[....] Starting enhanced syslogd: rsyslogd[ 12.612498] audit: type=1400 audit(1513605053.741:5): avc: denied { syslog } for pid=2988 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.987621] audit: type=1400 audit(1513605058.116:6): avc: denied { map } for pid=3129 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-5,10.128.0.38' (ECDSA) to the list of known hosts. 2017/12/18 13:51:04 fuzzer started [ 23.322282] audit: type=1400 audit(1513605064.451:7): avc: denied { map } for pid=3140 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/18 13:51:04 dialing manager at 10.128.0.26:35405 2017/12/18 13:51:13 kcov=true, comps=true [ 32.496310] audit: type=1400 audit(1513605073.625:8): avc: denied { map } for pid=3140 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=8789 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2017/12/18 13:51:14 executing program 0: io_setup(0x23d, &(0x7f00005d9000)=0x0) r1 = memfd_create(&(0x7f00009d0000)="766d6e657430279400", 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(r0, &(0x7f0000001000-0x40)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000000)="65811c79e57c187f2f56375420b1341df9aff2a7c51a8cbf2a120f3b703e218d7f0d1ff3e759098a1a4d46477cfb4505ea0f7817eca66b3b96b1dc134b36d55ba545f462f69d1baa8d964c6f0d84650768f193d1b15dd7ed5faa84cb20e3611e1c39c67bf61241e264a67425a7a032465e267e2a46cdd7b44bd011d78c1262eddc22afdda342038b2f9b70ac09138a53c7de5158f1f2a57936704d90e6a893b6", 0xa0, 0x1, 0x0, 0x0, r2}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001000)='nv\x00', 0x3) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001000-0x4)=0x1, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000002000)='./file0\x00', &(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000002000-0x5)='omfs\x00', 0xcf2ba19899f7851d, &(0x7f0000001000-0x53)="aa33c52e5b1cca267ea5be1ea690f90c57212c06fe82d6529e561d675cfad81604299b092fda16568b4f4aae6a65df5b1b1b18747991ba832bcf59cc270773e23190a0da5abe1d3de6fe0259d51f7fef7a0856") ioctl$KDENABIO(r1, 0x4b36) ioctl$sock_ifreq(r1, 0x8976, &(0x7f0000002000)={@generic="82dfa72e8f380b2a8eb855bddcf0bc78", @ifru_map={0x58, 0x6, 0x10000, 0x1ff, 0x8, 0x3}}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet(r1, &(0x7f0000003000)=""/136, 0x88, 0x40002000, &(0x7f0000001000-0x10)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005000-0xe8)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000004000)=0xe8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$packet(r2, &(0x7f0000005000-0xf9)="ef3bae41f5c63408defe1640bf4897a2779d4e6047ff14da676a8fbe90b8b0645b945c1d9e08f5a3c4897b58f321ffcf9220ef362a87175d89eadc87698e973a462ae7cdbf9f275227589df0005618ab8c1c9d8d8bf521cc23e236e025886dd3f49875b4f4c98cb652cf31ee4d27939dba92431d564b6a1e7bd941bf6735cd345f99c9300d8f7957b51c6160dddadbca23e74b7b696f4857669d9e2de11c9a2f395415c95feb9e731bb7497df1daad9ec15c615ea8305ce6fdd1014dbefcb3a9fee6d6ff5862ac31bb1c357d70499b1acf873f5fed1427e58f193bc39fbdf36cbbd23edf32b44690989721c7cd73f68e48bdd48750521111eb", 0xf9, 0x24008005, &(0x7f0000005000-0x14)={0x11, 0x1b, r3, 0x1, 0xfff, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14) ioctl$TIOCGSID(r1, 0x540f, &(0x7f0000004000-0x4)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000005000)={0x0, 0x2b, 0x0, @tid=r4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000005000)=0x0) timer_delete(r5) clock_adjtime(0x7, &(0x7f0000004000-0xd0)={0x14, 0x63e, 0xffffffff, 0x6, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x8000, 0x1, 0x3, 0x3, 0x7, 0x2, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x3, 0x100000000, 0xbda, 0xff, 0x6, 0x6, 0xffff}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000006000)={{0xa, 0x0, 0x9, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2485}, {0xa, 0x3, 0x6, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xdd}, 0x10001, [0x56a2, 0x2, 0x800, 0x59, 0x2, 0x4b70, 0x9, 0x80000001]}, 0x5c) 2017/12/18 13:51:14 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000946000-0xd)='/dev/usbmon#\x00', 0x5, 0x12000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001000-0xc)={&(0x7f000054e000)='./file0\x00', r0}, 0xc) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000001000-0x70)={[{0x800, 0x98, 0x0, 0xe1, 0x5, 0x1, 0x2, 0x3, 0x37, 0x8, 0x100000001, 0xffffffffffffff00, 0x2}, {0x10000, 0x3, 0x0, 0x3, 0x5, 0x3f, 0x3, 0x8000, 0xb800000, 0x0, 0x5, 0x67b, 0x101}, {0xd7, 0x3f, 0x8, 0xffffffffffffff01, 0x3, 0x4, 0x9, 0x80, 0x81, 0xffff, 0x1, 0x401, 0xbaf8}], 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000002000-0x8)=0x52a) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000003000-0x80)=[{&(0x7f0000001000-0xf2)=""/242, 0xf2}, {&(0x7f0000002000-0x87)=""/135, 0x87}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001000-0xd2)=""/210, 0xd2}, {&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000001000)=""/154, 0x9a}, {&(0x7f0000002000)=""/175, 0xaf}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000004000-0xc)={0x10, 0x0, 0x93, 0xfffffffffffffffe}, 0xc) pipe2(&(0x7f0000004000-0x8)={0x0, 0x0}, 0x80000) r1 = getpgrp(0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(r1, &(0x7f0000005000-0xa)='schedstat\x00') prctl$setname(0xf, &(0x7f0000003000)='schedstat\x00') syz_open_dev$loop(&(0x7f0000002000)='/dev/loop#\x00', 0x2, 0x420c0) socketpair(0x7, 0x0, 0xffffffffffff0001, &(0x7f0000005000-0x8)={0x0, 0x0}) socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000006000-0x66)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x1, 0x69, 0xc1f}}], {{0x88ff, @x25={0x2, 0x6, 0x0, "f5b78dff88e8b3d38433b5293451d3f6134497e24e59ff0a4655dd23a9e088d9f528f18150a3bfdc8d1f3b5f5fdd06857266d93ebd3e6cfd9277403f5952768ccd597c61bda8810b64473be5cb916cc33e"}}}}, &(0x7f0000005000)={0x0, 0x4, [0x5f, 0xd35, 0xf92, 0xbac]}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000007000-0x10)={r2, 0x18, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000006000+0x5d)=r3, 0x4) rt_sigpending(&(0x7f0000001000-0x8)={0x0}, 0x8) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002000)='/selinux/validatetrans\x00', 0x1, 0x0) perf_event_open(&(0x7f0000003000-0x78)={0x7, 0x78, 0x5, 0x8, 0x8, 0x4, 0x0, 0x7, 0x10000, 0xa, 0x4, 0x7f, 0x1, 0xa, 0x0, 0x200, 0x4, 0x3, 0x7fff, 0xc08ec2be90faacf8, 0x5, 0x6b, 0x4, 0x5d, 0xffffffff7fffffff, 0x1, 0x0}, r1, 0x8, r4, 0x7) 2017/12/18 13:51:14 executing program 1: r0 = open(&(0x7f0000b28000-0x8)='./file0\x00', 0x4000, 0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00007e0000-0xc)={0x40, 0x80000001, 0x2, 0x800, 0x8001, 0x5}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000001000-0x14)={0xff, 0x8, 0xf6, 0x0, 0x81}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000002000-0x4)={0x9}, 0x4) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000000)=0x0) ioctl$void(r0, 0x5451) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000003000-0x5)='user\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000001000-0xe3)="ec748f7a1b16dbef6efa3cbc471da201a323c0311c741da0abc6517fd5fe3fdb0c332bef8b0877e3ed22eb7433e6708d56e6fe3564b6e4d40e6f9f4fc2bf9dd9b9e483fc960562a074ded4012dfb638b2a501cc64c71b755e95915bfd234b955044a1bd722e4bbf78a859484aaa3288654d7f23969c97cb00e68baa02aff16c7d440850b8bd87481277adee04c348bcbd271719a2829c51c2d09e6f282236b6195e9d77674923ef856ff267050c8e8b56a97e45e13813a12e924548658caea800fdc311e286df9b90ab2a6b45d58e46e90dc9507475bf3f71e166554eef2d889453f76", 0xe3, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r1, 0x10001) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000003000)=0x14) r2 = getuid() mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) quotactl(0x1000, &(0x7f0000002000-0x7)='./file0\x00', r2, &(0x7f0000005000-0xb7)="202161e6fc7c51598200ff88032a43f9ca98dcf14026b2679a7a6cb6f5db2dba8a02788040232d4fecc4ef3693d2ab002ee898f54836fad312fd4ad92fb9f889fb0751a8703e48886a6380151b759cc986156defda754fc87bb6b9441fb7086be81ee47dca8bd84aab9f077946fbb202fac65d5dd3ecf57dd71fdb6e40cf86d886da4b34335edf759154c2e9d18ad9fe5097384734b2c2bc47fb74ba405ab40842c068d8d61f65c753cae740a14febd1eebde611cfe7f3") mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000006000-0xc)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000004000)={0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000004000-0x8)={r3, r5}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000006000)={0x100000000, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) munlockall() mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000007000)={0x0, 0x7}, &(0x7f0000005000+0x64d)=0x8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000007000)={0xfff, 0x8, 0x1ff, 0x9, r6}, &(0x7f0000007000)=0x10) 2017/12/18 13:51:14 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fdf000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffffe) getsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000cec000)=0x0, &(0x7f00004f7000-0x4)=0x4) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000788000)={0x0, 0x0, 0x0}, 0xc) fcntl$setownex(r0, 0xf, &(0x7f00004a4000-0x8)={0x0, r1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x28, &(0x7f00002e8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001000-0x4)=r2, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000002000-0xb)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x3, 0x384b, &(0x7f0000002000-0x8)={0x800}, 0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000001000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r3, &(0x7f0000001000)={r0, r3, 0x720a}) r4 = fcntl$dupfd(r0, 0x0, r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x80000001]}, &(0x7f0000003000-0x4)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$ax25(r4, &(0x7f0000003000)={0x0, {""/7}, 0x0}, &(0x7f0000003000)=0x10) connect(r4, &(0x7f0000004000-0x10)=@ax25={0x3, {"b9b97d6b1d819d"}, 0x10000}, 0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000005000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000005000)=0xd6, 0x4) clock_gettime(0x5, &(0x7f0000005000-0x10)={0x0, 0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000004000-0x8)='./file0\x00', &(0x7f0000007000-0xdc)=""/220) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000007000)={0x0, @in={{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x5, 0x2, 0x8, 0xffffffff}, &(0x7f0000007000)=0xa0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000008000-0x4c)={r5, 0x44, "e9b47e33629aec2c805e91732aa09120cc6bc0867323319150fa102bbe8f22f9f36b756d92dfc9d63971e30704d3441eef1fa8cfe16eb1072fd5e469f0cf61a9524b5181"}, &(0x7f0000000000)=0x4c) 2017/12/18 13:51:14 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000af000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00006f3000)={r0, &(0x7f000020f000-0xf6)="e533b063f4d227428453930839bf37246474d0cd6f40b124de57b99a9a7d0a5d7d91c347faf4c19a5fe733d7fc72520c49e2957c0e68ae1c17679a068bce28dc59c1d7303923d10893b7bf2b6082b62c3573882f688ebdead2f241b53ffffa99c6935589b9f89d6e05dffb5d44496a1bc38b4290074e94111be2c09c4f4c61fdaa197fe2f2929b7501100381995ecfdc2e8c0463c4c1941e53486a839975b11c083e06e15a43366d43b0553a0c1fa2972b675273c6035346def35394e34edd8d3ce78464b960572b645f3ae42feac5d872d84556d139fe6631ae2faeb8a9447fbcf566be28c47308ff0e279b70386c985e3bfe1b538a", &(0x7f0000000000)="72dee7232f640207f102e50c0ad81b5837c81a529d7b344532bf257d9b3fd0e170662d40b2932d6f7769be6eb2943d754045a9ec17a83ec44cbaaa005b547e2dfd6c7ee9eafcca3822d3de87f183ac46db36824f71f2a0bf4bd708bbd6bfbd74009404fc0abacfd43849031b52ee3e6e420fc99cb4fbac1022a8e9ce568d48b97380927677ce89990f57febcd57db54dc2b2c75273518d50476417aa1ed4037ddc9a20d9e024ccf869a831c1c0aa696fc767b44edb361e328bf8847c1598d9a9b3955c4582f90dab8d71", 0x0}, 0x20) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x6) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001000)='/dev/loop-control\x00', 0x8800, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/166) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000003000-0x64)={&(0x7f0000001000)=[0xad, 0x9, 0x7, 0x0, 0x1000, 0x9, 0x1ff, 0x9], 0x8, 0x100, 0x800, 0x7, 0x2, 0x7f, {0x5, 0x3f, 0x2, 0x80000001, 0xff, 0x9, 0x5, 0x1, 0x1ff, 0x2, 0x1ff, 0x7, 0x6, 0x4, "d8eb4c6d472d7842a704e34348b58a64442cc68ddb590d4b9801be7415237083"}}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x5fa7c7d3, &(0x7f0000004000-0x8)=0x0) io_getevents(r1, 0x80000000, 0x5, &(0x7f0000001000-0xa0)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], &(0x7f0000003000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000005000-0x4)=0x0, &(0x7f0000002000-0x2)=0x0, &(0x7f0000004000-0x4)=0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x624) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000001000)='./file0\x00', &(0x7f0000006000-0xe)=@known='system.advise\x00', &(0x7f0000006000-0xa3)=""/163, 0xa3) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000006000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000006000)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001000-0x18)={@loopback={0x0, 0x1}, 0x4, r2}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000008000-0x6)={0x0, 0x4}, &(0x7f0000008000-0x4)=0x6) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000007000)=@assoc_value={r3, 0x1}, 0x8) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000009000-0x4)=0x0, &(0x7f0000003000-0x4)=0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 2017/12/18 13:51:14 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e74000-0xf)='/dev/sequencer\x00', 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f000019e000-0x9)='/dev/sg#\x00', 0x6, 0x2) flock(r0, 0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000001000-0x4)=0x0, &(0x7f0000dc0000)=0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001000-0x8)={0x0, 0x36}, &(0x7f0000002000-0x4)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x2, 0x40}, 0xc) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = accept4$ipx(r1, &(0x7f0000003000-0x10)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000000000)=0x10, 0x80800) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000003000)={0x7, 0x8, 0xfae, 'queue0\x00', 0x7fffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000004000)=0x14) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000003000)={0x0, 0x9, 0x3, 0x100000000, 0x2, 0xfff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = fcntl$dupfd(r1, 0x406, r3) ioctl(r0, 0x99a8, &(0x7f0000004000-0xee)="d67f221745a33aea18054f09b2296dba809188a3b7eb90bc306246c7c05569b47c1d257833639c448434206310cb5829ed269b568bf661490b6651cb18eee9f56c67432ab07875260bee1ea1cceafa9b0cf8c5850fe7b1131ba538375d961e05308d76da94e027add41b9e6c79a62ee25002707a69d9a5efed6a2e920c17bafe47c89a4fd793f13bc5c51f8b3c5361fb3c9c78462cf7f13109793b7cd7f0fb5fb3dd7aa43d916ab62484eab02dd5e1f11f696429f97cdc477fdc8bac1cade58c10d937282191cc90f77bb42f2db3e5c79d9379e7bb61001d08e25ae712bde58178195bea0a3d4c9ccc543c4d1559") mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000005000)='./file0\x00', 0x2, 0x44) mknod(&(0x7f0000004000-0x8)='./file0\x00', 0xc000, 0x80000001) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000006000)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000006000)='/dev/kvm\x00', 0x2000, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000003000-0x8)={r2, 0x6}, &(0x7f0000008000)=0x8) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000009000-0x8)={0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x40000) [ 32.946296] audit: type=1400 audit(1513605074.074:9): avc: denied { map } for pid=3140 comm="syz-fuzzer" path="/root/syzkaller-shm774364134" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2017/12/18 13:51:14 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)=0x0) connect(r0, &(0x7f0000001000-0x60)=@nfc_llcp={0x27, 0xfff, 0xb48, 0x3, 0x3f, 0x5, "493694623d19a4d876d24a54bf8b015d204b621a3dbe53f8ae17eed45591b44201f3a2cad9193213fc27b0a6b4cc1d34cb380494aaf8d41eaca955643b6dc2", 0x100000000}, 0x60) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000002000-0xc)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001000-0xc)={r1, 0x80000, r0}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x64, {0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="24ca96e9b45e787645137c64416cb78c"}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/rfkill\x00', 0x20101, 0x0) r6 = fcntl$getown(r2, 0x9) getpgid(r6) splice(r2, 0x0, r0, 0x0, 0xa8, 0x8) vmsplice(r5, &(0x7f0000002000)=[{&(0x7f0000002000-0xe8)="464cc9eedf5131d6c876f39247d8de350a5848bbfc352deae8ae8dd1533801958b194e8904296472b5f562cde07b88c1b73bde38abee1f885b799581c976f893e19995d2bafa7bca8af19b50e181472a2b8ba89c0a17858a4389e1349844b38be816f7d01bab54db397df61e0a979c481be9fa002c7cd0a3b1d195ea1ff5f307024c2057377a4a71b08531792357c52bac58c67d7d0e8d99c2ed4c25ed53c599837659a666f5c5b5ddc4140f20423e555d76ec4dd56496409e2a04c705a182f3f7d79892dc89db7b9e216a5482b086a75269a7176533169afffb5dbc86cb465899c6d76670ae8047", 0xe8}], 0x1, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000001000)={0x0}, &(0x7f0000003000)=0x4) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000004000-0x10)=@req={0x28, &(0x7f0000002000)={@generic="3897dc7c0a9a33c5a1aab02a944709de", @ifru_mtu=0x6}}) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000001000)={0x6, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000004000)={r3, 0x80000, r4}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet(r0, &(0x7f0000002000)={0x0, 0x0, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000006000-0x4)=0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000007000-0x4)=0x0, &(0x7f0000003000-0x4)=0x4) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000008000-0x8)={0x0, 0x0}) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000003000)=""/72) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000005000-0x4)=0x0) 2017/12/18 13:51:14 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000001000-0x60)=[{&(0x7f0000001000-0x27)=""/39, 0x27}, {&(0x7f0000075000)=""/114, 0x72}, {&(0x7f00002a8000)=""/122, 0x7a}, {&(0x7f0000503000)=""/66, 0x42}, {&(0x7f000095a000-0xb1)=""/177, 0xb1}, {&(0x7f0000000000)=""/11, 0xb}], 0x6, &(0x7f00007b4000-0x70)=[{&(0x7f0000e18000)=""/87, 0x57}, {&(0x7f000034a000)=""/4096, 0x1000}, {&(0x7f0000c9d000-0x1000)=""/4096, 0x1000}, {&(0x7f0000b76000)=""/182, 0xb6}, {&(0x7f0000000000)=""/96, 0x60}, {&(0x7f0000b3e000-0x55)=""/85, 0x55}, {&(0x7f0000adf000-0x84)=""/132, 0x84}], 0x7, 0x0) r1 = socket(0x4, 0x80007, 0x6) personality(0x510000f) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000002000-0xd)='/dev/usbmon#\x00', 0xffffffffffffffe0, 0x80000) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="3337e4a85d13fc4126edab7067b14335c49ffbb282e562c6551585247932700182073764358fda97964078026019bbd2a4eab7e6c671310d695e14b97339") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000003000-0x10)={0x3e, 0x8, 0x5fc4, 0x3}) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000003000)={0x0, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004000)={@generic="6ccdd449911d86b40ea707eb5c2acee4", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000002000)={@multicast1=0xe0000001, @multicast1=0xe0000001, r4}, 0xc) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000004000)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000004000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000005000)=0xe8) sched_rr_get_interval(r0, &(0x7f0000006000-0x10)={0x0, 0x0}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000005000)="ef7d067a733e7a781ef1a95f2c88a4c5fe304573f24ebc3cdae77aa8eca2d87acafb760503b4b85f62f84677ec6b5ce3928d20a11496a924", 0x38) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000006000)={@loopback={0x0, 0x1}, 0x6, r4}) ioctl$KDSETMODE(r2, 0x4b3a, 0x6) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r2, 0x8906, &(0x7f0000007000)=0x0) [ 34.096937] audit: type=1400 audit(1513605075.225:10): avc: denied { sys_admin } for pid=3183 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.267730] audit: type=1400 audit(1513605075.396:11): avc: denied { sys_chroot } for pid=3348 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/18 13:51:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000080e000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)='\n\au', 0x3) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f6d000)={0x0, 0x0, &(0x7f000031a000)=[{&(0x7f0000f74000-0xe1)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d97363de0e14ea35948cfcd4e33b238769b5d816af54d725d9e0892fb493649e59bd10170b458b63ccda771d5c26156bdc372e736f4cad146efde6570ab31f177183b8325edb58a0b7ed4859e31ee77c7aed8fbebdf4f1bd54d38d684e74fba79cebae37a8d063fb", 0xac}, {&(0x7f0000e3a000-0x39)="f06bf7cd469f89c692db8ce5f8a5ad8e755f50800c2528d688a580ba0f00edff1bfec8a00695fc50ed59d372f4fb3c2e2d8b1578d1ac44b620", 0x39}], 0x2, &(0x7f00009c7000-0x90)=[@op={0x18, 0x117, 0x3, 0x0}, @assoc={0x18, 0x117, 0x4, 0x78a38e7e}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x0}, @assoc={0x18, 0x117, 0x4, 0x14}], 0x78, 0xfffffffffffffffe}, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00009a2000)='/dev/sequencer\x00', 0x101000, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000083000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00005c9000)={0x0, 0xfffffffffffffe00, 0x9, 0x9, 0x0, 0x8, 0x6, 0x3, 0x7fffffff, 0x5, 0x6, 0x4}) time(&(0x7f0000aff000-0x8)=0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000f6f000-0x10)=@ethernet={0x0, @random=""/6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000893000-0x50)=[{&(0x7f0000e72000-0x84)=""/132, 0x84}, {&(0x7f0000f6f000-0x79)=""/121, 0x79}, {&(0x7f0000f73000-0xd5)=""/213, 0xd5}, {&(0x7f0000e69000)=""/176, 0xb0}, {&(0x7f0000f6e000)=""/12, 0xc}], 0x5, &(0x7f00008ae000-0x46)=""/70, 0x46, 0x8}, 0x2) 2017/12/18 13:51:15 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000feb000)='/dev/qat_adf_ctl\x00', 0x2403, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket(0x14, 0x808, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, r0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000210000-0x98)={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x12, 0x2, 0x8, "180b94c6ace70cf3b204f54336e023b129c8f7aafab675b2c61a35e9ce073174198ffc887cb9855e6b907be59d43007b14f4363ef79765c3fa9e5df12a1d12b0", "bb4379b97514f43c555ddb21368b3b35cd3049bb5eac0bb3d07e934a88e73e89", [0x5, 0x2], 0x0}) socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r1, 0x4, 0x2041) r2 = socket(0x1, 0x7ffff, 0xffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000bf0000)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f00008fa000)=0x1c) r4 = accept$inet6(r3, &(0x7f0000b2b000)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000c39000-0x4)=0x1c) setsockopt$sock_str(r4, 0x1, 0x19, &(0x7f000077b000)='\x00', 0x1) perf_event_open(&(0x7f0000e9d000)={0x2, 0x78, 0xe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000080000)={0x0, 0x0, 0x0}, &(0x7f0000690000)=0xc) fcntl$getown(r5, 0x9) r6 = add_key(&(0x7f00002af000-0x8)='big_key\x00', &(0x7f0000d78000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000eb7000)="703fa0cf0eb16d9e99087f8e0a773839e6b335a3ae5fdbe969676f3dbb4b6782c9e4eca17ba4075718f9c28a6a1b60f7eda16c3ea4e4372839a4344d37d85752d62f0da2d9ca4f4dd30a695afbb6941012ebd2c529c31af6e1d44190d4cab563f3d1da51ff7882557046492646456e59b758", 0x72, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r6, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00007c0000)=0x0) getsockname(r5, &(0x7f00001d0000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, &(0x7f0000d7f000)=0x58) fcntl$lock(r5, 0x40c, &(0x7f0000126000-0x20)={0x1, 0x3, 0x3, 0x0, r7}) r8 = syz_open_dev$tun(&(0x7f0000b90000)='/dev/net/tun\x00', 0x0, 0x8100) creat(&(0x7f00000fc000)='./file0\x00', 0x1) getpeername$llc(r2, &(0x7f000024b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f000000e000-0x4)=0x10) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000d74000)=0x1) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000533000)={@generic="02f50000000000000000000200e9bc22", @ifru_settings={0x10001, 0x0, @fr=&(0x7f0000013000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 34.389668] audit: type=1400 audit(1513605075.518:12): avc: denied { dac_override } for pid=3400 comm="syz-executor4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/18 13:51:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008a3000)='/dev/sequencer2\x00', 0x22cc0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00008cc000-0xc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000d19000-0x4)=0xc) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000699000-0x3a)={r0, r0, 0x80000001, 0x101, &(0x7f00006bb000)="16551a3e0f2aa13909a2078e53b1e11e79737e86f6a778ced94d8dea498632c5de1fc78f2e92b554a51cc6680e6a717982ebb03910e23e337aaad05c89cca7be0940bf9a0806adbf4e59c80a00", 0x20, 0x0, 0x7, 0x8, 0x6, 0x6, 0x0, "2e867dc9e3065e5feea822f351f61583c426"}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000046b000-0x11)='/dev/vga_arbiter\x00', 0x802000, 0x0) fchmodat(r1, &(0x7f00004fa000)='./file0\x00', 0x4) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x80000040fe, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mq_unlink(&(0x7f0000d90000)='/dev/sequencer2\x00') ioctl$sock_SIOCSIFBR(r3, 0x8940, &(0x7f0000f17000)=@get={0x1, &(0x7f0000924000-0xcb)=""/203, 0x60}) r4 = getpid() getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000775000)=0x0, &(0x7f0000b15000-0x4)=0x4) getsockname$inet6(r0, &(0x7f0000114000)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000b99000-0x4)=0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00006a5000-0x8)={0x0, 0x7912f977}, &(0x7f0000a6e000)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000da6000-0x8)=@assoc_value={r5, 0x10001}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000a39000)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f00009b1000)={0x0, r6, 0x5}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000f8b000)={0x0, r6, 0xfffffffffffffff7}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000e8f000)={r8, r6, 0x1dc3}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000d4d000-0x10)={r9, 0x0, 0x4001002}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000f11000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00003d3000)={r9, r10, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f000089f000-0xc)={r11, 0x80000, r1}) capget(&(0x7f000071e000-0x8)={0x19980330, r4}, &(0x7f0000981000)={0xfffffffffffffffa, 0x5, 0x10000, 0x800, 0x6, 0xa69}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f000006d000-0x8)={r5, 0x0}, &(0x7f0000ae4000-0x4)=0x8) process_vm_readv(r4, &(0x7f0000dfd000)=[{&(0x7f0000453000)=""/251, 0xfb}, {&(0x7f00001eb000)=""/19, 0x13}, {&(0x7f0000cac000)=""/38, 0x26}, {&(0x7f0000214000)=""/55, 0x37}, {&(0x7f00009e6000)=""/36, 0x24}, {&(0x7f0000c52000)=""/180, 0xb4}, {&(0x7f000014d000-0x1e)=""/30, 0x1e}, {&(0x7f0000c31000)=""/122, 0x7a}], 0x8, &(0x7f00003e8000-0x90)=[{&(0x7f0000f4f000-0x1000)=""/4096, 0x1000}, {&(0x7f0000be1000-0x33)=""/51, 0x33}, {&(0x7f00001bd000-0x6f)=""/111, 0x6f}, {&(0x7f000067c000)=""/205, 0xcd}, {&(0x7f000043f000-0x2a)=""/42, 0x2a}, {&(0x7f0000f2f000)=""/114, 0x72}, {&(0x7f0000c4f000)=""/179, 0xb3}, {&(0x7f000065b000-0xbc)=""/188, 0xbc}, {&(0x7f0000046000-0x19)=""/25, 0x19}], 0x9, 0x0) writev(r3, &(0x7f000010b000)=[{&(0x7f0000ec1000)="3900000013000904690000008000fffd180000400100000045000107000000140d001a000400020004000200000000000000010c00001ee400", 0x39}], 0x1) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000dbe000-0x8)=0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00006e6000-0xa0)={r5, @in={{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x6, 0x42, 0x26, 0x10}, 0xa0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00007f1000-0x8)={r12, 0x5}, &(0x7f0000f7a000)=0x8) socket$netlink(0x10, 0x3, 0x1) eventfd2(0x6, 0x801) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000c3000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00005eb000)='/dev/usbmon#\x00', 0xee, 0x22342) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f0000a05000-0x34)={{0xffffffffffffffff, 0x3, 0xd8, 0x0, 0x100000000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/18 13:51:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000a34000)='{\x00', 0x1) socket$inet6(0xa, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008b1000)='/dev/hwrng\x00', 0x3fa, 0x0) syz_open_dev$tun(&(0x7f00007e2000)='/dev/net/tun\x00', 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) r3 = socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000bf8000-0x4)=0x458, 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) socket(0x11, 0x0, 0x0) socket(0x10, 0x2, 0x0) socketpair(0x3, 0x7, 0x7, &(0x7f0000ce6000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00003c2000)={0x800000000, 0x0}) bind$netlink(r0, &(0x7f0000088000)={0xf, 0x0, 0x80ffffffffffffff, 0x2000000400}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpgrp(0x0) gettid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000ed0000-0x4)=0x0) r6 = getpid() r7 = getpgid(0xffffffffffffffff) gettid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f00004c7000-0x4)=0x0) fcntl$getown(0xffffffffffffff9c, 0x9) getpgrp(r7) setpriority(0x0, r6, 0x81) 2017/12/18 13:51:15 executing program 5: r0 = socket(0x11, 0x802, 0xe3d) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000032c000-0xa)='/dev/ptmx\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) flock(r0, 0x2) gettid() getpgrp(0xffffffffffffffff) getpgid(0xffffffffffffffff) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000276000-0xc)={0x0, 0x0, 0x0}, 0xc) r2 = syz_open_procfs(r1, &(0x7f0000aa3000)='net/softnet_stat\x00') ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000057000)={0x0, {0x2, 0x1, @rand_addr=0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40, 0x3, 0x4, 0x7, 0x4, &(0x7f000075a000)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x9, 0x9, 0x3}) bind$inet6(r2, &(0x7f000070a000)={0xa, 0x2, 0x40, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x33dd}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000c9b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000)=[], 0x80, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00008d5000)=0x5, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3c000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(r3, 0x409, 0x40000000c) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x413, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf72, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimensat(r2, &(0x7f0000964000)='./file0\x00', &(0x7f0000b99000-0x20)={{0x0, 0x7530}, {0x0, 0x2710}}, 0x100) r6 = syz_open_dev$loop(&(0x7f0000327000-0xb)='/dev/loop#\x00', 0x6, 0x20003d) ioctl$LOOP_SET_FD(r6, 0xc0481273, r6) r7 = request_key(&(0x7f0000321000)='big_key\x00', &(0x7f0000920000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000ddd000)='/dev/loop#\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000b20000-0x8)='big_key\x00', &(0x7f00006e7000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f00007e3000)='/dev/loop#\x00', 0xfffffffffffffffa) sendto(r3, &(0x7f0000f1f000-0x7c)="e4874cd31be3ab84fb042085e5d9656ce1f476e0faed78d4b747283f20babbca08a0e155cfe9bd49863ea11d83d1dbfee4af177fc0c50622410e9500a2cde691287207f2f086ee201b9747bd1b241f7843b0334b18704b54da9c0c62577ba908c25e1e127ba3596332aeabc8f2ce3472c1315700d839079e8e4e64f9", 0x7c, 0x20000004, &(0x7f0000a4a000)=@l2={0x1f, 0x5, {0x3, 0x7f, 0xe8, 0x20, 0xe9e2, 0x4}, 0x101, 0xf5}, 0xe) keyctl$negate(0xd, r7, 0x6, r8) socket(0x2, 0x80803, 0x80081) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0xcbb) sendto$unix(r4, &(0x7f00004b9000)="", 0x0, 0x0, 0x0, 0x0) close(r3) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000e71000)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r9, r2, &(0x7f0000853000)=0x0, 0xcd1d) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000fb4000-0x18)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00009ee000)=0x18) sigaltstack(&(0x7f00004ec000/0x4000)=nil, &(0x7f000030c000-0x8)=0x0) [ 34.484056] audit: type=1400 audit(1513605075.612:13): avc: denied { net_admin } for pid=3405 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.511568] [ 34.513227] ============================================ [ 34.518661] WARNING: possible recursive locking detected [ 34.524103] 4.15.0-rc2-mm1+ #39 Not tainted [ 34.528403] -------------------------------------------- 2017/12/18 13:51:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000b30000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000e58000-0xb)='/dev/loop#\x00', 0xff, 0x4102) mmap(&(0x7f0000e5b000/0x1000)=nil, 0x1000, 0x3, 0x2011, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00006e7000-0x4)=@int=0x0, &(0x7f0000c28000)=0x4) read(r1, &(0x7f0000cab000-0x2)=""/2, 0x2) timer_create(0x2, &(0x7f0000870000)={0x0, 0x1, 0x3, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000bee000-0x4)=0x0) timer_getoverrun(r2) openat(r0, &(0x7f0000c41000-0x8)='./file0\x00', 0x2, 0x10) pread64(r0, &(0x7f0000c30000-0xb3)=""/179, 0xb3, 0x0) [ 34.533834] syz-executor1/3407 is trying to acquire lock: [ 34.534043] audit: type=1400 audit(1513605075.640:14): avc: denied { net_raw } for pid=3430 comm="syz-executor5" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.563431] (rtnl_mutex){+.+.}, at: [<0000000014969a93>] rtnl_lock+0x17/0x20 [ 34.570690] [ 34.570690] but task is already holding lock: [ 34.576624] (rtnl_mutex){+.+.}, at: [<0000000014969a93>] rtnl_lock+0x17/0x20 [ 34.583869] [ 34.583869] other info that might help us debug this: [ 34.590498] Possible unsafe locking scenario: [ 34.590498] [ 34.596519] CPU0 [ 34.599067] ---- [ 34.601617] lock(rtnl_mutex); [ 34.604864] lock(rtnl_mutex); [ 34.608111] [ 34.608111] *** DEADLOCK *** [ 34.608111] [ 34.614134] May be due to missing lock nesting notation [ 34.614134] [ 34.621028] 1 lock held by syz-executor1/3407: [ 34.625575] #0: (rtnl_mutex){+.+.}, at: [<0000000014969a93>] rtnl_lock+0x17/0x20 [ 34.633256] [ 34.633256] stack backtrace: [ 34.637720] CPU: 1 PID: 3407 Comm: syz-executor1 Not tainted 4.15.0-rc2-mm1+ #39 [ 34.645219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.654539] Call Trace: [ 34.657099] dump_stack+0x194/0x257 [ 34.660696] ? arch_local_irq_restore+0x53/0x53 [ 34.665338] __lock_acquire+0x11cf/0x47f0 [ 34.669455] ? __unwind_start+0x169/0x330 [ 34.673576] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 34.678733] ? save_stack_trace+0x1a/0x20 [ 34.682848] ? __lock_acquire+0x324e/0x47f0 [ 34.687136] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 34.692293] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 34.698145] ? __kernel_text_address+0xd/0x40 [ 34.702608] ? do_vfs_ioctl+0x1b1/0x1530 [ 34.706639] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 34.711800] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 34.716782] ? unwind_dump+0x4d0/0x4d0 [ 34.720637] ? save_trace+0xe0/0x2b0 [ 34.724318] ? check_noncircular+0x20/0x20 [ 34.728532] ? check_noncircular+0x20/0x20 [ 34.732737] ? check_noncircular+0x20/0x20 [ 34.736940] ? __free_insn_slot+0x5c0/0x5c0 [ 34.741231] lock_acquire+0x1d5/0x580 [ 34.744999] ? rtnl_lock+0x17/0x20 [ 34.748509] ? lock_release+0xda0/0xda0 [ 34.752450] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 34.758302] ? rcu_note_context_switch+0x710/0x710 [ 34.763198] ? __might_sleep+0x95/0x190 [ 34.767138] ? rtnl_lock+0x17/0x20 [ 34.770647] __mutex_lock+0x16f/0x1a80 [ 34.774500] ? rtnl_lock+0x17/0x20 [ 34.778010] ? lock_release+0xda0/0xda0 [ 34.781952] ? rtnl_lock+0x17/0x20 [ 34.785458] ? is_bpf_text_address+0xa4/0x120 [ 34.789923] ? mutex_lock_io_nested+0x1900/0x1900 [ 34.794732] ? unwind_get_return_address+0x61/0xa0 [ 34.799628] ? trace_hardirqs_off+0xd/0x10 [ 34.803840] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 34.808913] ? depot_save_stack+0x2ca/0x460 [ 34.813206] ? selinux_tun_dev_free_security+0x15/0x20 [ 34.818450] ? save_stack+0xa3/0xd0 [ 34.822042] ? save_stack+0x43/0xd0 [ 34.825635] ? kasan_slab_free+0x71/0xc0 [ 34.829662] ? kfree+0xca/0x250 [ 34.832910] ? selinux_tun_dev_free_security+0x15/0x20 [ 34.838153] ? security_tun_dev_free_security+0x48/0x80 [ 34.843484] ? tun_free_netdev+0x153/0x1f0 [ 34.847687] ? register_netdevice+0x97b/0x1010 [ 34.852238] ? __tun_chr_ioctl+0x1ca3/0x3f10 [ 34.856613] ? tun_chr_ioctl+0x2a/0x40 [ 34.860468] ? do_vfs_ioctl+0x1b1/0x1530 [ 34.864498] ? SyS_ioctl+0x8f/0xc0 [ 34.868004] ? do_syscall_64+0x26c/0x920 [ 34.872037] ? entry_SYSCALL64_slow_path+0x25/0x25 [ 34.876940] ? find_held_lock+0x39/0x1d0 [ 34.880968] ? check_noncircular+0x20/0x20 [ 34.885169] ? print_usage_bug+0x3f0/0x3f0 [ 34.889373] ? lock_downgrade+0x980/0x980 [ 34.893487] ? tun_flow_flush+0x41/0xe0 [ 34.897429] ? mark_held_locks+0xb2/0x100 [ 34.901545] ? mark_held_locks+0xb2/0x100 [ 34.905658] ? kfree+0xe4/0x250 [ 34.908906] ? selinux_tun_dev_free_security+0x15/0x20 [ 34.914149] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.919131] ? trace_hardirqs_on+0xd/0x10 [ 34.923246] mutex_lock_nested+0x16/0x20 [ 34.927272] ? security_tun_dev_free_security+0x67/0x80 [ 34.932600] ? mutex_lock_nested+0x16/0x20 [ 34.936802] rtnl_lock+0x17/0x20 [ 34.940135] tun_free_netdev+0x158/0x1f0 [ 34.944162] ? tun_xdp+0x410/0x410 [ 34.947670] ? __lockdep_init_map+0xe4/0x650 [ 34.952046] ? tun_detach_all+0xb50/0xb50 [ 34.956170] ? tun_xdp+0x410/0x410 [ 34.959679] register_netdevice+0x97b/0x1010 [ 34.964057] ? netdev_change_features+0x100/0x100 [ 34.968872] ? round_jiffies_up+0xce/0x100 [ 34.973075] ? __round_jiffies_up_relative+0x150/0x150 [ 34.978318] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 34.983214] ? selinux_tun_dev_alloc_security+0x124/0x170 [ 34.988719] __tun_chr_ioctl+0x1ca3/0x3f10 [ 34.992924] ? tun_chr_read_iter+0x1e0/0x1e0 [ 34.997302] ? avc_ss_reset+0x110/0x110 [ 35.001243] ? depot_save_stack+0x2ca/0x460 [ 35.005532] ? lock_release+0xda0/0xda0 [ 35.009475] ? __lock_is_held+0xbc/0x140 [ 35.013513] ? rcu_note_context_switch+0x710/0x710 [ 35.018406] ? rcu_pm_notify+0xc0/0xc0 [ 35.022262] ? tun_chr_compat_ioctl+0x30/0x30 [ 35.026725] tun_chr_ioctl+0x2a/0x40 [ 35.030406] ? tun_chr_ioctl+0x2a/0x40 [ 35.034260] do_vfs_ioctl+0x1b1/0x1530 [ 35.038118] ? ioctl_preallocate+0x2b0/0x2b0 [ 35.042495] ? selinux_capable+0x40/0x40 [ 35.046527] ? syscall_slow_exit_work+0xf2/0x400 [ 35.051250] ? lockdep_sys_exit_thunk+0x35/0x35 [ 35.055889] ? security_file_ioctl+0x7d/0xb0 [ 35.060264] ? security_file_ioctl+0x89/0xb0 [ 35.064640] SyS_ioctl+0x8f/0xc0 [ 35.067974] ? do_vfs_ioctl+0x1530/0x1530 [ 35.072089] do_syscall_64+0x26c/0x920 [ 35.075945] ? syscall_return_slowpath+0x550/0x550 [ 35.080841] ? syscall_return_slowpath+0x2ad/0x550 [ 35.085739] ? prepare_exit_to_usermode+0x340/0x340 [ 35.090724] ? return_from_SYSCALL_64+0x10/0x75 [ 35.095362] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.100173] entry_SYSCALL64_slow_path+0x25/0x25 [ 35.104894] RIP: 0033:0x452a09 [ 35.108052] RSP: 002b:00007f9fc444bc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 35.115726] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452a09 [ 35.122964] RDX: 0000000020533000 RSI: 00000000400454ca RDI: 0000000000000018 2017/12/18 13:51:16 executing program 0: mmap(&(0x7f0000000000/0x177000)=nil, 0x177000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f000016b000)='/dev/vcs\x00', 0x400, 0x0) mmap(&(0x7f0000177000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000177000)=0x9, 0x4) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000004000-0x10)={&(0x7f0000175000)={0x2, 0x18, 0x0, 0x0, 0x13, 0x0, 0xfffffffffffffffe, 0x0, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, @in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_x_policy={0x4, 0x12, 0x0, 0xfffffffffffffffc, 0x0, 0x3ff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x0}, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000004d000-0x10)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000177000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000178000-0x10)={0x0, 0x0}) mmap(&(0x7f0000178000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000178000)={0x0, 0x0}) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) mmap(&(0x7f0000177000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(r2, 0x1, &(0x7f00000f5000)={{0x77359400, 0x0}, {r3, r4+10000000}}, &(0x7f0000177000)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000179000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000017a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f000017a000)={0x2, 0x0, 0x7f, 0x0, 0x58, 0x7, 0x7, 0x7fff, 0x9, 0x5, 0x101, 0x4c, 0x0, 0x40, 0xc4c9cc9, 0x447, 0x18, 0x6, 0x2}) mmap(&(0x7f000017a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f000017a000)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) mmap(&(0x7f0000179000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r5, &(0x7f0000179000+0x4d1)=[{&(0x7f00000e3000-0x9c)="5d7f1c4b1ac91f19e78016139e3d78ffc940a5259adfde300afc99aec363249b3dda1b314cc3a3067840e21b8ebbc76545e6f6a1806690d913bd6afd9e2e3f3dca57e13674cbe1e52d39c7d6b20a29a541c751e203ce8a9e9280dc44e5afaa15fe4359396e0e31ee301a950a17111e087cd0eb0af7c4b1cc5dcf80c63a172cf419f10a012c922ae4a4a70e301fb43f38153280bed251c2a6bdc064d0", 0x9c}, {&(0x7f000000f000)="4db378db6f506d4e9460ee2cd6e11c9349df765c8197d0c875909a2f3c6e2ab6875557556fc0c8d5d0ddfcf19c9e2ffca1a5f107c9926a79120fe81826744c1ea8b217865d879e85781ed4868820b537b2d48001a0d3ba421d46ecec174510830622a7f81b4529b1a272c2f73f0da335f569aee88269888e8ee688b8c497cb555e5c2ba5acbd690628797583b3d98d4914e2baf9d277c98b48051a46a69bccdedc568f69f2f4ba20879376ee6aa6608cb41b7ed77c7f79f805a2df22d2e7ffb6165a07f86c4e572cd0345c3b6b7208d81c394c", 0xd3}, {&(0x7f0000090000)="343fe15f33c7398408ce2d51e590336aa02edb06e1df69d7bdfb3208148d048f6c36c7f29e2a85cd10eacbdcc1f359b514e16473d57e4cc113d6e1ce300e3384d17389c7a97b819e2ed4ed20ab0ff1158115fe9c3c9a3812caf72e0a09c7271b10b3e479a9538a026a9a915fa74d51f2fa961fc1a0", 0x75}, {&(0x7f000017a000-0xdc)="2db4178fd64d60f558f49dbb3f156d077e5873ff883d5658b9d47d48c31e63ccee110362f40c4e91d9e1f60b2d5790677f1be3d7abacfd592acf8e5a06adefbf8b84c19faafb802d025f9693ce543253ea849e5361df6179c0e7e72784de02f5731dc47bb8dbaabadb198bc7267cd7cfe49df064ff900ba4e058219c28a4dbb03ae528774af1da939780d6a94d230a68fdf0646ec23790c3fba9c578ad30268935be2af94e9d683e5c1b44ac364a0d32c714ee41c6cb651f40f097e0f2d6b014b8567b547435f9fa910f88d3c1a5fb81e413bc6129c98fe984a8d0254b6ca925989fed08de72dbbb2c", 0xe9}, {&(0x7f00000fc000-0xf6)="8959eeae6e354c306824b2bf860ac03deb5306650eb5c24191b4b4b2e7abfa3bc59d0485dd6bad4e222fd6b94e89f4e46300ef44c7fdcdf187f643a7fe4b73bb225dd2cc37c5e94b82757f2508cefc826e49ad4d51bdbce6725143da78af5f0746e90b6025231955b48b804ccb8129b3548a5858957f264e65d82cf8aa8a00a9ee8f62ee2c5a4e6cb21a262ffc1be586b7670679f28d77935ca4efecf186000756e6a3927d736a4f174b5a64f26106c562cf682dfa0a3cab0aa24492578986b5f327b2e519d530df2dc7c1a438eb668b094393683acc6e444112d896960830b70c25a4d280446a5635fd8191abddde48e0d99411d75e", 0xf6}, {&(0x7f000010b000-0xa)="aa543bd6767e2f21727f", 0xa}, {&(0x7f00000ca000)="2d493e46ff9ee6f33ddb6b1322064f378d96f58c19ad475f1a229727b466320173fb81db09f6ac3809afdf3716ccaa57577c5de2050e10e1594912cc8dc4907bb9c842a2c52b24fae74778cec52cc8092772688de11696fe404b53dca81265a1213b988dbc5d78e2ad8518714a5146bf613888a80cc889e096ecd7df22e320f0160e57eebbf1f156fa7bec274ea92554868c8364a19b3fb226f0e7a163ebfef69ae1468c8c18854d8dfda06daeadde29b825b5f0490023c90d5b83fd92f2c9c870597ffad3b8a26ac0c4900bf8b98ee8210fbb4a29faa892f845704e9d63af003a72b96a9d349defc45bd801d70ca6cfb5b646dc384447564868", 0xfa}], 0x7, 0x1) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000067000-0x4)=0x91, 0x4) 2017/12/18 13:51:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002000-0x7)='/dev/sg#\x00', 0x2, 0x10005) r1 = open(&(0x7f0000fe2000)='./file0\x00', 0x0, 0x100) getsockopt$inet_dccp_int(r0, 0x21, 0x7, &(0x7f0000bd3000-0x4)=0x0, &(0x7f000036d000-0x4)=0x4) r2 = semget$private(0x0, 0x0, 0x204) semctl$GETNCNT(r2, 0x7, 0xe, &(0x7f000080d000)=""/193) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000d53000-0x4)=[0x4, 0x9]) ioctl$TIOCGSID(r0, 0x540f, &(0x7f0000696000-0x4)=0x0) gettid() semtimedop(r2, &(0x7f0000f6f000-0x24)=[{0x3, 0xfffffffffffffffd, 0x1800}, {0x4, 0xfffffffffffff001, 0x1000}, {0x0, 0x543, 0x1000}, {0x2, 0x7fff, 0x1800}, {0x0, 0x800, 0x1000}, {0x7, 0x6, 0x800}], 0x6, &(0x7f000011b000-0x10)={0x0, 0x1c9c380}) sched_setaffinity(0x0, 0x8, &(0x7f0000d01000-0x8)=0x71) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x100000000, 0x0, 0x0}, 0x8, &(0x7f0000a9c000-0x50)=[{&(0x7f0000f94000-0x30)="866bd7b450ef3d51d8a5872cc6576176931d637e73bfc92605058d1e75bca91384faae169bf3fd814ab1fd32f69404d2", 0x30}, {&(0x7f0000dcf000-0x7d)="e3cbed6e2a73ce12c63835c9dcfbe344c38f581d5cde8abf824c040abca16780e6694264462a33cd8cee5020ebff5c8361ea589b557c48a41fd0017ebd715f3f0b35a36694d8bbf0970522262cfbfd575c24f000fe331b3c9131867b54ec81ae84dfd56386b0c0acf1390e58e372b137302829f393dd6575ff145f0350", 0x7d}, {&(0x7f000063c000-0x1000)="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", 0x1000}, {&(0x7f000078a000-0x88)="6cc597e7f7e1682c2b9f64d4766a503d759b1024bacfd5ecd53fdf190d94b63c312a71b1438306f446368c4bf5fa14894e6a2a58a2dea9f8611c296397bea37c11c7daf758360664662c0d20e53a993f5903b9c2a0c85b19a7597a40e1a5b1d365978ac867df30032da347de16caa68fc4962fa099ba9ca86592c911632d0eea8621de5abb56ca6a", 0x88}, {&(0x7f000011e000)="6f86a50dcf9b925f949b281d34", 0xd}], 0x5, &(0x7f0000c26000)=[], 0x0, 0x4000}, 0x0) recvmmsg(r1, &(0x7f00009b3000)=[{{&(0x7f000052a000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f0000f74000-0x40)=[{&(0x7f0000a76000-0xfe)=""/254, 0xfe}, {&(0x7f0000a4e000)=""/65, 0x41}, {&(0x7f0000e11000-0x51)=""/81, 0x51}, {&(0x7f0000b41000)=""/109, 0x6d}], 0x4, &(0x7f0000a35000-0x7e)=""/126, 0x7e, 0x0}, 0x6}, {{&(0x7f0000a6b000)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, 0x60, &(0x7f00009be000)=[{&(0x7f000060d000-0x35)=""/53, 0x35}, {&(0x7f0000f59000)=""/131, 0x83}], 0x2, &(0x7f0000f81000)=""/223, 0xdf, 0x4}, 0xfffffffffffffff9}, {{&(0x7f0000266000)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, 0x10, &(0x7f0000064000)=[{&(0x7f0000d94000-0xec)=""/236, 0xec}, {&(0x7f0000459000+0x4fb)=""/188, 0xbc}, {&(0x7f000085d000-0xd6)=""/214, 0xd6}, {&(0x7f0000e74000-0x8e)=""/142, 0x8e}], 0x4, &(0x7f00009cd000)=""/248, 0xf8, 0x8}, 0x3}, {{&(0x7f00004ab000-0x10)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f00007e8000-0x10)=[{&(0x7f000023f000)=""/172, 0xac}], 0x1, &(0x7f0000afe000-0x4b)=""/75, 0x4b, 0x3}, 0x100000000}], 0x4, 0x10102, 0x0) bind$alg(r0, &(0x7f0000eef000)={0x26, 'aead\x00', 0x104f, 0x90f, "73686131200000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000e100"}, 0x58) r3 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x42, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = epoll_create1(0x80000) poll(&(0x7f0000ec5000-0x18)=[{r1, 0x501a, 0x0}, {0xffffffffffffffff, 0x4000, 0x0}, {r4, 0x1, 0x0}], 0x3, 0x81) accept$unix(r0, &(0x7f00003b0000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00006e0000-0x4)=0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00002ad000)={0x1, 0x0}) epoll_wait(r4, &(0x7f0000e44000-0x6c)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x9, 0xfd) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000044000-0xc)={0x4, 0x0}) 2017/12/18 13:51:16 executing program 3: mmap(&(0x7f0000000000/0x77a000)=nil, 0x77a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000077c000-0xd)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x420011, r0, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f000077e000-0xd)='/dev/binder#\x00', 0x0, 0x2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap(&(0x7f000077b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = mmap$binder(&(0x7f00000d2000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r0, 0x0) mmap(&(0x7f000077c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000077c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000006000)={0x44, 0x0, &(0x7f000077c000)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x18, 0x18, &(0x7f000077c000)=[@flat={0x776a2a85, 0x10b, r4, 0x0}], &(0x7f000066d000-0x18)=[0x4, 0x48, 0x78]}}], 0xff8, 0x0, &(0x7f0000426000)="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"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000292000)=[], 0x0, 0x0) mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000006000)='/dev/kvm\x00', 0x101000, 0x0) [ 35.130202] RBP: 00000000000002eb R08: 0000000000000000 R09: 0000000000000000 [ 35.137438] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16a8 [ 35.144698] R13: 00000000ffffffff R14: 00007f9fc444c6d4 R15: 0000000000000000 2017/12/18 13:51:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0xefffffffffffffff, 0x0, 0xdbe2, &(0x7f0000c12000-0x8)={0x0, 0x0}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00003e3000-0x6)={0x0, 0x2, 0x200}) sendmmsg(0xffffffffffffffff, &(0x7f0000560000-0x240)=[{{&(0x7f00002ed000)=@ethernet={0x0, @random="b2c939f2754a", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000a47000)=[], 0x0, &(0x7f0000ba9000-0x368)=[], 0x0, 0x0}, 0x219b}], 0x1, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000298000-0x68)={0x7b, 0x0, [0x1, 0x0, 0x2, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000687000-0x9)='/dev/kvm\x00', 0x20200, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000ca000)={0x0, 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c35000-0xb)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f00001a3000-0x50)={0x7, [0x3, 0x1f, 0x0, 0x7, 0x0, 0x4000000000000, 0x0]}) semget(0x3, 0x1, 0x300) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = dup3(r3, r3, 0x80000) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f000022e000)=0x5000) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000bc0000)={0x79, 0x0, [0x6, 0x3, 0x800, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socketpair$packet(0x11, 0x200000000000003, 0x300, &(0x7f0000c46000-0x8)={0x0, 0x0}) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000712000-0x20)={0x100000, 0x5000, 0x6, 0x2, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f000004e000-0x4)=0x9, 0x4) ioctl$sock_netdev_private(r0, 0x0, &(0x7f0000e28000)='i') ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000532000)=0x3fe) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000d69000)={"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"}) r8 = getpgrp(0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000475000)=""/4096, 0x1000, 0x20, 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f000024c000)={0x6, 0x6}, 0x0) accept4$unix(r4, &(0x7f0000614000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00003e7000-0x4)=0x8, 0x80000) accept$inet6(r6, &(0x7f00005e0000)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000b85000-0x4)=0x1c) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000fc7000-0x90)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x10000000000000, 0x5, 0x0, 0x0, 0x6], 0x6000, 0x300}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f000055f000)={0x0, 0x80000, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000f99000-0xc)={r9, 0x80000, r6}) [ 35.173075] audit: type=1400 audit(1513605076.301:15): avc: denied { map } for pid=3441 comm="syz-executor3" path="/dev/binder3" dev="devtmpfs" ino=1188 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 35.175989] binder: 3441:3443 unknown command 2003446405 [ 35.175996] binder: 3441:3443 ioctl c0306201 20006000 returned -22 [ 35.176394] binder: 3441:3443 got transaction with invalid offsets size, 68 [ 35.176420] binder: 3441:3443 transaction failed 29201/-22, size 0-68 line 2983 2017/12/18 13:51:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$setperm(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000a51000-0x4)=0xffffffffffffff00, 0x4) bind$inet(r0, &(0x7f0000f66000-0x10)={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000160000-0x3)="", 0x0, 0x20000000, &(0x7f0000882000)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00008ae000)=[{0x8, 0x7}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x7fff}], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000a73000)={0x40000000, 0x853b, 0x10001, 0x10000007fffffff, 0x0}, 0x14) stat(&(0x7f0000313000)='./file0\x00', &(0x7f0000156000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000001000-0xe)="707031306b7989696e67746870ff", 0x3) write$evdev(r3, &(0x7f0000001000)=[{{0x0, 0x0}, 0x7fffffffffe, 0x0, 0x7}], 0x18) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001000-0x4)=0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000005000)={@common='tunl0\x00', @ifru_addrs={0x2, 0x1, @rand_addr=0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r5 = getpgrp(r4) clock_gettime(0x0, &(0x7f0000005000-0x8)={0x0, 0x0}) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000006000)={@generic="ffebca3afa1e58c5745e8a0b412ae125", 0x9}) setuid(r1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000007000-0x4)=0x8000002, 0x4) msgget$private(0x0, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001000-0x8)={0x0, 0x1}, &(0x7f0000007000)=0x8) sendto$ipx(r3, &(0x7f0000006000-0xb7)="e1b68a3c21cbda0f91caaa236361153d03187fca3e26b139f000a9de49cdf6a82d3f1e664698dd9c6986cfd0c365f66c361ea4ea265cb20fda89a2f937d726dc5cbf11a10f8183708111b2404db1fc7125a8e78751ed37d593d5104fe1ee46cd992c6409fa190e772505f78b6da65c2431de6cbffdb244c098f2a5aeef362ae5a09c32c11d7dbf2fb6240de58db7c6912cfda5848af54defd1afd60c7e6ebb6339a5d652feaaa15a1fcaba733d2920d6d7e50490469dd9", 0xb7, 0x0, &(0x7f0000007000-0x10)={0x4, 0x3800000000000000, 0x1620587b, "d4b351c21873", 0x9, 0x0}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000004000-0x28)=[{0x7, 0xfda3}, {0x8, 0x200}, {0x8, 0xf3a1}, {0x4000000000000f, 0x8ab0}, {0xb, 0x7}], 0x5) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000008000)={@broadcast=0xffffffff, @loopback=0x7f000001, @empty=0x0}, 0xc) move_pages(r5, 0x7ffff, &(0x7f0000005000-0x38)=[&(0x7f0000002000/0x2000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil], &(0x7f0000004000)=[], &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r6 = syz_open_dev$mice(&(0x7f00003ca000-0x10)='/dev/input/mice\x00', 0x0, 0x20800) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000649000-0xc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000112000-0x4)=0xc) setgroups(0x1, &(0x7f0000f45000-0x4)=[r2]) shutdown(r6, 0x0) [ 35.187483] binder_alloc: binder_alloc_mmap_handler: 3441 20000000-20002000 already mapped failed -16 [ 35.190199] binder: BINDER_SET_CONTEXT_MGR already set [ 35.190206] binder: 3441:3443 ioctl 40046207 0 returned -16 [ 35.194582] binder: 3441:3443 unknown command 2003446405 [ 35.194589] binder: 3441:3443 ioctl c0306201 20006000 returned -22 [ 35.197343] binder_alloc: 3441: binder_alloc_buf, no vma [ 35.197360] binder: 3441:3444 transaction failed 29189/-3, size 0-68 line 2947 [ 35.226560] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/18 13:51:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1000000000000002, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000a6e000-0x30)=[], &(0x7f0000001000-0x10)=[], &(0x7f0000aa3000)=[], 0x0) add_key$keyring(&(0x7f0000663000)='keyring\x00', &(0x7f0000120000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$vcsn(&(0x7f0000a49000-0xa)='/dev/vcs#\x00', 0x1, 0x1) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000f9b000)=0xa8d1, 0x4) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000383000)={0x0, 0x0, 0x0}, 0xc) chown(&(0x7f0000992000)='./file0\x00', 0x0, r3) get_robust_list(r2, &(0x7f0000312000)=&(0x7f0000508000)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000c6a000-0x8)=0x18) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000474000)=0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f000076c000-0xb8)={0x0, 0x758e, 0x1, 0x2, 0x9, 0x3, 0x5, 0xff, {0x0, @in6={{0xa, 0x1, 0x6, @loopback={0x0, 0x1}, 0x52f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1000, 0x659, 0x6, 0x5, 0x9}}, &(0x7f0000b88000-0x4)=0xb8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000eb000-0x8)={r5, 0x5}, 0x8) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000d6e000-0x8)={0x0, 0x0}) socket(0x8, 0x80800, 0x1) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000001000-0x4)=0x5, 0x4) r7 = syz_open_dev$sg(&(0x7f0000af2000-0x9)='/dev/sg#\x00', 0x8c18, 0x40005) r8 = syz_open_procfs(r2, &(0x7f0000a0e000-0x6)='smaps\x00') sendfile(r8, r8, &(0x7f00004db000)=0x0, 0x8001) bind$netrom(r7, &(0x7f00005ed000)=@ax25={0x3, {"500004e470fa05"}, 0x1}, 0x10) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000c0f000)="1f000000120003f205dfab03000fff8d7821004108002e0000ff0000002a8155bf", 0x21) recvfrom$llc(r9, &(0x7f000003a000)=""/126, 0x7e, 0x2000, &(0x7f0000264000-0x10)={0x1a, 0x2, 0x8001, 0xf0f, 0x400020, 0x3, @random="986d73061e39", [0x0, 0x0]}, 0x10) getsockname$ax25(r9, &(0x7f0000c4c000)={0x0, {""/7}, 0x0}, &(0x7f0000550000-0x4)=0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000c7f000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket(0x15, 0x5, 0x101) [ 35.226567] binder: undelivered TRANSACTION_ERROR: 29189 [ 35.265195] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 35.299964] audit: type=1400 audit(1513605076.303:16): avc: denied { set_context_mgr } for pid=3441 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 35.330368] audit: type=1400 audit(1513605076.305:17): avc: denied { call } for pid=3441 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 35.359405] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 35.432876] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.