[....] Starting enhanced syslogd: rsyslogd[ 12.416071] audit: type=1400 audit(1513690249.134:5): avc: denied { syslog } for pid=2997 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.073728] audit: type=1400 audit(1513690253.792:6): avc: denied { map } for pid=3135 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-5,10.128.0.28' (ECDSA) to the list of known hosts. 2017/12/19 13:31:00 fuzzer started [ 23.371927] audit: type=1400 audit(1513690260.090:7): avc: denied { map } for pid=3146 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/19 13:31:00 dialing manager at 10.128.0.26:34803 2017/12/19 13:31:03 kcov=true, comps=true [ 26.368720] audit: type=1400 audit(1513690263.087:8): avc: denied { map } for pid=3146 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=8839 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2017/12/19 13:31:04 executing program 7: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[], 0x0, 0x0, &(0x7f0000001000)={0x0}, 0x8) 2017/12/19 13:31:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000005000)="") 2017/12/19 13:31:04 executing program 0: syz_open_dev$sndseq(&(0x7f0000a87000)='/dev/snd/seq\x00', 0x0, 0x0) 2017/12/19 13:31:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000677000)={0xffffffffffffffff, 0x28, &(0x7f000085b000-0x28)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000779000-0x10)={0x4, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc7000)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000b73000-0x8)={0x0, 0x3}, &(0x7f00002c0000-0x4)=0x8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e0f000-0x10)={0x1, &(0x7f0000f41000-0x8)=[{0x6, 0x0, 0x0, 0xa0}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cd5000-0x4)=0xddd, 0x4) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000b3c000-0x44)={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='bcsh0\x00'}) sendto$inet(r0, &(0x7f0000283000)="", 0x0, 0x20000801, &(0x7f0000b5b000)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000766000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000766000)="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", 0x866, 0x10, &(0x7f0000c93000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000cbf000-0x1000)=""/4096, 0x1000, 0x0, &(0x7f0000c8e000)={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/19 13:31:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0xa) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) write$tun(r1, &(0x7f000027a000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x83, 0x0, 0x4, 0x0, 0x0, 0x0, @rand_addr=0x0, @broadcast=0xffffffff, {[]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, @rand_addr=0x0, {[@ssrr={0x89, 0x13, 0x0, [@remote={0xac, 0x14, 0x0, 0xbb}, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x0, 0xbb}, @rand_addr=0x0]}, @ra={0x94, 0x6, 0x0}, @timestamp={0x44, 0x34, 0x0, 0x0, 0x0, [{[@multicast2=0xe0000002], 0x0}, {[@empty=0x0], 0x0}, {[], 0x0}, {[], 0x0}, {[], 0x0}, {[@broadcast=0xffffffff], 0x0}, {[@local={0xac, 0x14, 0x0, 0xaa}], 0x0}, {[], 0x0}]}]}}, "94ab4f"}}}, 0x8d) 2017/12/19 13:31:04 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000000000)='bdev\x00') 2017/12/19 13:31:04 executing program 5: pipe2(&(0x7f0000a4d000)={0x0, 0x0}, 0x0) 2017/12/19 13:31:04 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000006000)={0x0, 0x0}) [ 27.428580] audit: type=1400 audit(1513690264.147:9): avc: denied { map } for pid=3146 comm="syz-fuzzer" path="/root/syzkaller-shm440625497" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 28.612981] audit: type=1400 audit(1513690265.331:10): avc: denied { sys_admin } for pid=3190 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.753343] audit: type=1400 audit(1513690265.471:11): avc: denied { sys_chroot } for pid=3366 comm="syz-executor7" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/19 13:31:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00001ab000-0x8)={0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00005e6000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) connect$inet(r2, &(0x7f0000c2c000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2e2e742c, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000815000-0x4)=0x1, 0x4) sendmmsg(r2, &(0x7f00000b3000-0x36)=[{{&(0x7f000087d000-0x14)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14, &(0x7f0000657000)=[{&(0x7f0000ffc000-0x1000)="c8bd", 0x2}], 0x1, &(0x7f00008f8000)=[], 0x0, 0x0}, 0x0}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x80000000, 0x0) 2017/12/19 13:31:05 executing program 1: getgroups(0x1, &(0x7f0000001000-0x10)=[0xffffffffffffffff]) 2017/12/19 13:31:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00005c8000-0xb)='/dev/loop#\x00', 0x7, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000ed6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "399f23631d000000000200000100000000000000eaf7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf", [0x0, 0x0], 0x0}) 2017/12/19 13:31:05 executing program 5: socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) 2017/12/19 13:31:05 executing program 0: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000004000-0x8)={0x0, 0x0}) 2017/12/19 13:31:05 executing program 2: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00001ba000-0x8)={0x0, 0x0}) 2017/12/19 13:31:05 executing program 6: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) 2017/12/19 13:31:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000677000)={0xffffffffffffffff, 0x28, &(0x7f000085b000-0x28)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000779000-0x10)={0x4, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc7000)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000b73000-0x8)={0x0, 0x3}, &(0x7f00002c0000-0x4)=0x8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e0f000-0x10)={0x1, &(0x7f0000f41000-0x8)=[{0x6, 0x0, 0x0, 0xa0}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cd5000-0x4)=0xddd, 0x4) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000b3c000-0x44)={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='bcsh0\x00'}) sendto$inet(r0, &(0x7f0000283000)="", 0x0, 0x20000801, &(0x7f0000b5b000)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000766000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000766000)="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", 0x866, 0x10, &(0x7f0000c93000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000cbf000-0x1000)=""/4096, 0x1000, 0x0, &(0x7f0000c8e000)={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 28.887379] audit: type=1400 audit(1513690265.605:12): avc: denied { net_admin } for pid=3402 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/19 13:31:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000006000-0x44)={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffffc, {0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='lo\x00'}) 2017/12/19 13:31:05 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000007000-0x80)=[], 0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}) 2017/12/19 13:31:05 executing program 1: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 5: 2017/12/19 13:31:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00005c8000-0xb)='/dev/loop#\x00', 0x7, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000ed6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "399f23631d000000000200000100000000000000eaf7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf", [0x0, 0x0], 0x0}) 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 1: 2017/12/19 13:31:05 executing program 3: 2017/12/19 13:31:05 executing program 5: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 1: 2017/12/19 13:31:05 executing program 2: 2017/12/19 13:31:05 executing program 0: 2017/12/19 13:31:05 executing program 4: 2017/12/19 13:31:05 executing program 7: 2017/12/19 13:31:05 executing program 3: 2017/12/19 13:31:05 executing program 4: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f00007d1000)='5', 0x1, 0x0, &(0x7f0000fd0000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000910000)=0x0, 0x4) 2017/12/19 13:31:05 executing program 2: 2017/12/19 13:31:05 executing program 1: 2017/12/19 13:31:05 executing program 5: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 7: 2017/12/19 13:31:05 executing program 3: 2017/12/19 13:31:05 executing program 5: 2017/12/19 13:31:05 executing program 2: 2017/12/19 13:31:05 executing program 0: 2017/12/19 13:31:05 executing program 4: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 7: 2017/12/19 13:31:05 executing program 1: 2017/12/19 13:31:05 executing program 7: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 5: 2017/12/19 13:31:05 executing program 1: 2017/12/19 13:31:05 executing program 3: 2017/12/19 13:31:05 executing program 2: 2017/12/19 13:31:05 executing program 4: 2017/12/19 13:31:05 executing program 0: 2017/12/19 13:31:05 executing program 2: 2017/12/19 13:31:05 executing program 4: 2017/12/19 13:31:05 executing program 3: 2017/12/19 13:31:05 executing program 2: 2017/12/19 13:31:05 executing program 3: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 4: 2017/12/19 13:31:05 executing program 1: 2017/12/19 13:31:05 executing program 7: 2017/12/19 13:31:05 executing program 5: 2017/12/19 13:31:05 executing program 0: 2017/12/19 13:31:05 executing program 2: 2017/12/19 13:31:05 executing program 1: 2017/12/19 13:31:05 executing program 7: 2017/12/19 13:31:05 executing program 4: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 3: 2017/12/19 13:31:05 executing program 5: 2017/12/19 13:31:05 executing program 2: 2017/12/19 13:31:05 executing program 0: 2017/12/19 13:31:05 executing program 3: 2017/12/19 13:31:05 executing program 7: 2017/12/19 13:31:05 executing program 5: 2017/12/19 13:31:05 executing program 1: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 4: 2017/12/19 13:31:05 executing program 5: 2017/12/19 13:31:05 executing program 0: 2017/12/19 13:31:05 executing program 2: 2017/12/19 13:31:05 executing program 3: 2017/12/19 13:31:05 executing program 7: 2017/12/19 13:31:05 executing program 0: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:05 executing program 1: 2017/12/19 13:31:05 executing program 4: 2017/12/19 13:31:05 executing program 2: 2017/12/19 13:31:05 executing program 5: 2017/12/19 13:31:05 executing program 3: 2017/12/19 13:31:05 executing program 7: 2017/12/19 13:31:05 executing program 0: 2017/12/19 13:31:05 executing program 6: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 7: mmap(&(0x7f0000000000/0x95f000)=nil, 0x95f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000021000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000022000-0x10)={0x2, &(0x7f0000016000)=[{0x28, 0x0, 0x0, 0xfffffffffffff00c}, {0x6, 0x0, 0x0, 0x9}]}, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={&(0x7f00004f8000)={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f00006a8000)=[{&(0x7f00001db000-0x2327)=[{0x10, 0x0, 0x0, 0x0, 0x0, ""}], 0x10}], 0x1, 0x0, 0x0, 0x0}, 0x0) 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 3: 2017/12/19 13:31:06 executing program 5: 2017/12/19 13:31:06 executing program 2: 2017/12/19 13:31:06 executing program 1: 2017/12/19 13:31:06 executing program 6: 2017/12/19 13:31:06 executing program 4: 2017/12/19 13:31:06 executing program 0: 2017/12/19 13:31:06 executing program 7: 2017/12/19 13:31:07 executing program 4: get_robust_list(0x0, &(0x7f0000f80000)=&(0x7f00006ea000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000ac2000)=0x18) 2017/12/19 13:31:07 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000e87000/0x3000)=nil) 2017/12/19 13:31:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000003, 0x2) ioctl$sock_netrom_SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f000019e000)=0x0) r0 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0xa) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) write$tun(r1, &(0x7f0000ef3000)=@hdr={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x0, @broadcast=0xffffffff, {[]}}, @icmp=@address_request={0x11, 0x0, 0x0, 0x0}}}, 0x26) 2017/12/19 13:31:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000c48000-0x14)={0x6, 0x4, 0x8000, 0x80, 0x0, 0x0, 0x0}, 0x14) 2017/12/19 13:31:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x23fe, 'xts(aes)\x00'}, 0x58) bind$alg(r0, &(0x7f0000bb2000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) 2017/12/19 13:31:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, &(0x7f0000598000-0xe4)="a4", &(0x7f00009ba000-0x4)=0x0, &(0x7f0000006000-0x4)=0x0, &(0x7f00003e5000)="") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2017/12/19 13:31:07 executing program 6: mmap(&(0x7f0000000000/0x17c000)=nil, 0x17c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000155000/0x2000)=nil, 0x2000, 0x0, 0x24052, r0, 0x0) 2017/12/19 13:31:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00002f2000)="e4a445eb7fff0500", 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000930000)='net/igmp\x00') sendfile(r1, r1, &(0x7f00004db000)=0x1000000, 0x87) 2017/12/19 13:31:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001, 0x0}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000607000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f00009ba000-0x4)=0x10) 2017/12/19 13:31:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000433000-0xe)='./file0/file0\x00', &(0x7f0000101000)='./file0\x00', &(0x7f000010c000-0x9)='configfs\x00', 0x1004, &(0x7f0000a06000)="") [ 30.299325] audit: type=1400 audit(1513690267.017:13): avc: denied { map_create } for pid=3828 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2017/12/19 13:31:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00001e2000-0x44)={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @random="42305742688d", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, {0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) 2017/12/19 13:31:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x23fe, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00002a3000-0x22)="0a07750800e38300000000000754ffb7295df01e000000000000010300fe00c7af", 0x21) 2017/12/19 13:31:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000cf9000)={0x0, 0x0, 0x0, 0x0}) read(r0, &(0x7f00005e1000)=""/174, 0xae) 2017/12/19 13:31:07 executing program 7: mmap(&(0x7f0000000000/0x17c000)=nil, 0x17c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000017c000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000016f000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x5c, 0x0, &(0x7f0000015000)=[@register_looper={0x630b}, @increfs_done={0x40106308, r1, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f000017f000-0x68)=[@flat={0x0, 0x0, 0x0, 0x0}], &(0x7f000017f000-0x28)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2017/12/19 13:31:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000559000)={0x0, 0x0, &(0x7f0000901000)={&(0x7f000049e000-0x1060)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2017/12/19 13:31:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00002f2000)="e4a445eb7fff0500", 0x8) 2017/12/19 13:31:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x23fe, 'xts(aes)\x00'}, 0x58) 2017/12/19 13:31:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000400000-0x90)=[{&(0x7f000085a000-0xd5)=""/213, 0xd5}, {&(0x7f000065b000-0xf5)=""/245, 0xf5}, {&(0x7f000012c000-0xc4)=""/196, 0xc4}, {&(0x7f00009f5000)=""/220, 0xdc}], 0x4, &(0x7f0000900000-0x10)=[{&(0x7f0000ef4000)=""/4096, 0x1000}], 0x1, 0x0) 2017/12/19 13:31:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000003, 0x2) ioctl$sock_netrom_SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f000019e000)=0x0) r0 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0xa) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) write$tun(r1, &(0x7f0000ef3000)=@hdr={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x0, @broadcast=0xffffffff, {[]}}, @icmp=@address_request={0x11, 0x0, 0x0, 0x0}}}, 0x26) 2017/12/19 13:31:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000930000)='net/igmp\x00') sendfile(r0, r0, &(0x7f00004db000)=0x1000000, 0x87) [ 30.326412] binder_alloc: binder_alloc_mmap_handler: 3829 20155000-20157000 already mapped failed -16 [ 30.340180] binder_alloc: binder_alloc_mmap_handler: 3829 20000000-20002000 already mapped failed -16 [ 30.453975] binder: 3867:3870 ERROR: BC_REGISTER_LOOPER called without request 2017/12/19 13:31:07 executing program 7: mmap(&(0x7f0000000000/0x17c000)=nil, 0x17c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000017c000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000016f000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x5c, 0x0, &(0x7f0000015000)=[@register_looper={0x630b}, @increfs_done={0x40106308, r1, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f000017f000-0x68)=[@flat={0x0, 0x0, 0x0, 0x0}], &(0x7f000017f000-0x28)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2017/12/19 13:31:07 executing program 5: prctl$setptracer(0x59616d61, 0x0) 2017/12/19 13:31:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x200000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 2017/12/19 13:31:07 executing program 1: mmap(&(0x7f0000000000/0xf55000)=nil, 0xf55000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00008bf000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2017/12/19 13:31:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_dev$loop(&(0x7f000040b000-0xb)='/dev/loop#\x00', 0x0, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000194000-0xf)={0x80000001, 0x0, 0x0, 0x0, 0x0}, 0x14) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00008c9000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "32b05d801e6649b812d2e6b6cc159442b12153132c9bf944cf270012da21ba80c040397714f77faa1e8ed3fc7209d64d14cec7479b05cae0c732de3ab6cc5f4b", "941406569a73d06556aea2943f5e94c844a55527af84fb28f011825af60910e7706e46786b3a976da7b57211af834e7d98b839629689a1472f5578b2998bd7da", "efd55922a7dc329394610afbacd237d234afb805ebc3b94e4fb9d56dd03f1f8b", [0x0, 0x0]}) 2017/12/19 13:31:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000092c000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000dd7000-0x9)='loginuid\x00') sendfile(r1, r1, &(0x7f0000dc0000)=0x0, 0xff) 2017/12/19 13:31:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000325000)={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) listen(r0, 0x0) r1 = syz_open_dev$tun(&(0x7f0000d90000)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) write$tun(r1, &(0x7f0000d09000-0x62e)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0x0, @broadcast=0xffffffff, {[]}}, @udp={0x0, 0x2, 0x4d, 0x0, "3060c8449ca4de20e3da406ae6d2ade6af1b622645913a75dcc601009913ed6d51cffd44d15e28169d75ebfd35f373a23c01b98ec38c5dbd7c99ff2560b6c43bceccb32214"}}}, 0x6b) 2017/12/19 13:31:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x23fe, 'xts(aes)\x00'}, 0x58) [ 30.454008] binder: 3867:3870 BC_INCREFS_DONE u0000000000000000 node 1 cookie mismatch 0000000000000003 != 0000000000000000 [ 30.454623] binder: 3867:3870 got transaction with invalid data ptr [ 30.454679] binder: 3867:3870 transaction failed 29201/-14, size 24-0 line 2966 [ 30.456757] binder: BINDER_SET_CONTEXT_MGR already set [ 30.456771] binder: 3867:3870 ioctl 40046207 0 returned -16 2017/12/19 13:31:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f000081f000-0x50)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/19 13:31:07 executing program 7: mmap(&(0x7f0000000000/0x17c000)=nil, 0x17c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000017c000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000016f000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x5c, 0x0, &(0x7f0000015000)=[@register_looper={0x630b}, @increfs_done={0x40106308, r1, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f000017f000-0x68)=[@flat={0x0, 0x0, 0x0, 0x0}], &(0x7f000017f000-0x28)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2017/12/19 13:31:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00009a3000-0x60)={0x0, 0x35, 0x3, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00006b5000-0x4)=0x0) r0 = syz_open_procfs(0x0, &(0x7f0000338000-0xe)='timers\x00') ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000ab5000)={0x0, 0x0, 0x0, 0x22, 0x9, 0x0, 0x1e, 0x13, 0x18, "7c4001da47d0b2584a3bc8dae5af7ab86a4a3bf347fdb171a07f70e1dd3bf0edc8fedd540b91a8cf76933443a2bbfed8d2bb4d82d3101a91388c93c051de154a", "1c8a7cb4869fe68a69e4572ced059798d6360cc96f2641a11b57b04f5590d12a4207c53cb5b0fd4e2301e91b815ca9ee4c5cc3dd57379c4279955f642c95ad21", "f071923efebaf193b51f179a9ad28626f4d7c2f38d45eeed0a10177b562141b7", [0x2, 0x6]}) preadv(r0, &(0x7f0000c1c000-0x50)=[{&(0x7f0000109000-0x1000)=""/4096, 0x1000}], 0x1, 0x0) 2017/12/19 13:31:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000ad5000)="c60b39e7d8183b4ea7a83f819e2753d1bc3f9d43a3232d30161ecd11cb8e0d2ef5ef3b588aff08cf", 0x28, 0x10, &(0x7f000057e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 30.457056] binder: 3867:3870 ERROR: BC_REGISTER_LOOPER called without request 2017/12/19 13:31:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xf, 0x803, 0x2) write(r0, &(0x7f0000000000)="0209af0002000000006466b78e000448", 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00005d5000-0x4)=0x1ff, 0x4) recvfrom(r0, &(0x7f0000ef6000)=""/16, 0x10, 0x0, 0x0, 0x0) 2017/12/19 13:31:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00002a3000-0x22)="0a07750800e38300000000000754ffb7295df01e000000000000010300fe00c7", 0x20) [ 30.457073] binder: 3867:3870 BC_INCREFS_DONE u0000000000000000 no match [ 30.457117] binder_alloc: 3867: binder_alloc_buf, no vma [ 30.457176] binder: 3867:3870 transaction failed 29189/-3, size 24-0 line 2947 [ 30.471795] binder: undelivered TRANSACTION_ERROR: 29189 [ 30.471965] binder: undelivered TRANSACTION_ERROR: 29201 [ 30.581191] binder: 3898:3912 ERROR: BC_REGISTER_LOOPER called without request [ 30.581213] binder: 3898:3912 BC_INCREFS_DONE u0000000000000000 node 4 cookie mismatch 0000000000000003 != 0000000000000000 [ 30.581318] binder: 3898:3912 got transaction with invalid data ptr [ 30.581362] binder: 3898:3912 transaction failed 29201/-14, size 24-0 line 2966 [ 30.597878] binder: undelivered TRANSACTION_ERROR: 29201 [ 30.630252] binder: 3920:3923 ERROR: BC_REGISTER_LOOPER called without request [ 30.630276] binder: 3920:3923 BC_INCREFS_DONE u0000000000000000 node 6 cookie mismatch 0000000000000003 != 0000000000000000 [ 30.630380] binder: 3920:3923 got transaction with invalid data ptr [ 30.630425] binder: 3920:3923 transaction failed 29201/-14, size 24-0 line 2966 [ 30.640924] ================================================================== [ 30.640954] BUG: KASAN: global-out-of-bounds in show_timer+0x278/0x2b0 [ 30.640964] Read of size 8 at addr ffffffff85742fb8 by task syz-executor6/3925 [ 30.640968] [ 30.640980] CPU: 1 PID: 3925 Comm: syz-executor6 Not tainted 4.15.0-rc2-mm1+ #39 [ 30.640988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.640994] Call Trace: [ 30.641021] dump_stack+0x194/0x257 [ 30.641041] ? arch_local_irq_restore+0x53/0x53 [ 30.641056] ? show_regs_print_info+0x18/0x18 [ 30.641073] ? seq_printf+0xb3/0xe0 [ 30.641089] ? show_timer+0x278/0x2b0 [ 30.641105] print_address_description+0x178/0x250 [ 30.641118] ? show_timer+0x278/0x2b0 [ 30.641132] kasan_report+0x25b/0x340 [ 30.641151] __asan_report_load8_noabort+0x14/0x20 [ 30.641163] show_timer+0x278/0x2b0 [ 30.641174] ? timers_start+0x14c/0x1c0 [ 30.641190] seq_read+0x385/0x13d0 [ 30.641227] ? seq_lseek+0x3c0/0x3c0 [ 30.641242] ? selinux_file_permission+0x82/0x460 [ 30.641263] ? security_file_permission+0x89/0x1f0 [ 30.641282] ? rw_verify_area+0xe5/0x2b0 [ 30.641300] do_iter_read+0x3db/0x5b0 [ 30.641316] ? dup_iter+0x260/0x260 [ 30.641345] vfs_readv+0x121/0x1c0 [ 30.641357] ? rcu_note_context_switch+0x710/0x710 [ 30.641375] ? compat_rw_copy_check_uvector+0x2e0/0x2e0 [ 30.641389] ? __might_sleep+0x95/0x190 [ 30.641415] ? fget_raw+0x20/0x20 [ 30.641435] ? selinux_capable+0x40/0x40 [ 30.641458] ? SyS_futex+0x269/0x390 [ 30.641486] do_preadv+0x11b/0x1a0 [ 30.641496] ? do_preadv+0x11b/0x1a0 [ 30.641515] SyS_preadv+0x30/0x40 [ 30.641535] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 30.641544] RIP: 0033:0x452a09 [ 30.641551] RSP: 002b:00007f8eefe46c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000127 [ 30.641565] RAX: ffffffffffffffda RBX: 00007f8eefe46950 RCX: 0000000000452a09 [ 30.641571] RDX: 0000000000000001 RSI: 0000000020c1bfb0 RDI: 0000000000000013 [ 30.641578] RBP: 00007f8eefe46940 R08: 0000000000000000 R09: 0000000000000000 [ 30.641585] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b7366 [ 30.641593] R13: 00007f8eefe46ac8 R14: 00000000004b7371 R15: 0000000000000000 [ 30.641627] [ 30.641632] The buggy address belongs to the variable: [ 30.641641] nstr.44378+0x18/0x40 [ 30.641644] [ 30.641648] Memory state around the buggy address: [ 30.641656] ffffffff85742e80: fa fa fa fa 00 06 fa fa fa fa fa fa 07 fa fa fa [ 30.641662] ffffffff85742f00: fa fa fa fa 05 fa fa fa fa fa fa fa 07 fa fa fa [ 30.641669] >ffffffff85742f80: fa fa fa fa 00 00 00 fa fa fa fa fa 00 fa fa fa [ 30.641673] ^ [ 30.641679] ffffffff85743000: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.641685] ffffffff85743080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.641689] ================================================================== [ 30.641693] Disabling lock debugging due to kernel taint [ 30.641697] Kernel panic - not syncing: panic_on_warn set ... [ 30.641697] [ 30.641705] CPU: 1 PID: 3925 Comm: syz-executor6 Tainted: G B 4.15.0-rc2-mm1+ #39 [ 30.641708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.641710] Call Trace: [ 30.641718] dump_stack+0x194/0x257 [ 30.641729] ? arch_local_irq_restore+0x53/0x53 [ 30.641739] ? vprintk_default+0x28/0x30 [ 30.641747] ? vsnprintf+0x1ed/0x1900 [ 30.641754] ? show_timer+0x1e0/0x2b0 [ 30.641764] panic+0x1e4/0x41c [ 30.641770] ? refcount_error_report+0x214/0x214 [ 30.641779] ? add_taint+0x40/0x50 [ 30.641784] ? add_taint+0x1c/0x50 [ 30.641791] ? show_timer+0x278/0x2b0 [ 30.641797] kasan_end_report+0x50/0x50 [ 30.641802] kasan_report+0x144/0x340 [ 30.641811] __asan_report_load8_noabort+0x14/0x20 [ 30.641817] show_timer+0x278/0x2b0 [ 30.641822] ? timers_start+0x14c/0x1c0 [ 30.641830] seq_read+0x385/0x13d0 [ 30.641849] ? seq_lseek+0x3c0/0x3c0 [ 30.641855] ? selinux_file_permission+0x82/0x460 [ 30.641866] ? security_file_permission+0x89/0x1f0 [ 30.641876] ? rw_verify_area+0xe5/0x2b0 [ 30.641885] do_iter_read+0x3db/0x5b0 [ 30.641893] ? dup_iter+0x260/0x260 [ 30.641908] vfs_readv+0x121/0x1c0 [ 30.641915] ? rcu_note_context_switch+0x710/0x710 [ 30.641924] ? compat_rw_copy_check_uvector+0x2e0/0x2e0 [ 30.641931] ? __might_sleep+0x95/0x190 [ 30.641945] ? fget_raw+0x20/0x20 [ 30.641955] ? selinux_capable+0x40/0x40 [ 30.641967] ? SyS_futex+0x269/0x390 [ 30.641982] do_preadv+0x11b/0x1a0 [ 30.641988] ? do_preadv+0x11b/0x1a0 [ 30.642003] SyS_preadv+0x30/0x40 [ 30.642014] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 30.642018] RIP: 0033:0x452a09 [ 30.642022] RSP: 002b:00007f8eefe46c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000127 [ 30.642029] RAX: ffffffffffffffda RBX: 00007f8eefe46950 RCX: 0000000000452a09 [ 30.642033] RDX: 0000000000000001 RSI: 0000000020c1bfb0 RDI: 0000000000000013 [ 30.642037] RBP: 00007f8eefe46940 R08: 0000000000000000 R09: 0000000000000000 [ 30.642041] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b7366 [ 30.642044] R13: 00007f8eefe46ac8 R14: 00000000004b7371 R15: 0000000000000000 [ 30.647683] Dumping ftrace buffer: [ 30.647688] (ftrace buffer empty) [ 30.647691] Kernel Offset: disabled [ 31.229848] Rebooting in 86400 seconds..