}}, 0x88) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000861000)=@get={0x1, &(0x7f0000311000-0x37)=""/55, 0x939c}) poll(&(0x7f0000085000-0x10)=[], 0x0, 0x5b) connect$unix(r0, &(0x7f0000681000)=@abs={0x0, 0x0, 0x0}, 0x8) 2018/02/08 17:41:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000893000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000087e000-0x30)={0x44, 0x0, &(0x7f0000412000)=[@reply={0x40406301, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000d87000)=[], &(0x7f0000ef6000-0x18)=[0x0]}}], 0x0, 0x0, &(0x7f0000927000)}) openat$ppp(0xffffffffffffff9c, &(0x7f0000d68000-0x9)='/dev/ppp\x00', 0x82403, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f000000b000-0x10)=[], 0x0, 0x0, &(0x7f0000004000)}) 2018/02/08 17:41:24 executing program 1: mmap(&(0x7f0000d3c000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000d3c000+0x786)={0x0, 0x0}) ioctl$sock_SIOCINQ(r0, 0xc0189436, &(0x7f0000d3c000-0x4)) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x3, &(0x7f0000001000)={0x1ff, 0x1c000000, 0x9, 0x7, 0x2ff, 0x8, 0xfffffffeffffffff, 0x0, 0x7, 0x5, 0x40, 0xfffffffffffffffa, 0x5, 0x1, 0x6, 0x365fe728, 0x29d, 0xffff, 0x10, 0x0, 0x2, 0x8, 0x5, 0x101, 0x1ff, 0xc06f}) connect(r0, &(0x7f0000000000)=@nfc_llcp={0x27, 0xc24, 0xe6, 0x5, 0x2, 0x1, "c5706aabe9b9407ebccd747a1d86ff3e728eac9e9c6bb5e24a5508a0061e29753111d2ca89e6df1907aff06e79099afdce0060188c844d6b8ba242e73ac403", 0x1f}, 0x60) accept4$alg(r1, 0x0, 0x0, 0x80000) 2018/02/08 17:41:24 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x20) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000621000)=""/154) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bind$inet(r2, &(0x7f0000739000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r2, &(0x7f0000a64000-0x1), 0x0, 0x20020004, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000f44000-0x4)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000748000+0x47c)=[{0x8}, {}, {}, {}, {}, {}, {}, {}], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000f8e000)={0x1ff, 0x20000000012c6, 0x1, 0xfffffffc, 0xff}, 0xfffffff9) bind$vsock_stream(r0, &(0x7f00000d9000)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00007b2000-0x4)=0x80000001, 0x4) sendto$inet(r2, &(0x7f00006e2000)='!', 0x1, 0x0, 0x0, 0x0) 2018/02/08 17:41:24 executing program 6: syz_fuse_mount(&(0x7f0000593000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x562e3336c0ed74de) r0 = open(&(0x7f00002bf000-0x8)='./file0\x00', 0x400000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4$inet(r0, &(0x7f0000001000-0x10)={0x0, 0xffffffffffffffff, @loopback}, &(0x7f0000001000)=0x10, 0x800) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001000)=""/83) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000001000)={0x7fffffff}, 0x4) bind$netlink(r0, &(0x7f0000001000-0xc)={0x10, 0x0, 0x2, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001000-0xa0)={0x0, @in={{0x2, 0x3, @broadcast=0xffffffff}}, 0x9, 0xc00, 0x1, 0x2, 0x2}, &(0x7f0000001000-0x4)=0xa0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000002000)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003000-0x8)={r2, 0x67da}, 0x8) 2018/02/08 17:41:24 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000002000-0xd)='GPLem1\\/ppp0\x00', 0xc0, 0x12, &(0x7f0000002000-0x40)={0x9, 0x0, 0xcec, 0x4, 0xffffffff, 0x400, 0x1, 0x4}) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002000)={0x2, [0x0, 0x0]}, &(0x7f0000002000-0x4)=0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000003000-0x8)=0x1f, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000002000-0x8)={r1, 0x82}, &(0x7f0000001000)=0x8) readv(r0, &(0x7f0000001000-0x20)=[{&(0x7f0000d58000)=""/57, 0x39}], 0x1) 2018/02/08 17:41:24 executing program 5: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x8080a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001a000-0x2f8)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f000001f000-0x40), {{{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}, [{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00', 0x0, {0x0, 0x0, 0xfffffffffffffffc}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}]}}, 0x2f8) 2018/02/08 17:41:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000145000-0x9)='/dev/kvm\x00', 0x0, 0x0) get_thread_area(&(0x7f0000387000-0x10)={0x4, 0x0, 0xffffffff, 0x6, 0x6, 0xffff, 0x9, 0x0, 0x1f, 0x200}) r1 = dup(r0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000ce4000-0xc)={&(0x7f0000bf0000)='./file0\x00', r1}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000026d000)={0x0}, &(0x7f0000485000)=0xc) ioprio_get$pid(0x3, r4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000c08000-0x4)=0x88, 0x4) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000009000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xffffffffffffffff}]}) 2018/02/08 17:41:24 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002000)='/dev/autofs\x00', 0x404000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002000)='/dev/vga_arbiter\x00', 0x202002, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000003000-0xd2)={r3, 0x0, 0x4, "8750ba5eb63fccf38f3b741d0eca5240428b099f4b2c9258effb85fa30f774cfaa5bf1a0d8fe57985cfe220e070a8172582c9038d3a1f0e11f3ccab4d9db54e36a3b1a2f441ff16bdea4d39c13c77927dcf19b71837ccf41e3b55404a5f98e8512c3315b8f8cb13a4dddd3fd6b2c5927583ea453fef8d5016cc99e8a93aa6a15defbe6d5ca5e2ab31547bfecd36cf7afe9d1af6217ec3931ca1190d3b5340416241a047d2f6c8ebd6aefae47c2b57f240284a30da9dbb5dda475fedd6632897f0f583c7216ee7cb6"}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000001000-0x12)='/dev/snd/pcmC#D#c\x00', 0x7, 0x2) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x17, 0x6, 0x400, &(0x7f0000004000-0x8)) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000004000)={0x0, 0xa8, "6642db5433570e2594e355bfd61d449f65f59e089a936aae5ba9409f63a1f27da21dd4d5fe9741bc7a4d21976ebafc97d89ae9e165f3847e1d5c1e24afaf5e02b218aa951fbd611cc8588ede99bf77b94930b8a48f3590a71506a19f922e18b137932a1dec72115d4baaddcae17986d5af1c7bc4923004f3661f89e4f7e7b9ebb69ab6d46ba50d8b27f9d861228a1e495a5d0e3a790abac886ee5aaad5d4782918cd7e46c83a26f7"}, &(0x7f0000004000)=0xb0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000004000)=@assoc_value={r6, 0xfffffffffffffff7}, &(0x7f0000005000-0x4)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1000, &(0x7f000031e000/0x1000)=nil}) dup3(r3, r4, 0x80000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 59.953640] binder: 5269:5270 got reply transaction with no transaction stack [ 59.961057] binder: 5269:5270 transaction failed 29201/-71, size 0-8 line 2757 [ 59.970745] audit: type=1400 audit(1518111684.934:15): avc: denied { ipc_owner } for pid=5272 comm="syz-executor2" capability=15 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 60.010096] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) [ 60.025248] binder: 5269:5270 got reply transaction with no transaction stack [ 60.032597] binder: 5269:5270 transaction failed 29201/-71, size 0-8 line 2757 [ 60.062224] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.068727] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/08 17:41:25 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x4, &(0x7f000000a000)=""/244, &(0x7f0000002000)=0x95) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003000-0x15)='/proc/self/net/pfkey\x00', 0x402001, 0x0) sync() 2018/02/08 17:41:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008b3000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000cc1000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000ee1000-0x400)={"8a927799b01a029f25061eda96dd379385fc78b28fcbf8eb8455a6fb6705000000000000001a47191dc792f414ac8437036bb34b6632c980073c4cdc084a1966c440f15811d016f5b50e90810603f10a2c83eb8c06219426b1b67e4bb4b3c5199c1ad60d3f6fc72a7eb011b622072532229fbc9d9c4d1e045191ee2b0d584c8fd736ee3e7d73d5267b67a69251b1a8647e90692d30ecfb806326f17f0a7a24aa58b111193c88181907d958cb00807d63dfb58775215937ae2b62b46c6d5816f2fc52eeab0000000000000003252929e628ad2c34a0ef717fb2504d9bd66eabce002faf0512145c072f3087a5566c38fda729442c3ebd62e970a9a3eb242747993601a1a186b8376d39c69c4ce503b2638feeae79436a9708b3bb19f38377382ea7b4c9c2d674b80ef220109f8fa8200de4794547b4da6430ac512116d358949a298812c5d54017aa2fc8b814ecf28c41d4c83474ba93a8ad32b16371b42350bf984abb465228cfd848e54abc383d21d0a3315f1b8599efa1bf10bd30a1371757b138ed4a19db7c777995fd42ad446d9d2755f8552563c7639ce00da8ee3ece9ded52625aa3f0a1d7b76b32536d39eeae158271064ea79bddf1032b6e6ac794f37ec9d0c3bc4923cc7b631c6df64f28d75d99443d6653db3c6b7961190e8f82a233000001002ce4f47168ef93f01aef51c60000000000000006af34b21ed8437a371c0b427cd8c94f3952ee752b758eb5bff60a0c4f4793cd6638a2a23d68cb6e86925599fbc1361b8ce27b41d79027894b6c0003cc97a64088edf383a51eef947915369bdd4fc3cded2663d17515838f8fbba284c5b6ffc5251019eaee59d117d34c73e50fbd33ceb4508cfa4eecb7d6bb11fc4a114a13542dee77b2651783f6a5d9260036ccc70d695105d1ddb56fadc26584547d8d5cecb3c672068cc7ab31ddc5ae0a253b587d712c6113acdf49fa0100de0f7b3717528e35b7e70733538a8eec8fb17616d2198d02ba4e7690fab700000090eddb27755d6a8f29c643dfff0e4bd7c2b13b7a57a3120cb2cbb70200339dc0862dafad481a63e7f90d14c54803d8b100e0ad5cae9a0a7b2f329c3b0000000000000002f4b2eebf5bcd42688b08ff0a6575a31f81f01c13c7cb674ff41cb3c7f6896d41e86bda845164825e28b9fb539e695a9eb9710f924aefde1c96bebe4274594038347691a088f9bcaeba90315d3b3cfc24388cc15dffeda1bd610582c5b74fa6c6e789ce440f71871a5e8b85000000005806743e8e075b8624686feb21dbdb9afd74dd0067d82a72c099a2d52a599494388cb56cdb5ef9190980f9128e689e07e98b2ed59e1537fc9fe144dc2030374b0f5fcfd8f2ef242803f7bcbc07145f000000014a335b858de8acf080852c49d353a00a5aac3d6a33e0075506a1fd25799f1637b1bafaf09954ef"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f000027a000-0x4)=0x200000000000e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000a26000)='/proc/self/net/pfkey\x00', 0x121400, 0x0) 2018/02/08 17:41:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000293000)='/dev/usbmon#\x00', 0x400, 0x8080) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000187000-0xa7)=""/167) r1 = openat$audio(0xffffffffffffff9c, &(0x7f000040b000)='/dev/audio\x00', 0x40000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000c2e000)={{{@in=@empty, @in6=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000987000-0x4)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000f78000-0x18)={@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x2, r2}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00004b4000-0x8)) openat$sequencer(0xffffffffffffff9c, &(0x7f000030e000-0xf)='/dev/sequencer\x00', 0x20000, 0x0) 2018/02/08 17:41:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000a4a000)='keyring\x00', &(0x7f00005c7000-0x5)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f000047b000)='id_legacy\x00', &(0x7f00008e5000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00001d4000), 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000e7c000)={0x4, 0x0, 0x0, 'queue0\x00'}) getdents(0xffffffffffffffff, &(0x7f0000597000)=""/163, 0xa3) r5 = dup3(r4, r2, 0x0) clock_gettime(0x0, &(0x7f0000000000)) keyctl$instantiate(0xc, r0, &(0x7f00004a2000-0x41)="d9fc22275b6b646528c7e573bd6cd72064e81ee65ba8148f3b011369be7eb66a9fe2e2a430215680ad6eb8ed3424bdbebef13064eaba94c230cb32f2038e00ddde", 0x41, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00009fa000)='/selinux/load\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r5) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000400000)={0xffffffffffffffff}) sendfile(r2, r3, 0x0, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000c3f000-0x10)) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) add_key$keyring(&(0x7f0000591000)='keyring\x00', &(0x7f00000ac000)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000b8d000-0x20)=[@flags={0x3, 0x100}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) 2018/02/08 17:41:25 executing program 5: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000177000/0xc00000)=nil) shmat(r0, &(0x7f0000697000/0x2000)=nil, 0x0) msync(&(0x7f0000c64000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) write$selinux_create(r1, &(0x7f0000001000-0x34)=@access={'system_u:object_r:inetd_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x32, 0x34}, 0x34) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x2, 0x4, {0xa, 0x0, 0x100000000, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x3}}}, 0x32) 2018/02/08 17:41:25 executing program 4: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "1fa81bdfc5693eaacc403eec0ebb14069da82c46b9813b79a6bb872e8122474e9e1e68d7e3ad316b235a8651"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e7ad6a30f0efb3a8f2f1256dcb0c09c578524021857b879d300ee8a096c658540ed7e3898814aeaed1611e728d6809376f030d52f18f76e5366434ffa74d3c2d", &(0x7f000000d000-0x9)="766d6e657431ab2500", 0x9, [], [0x10001, 0x2, 0x4, 0x1]}) r0 = syz_open_dev$sndctrl(&(0x7f0000012000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000011000)={0xfffffffffffffff8, 0x7, 0x80000001, 0x29f73bf, "db40bb9f3c6b221511691bdf3ec56d313008ebf894565cbd67aa32214efd7ad8ed6e658f37ab4be69ab1aacc", 0x4}) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/02/08 17:41:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000f0e000-0x8)=0x5) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000d0000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000173000)={0x4, 0x100000000, 0x7, 0x8, 0xfff, 0x1, 0x5, 0x6, 0x0, 0x5}) r1 = eventfd(0x0) read$eventfd(r1, &(0x7f0000407000-0x8), 0xffffff84) write$eventfd(r1, &(0x7f00001d4000-0x8)=0x4, 0x8) 2018/02/08 17:41:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000d000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00005d7000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000926000-0x8)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000006c000-0xe8)={{{@in6=@dev, @in=@multicast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000da2000-0x4)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00001e7000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000efb000-0x4)=0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000fc1000-0x4)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f000036e000-0xc)={0x0, 0x0}, &(0x7f0000ec7000-0x4)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f000026a000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000702000-0x4)=0xc) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00005e1000-0xd)='/selinux/mls\x00', 0x0, 0x0) r9 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000c8c000-0xe8)={{{@in=@multicast2, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f000034f000-0x4)=0xe8) lstat(&(0x7f0000123000)='./file0\x00', &(0x7f0000c96000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VT_DISALLOCATE(r8, 0x5608) sendmmsg$unix(r1, &(0x7f0000ec6000-0x38)=[{&(0x7f000008b000-0xa)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000d23000-0x90)=[{&(0x7f0000133000)="e3f89b3c3d96cbb65da1c634db5fa1bd2b13219c4552f073fa2fa445b43e0c2f45efa4626777109eccf50c5566bef1e178cede27c612be212e406d355b907ae60b543c7c46610c59ee0443b7322758f1f533828175beb48c8452e86f53c00011722954a8ed87c5dcdcf1af491256153662db04ebd1e0a16f5cf88d2e65a982d0402926d982c6168f11f2b6", 0x8b}, {&(0x7f0000223000-0xf2)="9db7b5e57d8599ee2a27a91d3d25303019b7ad1cbe02dbb4bb529b129c4991e887a8e53f9d6d5ce2b24822e56fa52b6459873c0701a82825bbb9df29a2ae21f7be41a9005d81ed28eca9c88c647840f2dfd3fa2903071977cb54e61aee90c814e270848556783c457c7cc3fceff94baab258dd2de109ca588756e08b73806abc233ef2a659e329dbedf719842299c0aa023a2dfe67f7acbf83503a7c14897f36f0ce1bded813ac9aade83f24767f0b28bd7edb25f916a7416c400483576d41efa73bbf0ac0ac044f69e313aec9b5de4e05c727942e5daf44e49d74ce8b877ff585de1cfc0f2f621a103300d4def6acd50d80", 0xf2}, {&(0x7f0000d29000-0xa9)="09f0623c890eea2233e21ca37ba09beb8da933724b8932f76157b34cbe176e7a531eab283b994355e0c816afcfd6ad71d478b3b7daf5d8708246209e89ce250071e8d8cafb7647caf787a0ed3e95d345112eca3c744d8bebd937c77fb079fdb2bb1dadbbf3840224eac68ce6e09dbeeee371627141e76929376d8ecde0b48776be86378c83de53f58086d00746af881020c27cd718f3670882c361a086c5ecf75c3b1b629dc81474b7", 0xa9}, {&(0x7f000034a000-0xfe)="bba61de518efe9962097b18638c4404a6501d407a6184da25e94082b10debf4d4282b259a173c3f925e84277fda08b6262f02f18ef0d6b72096126646ce71fd0a97389e2290d97b6c5e42941837420cd2f0f1c896692d0d825a3eba7e6b60fe8aeea7726bdcc04f4f5766f5e620488f98af0d060659aa37b272be3d8290b72a3f3cd3c8effe83babb57f3471033795b3896283c2c60ef02b3a4b8732f17f2a3e82f8ff163e747e4688f41d6122b45524e538c8ff064dd43f28a28f1d4404496827da653bebe024b51cdc97e34ae8bb5279407e84febbd3d0f0d11cac2c3b3c963abee16ca731ae42ac7cbd8ed2b06fd443c9ffeb1e8639eb26492cc4bf22", 0xfe}, {&(0x7f0000841000-0xc8)="80dbdebbf448b2cd9fb1e003ca0f8c38d4a9b7fd79901c37dcb00085c7e2c5d1f7a063f755b671350d19a918d598623dcc22de801c63dae9d1e0c96750590ab43b88ce1575438e24cc6393de54faad05f6b38dcea794ff08199721ba7a174f40ffe69df995a47f11a0fd5d5055efeefb7d2b0ef49c3135791f0f09d7626e047f2a1a78f180ef52770786bbb68890420b1986683131949b3180329ab0c3bd6257a1bcbac538ba6b2b83b8fed448725b3ba04c5ea17a6a10c0dcc34f40b28e6b3b4a8f80cca07f56db", 0xc8}, {&(0x7f0000471000-0x46)="868d7685247a95e5f246b321952c26f2f4365ef393435237f1bb35fa613c072296ac681e79793a341caacc6783b5e671943c606c1125c55e11ab75391f26a9f64fe1bc04de03", 0x46}, {&(0x7f0000a59000)="70cee73c72fe7abb13e034e61ee917903877444d195154d6f35878db87797cbca2b93897143a55c089e603e0c57a6f96ccc1c48c756d52039d43cd19df", 0x3d}, {&(0x7f000025d000+0x3c8)="8571e0c6f5e049ad66581a38cc5ae286bc4f1ff5584c88fb8d9ed08ff0604a9fd20748906e412433dddfa8321aab716bc89286f38d958d8252a754be5e2657652a11726c19b13d2e155bd51fa5a0", 0x4e}, {&(0x7f0000850000)="94e069246252e193a1adbebf981808a5415318e9c873c565bdd93182efd1d5ee0aa8f7845880e74e006592f7d48576b231d9f9c956f67e48d51f8fa9b5ba444f1fce8fd96ae33a6039e3350739d520e664016e57953f5f218b68edaf719a8934ab39c8547b56afbfa147000e313ac2e0b9fa", 0x72}], 0x9, &(0x7f00001ae000-0x110)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r8, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r0]}], 0x110, 0x408c4}], 0x1, 0x80) poll(&(0x7f0000564000-0x40)=[{r0}], 0x1, 0x6ca3f40) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000012000-0x63)}) 2018/02/08 17:41:25 executing program 4: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000009000)=""/170, 0xaa, 0x0, &(0x7f0000004000-0xe)=@l2={0x1f}, 0x0) recvmsg(r0, &(0x7f0000015000)={&(0x7f0000015000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @local}}}, 0x32, &(0x7f0000016000-0x10)=[], 0x0, &(0x7f0000016000-0x13)=""/19, 0x13}, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000017000-0x8)='./file0\x00', 0x48) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000017000-0x4)=0x800) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0x268, &(0x7f000000d000+0x379)={&(0x7f000000a000-0x41)={0x14, 0x1a, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x14}, 0x1}, 0x0) 2018/02/08 17:41:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000c65000-0x10)={0x2, 0x2, @multicast2=0xe0000002}, 0x10) mlockall(0x1) sendto$inet(r0, &(0x7f0000482000)="be", 0x1, 0x800000120000001, &(0x7f0000e46000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x0, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000a77000)=[{&(0x7f0000bc8000-0x66)='1', 0x1}], 0x1) sendto(r0, &(0x7f0000523000)='\\', 0x1, 0x5, &(0x7f00005c4000-0x10)=@in={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) [ 60.193176] audit: type=1400 audit(1518111685.156:16): avc: denied { set_context_mgr } for pid=5308 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/02/08 17:41:25 executing program 7: r0 = epoll_create1(0x80000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) r1 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x2) fcntl$getflags(r0, 0xb) fcntl$addseals(r1, 0x409, 0x4) ftruncate(r0, 0x6) 2018/02/08 17:41:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$llc(0x1a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f000015f000)=0xa60e, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e4000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x81) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r1, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000ce4000)={0x7fffffff, 0x80000001}) pipe(&(0x7f000051c000-0x8)={0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f000011d000)={0x0, 0x7}, &(0x7f00006e1000)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000e8b000-0x14)={r4, 0x7, 0x10000, 0x5d30, 0x4, 0x401}, 0x14) write(r2, &(0x7f0000d31000)="d6fbbf", 0x3) 2018/02/08 17:41:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000002000-0x8)) r0 = syz_open_dev$dmmidi(&(0x7f0000f5a000)='/dev/dmmidi#\x00', 0x2, 0x4001) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000186000)={0x1, [0x7]}, 0x6) preadv(0xffffffffffffffff, &(0x7f0000b7d000)=[{&(0x7f0000b33000)=""/160, 0xa0}, {&(0x7f0000709000-0x8a)=""/138, 0x8a}, {&(0x7f0000405000-0x82)=""/130, 0x82}, {&(0x7f0000e0b000)=""/236, 0xec}, {&(0x7f00008b0000-0xde)=""/222, 0xde}], 0x5, 0x34) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f00003f0000-0x8)) [ 60.313961] audit: type=1400 audit(1518111685.276:17): avc: denied { map } for pid=5308 comm="syz-executor1" path="/dev/binder0" dev="devtmpfs" ino=9135 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 2018/02/08 17:41:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f000010b000-0x4), 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000522000-0xc), &(0x7f0000d74000)=0xc) close(r0) getsockname(r0, &(0x7f0000161000)=@nfc, &(0x7f0000424000)=0x10) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f00006af000-0x8)={0x0}) r2 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000131000)) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000dab000-0xc)={@empty, @multicast1, @local}, &(0x7f00001e9000-0x4)=0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000182000-0x4)) 2018/02/08 17:41:25 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087c000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000b8e000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00001b8000-0x9)='loginuid\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f000096a000)={r2}) getsockopt$inet_dccp_buf(r3, 0x21, 0x0, &(0x7f0000155000), &(0x7f00003e2000-0x4)) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)) accept$llc(r1, &(0x7f0000baa000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000a70000-0x4)=0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000b7000-0x10)={0x1, &(0x7f00004fb000-0x8)=[{}]}, 0x10) 2018/02/08 17:41:25 executing program 7: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000e19000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f0000187000-0xc)={0x10}, 0xc, &(0x7f0000452000)={&(0x7f0000009000)=@ipv6_newaddr={0x18, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x18}, 0x1}, 0x0) 2018/02/08 17:41:25 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000d1f000)='/dev/midi#\x00', 0x69ec, 0x101000) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000435000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x3, @loopback=0x7f000001}}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x3000, 0x5, &(0x7f0000000000/0x3000)=nil) shmat(r1, &(0x7f0000002000/0x4000)=nil, 0x3000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000005000-0x28)={@common='gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000001000-0x14)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) write(r2, &(0x7f0000005000), 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000004000)={&(0x7f000000c000-0x10)=@nfc, 0x10, &(0x7f0000003000)=[{&(0x7f0000002000)=""/219, 0xdb}, {&(0x7f0000003000-0xbd)=""/189, 0xbd}], 0x2, &(0x7f000000c000-0xba)=""/186, 0xba, 0x6}, 0x40012000) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f000000b000-0xb6)="c119ca42ebbaaef0de2588e69df2af70ef998c8719d1abfe2e102a0986008cf1629d4eb59e7404361edcaef393c4bc8355243d81cc70f3435e595707f566beef548c1e292dcbff002e1cfdc54a906fa99fe9a1edebd43bdd14b1f398dd03e80036874d1d1727bdce5828f9c7241a5cff7e0f35059f9ed3365b59596600e90642a8442629d27058ac764624baf172e233753bae0a6c4c82434db54a6d65593599ae6fea92830817a7704d05fb1876ac8d0a05b29571f3", 0xb6) [ 60.362214] audit: type=1400 audit(1518111685.306:18): avc: denied { call } for pid=5308 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 60.388153] binder: BINDER_SET_CONTEXT_MGR already set [ 60.394425] binder: 5308:5321 ioctl 40046207 0 returned -16 2018/02/08 17:41:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000cc9000)='/dev/sg#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40049409, r0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000eb2000-0x400)) 2018/02/08 17:41:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00005d7000)={0x0}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) setrlimit(0x7, &(0x7f0000a06000)) ppoll(&(0x7f0000fe2000)=[{0xffffffffffffffff}], 0x1, &(0x7f00004bd000-0x8), &(0x7f0000752000), 0x8) [ 60.441578] ALSA: seq fatal error: cannot create timer (-22) [ 60.478325] binder: release 5308:5321 transaction 4 out, still active [ 60.480812] ALSA: seq fatal error: cannot create timer (-22) 2018/02/08 17:41:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000661000-0xa)='/dev/ptmx\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000056b000-0x8)=@abs, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000aea000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$TCSETS(r0, 0x5402, &(0x7f00003e1000)={0x100000001, 0x200, 0x2, 0x0, 0x0, 0x80000000, 0x1, 0x8, 0x3, 0x3b70, 0x9, 0x9}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000626000)=0x6) ioctl$FIONREAD(r1, 0x541b, &(0x7f000044c000)) 2018/02/08 17:41:25 executing program 3: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x4000000000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap(&(0x7f00009d7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000765000), &(0x7f00009d7000)) memfd_create(&(0x7f00000d1000-0x1e)="2d40bd766d6e65743176626f786e657430766d6e657431776c616e302700", 0x0) 2018/02/08 17:41:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000198000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f000035b000), 0x363) syz_open_dev$sndmidi(&(0x7f0000dc8000-0x12)='/dev/snd/midiC#D#\x00', 0x4, 0x80) 2018/02/08 17:41:25 executing program 1: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000005000)={0x0, 0x41, 0x4, @thr={&(0x7f0000006000-0x4)="9c1f644c", &(0x7f0000005000)="c94586902e95ccd221dffd7c"}}, &(0x7f0000005000-0x4)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000001000-0x10)={0x28, 0x0, 0x0, @hyper}, 0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000007000-0x40)={0x1, 0x225c, 0x0, 0xe76b, 0x100000001, 0x4, 0x0, 0x3}, &(0x7f0000006000-0x40)={0x8, 0x2, 0x26f0, 0x365, 0x0, 0x1, 0x3, 0x8}, &(0x7f0000007000-0x40)={0x1, 0x0, 0x101, 0x6, 0x6, 0x3ff, 0x80000000, 0x8}, &(0x7f0000007000-0x10)={0x0, 0x7530}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000007000)='/dev/midi#\x00', 0x5, 0x24c0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000003000)={0x0, 0xffffffff, 0x2, [0x2, 0x3]}, &(0x7f0000003000-0x4)=0xc) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={r2, 0x1, "9a"}, &(0x7f0000007000)=0x9) listen(r0, 0x0) connect$vsock_stream(r0, &(0x7f0000001000)={0x28, 0x0, 0x0, @my}, 0x10) 2018/02/08 17:41:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000d01000)='/dev/snd/pcmC#D#p\x00', 0x40, 0x101100) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00004b1000-0x1)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00008ff000-0x38)={&(0x7f0000d8a000-0xc)={0x10}, 0xc, &(0x7f00006fa000)={&(0x7f0000410000-0x8)=@bridge_dellink={0x1a, 0x11, 0xb, 0xffffffffffffffff, 0xffffffffffffffff, {0x7}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4}]}]}, 0x1026c}, 0x1}, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f00006c0000)={0xa1, 0x57c1b5ca, 0x1, 0x5535, 0x2, [{0x8001, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0xfffffffffffffffc, 0xffff, 0x1, 0x0, 0x0, 0x200}]}) 2018/02/08 17:41:25 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001000-0xd)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000001000-0x4)=0x20, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x800000000000010, 0x2, 0x0) write(r1, &(0x7f0000339000-0xdc)="240000002e001d0000000043206b0000000000feffffffffffffffff000008425d102264", 0x24) [ 60.485750] binder: undelivered TRANSACTION_COMPLETE [ 60.496751] binder: send failed reply for transaction 4, target dead 2018/02/08 17:41:25 executing program 0: mmap(&(0x7f0000000000/0xe78000)=nil, 0xe78000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000026000+0x4bb)='/proc/self/net/pfkey\x00', 0xfc0809895b96a7c6, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000619000-0x18)={0x9, 0x8, 0x58, 0xf87, 0xfff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000c10000-0x10)={0x0, 0x0}) mmap(&(0x7f0000e78000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000e78000)={0x0, 0x0}) futimesat(r0, &(0x7f00003d6000)='./file0\x00', &(0x7f0000779000)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) mmap(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r6, &(0x7f0000e79000)=[{{&(0x7f0000442000-0x26)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x26, &(0x7f000059b000-0x70)=[{&(0x7f0000e7a000-0x51)=""/81, 0x51}, {&(0x7f0000e79000)=""/4096, 0x1000}, {&(0x7f0000e7a000-0x57)=""/87, 0x57}, {&(0x7f00009cf000)=""/214, 0xd6}, {&(0x7f0000461000)=""/164, 0xa4}, {&(0x7f0000273000-0x9e)=""/158, 0x9e}, {&(0x7f0000e7a000-0x29)=""/41, 0x29}], 0x7, 0x0, 0x0, 0x8}, 0xc0}, {{&(0x7f000015d000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10, &(0x7f0000e7a000-0x20)=[{&(0x7f0000e7a000-0xdf)=""/223, 0xdf}, {&(0x7f00001f3000)=""/93, 0x5d}], 0x2, &(0x7f0000b1f000)=""/96, 0x60, 0x6}, 0x3}, {{&(0x7f0000ba7000-0x9)=@rc, 0x9, &(0x7f000010a000-0x50)=[{&(0x7f0000e79000)=""/24, 0x18}, {&(0x7f0000e7a000-0x6a)=""/109, 0x6d}, {&(0x7f0000e79000)=""/193, 0xc1}, {&(0x7f000095d000)=""/162, 0xa2}, {&(0x7f0000bd2000-0x70)=""/112, 0x70}], 0x5, &(0x7f000084c000-0x37)=""/55, 0x37, 0xffffffffffffff00}, 0xbc0}, {{&(0x7f0000a3c000)=@hci, 0x6, &(0x7f0000e7a000-0x40)=[{&(0x7f0000229000)=""/85, 0x55}, {&(0x7f0000e7a000-0x1000)=""/4096, 0x1000}, {&(0x7f0000e7a000-0xe8)=""/232, 0xe8}, {&(0x7f0000e79000)=""/4, 0x4}], 0x4, &(0x7f00001c3000-0xe5)=""/229, 0xe5, 0x2}, 0xffffffff}, {{&(0x7f0000132000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10, &(0x7f00007c3000-0x70)=[{&(0x7f0000e79000)=""/166, 0xa6}, {&(0x7f0000903000-0x87)=""/135, 0x87}, {&(0x7f00004cf000)=""/160, 0xa0}, {&(0x7f0000e7a000-0xe6)=""/230, 0xe6}, {&(0x7f0000268000-0xac)=""/172, 0xac}, {&(0x7f0000e7a000-0xbd)=""/189, 0xbd}, {&(0x7f0000e79000)=""/63, 0x3f}], 0x7, &(0x7f0000e7a000-0xad)=""/173, 0xad, 0xd4}}], 0x5, 0x120, &(0x7f000060f000-0x10)={0x77359400}) mmap(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$l2tp(0x18, 0x1, 0x1) dup2(r7, r1) 2018/02/08 17:41:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000014c000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000966000-0xd)='/selinux/mls\x00', 0x0, 0x0) fanotify_mark(r2, 0x4, 0x10000, r3, &(0x7f00007fc000-0x8)='./file0\x00') ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9c000-0x138)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x20}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20000020, &(0x7f0000a52000-0x8)={@multicast2=0xe0000002, @broadcast=0xffffffff}, 0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000212000/0x18000)=nil, &(0x7f000070e000)=[@text32={0x20, &(0x7f0000dfc000-0x37)="f3ac0f22110fb2b796a7ba9f3e660f28480a0f017300b9380800000f32c4e2d101130fc71a66ba400066b8c67766ef660ff18721ca0000", 0x37}], 0x1, 0x1, &(0x7f0000d4f000)=[], 0x0) 2018/02/08 17:41:25 executing program 4: mmap(&(0x7f0000000000/0x61000)=nil, 0x61000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f000001b000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000063000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000064000-0x6), 0x8) r1 = syz_open_dev$mouse(&(0x7f000005d000-0x12)='/dev/input/mouse#\x00', 0x7fffffff, 0x100) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000024000)={0x0, 0x7d, "a81fc04a038096f9ff2cb8a0b9cd3cb9ae9ce30f679604898e2e0a1da003a5afd80a8139102169bbe8cefebddb6f2c9edae0e62a4cc59cc3d7f4e9c3afcdf6b70c8baee42567ca65e58d6713c54cdb710020dd49b73bf53bed57544dda48c49a0c14806815c6bae662b3237b2b4994775dfd9b4674ea9068f6574a6946"}, &(0x7f0000061000)=0x85) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000061000)={r2, 0x92, "8a43493da9e3a27df313e2d45310ea9a09128a1abe2fe76847fcca42bc856f16f2e53ccecb6cce944ddf1ac0637f6d25070e4f3a225121569873e5389ad14c0066df35ae87e61a424996316348bf086ccf3d43181486373a47db35ccc477a31ffd7b1759c9323a8586006640c813bf4e056a921b0bd9ffc4c384d90fa3b8a88cbbb2bd78f5de753eb2bba621421e2c6ce588"}, &(0x7f0000028000+0xa01)=0x9a) [ 60.576208] kauditd_printk_skb: 1 callbacks suppressed [ 60.576217] audit: type=1400 audit(1518111685.538:20): avc: denied { dac_override } for pid=5386 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 60.606136] audit: type=1400 audit(1518111685.540:21): avc: denied { write } for pid=5386 comm="syz-executor0" name="net" dev="proc" ino=14683 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 60.631420] audit: type=1400 audit(1518111685.541:22): avc: denied { add_name } for pid=5386 comm="syz-executor0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 60.655275] audit: type=1400 audit(1518111685.542:23): avc: denied { create } for pid=5386 comm="syz-executor0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 60.690879] ================================================================== [ 60.698331] BUG: KASAN: use-after-free in l2tp_session_create+0x9aa/0xb80 [ 60.705237] Read of size 4 at addr ffff8801b634f668 by task syz-executor0/5389 [ 60.712567] [ 60.714173] CPU: 0 PID: 5389 Comm: syz-executor0 Not tainted 4.15.0+ #302 [ 60.721070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.730396] Call Trace: [ 60.732963] dump_stack+0x194/0x257 [ 60.736569] ? arch_local_irq_restore+0x53/0x53 [ 60.741221] ? show_regs_print_info+0x18/0x18 [ 60.745699] ? l2tp_session_create+0x9aa/0xb80 [ 60.750263] print_address_description+0x73/0x250 [ 60.755080] ? l2tp_session_create+0x9aa/0xb80 [ 60.759637] kasan_report+0x23b/0x360 [ 60.763417] __asan_report_load4_noabort+0x14/0x20 [ 60.768322] l2tp_session_create+0x9aa/0xb80 [ 60.772706] ? l2tp_tunnel_delete+0x50/0x50 [ 60.777005] ? trace_hardirqs_on+0xd/0x10 [ 60.781138] ? __local_bh_enable_ip+0x121/0x230 [ 60.785793] pppol2tp_connect+0xed7/0x1dd0 [ 60.790022] ? pppol2tp_recv_payload_hook+0x1b0/0x1b0 [ 60.795195] ? selinux_netlbl_socket_connect+0x76/0x1b0 [ 60.800540] ? selinux_socket_connect+0x311/0x730 [ 60.805362] ? lock_downgrade+0x980/0x980 [ 60.809489] ? selinux_socket_setsockopt+0x80/0x80 [ 60.814391] ? lock_release+0xa40/0xa40 [ 60.818342] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 60.824206] ? __check_object_size+0x8b/0x530 [ 60.828685] ? __might_sleep+0x95/0x190 [ 60.832651] ? security_socket_connect+0x89/0xb0 [ 60.837389] SYSC_connect+0x213/0x4a0 [ 60.841171] ? SYSC_bind+0x410/0x410 [ 60.844868] ? get_unused_fd_flags+0x121/0x190 [ 60.849443] ? trace_hardirqs_off+0xd/0x10 [ 60.853654] ? exit_to_usermode_loop+0x198/0x2f0 [ 60.858387] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 60.863906] SyS_connect+0x24/0x30 [ 60.867422] ? SyS_accept+0x30/0x30 [ 60.871026] do_syscall_64+0x282/0x940 [ 60.874891] ? __do_page_fault+0xc90/0xc90 [ 60.879105] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 60.884619] ? syscall_return_slowpath+0x550/0x550 [ 60.889524] ? syscall_return_slowpath+0x2ac/0x550 [ 60.894435] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 60.899780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 60.904605] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 60.909768] RIP: 0033:0x453299 [ 60.912933] RSP: 002b:00007f7a524fcc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002a [ 60.920617] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000453299 [ 60.927861] RDX: 0000000000000032 RSI: 0000000020e71000 RDI: 0000000000000014 [ 60.935105] RBP: 000000000000005c R08: 0000000000000000 R09: 0000000000000000 [ 60.942351] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ef940 [ 60.949597] R13: 00000000ffffffff R14: 00007f7a524fd6d4 R15: 0000000000000000 [ 60.956861] [ 60.958464] Allocated by task 5389: [ 60.962069] save_stack+0x43/0xd0 [ 60.965498] kasan_kmalloc+0xad/0xe0 [ 60.969186] kmem_cache_alloc_trace+0x136/0x740 [ 60.973830] l2tp_tunnel_create+0x5e1/0x17f0 [ 60.978212] pppol2tp_connect+0x14b1/0x1dd0 [ 60.982509] SYSC_connect+0x213/0x4a0 [ 60.986284] SyS_connect+0x24/0x30 [ 60.989799] do_syscall_64+0x282/0x940 [ 60.993659] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 60.998820] [ 61.000422] Freed by task 5390: [ 61.003675] save_stack+0x43/0xd0 [ 61.007104] __kasan_slab_free+0x11a/0x170 [ 61.011313] kasan_slab_free+0xe/0x10 [ 61.015088] kfree+0xd9/0x260 [ 61.018173] rcu_process_callbacks+0xe94/0x17f0 [ 61.022816] __do_softirq+0x2d7/0xb85 [ 61.026587] [ 61.028200] The buggy address belongs to the object at ffff8801b634f580 [ 61.028200] which belongs to the cache kmalloc-512 of size 512 [ 61.040828] The buggy address is located 232 bytes inside of [ 61.040828] 512-byte region [ffff8801b634f580, ffff8801b634f780) [ 61.052672] The buggy address belongs to the page: [ 61.057575] page:ffffea0006d8d3c0 count:1 mapcount:0 mapping:ffff8801b634f080 index:0x0 [ 61.065694] flags: 0x2fffc0000000100(slab) [ 61.069906] raw: 02fffc0000000100 ffff8801b634f080 0000000000000000 0000000100000006 [ 61.077763] raw: ffffea0006cdfbe0 ffffea0006d624a0 ffff8801db000940 0000000000000000 [ 61.085616] page dumped because: kasan: bad access detected [ 61.091301] [ 61.092903] Memory state around the buggy address: [ 61.097806] ffff8801b634f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 61.105144] ffff8801b634f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.112477] >ffff8801b634f600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.119809] ^ [ 61.126535] ffff8801b634f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.133867] ffff8801b634f700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.141198] ================================================================== [ 61.148528] Disabling lock debugging due to kernel taint [ 61.154322] Kernel panic - not syncing: panic_on_warn set ... [ 61.154322] [ 61.161681] CPU: 0 PID: 5389 Comm: syz-executor0 Tainted: G B 4.15.0+ #302 [ 61.169890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.179221] Call Trace: [ 61.181785] dump_stack+0x194/0x257 [ 61.185389] ? arch_local_irq_restore+0x53/0x53 [ 61.190036] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 61.194765] ? vsnprintf+0x1ed/0x1900 [ 61.198543] ? l2tp_session_create+0x8b0/0xb80 [ 61.203100] panic+0x1e4/0x41c [ 61.206266] ? refcount_error_report+0x214/0x214 [ 61.210997] ? add_taint+0x1c/0x50 [ 61.214512] ? add_taint+0x1c/0x50 [ 61.218028] ? l2tp_session_create+0x9aa/0xb80 [ 61.222586] kasan_end_report+0x50/0x50 [ 61.226531] kasan_report+0x148/0x360 [ 61.230307] __asan_report_load4_noabort+0x14/0x20 [ 61.235207] l2tp_session_create+0x9aa/0xb80 [ 61.239591] ? l2tp_tunnel_delete+0x50/0x50 [ 61.243889] ? trace_hardirqs_on+0xd/0x10 [ 61.248012] ? __local_bh_enable_ip+0x121/0x230 [ 61.252660] pppol2tp_connect+0xed7/0x1dd0 [ 61.256876] ? pppol2tp_recv_payload_hook+0x1b0/0x1b0 [ 61.262045] ? selinux_netlbl_socket_connect+0x76/0x1b0 [ 61.267388] ? selinux_socket_connect+0x311/0x730 [ 61.272207] ? lock_downgrade+0x980/0x980 [ 61.276328] ? selinux_socket_setsockopt+0x80/0x80 [ 61.281229] ? lock_release+0xa40/0xa40 [ 61.285181] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 61.291041] ? __check_object_size+0x8b/0x530 [ 61.295513] ? __might_sleep+0x95/0x190 [ 61.299470] ? security_socket_connect+0x89/0xb0 [ 61.304208] SYSC_connect+0x213/0x4a0 [ 61.307982] ? SYSC_bind+0x410/0x410 [ 61.311673] ? get_unused_fd_flags+0x121/0x190 [ 61.316240] ? trace_hardirqs_off+0xd/0x10 [ 61.320449] ? exit_to_usermode_loop+0x198/0x2f0 [ 61.325178] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 61.330692] SyS_connect+0x24/0x30 [ 61.334207] ? SyS_accept+0x30/0x30 [ 61.337808] do_syscall_64+0x282/0x940 [ 61.341670] ? __do_page_fault+0xc90/0xc90 [ 61.345877] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 61.351390] ? syscall_return_slowpath+0x550/0x550 [ 61.356293] ? syscall_return_slowpath+0x2ac/0x550 [ 61.361197] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 61.366537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.371355] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 61.376517] RIP: 0033:0x453299 [ 61.379678] RSP: 002b:00007f7a524fcc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002a [ 61.387359] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000453299 [ 61.394600] RDX: 0000000000000032 RSI: 0000000020e71000 RDI: 0000000000000014 [ 61.401841] RBP: 000000000000005c R08: 0000000000000000 R09: 0000000000000000 [ 61.409086] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ef940 [ 61.416329] R13: 00000000ffffffff R14: 00007f7a524fd6d4 R15: 0000000000000000 [ 61.424011] Dumping ftrace buffer: [ 61.427524] (ftrace buffer empty) [ 61.431204] Kernel Offset: disabled [ 61.434801] Rebooting in 86400 seconds..