[....] Starting enhanced syslogd: rsyslogd[ 13.690958] audit: type=1400 audit(1518116222.870:4): avc: denied { syslog } for pid=3649 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.208' (ECDSA) to the list of known hosts. 2018/02/08 18:57:40 fuzzer started 2018/02/08 18:57:40 dialing manager at 10.128.0.26:36187 2018/02/08 18:57:43 kcov=true, comps=false 2018/02/08 18:57:44 executing program 0: 2018/02/08 18:57:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00005cb000-0xb)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000f58000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3ffffff000065000000edff00007db0e6330ee7f9b319d8000018da8d1c43473006005026fb0000008001d1a7335d5bffff0001d7", "cea400050000000000000002000000000000000000810000dc01867dfffe0200"}) 2018/02/08 18:57:44 executing program 3: r0 = memfd_create(&(0x7f00005a6000-0x34)="70726f632a65746830212c6b657972696e677472757374656425212a016b657972696e677d6d643573756d76626f786e65743100", 0x3) signalfd4(r0, &(0x7f0000339000)={0x7fffffff}, 0x8, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000000)=0x4) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000002000-0x4)=0xe8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$ipx(r0, &(0x7f0000003000-0x75)=""/117, 0x75, 0x2063, &(0x7f0000001000-0x10)={0x4, 0x2, 0xc94, "548b08aa073c", 0x7}, 0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000003000)={{0x2, 0x1, @empty}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}}, 0xb917ad96c6d6a9db, {0x2, 0x0, @empty}, @common='bpq0\x00'}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000004000)={0x4, 0x8, 0x7}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, &(0x7f0000003000)={0x9}, &(0x7f0000005000), 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003000)=0x0) prlimit64(r3, 0x8, &(0x7f0000001000-0x10)={0x80000001, 0x6}, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000005000), &(0x7f0000006000)=0x4) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000008000-0x68)) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000009000-0x8), 0x100000001) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000000a000-0x4)) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f000000b000-0x5)='user\x00', &(0x7f000000b000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000009000-0xb0)="029bd0585aabbe43bd383173f1a92b3110de6155618d8a84a16077c029c1289995dd8e35e02c5a064c16457ef5f968688192843757e6ce9574782f03b98f47e1949a802576bdd0e983afacef5020c481d9c4a62e983a8943c18a035f2c39bfc8bd18e36afd84ef131cf8c562986c6e608c4126f0b818d24a36dda0b87fc782b990ab537be96c136c7de146227f20472f621268a1ca48a612cd5c717375fd360884ad0278615c416ed842680e28e819d2", 0xb0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) 2018/02/08 18:57:44 executing program 4: mlockall(0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001000-0x10)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_settime(0x7, &(0x7f0000000000)={r0, r1+30000000}) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f0000002000-0xcc)="032ab0c5906eea96aa52157e0a154e992838ec0d57a14c63513398e6344fbf0da504246931030e730fe0eb7b21ad6cb21ff2616ff71f86774681e89af2124b872560a88c7cd8777df9e69e0b9a0ddb04f708971e3d44e5fa70a610bc178d8fef7e71d94cc3c2387166f515e2c63a9fae085533d7563303ca748f53d7a6b4bad26061e6619c932bd559079fea3f9e678541086d8bc98c76a00a22c8d85c6a03e29bd7cc9e63295077fe2593dd803f8d82afb66ffff0a896d9bee9b23d3f71b59b03f922c0b626dce81f43a45c", 0xcc, 0x24004044, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000002000-0x10)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002000-0x40)={0x800, 0x80000001, 0x10001, 0xff, 0xbf, 0x4879, 0x5, 0x8}, &(0x7f0000001000)={0x200, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3ff, 0x3}, &(0x7f0000003000-0x40)={0x3, 0x0, 0x2, 0x9, 0x0, 0x80000000, 0x4, 0x8001}, &(0x7f0000001000)={r3, r4+30000000}, &(0x7f0000000000)={&(0x7f0000000000)={0x2}, 0x8}) fcntl$setflags(r2, 0x2, 0x1) prctl$setname(0xf, &(0x7f0000002000-0x2)='#\x00') mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000004000-0x1e0)=[{{&(0x7f0000000000)=@sco, 0x8, &(0x7f0000004000-0x30)=[{&(0x7f0000003000)=""/203, 0xcb}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000001000-0x7a)=""/122, 0x7a}], 0x3, &(0x7f0000001000)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002000)=@can, 0x10, &(0x7f0000003000)=[{&(0x7f0000002000)}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000000)=""/167, 0xa7}], 0x3, &(0x7f0000004000-0xff)=""/255, 0xff, 0xa7f}, 0x3}, {{&(0x7f0000003000)=@pppoe={0x0, 0x0, {0x0, @empty, @generic}}, 0x1e, &(0x7f0000001000-0x1c)=[{&(0x7f0000004000-0xc7)=""/199, 0xc7}, {&(0x7f0000004000-0x5c)=""/92, 0x5c}, {&(0x7f0000004000-0xb)=""/11, 0xb}], 0x3, &(0x7f0000001000)=""/4096, 0x1000, 0x101}, 0x5}, {{&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @my}, 0x10, &(0x7f0000004000-0x70)=[{&(0x7f0000000000)=""/175, 0xaf}, {&(0x7f0000003000)=""/24, 0x18}, {&(0x7f0000003000-0xe2)=""/226, 0xe2}, {&(0x7f0000003000)=""/165, 0xa5}, {&(0x7f0000001000-0x7d)=""/125, 0x7d}, {&(0x7f0000001000-0x1000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/7, 0x7}], 0x7, &(0x7f0000001000-0xad)=""/173, 0xad, 0x401}, 0x800}, {{0x0, 0x0, &(0x7f0000001000-0x70)=[{&(0x7f0000001000)=""/168, 0xa8}, {&(0x7f0000003000)=""/15, 0xf}, {&(0x7f0000001000-0x9f)=""/159, 0x9f}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000003000-0x86)=""/134, 0x86}, {&(0x7f0000002000-0x54)=""/84, 0x54}, {&(0x7f0000002000-0x25)=""/37, 0x25}], 0x7, &(0x7f0000001000-0x5)=""/5, 0x5, 0x1}, 0x81}, {{&(0x7f0000002000)=@ethernet={0x0, @broadcast}, 0x10, &(0x7f0000001000-0x40)=[{&(0x7f0000003000)=""/41, 0x29}, {&(0x7f0000001000-0x8a)=""/138, 0x8a}, {&(0x7f0000003000)=""/131, 0x83}, {&(0x7f0000003000)=""/200, 0xc8}], 0x4, &(0x7f0000003000)=""/15, 0xf, 0x8}, 0x7}, {{&(0x7f0000002000-0x26)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @multicast1}}}, 0x26, &(0x7f0000001000)=[{&(0x7f0000001000-0x45)=""/69, 0x45}, {&(0x7f0000000000)=""/75, 0x4b}, {&(0x7f0000004000-0x2a)=""/42, 0x2a}, {&(0x7f0000003000)=""/214, 0xd6}, {&(0x7f0000004000-0xf2)=""/242, 0xf2}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/72, 0x48}, {&(0x7f0000003000-0x32)=""/50, 0x32}], 0x8, &(0x7f0000001000-0xe7)=""/231, 0xe7, 0x5}, 0x7}, {{&(0x7f0000004000-0x2)=@nfc, 0x10, &(0x7f0000000000)=[{&(0x7f0000004000-0xdd)=""/221, 0xdd}, {&(0x7f0000003000)=""/202, 0xca}, {&(0x7f0000004000-0x26)=""/38, 0x26}, {&(0x7f0000003000)=""/149, 0x95}], 0x4, &(0x7f0000001000), 0x0, 0x100000000}, 0x2}], 0x8, 0x40010100, 0x0) 2018/02/08 18:57:44 executing program 5: r0 = socket$inet6(0xa, 0x80800, 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000), &(0x7f0000000000)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4$unix(0xffffffffffffff9c, 0x0, &(0x7f0000002000-0x4), 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001000-0x10)={0x2, &(0x7f0000000000)=[{0x20, 0x3f, 0x63, 0xffff}, {0x8, 0x9c59f15, 0x4, 0x40}]}, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000003000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000002000)=0x8e83) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000004000-0xbd)=""/189) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000005000-0x40)=[{&(0x7f0000004000)="e6172a4ef43bd3299fd3bc965948cb5c01126dff7705002f4f783c881e8801983b2d58608f7e917ae619f46f1903bf6ccc9b107f6be85c7a6147a5721a74f6cd473b5b868a4c8107185f8b6798ce667e48a233823e47932d3f301dcd7682b3c79d4fde0df428cd844b22c4cd73154c321dbe8078fc42c27f14c4de5ce4381d52da12971911e773e04da0f847eb07257ba6fb79cc326594c85abf68c990a230c73d1c50203893466d29a48c7e2180998eb169d3a0e8d6992271856788f17094241f657a83706e9aa3fff613", 0xcb}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000001000-0xa9)="4f695faa507315e7f23efbd76ad11567cf844894d5f96df1e2fc5dc356c077e1650170c0c1d6bcf8bcf8f697292a7946c58ae5a81365f4532fbbda565095d24a02989ddbd12f69aacf8f3f6aa33de3f131ebe6344424bc9e09cbcec3bfc7a89811e0722cb18ff8b93b680e2896b6c03d1f0068337fa1a4d555b9601a95ac2f4ee1326aa2444ae48d78d9a9217143af26187bf32bb13291fce91cdcc06849b91d5eed4897e625da292e", 0xa9}, {&(0x7f0000001000)="441b2125ea4001b55392afb91904583d33cd12fbe141f79ff144803b7b825381e39280fe3b0a8d52fb3c04a96b90dc95991a60600eb0c9f9cc0de409cce452e76b6db7a73cae0c899079513815ff93e1313011c2dc24a1821852946589399f53c12ac5c75f6a03edc4ee90495c09", 0x6e}], 0x4, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r2, 0x800, &(0x7f0000006000-0x1b)="85e3b8c642ca76c278719cca1abaf36ba4b3e36e2515fefc39420c") ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000001000-0x50)={@syzn, @ifru_addrs=@pptp={0x0, 0x0, {0x0, @multicast2}}}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000006000), &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000005000-0x8)={0x0, 0x21a}, &(0x7f0000007000)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000003000-0x77)={r3, 0x6f, "96bdce45a806e35e51daf1b7b07a1cd714008f66ae1dc4a9557370e96c27f63483c5a2700d5f9da24596537cfa71cb3968b9de77fc2a4c963dac3f2b5869250c5d83773969c346bb48d1135762778341757578e8842c05b1fe4ce52f3700b2d999fbd3551b2fcfed901473f0872ffb"}, &(0x7f0000003000)=0x77) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000008000), &(0x7f0000001000-0x4)=0x4) preadv(r0, &(0x7f0000002000-0x10)=[{&(0x7f0000008000)=""/198, 0xc6}], 0x1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000009000)={r3, @in6={{0xa, 0x1, 0xf706, @empty, 0x1}}, 0xffffffffffffff2a, 0x2}, 0x98) 2018/02/08 18:57:44 executing program 6: r0 = geteuid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, r1) setfsuid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4000) bind$netrom(r4, &(0x7f0000000000)=@full={{0x3, {"3852c74926da77"}, 0x5}, [{"266b1b6fda9693"}, {"bf20f3e267459a"}, {"4b8967048282ce"}, {"a6cd3ecfdba119"}, {"7f2dfd4d1a0de6"}, {"0b46531fa24ff2"}, {"04406a65f47b3a"}, {"769553fff93cf1"}]}, 0x48) chown(&(0x7f0000001000-0x8)='./file0\x00', r1, r2) r5 = getpgid(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000001000-0x28)={0x401, 0x8f, r5, 0xffffffffffffffde, r1, 0xed4, 0x4, 0x400}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000002000-0x4d)="c2841e216fd46c32b17489693cfe4f3dc1181b5629218c2d6e4be460b9fbac728226da96ec8b3a2fc76221061115c87fa8623dc852060552fb31c1e83755e0008f992da31012785606282d2ec8", 0x4d, 0x800, &(0x7f0000000000)={0x2, 0x1, @dev={0xac, 0x14, 0x0, 0xd}}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) fcntl$setpipe(r4, 0x407, 0x6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002000)={{{@in6=@local, @in=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@empty}}, &(0x7f0000001000)=0xe8) r9 = socket$inet(0x2, 0x0, 0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000004000-0x2)='-\x00') ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000003000-0x18)=""/24) tee(r9, r6, 0x8001, 0xe) fcntl$notify(r6, 0x402, 0x8000000d) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000004000)=[@in={0x2, 0x2, @multicast2=0xe0000002}, @in={0x2, 0x2, @empty}, @in6={0xa, 0x0, 0xffff, @empty, 0x6}], 0x3c) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r4, &(0x7f0000006000-0x60), &(0x7f0000005000)=0x60) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000006000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@broadcast=0xffffffff, 0x3, 0x5df9, 0x3, 0x7, 0xa, 0x80, 0x20, 0x2b, r7, r8}, {0x4, 0x7, 0x80, 0x4, 0x200, 0x100, 0x2, 0xb8}, {0x2, 0x401}, 0xef4, 0xe, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x3, 0x32}, 0x2, @in=@loopback=0x7f000001, 0x1, 0x3, 0x3, 0x32c, 0x0, 0xffffffff, 0xff}}, 0xe8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r9, &(0x7f0000008000-0x60)=[{&(0x7f0000008000-0x6a)=""/106, 0x6a}, {&(0x7f0000008000-0x1000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/60, 0x3c}, {&(0x7f0000007000)=""/160, 0xa0}, {&(0x7f0000002000-0x9a)=""/154, 0x9a}, {&(0x7f0000004000-0x12)=""/18, 0x12}], 0x6, 0x0) 2018/02/08 18:57:44 executing program 1: munmap(&(0x7f00007e2000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001000-0x8)={0x0, 0x0}) sched_getscheduler(r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000002000-0x15)='/dev/pktcdvd/control\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = accept$nfc_llcp(r1, &(0x7f0000003000), &(0x7f0000003000)=0x60) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000004000)=@assoc_value={0x0, 0x1}, &(0x7f0000004000-0x4)=0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000005000-0x8c)={r4, @in={{0x2, 0x1, @multicast1=0xe0000001}}}, 0x8c) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000005000)={@multicast2, @rand_addr, 0x0}, &(0x7f0000006000-0x4)=0xc) r6 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000005000-0x38)={&(0x7f0000001000-0xc)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000000)={&(0x7f0000001000)=@getspdinfo={0x104, 0x25, 0x400, 0x1, 0x2, 0x8000, [@sa={0xe8, 0x6, {{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x1, 0x68c1971c, 0x2, 0x76a7, 0x2, 0x80, 0x80, 0x4, r5, r6}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x2, 0xff}, @in6=@empty, {0x1, 0x1f, 0x2, 0xfffffffff031b8ae, 0xfffffffffffffffc, 0xd6, 0x4, 0x463}, {0x3, 0x81, 0xf978, 0x5}, {0xbef5, 0x4, 0x3f}, 0x3, 0x5, 0x2, 0x0, 0xfff, 0x44}}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000804}, 0x840) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r3, 0x75, 0x10000, &(0x7f0000006000), &(0x7f0000002000-0x4)) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$inet(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffff, @local}, &(0x7f0000007000)=0x10) r7 = fcntl$dupfd(r2, 0x406, r2) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000008000)={r4, 0x74, "83f17ab976d84c6a5a88170da58bd22578ba6677c052969621c5d508faaf94ff7d2fb3cb21d6447e1b0d10218ffcc473c9cef5902de51cb76de67d345f96fd8a1c4f3ff1a2ad28cb52af8858a221b7ea45a35a703f1454fdb30bf2a95c5b7f1bc125f9bfc7922118737ca86a89d15a05d87b01b5"}, &(0x7f0000008000)=0x7c) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f000000a000-0x70)=[{&(0x7f0000009000)=""/98, 0x62}, {&(0x7f0000001000-0x45)=""/69, 0x45}, {&(0x7f0000007000-0x56)=""/86, 0x56}, {&(0x7f000000a000-0x2b)=""/43, 0x2b}, {&(0x7f0000009000)=""/26, 0x1a}, {&(0x7f000000a000-0x9c)=""/156, 0x9c}, {&(0x7f000000a000-0x7c)=""/124, 0x7c}], 0x7, &(0x7f0000009000)=[{&(0x7f000000a000-0x95)=""/149, 0x95}, {&(0x7f0000007000-0xbe)=""/190, 0xbe}, {&(0x7f000000a000-0x25)=""/37, 0x25}, {&(0x7f000000a000-0xab)=""/171, 0xab}, {&(0x7f0000009000)=""/132, 0x84}, {&(0x7f0000009000)=""/165, 0xa5}], 0x6, 0x0) 2018/02/08 18:57:44 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x1d)='\\cgroup\\cpuset[\'wlan1*&ppp1$\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x3, {0x2, 0x1, @multicast2=0xe0000002}, {0x2, 0x2, @empty}, {0x2, 0x1, @broadcast=0xffffffff}, 0x202, 0x7, 0x6, 0xb7, 0x8, &(0x7f0000497000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x7, 0x400, 0x1400000000000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000002000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={r1, 0x7f, "56cfeb28a1bd0b9660438ab85a2cfab61cfe4624d20a19a3de1c5f79678a387d9f5c60773fc677caeb8d57a388b1a3f3a168866a9b7bd5f72fced645b7fdc8f6700d42506590d6d8d2e8a5d5be4c364800ddee8286b02f00df140626419987c107600252d4fd6d020550d56cdd5514ccd3db7c18c82715e6eb49b8cf311dad"}, &(0x7f0000002000-0x4)=0x87) r3 = socket$inet_tcp(0x2, 0x1, 0x0) symlink(&(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000001000)='./file0\x00') clock_gettime(0x6, &(0x7f0000001000-0x10)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001000-0x10)={0x1, &(0x7f0000001000)=[{0x0}]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000002000-0x40)={r4, 0x2, &(0x7f0000002000)=[0x45b, 0x0], &(0x7f0000003000-0x1c)=[0x8, 0xfff, 0x800, 0x1, 0x8ab6, 0xc7, 0x401], 0x10, 0x6, 0x6, &(0x7f0000002000)=[0x9b4, 0x7, 0xeac, 0x800, 0x5, 0xffff], &(0x7f0000000000)=[0x1, 0x800]}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001000)) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000004000-0x8)={r2, 0x8}, &(0x7f0000004000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000003000)={r1, 0x6}, 0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000), &(0x7f0000005000-0x4)=0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000006000-0x8c)={r1, @in6={{0xa, 0x1, 0x1000, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x7fff}}}, &(0x7f0000005000)=0x8c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000003000-0xc)={r5, 0x9, 0x30}, 0xc) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000007000-0xc)={0x0, @local, @loopback}, &(0x7f0000007000-0x4)=0xc) syzkaller login: [ 55.660882] audit: type=1400 audit(1518116264.840:5): avc: denied { sys_admin } for pid=3883 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 55.687206] IPVS: Creating netns size=2536 id=1 [ 55.698479] audit: type=1400 audit(1518116264.880:6): avc: denied { net_admin } for pid=3887 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 55.732334] IPVS: Creating netns size=2536 id=2 [ 55.780253] IPVS: Creating netns size=2536 id=3 [ 55.820270] IPVS: Creating netns size=2536 id=4 [ 55.848806] IPVS: Creating netns size=2536 id=5 [ 55.891364] IPVS: Creating netns size=2536 id=6 [ 55.938941] IPVS: Creating netns size=2536 id=7 [ 55.985038] IPVS: Creating netns size=2536 id=8 [ 57.752361] audit: type=1400 audit(1518116266.940:7): avc: denied { sys_chroot } for pid=3887 comm="syz-executor3" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 57.926835] ================================================================== [ 57.934243] BUG: KASAN: double-free or invalid-free in relay_open+0x603/0x860 [ 57.941496] [ 57.943117] CPU: 0 PID: 4936 Comm: syz-executor7 Not tainted 4.9.80-g20c8a00 #30 [ 57.950630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.959968] ffff8801b6f978b8 ffffffff81d94b69 ffffea0006da4580 ffff8801b6916f00 [ 57.968011] ffff8801da001280 ffffffff8137d8a3 0000000000000282 ffff8801b6f978f0 [ 57.976043] ffffffff8153e093 ffff8801b6916f00 ffffffff8137d8a3 ffff8801da001280 [ 57.984078] Call Trace: [ 57.986657] [] dump_stack+0xc1/0x128 [ 57.992015] [] ? relay_open+0x603/0x860 [ 57.997633] [] print_address_description+0x73/0x280 [ 58.004295] [] ? relay_open+0x603/0x860 [ 58.009909] [] ? relay_open+0x603/0x860 [ 58.015517] [] kasan_report_double_free+0x64/0xa0 [ 58.021979] [] kasan_slab_free+0xa4/0xc0 [ 58.027661] [] kfree+0x103/0x300 [ 58.032656] [] relay_open+0x603/0x860 [ 58.038091] [] do_blk_trace_setup+0x3e9/0x950 [ 58.044210] [] blk_trace_setup+0xe0/0x1a0 [ 58.049978] [] ? do_blk_trace_setup+0x950/0x950 [ 58.056266] [] ? disk_name+0x98/0x100 [ 58.061692] [] blk_trace_ioctl+0x1de/0x300 [ 58.067553] [] ? compat_blk_trace_setup+0x250/0x250 [ 58.074190] [] ? avc_has_extended_perms+0x3fc/0xf10 [ 58.080825] [] ? get_futex_key+0x1050/0x1050 [ 58.086853] [] ? save_stack_trace+0x16/0x20 [ 58.093390] [] ? save_stack+0x43/0xd0 [ 58.098810] [] ? kasan_slab_free+0x72/0xc0 [ 58.104665] [] blkdev_ioctl+0xb00/0x1a60 [ 58.110344] [] ? blkpg_ioctl+0x930/0x930 [ 58.116028] [] ? __lock_acquire+0x629/0x3640 [ 58.122053] [] ? do_futex+0x3f8/0x15c0 [ 58.127558] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 58.134453] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 58.141261] [] block_ioctl+0xde/0x120 [ 58.146681] [] ? blkdev_fallocate+0x440/0x440 [ 58.152807] [] do_vfs_ioctl+0x1aa/0x1140 [ 58.158488] [] ? ioctl_preallocate+0x220/0x220 [ 58.164690] [] ? selinux_file_ioctl+0x355/0x530 [ 58.170975] [] ? selinux_capable+0x40/0x40 [ 58.176829] [] ? __fget+0x201/0x3a0 [ 58.182073] [] ? __fget+0x228/0x3a0 [ 58.187320] [] ? __fget+0x47/0x3a0 [ 58.192481] [] ? security_file_ioctl+0x89/0xb0 [ 58.198691] [] SyS_ioctl+0x8f/0xc0 [ 58.203849] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 58.210394] [ 58.211991] Allocated by task 4936: [ 58.215588] save_stack_trace+0x16/0x20 [ 58.219532] save_stack+0x43/0xd0 [ 58.222954] kasan_kmalloc+0xad/0xe0 [ 58.226634] kmem_cache_alloc_trace+0xfb/0x2a0 [ 58.231183] relay_open+0x91/0x860 [ 58.234693] do_blk_trace_setup+0x3e9/0x950 [ 58.238981] blk_trace_setup+0xe0/0x1a0 [ 58.242921] blk_trace_ioctl+0x1de/0x300 [ 58.246953] blkdev_ioctl+0xb00/0x1a60 [ 58.250817] block_ioctl+0xde/0x120 [ 58.254411] do_vfs_ioctl+0x1aa/0x1140 [ 58.258266] SyS_ioctl+0x8f/0xc0 [ 58.261605] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 58.266334] [ 58.267929] Freed by task 4936: [ 58.271178] save_stack_trace+0x16/0x20 [ 58.275122] save_stack+0x43/0xd0 [ 58.278542] kasan_slab_free+0x72/0xc0 [ 58.282397] kfree+0x103/0x300 [ 58.285557] relay_destroy_channel+0x16/0x20 [ 58.289930] relay_open+0x5ea/0x860 [ 58.293527] do_blk_trace_setup+0x3e9/0x950 [ 58.297816] blk_trace_setup+0xe0/0x1a0 [ 58.301760] blk_trace_ioctl+0x1de/0x300 [ 58.305789] blkdev_ioctl+0xb00/0x1a60 [ 58.309645] block_ioctl+0xde/0x120 [ 58.313241] do_vfs_ioctl+0x1aa/0x1140 [ 58.317097] SyS_ioctl+0x8f/0xc0 [ 58.320431] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 58.325150] [ 58.326748] The buggy address belongs to the object at ffff8801b6916f00 [ 58.326748] which belongs to the cache kmalloc-512 of size 512 [ 58.339380] The buggy address is located 0 bytes inside of [ 58.339380] 512-byte region [ffff8801b6916f00, ffff8801b6917100) [ 58.351056] The buggy address belongs to the page: [ 58.355956] page:ffffea0006da4580 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 58.366125] flags: 0x8000000000004080(slab|head) [ 58.370844] page dumped because: kasan: bad access detected [ 58.376519] [ 58.378116] Memory state around the buggy address: [ 58.383013] ffff8801b6916e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.390339] ffff8801b6916e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 58.397667] >ffff8801b6916f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.404991] ^ [ 58.408329] ffff8801b6916f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.415659] ffff8801b6917000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.422984] ================================================================== [ 58.430307] Disabling lock debugging due to kernel taint [ 58.436317] Kernel panic - not syncing: panic_on_warn set ... [ 58.436317] [ 58.443685] CPU: 0 PID: 4936 Comm: syz-executor7 Tainted: G B 4.9.80-g20c8a00 #30 [ 58.452415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.461751] ffff8801b6f97810 ffffffff81d94b69 ffffffff841970af ffff8801b6f978e8 [ 58.469782] ffff8801da001200 ffffffff8137d8a3 0000000000000282 ffff8801b6f978d8 [ 58.477765] ffffffff8142f541 0000000041b58ab3 ffffffff8418ab20 ffffffff8142f385 [ 58.485741] Call Trace: [ 58.488299] [] dump_stack+0xc1/0x128 [ 58.493638] [] ? relay_open+0x603/0x860 [ 58.499234] [] panic+0x1bc/0x3a8 [ 58.504223] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 58.512420] [] ? preempt_schedule+0x25/0x30 [ 58.518368] [] ? ___preempt_schedule+0x16/0x18 [ 58.524570] [] ? relay_open+0x603/0x860 [ 58.530160] [] ? relay_open+0x603/0x860 [ 58.535751] [] kasan_end_report+0x50/0x50 [ 58.541516] [] kasan_report_double_free+0x81/0xa0 [ 58.547976] [] kasan_slab_free+0xa4/0xc0 [ 58.553653] [] kfree+0x103/0x300 [ 58.558636] [] relay_open+0x603/0x860 [ 58.564056] [] do_blk_trace_setup+0x3e9/0x950 [ 58.570174] [] blk_trace_setup+0xe0/0x1a0 [ 58.575946] [] ? do_blk_trace_setup+0x950/0x950 [ 58.582238] [] ? disk_name+0x98/0x100 [ 58.587657] [] blk_trace_ioctl+0x1de/0x300 [ 58.593511] [] ? compat_blk_trace_setup+0x250/0x250 [ 58.600147] [] ? avc_has_extended_perms+0x3fc/0xf10 [ 58.606783] [] ? get_futex_key+0x1050/0x1050 [ 58.612810] [] ? save_stack_trace+0x16/0x20 [ 58.618751] [] ? save_stack+0x43/0xd0 [ 58.624169] [] ? kasan_slab_free+0x72/0xc0 [ 58.630284] [] blkdev_ioctl+0xb00/0x1a60 [ 58.635962] [] ? blkpg_ioctl+0x930/0x930 [ 58.641651] [] ? __lock_acquire+0x629/0x3640 [ 58.647678] [] ? do_futex+0x3f8/0x15c0 [ 58.653184] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 58.660083] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 58.666889] [] block_ioctl+0xde/0x120 [ 58.672309] [] ? blkdev_fallocate+0x440/0x440 [ 58.678427] [] do_vfs_ioctl+0x1aa/0x1140 [ 58.684106] [] ? ioctl_preallocate+0x220/0x220 [ 58.690307] [] ? selinux_file_ioctl+0x355/0x530 [ 58.696594] [] ? selinux_capable+0x40/0x40 [ 58.702447] [] ? __fget+0x201/0x3a0 [ 58.707692] [] ? __fget+0x228/0x3a0 [ 58.712936] [] ? __fget+0x47/0x3a0 [ 58.718094] [] ? security_file_ioctl+0x89/0xb0 [ 58.724294] [] SyS_ioctl+0x8f/0xc0 [ 58.729456] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 58.736421] Dumping ftrace buffer: [ 58.739934] (ftrace buffer empty) [ 58.743613] Kernel Offset: disabled [ 58.747207] Rebooting in 86400 seconds..