[....] Starting enhanced syslogd: rsyslogd[ 15.417215] audit: type=1400 audit(1517450051.508:4): avc: denied { syslog } for pid=3905 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. 2018/02/01 01:54:24 fuzzer started 2018/02/01 01:54:24 dialing manager at 10.128.0.26:36295 2018/02/01 01:54:27 kcov=true, comps=false 2018/02/01 01:54:29 executing program 0: 2018/02/01 01:54:29 executing program 7: 2018/02/01 01:54:29 executing program 1: 2018/02/01 01:54:29 executing program 2: 2018/02/01 01:54:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000012000)="", 0x0, 0x0, &(0x7f0000036000)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/01 01:54:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) socket(0x18, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000067000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00007fc000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8)={0x0}, 0x8}) 2018/02/01 01:54:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000084c000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utimes(&(0x7f00002a6000)='./file0\x00', &(0x7f0000d57000)={{0x0, 0x0}, {0x0, 0x0}}) 2018/02/01 01:54:29 executing program 6: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) sendto$inet6(r0, &(0x7f0000002000-0x2)="", 0x21f, 0x0, &(0x7f0000003000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, 0x1c) syzkaller login: [ 32.920318] audit: type=1400 audit(1517450069.018:5): avc: denied { sys_admin } for pid=4119 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 32.955183] IPVS: Creating netns size=2536 id=1 [ 32.968429] audit: type=1400 audit(1517450069.058:6): avc: denied { net_admin } for pid=4121 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.014119] IPVS: Creating netns size=2536 id=2 [ 33.054065] IPVS: Creating netns size=2536 id=3 [ 33.094333] IPVS: Creating netns size=2536 id=4 [ 33.141276] IPVS: Creating netns size=2536 id=5 [ 33.184924] IPVS: Creating netns size=2536 id=6 [ 33.239902] IPVS: Creating netns size=2536 id=7 [ 33.277142] IPVS: Creating netns size=2536 id=8 [ 33.635276] ip (4445) used greatest stack depth: 23472 bytes left [ 34.830152] audit: type=1400 audit(1517450070.928:7): avc: denied { sys_chroot } for pid=4121 comm="syz-executor7" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/01 01:54:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000db9000)=0x80000005, 0x4) sendto$inet6(r0, &(0x7f0000bc7000-0x4c)="", 0x0, 0x0, &(0x7f00007c4000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x0}, 0x1c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000ca9000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000fd2000-0x4)=0x9, 0x4) [ 35.106554] audit: type=1400 audit(1517450071.198:8): avc: denied { dac_override } for pid=5182 comm="syz-executor5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/01 01:54:31 executing program 0: times(&(0x7f0000f0c000-0x20)={0x0, 0x0, 0x0, 0x0}) r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00002c2000)=@common=""/16, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000e4a000)='/dev/vga_arbiter\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000b3e000-0xb)='clear_refs\x00') ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000ed8000-0x4)={0x9, 0xd978, 0x20}) 2018/02/01 01:54:31 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000001000-0x4)=0x0, &(0x7f0000001000-0x2)=0x0, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000e72000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ad3000)={{0x0, 0x0}, {0xe, 0x0}, 0x0, 0x3, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/02/01 01:54:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f00007e3000)='./file0\x00', &(0x7f000079a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getegid() syz_fuse_mount(&(0x7f0000990000-0x8)='./file0\x00', 0x1, r0, r1, 0x611, 0x2004) r2 = creat(&(0x7f0000608000-0x8)='./file0\x00', 0x0) inotify_init1(0x80000) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f000066e000)=0x5) mknod(&(0x7f0000ba9000)='./file0\x00', 0x40, 0x4) mount(&(0x7f0000b85000-0x3)='./file0\x00', &(0x7f00000b0000-0x8)='./file0\x00', &(0x7f0000756000)='tmpfs\x00', 0x100000000, &(0x7f0000964000)="b7f47dd7dbce2eabaf7bb71dcace72ca53742d25a8a4a310eabd7226edc9846c41c329f2e8acb7c413605f25ebcf37c5b72fe29c2dc180823b4d7bf4a5bd75fb05683162c087944ada3fc9a92c") 2018/02/01 01:54:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f000006d000-0x28)={@common='lo\x00', &(0x7f00007e6000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00009d7000-0x11)='/selinux/enforce\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/02/01 01:54:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x7) r1 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf9000-0xc)={0x4, 0x0}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00004e6000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00006d5000-0x8)=0x7, 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000a1e000-0xc)={0x0, 0x0}) 2018/02/01 01:54:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f000000f000)={0x0, 0x0}) getrusage(0xffffffffffffffff, &(0x7f0000d2a000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_init() 2018/02/01 01:54:31 executing program 3: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$ipx(r0, &(0x7f000078a000)={0x4, 0x1f, 0x1, "a6a91bbf2304", 0x3, 0x0}, 0x10) connect$inet6(r0, &(0x7f0000d3d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f000016c000-0x230)=[{&(0x7f00008db000-0x1c)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c, &(0x7f000091f000-0x10)=[], 0x0, &(0x7f0000d8a000)=[], 0x0, 0x0}], 0x1, 0x0) r1 = open(&(0x7f00003b7000-0x8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0x401) 2018/02/01 01:54:31 executing program 5: mmap(&(0x7f0000000000/0xd1e000)=nil, 0xd1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000d19000-0x4)=0x1, 0x4) mmap(&(0x7f0000d1e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000d1f000-0x8)='./file0\x00', &(0x7f0000d1f000-0x5a)=""/90, 0x5a) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000bfd000-0x4)=0x0, &(0x7f0000d13000-0x4)=0x4) 2018/02/01 01:54:31 executing program 2: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000b50000)={0x0, 0x0}) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00007c2000-0x4)=0x0, &(0x7f0000f86000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000709000-0x4)=0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14, 0xffffffffffffffff, 0x0}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/02/01 01:54:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000944000-0x4)=0x9d) r1 = gettid() rename(&(0x7f00002fe000-0x8)='./file0\x00', &(0x7f00000d4000-0x8)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dce000-0x10)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b38000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)=0x0) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3, 0x0, 0x0}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000ccb000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r2, r3) clone(0x0, &(0x7f0000002000-0x1000)="", &(0x7f0000001000)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000000000)="") fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) [ 35.218326] tmpfs: No value for mount option '·ô}×ÛÎ.«¯{·ÊÎrÊSt-%¨¤£ê½r&íÉ„lAÃ)ò謷Ä`_%ëÏ7Å·/âœ-Á€‚;M{ô¥½uûh1bÀ‡”JÚ?É©' 2018/02/01 01:54:31 executing program 3: mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000001000-0x3c)=[], 0x0, 0x0) socket(0x5, 0x2, 0x3) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x26) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000002000)={"3774a37b649b92f786612da1a5175896", {0x4, 0x4, 0x296, "de192f55b087", 0x5, 0x0}}) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f000001c000-0x1c)={0x0, 0x14, "18963fa9d62f9a5c30ff2153c3d8edebd56b4eee"}, &(0x7f0000006000)=0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f000001b000)={r1, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) sync() [ 35.262065] tmpfs: No value for mount option '·ô}×ÛÎ.«¯{·ÊÎrÊSt-%¨¤£ê½r&íÉ„lAÃ)ò謷Ä`_%ëÏ7Å·/âœ-Á€‚;M{ô¥½uûh1bÀ‡”JÚ?É©' 2018/02/01 01:54:31 executing program 5: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) 2018/02/01 01:54:31 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80005, 0x4) clock_getres(0x7, &(0x7f000040f000)={0x0, 0x0}) 2018/02/01 01:54:31 executing program 0: clone(0x0, &(0x7f0000f39000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") rt_sigpending(&(0x7f00005bf000-0x8)={0x0}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2000, 0x0) 2018/02/01 01:54:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000156000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000bf6000)={0x0, 0x3}, &(0x7f000068d000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000aee000-0xa0)={r1, @in6={{0xa, 0x2, 0x6, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xfffffffffffffffc}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x91, 0x10000, 0x8, 0xca}, &(0x7f0000fca000)=0xa0) sendmsg$nl_netfilter(r0, &(0x7f00002eb000-0x38)={&(0x7f0000217000)={0x10, 0x0, 0x0, 0x30a0}, 0xc, &(0x7f00002d6000-0x10)={&(0x7f0000321000-0x484)={0x484, 0x12, 0x3, 0x100, 0x2, 0x1, {0xf, 0x0, 0x4}, [@nested={0x248, 0x78, [@generic="2af5860b413d4f9b4ebb2529d26f404e9c8c683644cc54ef59c41e7de8da92666d583782962e3c87afba09e4eb9ab75dfa70e15b10608fbbea3180f4f505bee039aa352a4557b87bcce092c6708aa93e14950daf760eb0ef0847d1f4d3d9001952508ff97e6dbc374d27b4253da4b07f6e07c3693144c4df6c99206e399e536c0a837226e6b753109594794bdb1893b37f52c7c32d6cad6cc6e8324e192a8f87867fa713bc7d932b5b2fb8a0be3e70c55e7d37526669db6f082a", @generic="593e62b22ebaeb63413fe23903ef95fdf7d21cf9f56cd7e2ec3960c6d5a46b3f2fe9fb3b303101d1455423e6af4595a12cdb31fd3004152a6afd4d7fb82b70fd8d70fef1075873f84e8ea6d5daeb3acf4664d6f77a9d", @generic="febf787d910a753b77e7007fac775bb0677bb684de53bec8c4f74d5c46ce1e20bc5daec9a2e7ebe749b1dca4fcc84f0e887b493bc892f3f4728451845b4214b33939ba500e", @typed={0x14, 0x7c, @str='proceth1\x00'}, @generic="fefba2b4a52283a3387783e5b67f9f2135a47920ac26b91bb97aa97ec75ea6494be4009f74eba80729020b5f4328f2a7d48e38a26bbed5d3858babd299bf724049dc37742ad4d30b30b976fb07421461efaea020a03c834255be011221d2cc6c10a2711c3cfaac0c60d0157c9c81043d4cc09330aef213d96ef39d62585eb3e37ee09c651753d112af695fd6eff53f5798af58b641bbfa276411fb33de0b490a5d58bb5e4ff628c342fcf289d8c3a3644fcb53cff3dd212ed8e53889a6487cc6df675950fcda", @typed={0x14, 0x75, @str='/ppp1system\x00'}]}, @typed={0x18, 0x2c, @ipv6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x12}}, @nested={0x20c, 0x6c, [@typed={0x8, 0xd, @void=""}, @typed={0x74, 0x88, @binary="54d9373b51c02be7328dc9a21a567f2f155a7bbd8749d7a4ac2a73bd636529848e36c9ba436082f6e39e26b4b29be6e9234552e1cc85c28ed27cc66d99735a9b2cc76da9428f427de02b2044e7c4e15eb5638ad1814822c25722815b711fd81b26e34223b1001df5648ec7"}, @generic="f1cb135af3db5fc04534dbd0b17288436a04604478d3d1653e0a981876ad33af1df72c9008a824d5976c3b52053565876c0f87764ab23768a57b00e21fd6bb768048c1bfa6d6c95b8f9fbadcf4e57866c11a978a52ce200f05c076e3927d98711958e7599f758fbfe967490c0e6022197af3358d2ecf0f079c28e6b6a41252e918a616171190e27e24c60686e9ee1d65dea3536349327f", @generic="fd4f11a25209047ac79aa8565b0d1ed9b0d574b58a63085bd41223cbcc0fc420df74bc66b2d6ea7a09e978de6d7d9a3d46f21ddc09eac54f89aead292feb3162f574e74134976ffc50d1eaf04c7a07c66397abc0661c695a7e628a43ec3bc2cc401f8128a4bc04d9ba9bcfea2adb022955a7b7b9206f26296e7e19c9aee44bf007759024b2d21fa2788a184bde011eb4059f5a8b0f225ebd17cdcc8ceb7a94997f5c24d1a1762ade2cc470f6bf9738bbf79c642314073713786fb2b9af374e2c02133aa8c8f6475e80aedd23e0cf79659665d8d1d53121710f2814999df4d0e59a2818586a7f7236528483569251038eb1bf7a48"]}, @nested={0x4, 0x55, []}]}, 0x484}, 0x1, 0x0, 0x0, 0x40}, 0x240480c4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000596000+0xc3a)={&(0x7f0000b93000+0x43a)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00002bf000)={&(0x7f0000e22000-0x84)=@ipv4_delroute={0x24, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@RTA_DST={0x8, 0x1, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) lseek(r0, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000534000)={r2, 0x4, 0x8, 0x4, 0xfffffffffffffbff, 0x5, 0xffffffffffffffff, 0x1, {r1, @in={{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x8, 0x9, 0x4, 0x81}}, &(0x7f0000621000)=0xb8) 2018/02/01 01:54:31 executing program 3: r0 = request_key(&(0x7f0000206000-0x5)='user\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f0000001000-0x12)='{:)systemkeyringself{:\x00', 0xfffffffffffffffa) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00005fa000)='/dev/rtc\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000e3d000)=0xe8) keyctl$chown(0x4, r0, r2, 0x0) 2018/02/01 01:54:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00008b2000)={0x0, 0x0, 0x0}, &(0x7f0000216000)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000af0000)=0x0) getpgrp(r1) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000680000-0x8)='syscall\x00') ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000570000)={0x0, 0x0}) sendfile(r0, r3, &(0x7f00000b5000-0x8)=0x4, 0x2) 2018/02/01 01:54:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000bbd000-0x4)=0x0) syz_open_procfs(r0, &(0x7f000033b000-0xb)='net/rfcomm\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000eac000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r1, &(0x7f00007d3000)="", 0x0, 0x8000, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/02/01 01:54:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000016000)='logon\x00', &(0x7f0000ce9000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f00001b9000)="7f", 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00009ac000-0x11)='/selinux/enforce\x00', 0x80, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 2018/02/01 01:54:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000a62000)={{0x0, 0x2, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000bb000-0x4)=0x1) 2018/02/01 01:54:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs={0xfffffffffffffffd, 0x0, 0x0}, 0x8, &(0x7f0000452000-0x10)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0xa}], 0x1, &(0x7f00001fa000-0x20)=[], 0x0, 0x0}, 0x48080) r0 = syz_open_dev$sg(&(0x7f00000c6000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x5, 0x20000000, 0x0}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') getresuid(&(0x7f0000a98000)=0x0, &(0x7f0000ed9000-0x4)=0x0, &(0x7f000071f000)=0x0) setuid(r1) 2018/02/01 01:54:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000fbe000)={{0x0, 0x0}, {0x3, 0x0}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000-0x108)={0x7fff, {{0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x4000) clock_adjtime(0x3, &(0x7f0000de2000)={0x3c7, 0x7, 0x100, 0x3, 0xfffffffffffffffa, 0x9, 0x6, 0x62, 0x4b97, 0x3ff, 0x7fff, 0x3, 0xf5c, 0x7ff, 0x1000, 0x40, 0x28c3, 0x7be, 0x3, 0x4ec7, 0x7, 0x4, 0x401, 0x80000001, 0x80000001, 0x100000001}) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000de000-0x8)=0x0, 0x100000001) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000b07000-0x14)={0x0, 0x2aa3, 0x5d, 0x1f, 0xffffffffffffff81, 0x8}, &(0x7f0000ec7000)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000295000)=@assoc_value={r2, 0x3f}, &(0x7f0000c3e000)=0x8) 2018/02/01 01:54:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000d0e000)='/dev/sequencer2\x00', 0x0, 0x0) userfaultfd(0x80000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000009000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000e42000)='comm\x00') exit(0x0) writev(r2, &(0x7f0000661000)=[{&(0x7f000033f000-0x1000)="15", 0x1}], 0x1) ioctl$int_in(r0, 0x80000000005403, &(0x7f0000a9b000)=0x0) 2018/02/01 01:54:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000061000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000060c000)={{0x100000001, 0x4, 0x0, 0x3, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b72000-0xc)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000052000-0xc)={0x13, 0x0}) poll(&(0x7f00004da000)=[{r0, 0x0, 0x0}, {r1, 0x2040, 0x0}], 0x2, 0xffffffffffffff80) 2018/02/01 01:54:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002eb000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x8000000000000007, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$mice(&(0x7f0000829000-0x10)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000c88000-0xc)={0x40, 0x1, 0x7, 0x7, 0x6}, 0xc) fcntl$lock(r0, 0x26, &(0x7f0000004000-0x20)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 2018/02/01 01:54:31 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$unix(0xffffffffffffff9c, &(0x7f00008bf000-0x51)=@file={0x0, ""/79}, &(0x7f0000001000-0x4)=0x51) fcntl$getown(r0, 0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f000057c000-0xe)='/selinux/user\x00', 0x2, 0x0) writev(r1, &(0x7f0000b27000)=[{&(0x7f0000b7b000)="ca4aa6cf1440307ad459356f8fe0813e82dcfcb1102ad8341b1e5f84c8a9caf55edad96352a58c5bbcac26e2be2651bdc83a686d9a3f6fcc3313293331700b28e822c3e3233acacf676dc640e735e72cd05452879d7082b4a18238732aa240cf6a8b04509c08b6f9d484f0b48da603ab7197e2ea9ecd3ab27e1a1b0e3dd6f0d4066fe1d347e32d3f2f9d25cd885bcb251d58668249662db53796247883fb7dfc52ab20b7684e8b62048c5f7e3f78bf9618f2dc67", 0xb4}], 0x1) ioctl(r0, 0x19db, &(0x7f0000686000-0x96)="e484d748856140caa7c3a4331ca8a5f4c95634f6b3d5e8b1e54b63e61135fb03889ee29f36fda0c509f0ecd80f959b0e982f649ea49695d25addd67ec684388cc7793f4c5df384bf7b4c9ec0564df0b405da52ec753b8985f8b04f4aeb25140afec1f733d433b9eb950fcaa6f9a35723e4010f44a9d0382c093114c84939fb6fe8c8a9783ce17cfb939eeca22e211d71072e6834dc10") epoll_create(0x200000b) [ 35.505434] audit: type=1400 audit(1517450071.598:9): avc: denied { setuid } for pid=5277 comm="syz-executor3" capability=7 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/01 01:54:31 executing program 7: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000080a000)='/dev/ashmem\x00', 0x200300, 0x0) r1 = inotify_init1(0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000001000-0x8)=0x0, 0x26) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x75b3, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000334000-0x11)='/selinux/enforce\x00', 0x20100, 0x0) write$evdev(r3, &(0x7f0000239000)=[], 0x9e9c77ee) [ 35.517385] device gre0 entered promiscuous mode [ 35.521055] audit: type=1400 audit(1517450071.618:10): avc: denied { net_raw } for pid=5253 comm="syz-executor6" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/01 01:54:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000de3000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0}, 0x2a3) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00009be000-0x2c)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0xf}, 0x0, 0x2, [@loopback=0x7f000001, @empty=0x0]}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000dec000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r1, &(0x7f0000de2000-0x1)="", 0x0, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/02/01 01:54:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ftruncate(r0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf8000-0xc)={0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) readahead(r0, 0x8, 0x100) r2 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r3 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f000031a000-0x15)='/dev/pktcdvd/control\x00', 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000d1000-0x30)={0xa0, 0x0, &(0x7f0000f3d000-0xa0)=[@increfs_done={0x40106308, r2, 0xfffffffffffffff8}, @increfs_done={0x40106308, r2, 0x2}, @exit_looper={0x630d}, @dead_binder_done={0x40086310, 0x3}, @increfs_done={0x40106308, r2, 0x3}, @free_buffer={0x40086303, r2}, @transaction={0x40406300, {0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x38, 0x20, &(0x7f000034a000)=[@fda={0x66646185, 0x8, 0x3, 0x13}, @flat={0x77682a85, 0x0, r2, 0x2}], &(0x7f000094b000-0x20)=[0x18, 0x40, 0x38, 0x30]}}, @register_looper={0x630b}], 0x27, 0x0, &(0x7f000064f000-0x27)="51215a4e2b87f76587fe65124d1d81ed70c410fd769ed967013bfbd878cde89eef90c47a5ca376"}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000f8e000-0x8)={0x0, 0x9}, &(0x7f0000ccb000-0x4)=0x8) ioctl$TUNSETNOCSUM(r3, 0x400454c8, &(0x7f000095e000)=0x9) stat(&(0x7f0000e61000)='./file0\x00', &(0x7f00008a2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000440000-0x8)={r4, 0x4, 0x5}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000260000)=""}) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000383000)=0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000005000-0x68)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00004ee000)=[], &(0x7f0000043000)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/02/01 01:54:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000e60000-0x4)=0x10001, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000b25000)={0x813e, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x560, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005db000-0x1c)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, 0x1c, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) lseek(r0, 0x0, 0x2) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00007e1000)=0x0) capset(&(0x7f0000ff7000-0x8)={0x399f1336, r1}, &(0x7f00006d6000-0x18)={0x854, 0x4, 0x3, 0x40, 0xffff, 0x0}) sendto$inet6(r0, &(0x7f0000b0d000-0x92)="", 0xffed, 0x0, &(0x7f000001b000)={0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) 2018/02/01 01:54:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00002b7000)='./file0\x00', 0x40000000000001) r0 = open(&(0x7f000043f000-0x8)='./file0\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x0) 2018/02/01 01:54:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000ab7000-0x9)='illinois\x00', 0x9) socketpair$inet6(0xa, 0x6, 0x4, &(0x7f0000c95000-0x8)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00008d5000-0x106)={0x0, 0xfe, "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"}, &(0x7f00004d9000)=0x106) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000af2000)={r2, @in6={{0xa, 0x2, 0xffffffffffffc3b3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x20}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x9, 0x8, 0x658, 0x7fffffff}, &(0x7f000035e000-0x4)=0xa0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000e5a000)={r2, 0x5, 0x0, 0x10001}, &(0x7f0000ec7000-0x4)=0x9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00002f5000-0x4)={0x0, 0x0, 0x0}, 0x4) getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000617000)=0x0, &(0x7f00000a7000)=0x478) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000fed000)={0x0, 0x3, 0x4, [0x6, 0x2, 0x7, 0x8]}, &(0x7f0000c17000)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000092000-0xc)={0x0, 0xffffffffffff0001, 0x30}, &(0x7f00006df000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000761000-0x8)={0x0, 0x37}, &(0x7f0000cc3000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000088000)={0x0, 0x4, 0x100000000, 0x3, 0x5, 0x20, 0x6, 0x4, {0x0, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0xfffffffffffff268, 0xcb8, 0x3f, 0xb03}}, &(0x7f0000be5000)=0xb8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000815000-0x20)={0xad4a, 0x80000000, 0x4, 0xfe2, 0x8, 0x1c0000000, 0x2, 0x58e, 0x0}, &(0x7f0000fb4000)=0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000d0e000)=@sack_info={0x0, 0x0, 0x5392}, &(0x7f00008bf000)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000078000)={0x0, @in={{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x101, 0x4, 0x7, 0x248906fd, 0x8}, &(0x7f0000631000)=0xa0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f000090e000-0x108)={0x0, @in6={{0xa, 0x3, 0x1000, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf}, 0xfffffffffffffff9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x10001, 0x0, 0x3f, 0x3, 0x2, 0x3d97, 0x5, 0x3, 0x555000000000000, 0xffffffffffff2a52, 0x7ea, 0x5, 0x100000000, 0x1f, 0x6]}, &(0x7f0000220000+0x5ba)=0x108) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00005fe000-0x20)={r3, 0xe, "2a08c4d942d3207306294ffa78ca5d57e1b39826c2e4bb1c"}, &(0x7f0000467000)=0x20) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f00007ec000)={0x0, 0x0}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000311000-0xe)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000a54000-0xc)={0x2, [0x0, 0x0]}, &(0x7f00005dd000-0x4)=0xc) sendmmsg$inet_sctp(r0, &(0x7f000007d000-0x70)=[{&(0x7f000010a000)=@in={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000437000-0x60)=[{&(0x7f000094a000-0x91)="0eb9889f5e85c3c5019195e236f377561c53e7a74cc17136982eaa15cfbbd05d6ec2874628f03148711aa65b1727fbe212649f4de57c50d55f2612e654ceb8e9d517ec0a190159e3f2c88039b73c226ef0b10e8c5b80d3d8f5eefae1d2b16ac3a4784460c810d29e30d79d4c5a79f567ae0ca31cf2897a938b3b18734bb00e2fc93db11e1290c3b2ce1db8f3d3592d7e68", 0x91}, {&(0x7f0000968000-0xc2)="92e40e162ea7b40564a346e0a1de45a27f377cfab84b65c2550b73eb9753c3b1df1cb1862888d59745ba6146458950671f16d09c4298543b3fbcde4f3b07e54fb7d5d244e60e1f987adbd2279319aa4ea54fbf9e554399689925e202b2d5a278845b4febe17006b0038e60fa095eb40c87ad17815bbade407be8dca858c7220db093c39afa87460251f3099e33b9557cdd07875d6427cd16053352cab29fe96441363df20f09c566ab3005dcda6bae13fd9024396d7023dc5b44a9aaee81b9f3f58b", 0xc2}, {&(0x7f0000d7d000-0xc0)="91a530ca1b81bdcbdbf860345d09e4db6fa6426067048f25e1abe457f2c81303e44f12eec936bfdf607394057961e9465009e7f44f491bdd06655ca9653e7ba91abf1a4692bea210d3089cce7792345a3c9870aee62ef4c5689526328ce3e7b790d32ff74f871dab16c1f33d2e7f2e7387c4ec6d7d76518b3c4dbd1830947aaf5f34ea08123b1b45a0c69152661cb3f22d91e82accddaa7dcf72ae057422583681541f7eed2704809a37b87043988ec0aea164f5e8f24b8ad797b979b967b8ff", 0xc0}, {&(0x7f000061a000-0x16)="80a70505eed1ebf96fd901394de6e61f98933ce24523", 0x16}, {&(0x7f0000129000)="2ebaba9b5971d7aa14681ff9ef2d666f80edd0ee1eda2dc129c7ee59d8b4ea14cc480874457ff58720dff55d7bd1dde48cd716dcf3f46409a2760319d9414a312e89895836d796fc51406f19c3f61549ee60d34687953f87857a59471ad31b68f6f10d50a3ffcfcee69660a160ea99cccea7a113917b06c1037ea129fdf7ffb4ddd176f70092f53f33728c06d94f669d774be9d802b03651d96689df8e5d3cc5750a800e3903595a06b1ec8ac1f9172036825cd2feae29afddc0fa1a22179573718a09127f2ab54b6c6651dae5ad42f4", 0xd0}, {&(0x7f0000e26000-0xd9)="e39c4bbee0f9192fd37a10e7a97e39596ba1a733fc110ea3f8bceebf3ed11366387dd74ad4df0a92eab5d360e100916e3ee2fc819b661ad24ff74cd3e08f5c14decd2796f5d826aaf3bbc76a8a4c85fba68744438482cd99549dc7bd25102b82f612b9211b663c5fcdc4e683bf916c59d1fbeb67069ed12fdf749cfce02973bc770ed4ee6149357f6e271b26c8cc815a852563c0f3eb7d247517c513e473c744988acc8d509ada62f18fc996e9295ede6d7367f5608786046c9e411545d6051ce13eda97253aa009bd9e788b4182a9b86224ca5653c87225de", 0xd9}], 0x6, &(0x7f0000cb3000-0xf0)=[@sndrcv={0x30, 0x84, 0x1, {0x100000000, 0x80000000, 0x1, 0x800, 0xfffffffffffffffd, 0x4, 0xffffffffeef6546d, 0x100, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x400, 0x260, 0x1, 0xd79b, 0xfff, 0xfffffffffffffffa, 0xcb2, 0x1b94, r6}}, @init={0x18, 0x84, 0x0, {0xfffffffffffffeff, 0x1, 0x100000001, 0x1}}, @init={0x18, 0x84, 0x0, {0xd2c3, 0x6, 0xc3, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x719e, 0x3, 0xc, 0x7, 0x3, 0x7, 0x7, 0x1, r7}}], 0xf0, 0x80}, {&(0x7f0000fdd000)=@in={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f00009f4000)=[{&(0x7f0000b62000-0x27)="74138dd7984fb890cd27f34e0bfe2389f813f8bed66841a091417ef612ccee84c97c0d70fe7359", 0x27}, {&(0x7f0000aec000)="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", 0x1000}, {&(0x7f0000cad000)="2f0b6877044a78621dd511adc730e74fdfe96f26c07c60eb5bca44e0aefab1a2d0a6ebe61a91c4e2855919be866f23cbcf60327efd6dfaa3e1cbb0639cb7dfbf2ac1ec8018ec83b83d8448584ab82ec61b40864d593256bab736fb755c0e9f268f1cc76addbd1eb7d7e9cd6cea2d2b697cb497ebbb8ed1e9e9992841414811791c210b7b2cd6408e976686efbc192bf75417ef1a921c20c64df51acddcda1427da2bb916f8ca4bdc24164f0d0a1ed368add622d9c8dabed23a96da2d7574395b176edfb0f57197960352cb1e", 0xcc}, {&(0x7f0000ee8000)="7d655cd8d895293f4af8c2132dceb2c724c17ed16df2a4967df1f149891caef0f7f739e04772f47f241e91d4888f2f625dc91997856fb2ce36c639ea067be8d670825ce532ee82131c49132d83d5fc959bb1e40266aaceb078ada686eea823791b2636397565e15c755c65e9f1b65060dda550b3cc1be6af5592241fdb41f0029c8e458bc71a547966bef15d125d3b74009479ebfbf1d11c73da7ddd30690f691e6a56e899df64fa590b2d5cffe31734ac3202e1a5d9bd38596461e14cb4b0433aef1bdb7831390c1ff75a30f6e5", 0xce}, {&(0x7f000063e000-0xcc)="d187521735aaf36354bbe88af22e50ac8edf131d56dd6c1653f31f37b4787744c2aef085c1cff8b166ab55c54f1e620a2380e356ba1631f8cea5c9c37e549032c8299781971fa54f4a71a0fc72065cc772022245c5527736ee711a81924e56a14d28d8e8536855b15cc8504a3ecc92ffc950cb1706a4070bd80efedced8645134e1b10cdeacd47baa174eac98447ecd9cfc8cf3c272b62f6e4c40d9a7fbde05293ae6f43c6972bf2fa10851c409400d4149acc33ce280924d7a8a770fb6b14938f042a37298a13852144613d", 0xcc}, {&(0x7f000045c000-0x4c)="e64d9b615488778fd239b6540484e7ad7b65bd1418929d80cab378662b306fdc49ba88e8bc0118c10bdf7130ba08075e306ebe557741125fbc0048ba4f29ff2842094d301f4f72f4e177a7b9", 0x4c}, {&(0x7f00009df000)="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", 0x1000}, {&(0x7f0000583000-0xb0)="407bac2d0167c77eeda2480416ebb0eaa400ed3134faa81fab71d59b32cc8aadff4a01d7515b4011b5b01d1a3fa231dda4285214b19f9f88d09ed8c288394c2a149e06abbfb20b09831625aba024efdb00b0dcdfe38ae1974c79724da061c16d7a72e4cae4f2c3051672c1055d5c9801da4dbea48f96e69f99cca37aec7b0599b4ffebdf680785cf4c2334b8170085d30fe221128abfb20a045274dec3300178228fbb42e20455f5d6c7cccd34637735", 0xb0}], 0x8, &(0x7f00006eb000)=[@init={0x18, 0x84, 0x0, {0x1, 0x4, 0x1, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0x20, 0x200, 0x2, 0xffffffffffffffff, r8}}, @init={0x18, 0x84, 0x0, {0x1000, 0x4, 0x95, 0x1000}}, @sndrcv={0x30, 0x84, 0x1, {0xfb8b, 0x3, 0x1, 0xd1, 0x2, 0x4, 0xff, 0x7, r9}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x3, 0x0, 0x6, 0xb3c, 0x7, 0x1f, 0x2740, r10}}, @sndinfo={0x20, 0x84, 0x2, {0xd67, 0x800a, 0x9c, 0x4, r11}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0xffffffff, 0x20c, 0x4, 0x99de, 0x3f, 0x5, 0x200, r12}}, @init={0x18, 0x84, 0x0, {0x9, 0x8001, 0x4, 0x5e}}, @sndinfo={0x20, 0x84, 0x2, {0xa21c, 0x1, 0x81, 0x5, r13}}, @sndrcv={0x30, 0x84, 0x1, {0xb4, 0x8, 0x8203, 0x6, 0x80, 0x0, 0x5, 0x401, r14}}], 0x1e0, 0x4}], 0x2, 0x0) sendto$inet(r0, &(0x7f0000fd0000)="", 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00001ac000)={0x7}, 0x4) sendto$inet(r0, &(0x7f0000d7d000-0x35)="a2", 0x1, 0x0, &(0x7f000057b000-0x10)={0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/02/01 01:54:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000031b000-0xd)='/dev/binder#\x00', 0x0, 0x400000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000-0x30)={0x4, 0x0, &(0x7f000000a000-0x10)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}, @acquire={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) time(&(0x7f0000cc7000-0x8)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00003f2000-0x30)={0x2b, 0x0, &(0x7f0000008000)=[], 0x0, 0x0, &(0x7f0000e5d000-0x137)="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"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000309000)='/dev/hwrng\x00', 0x83, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000c56000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000ad0000)={r2, 0x100000000002}) 2018/02/01 01:54:31 executing program 6: mmap(&(0x7f0000000000/0xfef000)=nil, 0xfef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00009aa000-0x4)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000002000-0x80)=@generic={0x0, ""/126}, 0x80, &(0x7f0000002000)=[], 0x0, &(0x7f0000002000)=""/54, 0x36, 0x0}, 0x0}, {{&(0x7f0000003000-0xc)=@nl=@kern={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000001000)=[], 0x0, &(0x7f0000001000)=""/1, 0x1, 0x0}, 0x0}], 0x2, 0x0, &(0x7f0000003000-0x10)={0x0, 0x0}) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {r0, 0x14, 0x0}], 0x5, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000)="", 0x0) 2018/02/01 01:54:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d9a000)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") readv(r0, &(0x7f000005a000)=[{&(0x7f00004bb000)=""/203, 0xcb}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1d000-0x1)="") readv(r0, &(0x7f0000638000)=[], 0x0) 2018/02/01 01:54:31 executing program 1: mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f000000c000)=0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f000000c000)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000b000)={&(0x7f0000025000-0xb8)=@ipv6_delroute={0x1c, 0x19, 0x60d, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}, []}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/02/01 01:54:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000e60000-0x4)=0x10001, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000b25000)={0x813e, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x560, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005db000-0x1c)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, 0x1c, &(0x7f0000fc8000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) lseek(r0, 0x0, 0x2) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00007e1000)=0x0) capset(&(0x7f0000ff7000-0x8)={0x399f1336, r1}, &(0x7f00006d6000-0x18)={0x854, 0x4, 0x3, 0x40, 0xffff, 0x0}) sendto$inet6(r0, &(0x7f0000b0d000-0x92)="", 0xffed, 0x0, &(0x7f000001b000)={0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) 2018/02/01 01:54:31 executing program 7: mmap(&(0x7f0000000000/0x39000)=nil, 0x39000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f0000741000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r0) [ 35.695035] audit: type=1400 audit(1517450071.788:11): avc: denied { set_context_mgr } for pid=5310 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/02/01 01:54:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00002b0000-0x11)='/selinux/context\x00', 0x2, 0x0) write$selinux_context(r0, &(0x7f000005a000)='system_u:object_r:wtmp_t:s0\x00', 0x1c) 2018/02/01 01:54:31 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002000-0xc)='/dev/rfkill\x00', 0x200, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={@generic=""/16, @ifru_mtu=0x0}) pipe2(&(0x7f0000001000-0x8)={0x0, 0x0}, 0x4000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000001000-0x8)={0x7fffffff, 0x7}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x801, 0x3) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000327000)=0x201021) write(r2, &(0x7f00006f4000-0x22)="220000001e0007fffc01000f09000700000800ebfeffa7001a00ffff05000980be45", 0x9) connect$vsock_stream(r2, &(0x7f00003a2000-0x10)={0x28, 0x0, 0x0, @reserved=0x1, 0x0}, 0x10) 2018/02/01 01:54:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00004ff000)='/dev/snd/seq\x00', 0x0, 0x54200) pipe2(&(0x7f00002cc000)={0x0, 0x0}, 0x80800) accept$netrom(r1, &(0x7f000030b000)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000317000)=0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000742000)={0x0, 0x2000000000000080, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/02/01 01:54:31 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$selinux_create(r0, &(0x7f0000000000)=@access={'system_u:object_r:inetd_child_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x35, 0x38, 0x0}, 0x50) unlinkat(0xffffffffffffffff, &(0x7f000077d000)='./file0\x00', 0x2) [ 35.727186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pig=5328 comm=syz-executor1 [ 35.740745] audit: type=1400 audit(1517450071.828:12): avc: denied { call } for pid=5316 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/02/01 01:54:31 executing program 6: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000001f000)='/dev/ppp\x00', 0x1, 0x0) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000020000-0x10)={0x4, &(0x7f0000010000-0x20)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f000001f000-0x8)={r2, 0xc}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r3 = syz_open_dev$evdev(&(0x7f000001a000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f000000e000-0x10)={&(0x7f0000005000/0x2000)=nil, 0x2000}) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000013000)=""/0) execve(&(0x7f0000001000)='./file0\x00', &(0x7f000001b000)=[], &(0x7f0000004000)=[]) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f000001e000-0x10)={0x0, 0x0, &(0x7f000001d000-0x54)=""}) close(r0) 2018/02/01 01:54:31 executing program 4: prctl$setendian(0x14, 0x2) mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_generic(r0, &(0x7f0000008000-0x38)={&(0x7f000001a000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000013000-0x10)={&(0x7f0000019000-0x210)={0xfffffe76, 0x32, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0xffffff21, 0x1, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 35.749160] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pig=5343 comm=syz-executor1 [ 35.750245] binder: BINDER_SET_CONTEXT_MGR already set [ 35.750251] binder: 5316:5324 ioctl 40046207 0 returned -16 [ 35.778519] binder: 5310:5348 unknown command 0 [ 35.778527] binder: 5310:5348 ioctl c0306201 203f1fd0 returned -22 [ 35.802828] audit: type=1400 audit(1517450071.898:13): avc: denied { create } for pid=5358 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 35.815735] binder_alloc: 5316: binder_alloc_buf, no vma [ 35.815753] binder: 5316:5324 transaction failed 29189/-3, size 0-0 line 3127 [ 35.832901] binder: undelivered TRANSACTION_ERROR: 29189 [ 35.833137] ================================================================== [ 35.833153] BUG: KASAN: use-after-free in __lock_acquire+0x2eff/0x3640 [ 35.833158] Read of size 8 at addr ffff8801d95b6fb8 by task syz-executor2/5351 [ 35.833159] [ 35.833166] CPU: 0 PID: 5351 Comm: syz-executor2 Not tainted 4.9.79-g71f1469 #25 [ 35.833169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.833178] ffff8801d8e97610 ffffffff81d94829 ffffea0007656d80 ffff8801d95b6fb8 [ 35.833185] 0000000000000000 ffff8801d95b6fb8 ffff8801d95b6fb8 ffff8801d8e97648 [ 35.833191] ffffffff8153e083 ffff8801d95b6fb8 0000000000000008 0000000000000000 [ 35.833192] Call Trace: [ 35.833201] [] dump_stack+0xc1/0x128 [ 35.833211] [] print_address_description+0x73/0x280 [ 35.833217] [] kasan_report+0x275/0x360 [ 35.833224] [] ? __lock_acquire+0x2eff/0x3640 [ 35.833231] [] __asan_report_load8_noabort+0x14/0x20 [ 35.833237] [] __lock_acquire+0x2eff/0x3640 [ 35.833243] [] ? __lock_acquire+0x629/0x3640 [ 35.833251] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 35.833258] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 35.833265] [] ? __lock_is_held+0xa1/0xf0 [ 35.833270] [] lock_acquire+0x12e/0x410 [ 35.833276] [] ? remove_wait_queue+0x14/0x40 [ 35.833283] [] _raw_spin_lock_irqsave+0x4e/0x70 [ 35.833289] [] ? remove_wait_queue+0x14/0x40 [ 35.833305] [] remove_wait_queue+0x14/0x40 [ 35.833313] [] ep_unregister_pollwait.isra.6+0xaf/0x240 [ 35.833320] [] ? ep_unregister_pollwait.isra.6+0x12a/0x240 [ 35.833325] [] ep_remove+0x41/0x290 [ 35.833331] [] eventpoll_release_file+0xc5/0x140 [ 35.833336] [] __fput+0x5a8/0x6e0 [ 35.833341] [] ____fput+0x15/0x20 [ 35.833348] [] task_work_run+0x115/0x190 [ 35.833357] [] do_exit+0x7e7/0x2a40 [ 35.833365] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 35.833371] [] ? release_task+0x1240/0x1240 [ 35.833378] [] ? get_futex_key+0x1050/0x1050 [ 35.833385] [] ? __dequeue_signal+0xa3/0x550 [ 35.833392] [] ? recalc_sigpending+0x72/0x90 [ 35.833399] [] do_group_exit+0x108/0x320 [ 35.833405] [] get_signal+0x4d4/0x14e0 [ 35.833412] [] do_signal+0x87/0x1a00 [ 35.833420] [] ? pkt_setup_dev+0x11b0/0x11b0 [ 35.833427] [] ? do_vfs_ioctl+0x458/0x1140 [ 35.833433] [] ? setup_sigcontext+0x7d0/0x7d0 [ 35.833438] [] ? ioctl_preallocate+0x220/0x220 [ 35.833444] [] ? selinux_file_ioctl+0x355/0x530 [ 35.833449] [] ? selinux_capable+0x40/0x40 [ 35.833454] [] ? SyS_futex+0x22e/0x2d0 [ 35.833459] [] ? do_futex+0x15c0/0x15c0 [ 35.833465] [] ? exit_to_usermode_loop+0xac/0x120 [ 35.833470] [] exit_to_usermode_loop+0xe1/0x120 [ 35.833476] [] syscall_return_slowpath+0x1a0/0x1e0 [ 35.833481] [] entry_SYSCALL_64_fastpath+0xe6/0xe8 [ 35.833483] [ 35.833486] Allocated by task 5331: [ 35.833493] save_stack_trace+0x16/0x20 [ 35.833498] save_stack+0x43/0xd0 [ 35.833503] kasan_kmalloc+0xad/0xe0 [ 35.833508] kmem_cache_alloc_trace+0xfb/0x2a0 [ 35.833512] binder_get_thread+0x15d/0x750 [ 35.833516] binder_poll+0x4a/0x210 [ 35.833521] SyS_epoll_ctl+0x11d7/0x2190 [ 35.833526] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 35.833527] [ 35.833529] Freed by task 5331: [ 35.833533] save_stack_trace+0x16/0x20 [ 35.833537] save_stack+0x43/0xd0 [ 35.833541] kasan_slab_free+0x72/0xc0 [ 35.833545] kfree+0x103/0x300 [ 35.833551] binder_thread_dec_tmpref+0x1cc/0x240 [ 35.833556] binder_thread_release+0x27d/0x540 [ 35.833561] binder_ioctl+0x9c0/0x11b0 [ 35.833566] do_vfs_ioctl+0x1aa/0x1140 [ 35.833571] SyS_ioctl+0x8f/0xc0 [ 35.833576] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 35.833577] [ 35.833582] The buggy address belongs to the object at ffff8801d95b6f00 [ 35.833582] which belongs to the cache kmalloc-512 of size 512 [ 35.833586] The buggy address is located 184 bytes inside of [ 35.833586] 512-byte region [ffff8801d95b6f00, ffff8801d95b7100) [ 35.833588] The buggy address belongs to the page: [ 35.833595] page:ffffea0007656d80 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 35.833599] flags: 0x8000000000004080(slab|head) [ 35.833601] page dumped because: kasan: bad access detected [ 35.833601] [ 35.833603] Memory state around the buggy address: [ 35.833609] ffff8801d95b6e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.833613] ffff8801d95b6f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.833618] >ffff8801d95b6f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.833620] ^ [ 35.833625] ffff8801d95b7000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.833630] ffff8801d95b7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.833632] ================================================================== [ 35.833634] Disabling lock debugging due to kernel taint [ 35.833637] Kernel panic - not syncing: panic_on_warn set ... [ 35.833637] [ 35.833642] CPU: 0 PID: 5351 Comm: syz-executor2 Tainted: G B 4.9.79-g71f1469 #25 [ 35.833645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.833653] ffff8801d8e97568 ffffffff81d94829 ffffffff8419709f ffff8801d8e97640 [ 35.833659] 0000000000000000 ffff8801d95b6fb8 ffff8801d95b6fb8 ffff8801d8e97630 [ 35.833665] ffffffff8142f531 0000000041b58ab3 ffffffff8418ab10 ffffffff8142f375 [ 35.833666] Call Trace: [ 35.833672] [] dump_stack+0xc1/0x128 [ 35.833680] [] panic+0x1bc/0x3a8 [ 35.833688] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 35.833694] [] ? add_taint+0x40/0x50 [ 35.833701] [] kasan_end_report+0x50/0x50 [ 35.833707] [] kasan_report+0x167/0x360 [ 35.833714] [] ? __lock_acquire+0x2eff/0x3640 [ 35.833721] [] __asan_report_load8_noabort+0x14/0x20 [ 35.833728] [] __lock_acquire+0x2eff/0x3640 [ 35.833735] [] ? __lock_acquire+0x629/0x3640 [ 35.833743] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 35.833750] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 35.833757] [] ? __lock_is_held+0xa1/0xf0 [ 35.833763] [] lock_acquire+0x12e/0x410 [ 35.833768] [] ? remove_wait_queue+0x14/0x40 [ 35.833774] [] _raw_spin_lock_irqsave+0x4e/0x70 [ 35.833779] [] ? remove_wait_queue+0x14/0x40 [ 35.833784] [] remove_wait_queue+0x14/0x40 [ 35.833791] [] ep_unregister_pollwait.isra.6+0xaf/0x240 [ 35.833797] [] ? ep_unregister_pollwait.isra.6+0x12a/0x240 [ 35.833803] [] ep_remove+0x41/0x290 [ 35.833810] [] eventpoll_release_file+0xc5/0x140 [ 35.833815] [] __fput+0x5a8/0x6e0 [ 35.833819] [] ____fput+0x15/0x20 [ 35.833824] [] task_work_run+0x115/0x190 [ 35.833830] [] do_exit+0x7e7/0x2a40 [ 35.833844] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 35.833851] [] ? release_task+0x1240/0x1240 [ 35.833857] [] ? get_futex_key+0x1050/0x1050 [ 35.833863] [] ? __dequeue_signal+0xa3/0x550 [ 35.833868] [] ? recalc_sigpending+0x72/0x90 [ 35.833875] [] do_group_exit+0x108/0x320 [ 35.833883] [] get_signal+0x4d4/0x14e0 [ 35.833889] [] do_signal+0x87/0x1a00 [ 35.833895] [] ? pkt_setup_dev+0x11b0/0x11b0 [ 35.833900] [] ? do_vfs_ioctl+0x458/0x1140 [ 35.833906] [] ? setup_sigcontext+0x7d0/0x7d0 [ 35.833911] [] ? ioctl_preallocate+0x220/0x220 [ 35.833916] [] ? selinux_file_ioctl+0x355/0x530 [ 35.833921] [] ? selinux_capable+0x40/0x40 [ 35.833927] [] ? SyS_futex+0x22e/0x2d0 [ 35.833933] [] ? do_futex+0x15c0/0x15c0 [ 35.833938] [] ? exit_to_usermode_loop+0xac/0x120 [ 35.833945] [] exit_to_usermode_loop+0xe1/0x120 [ 35.833951] [] syscall_return_slowpath+0x1a0/0x1e0 [ 35.833956] [] entry_SYSCALL_64_fastpath+0xe6/0xe8 [ 35.834421] Dumping ftrace buffer: [ 35.834424] (ftrace buffer empty) [ 35.834426] Kernel Offset: disabled [ 36.731783] Rebooting in 86400 seconds..