[....] Starting enhanced syslogd: rsyslogd[ 12.739073] audit: type=1400 audit(1513409490.620:5): avc: denied { syslog } for pid=2992 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.500733] audit: type=1400 audit(1513409497.382:6): avc: denied { map } for pid=3131 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-8,10.128.15.204' (ECDSA) to the list of known hosts. [ 25.769819] audit: type=1400 audit(1513409503.651:7): avc: denied { map } for pid=3142 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/16 07:31:44 fuzzer started 2017/12/16 07:31:44 dialing manager at 10.128.0.26:32785 2017/12/16 07:31:53 kcov=true, comps=true [ 35.959286] audit: type=1400 audit(1513409513.841:8): avc: denied { map } for pid=3142 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=8768 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2017/12/16 07:31:54 executing program 7: 2017/12/16 07:31:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000002000)="7573657200", &(0x7f0000f37000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000384000)="", 0xfffffffffffffffb) add_key(&(0x7f000085f000)="6abe00000000", &(0x7f0000f9f000+0x92b)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = getpid() clone(0x200, &(0x7f00007e5000-0x2)="", &(0x7f0000683000)=0x0, &(0x7f0000f8b000)=0x0, &(0x7f000023e000)="ae") r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a73000-0x10)="2f6465762f73657175656e6365723200", 0x8a001, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000049000)=0x1) fcntl$setpipe(r1, 0x407, 0x37) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000008000-0x8)={0x0, 0x387}, &(0x7f000098b000)=0x8) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000fb2000)={"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"}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000e34000-0x14)={r4, 0x3, 0x3ff, 0xc80b, 0x7, 0x3ff}, &(0x7f00004cb000-0x4)=0x14) mknod(&(0x7f00001c2000)="2e2f66696c653000", 0x1040, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000ca7000)=0x0) waitid(0x0, r2, 0x0, 0xc0000000, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000c82000)=0x0) splice(0xffffffffffffffff, 0x1005f, 0xffffffffffffffff, 0x5f, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000399000-0x18)={0x9a85, 0x0, 0x0, 0x0, 0x80, 0x6, 0x100, 0x0, r5}, &(0x7f000079a000-0x4)=0x20) mlock2(&(0x7f00006d9000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000f9a000)={r7, 0x4, 0x0, 0x5, 0x0}, &(0x7f0000908000)=0x18) sendmsg$unix(r3, &(0x7f0000216000-0x1c)={&(0x7f00003b2000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f00008b0000+0xe37)=[], 0x0, &(0x7f0000846000)=[@rights={0x20, 0x1, 0x1, [r3, r1, r6, r6, r1]}, @rights={0x34, 0x1, 0x1, [r6, r6, r3, r1, r1, r6, r6, r3, r3, r1]}], 0x54, 0x1}, 0x40040) r8 = syz_open_dev$usbmon(&(0x7f00009e6000)="2f6465762f7573626d6f6e2300", 0x1, 0xe145f12caa7a95a5) write(r3, &(0x7f0000a82000)="a8c58e09e8c45b0fa3d5f0a31111d97513690bc39b43a9caac6e3ea4487c207cc30d5a6137d3694a5aa9e1b21d09b92ded88be7b07f3fd0c075b2c66afc3c40fe710ca441b831d9c432df98e93e260b9a901ba0fb920d2acd2e0a005a5095afe4e182fd9f7535a3b0960e3ae28b4c4e96b6c6a0675436a03394f65bfd05abf321ae74d743e9f4d1225cb71487864f8147252", 0x92) ioctl$KDGKBMETA(r8, 0x4b62, &(0x7f0000db8000)=0x0) r9 = socket(0x10, 0x2, 0x10) write(r9, &(0x7f000068d000-0x25)="240000001d0001000d00fa080000000403390004100001000c000100000000ffffff0000", 0x24) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000b52000)={0x0, 0x6, 0xb07, &(0x7f00004f9000)=0x0}) creat(&(0x7f00009a0000-0x8)="2e2f66696c653000", 0x2008) open(&(0x7f00008be000)="2e2f66696c653000", 0x8000, 0xb) 2017/12/16 07:31:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000141000)="2f73656c696e75782f656e666f72636500", 0x400100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003a7000-0xa)="2f6465762f70746d7800", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x930000)=nil, 0x930000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000257000-0x4)=0x0, 0x800) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000ee4000)={0x0, 0xff}, &(0x7f00001a3000-0x4)=0x8) r2 = syz_open_dev$tun(&(0x7f00000d2000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x1) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000fc2000)=0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000533000)={@generic="0200000004000000f004008000e9bc22", @ifru_settings={0x10001, 0x0, @fr=&(0x7f0000cb8000)={0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x81c7, 0x5, 0x26f}}}) r3 = socket(0x8, 0x80803, 0x40) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f000006a000-0x4)=0x7, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000e9f000-0xa)="2f6465762f70746d7800", 0x20000407fc, 0x0) sendmsg$nfc_llcp(r3, &(0x7f0000faa000)={&(0x7f0000ca9000-0x60)={0x27, 0x10001, 0xf201, 0x2, 0x1, 0x8, "b315710149222757b3733a46ccd7eae0e4f4747aa6a6ae41f1d59fef07d867d887a4f4ad678bc30de69412fe15121c43d50592323640885374cc00c5365816", 0x10000}, 0x60, &(0x7f0000c70000)=[{&(0x7f0000a48000)="fde17d6893a851f2c3d1249c0128fe875138896951760bc4423dea1c73ae868616e45e49a2b789e32276da51bc60c3a89f43337f4c26b77e9b6560375be7642eebfe82735234625d60fa0bf0cbe5cd65d5c0d916c271fc", 0x57}, {&(0x7f0000d7e000)="877f3e0dfefc3c32f9704d064a5204d5becba5a61753074e5e0f173b170f4af86c5eabb2fe178dda20af534d2fb8a4075c17109b65c7149a26e1dafe8cb4f2bd35993f1eb2a963ac93c4942fba78eed5ef15905c31bb464d2023797e9b92814283d9e61cc1a9a5084ba985aa654f7af018cf5fb9732f5a05be52f759761087710c9503df7bce70adf0f681ab107a53b6ab57b2c4608ca6a27bc2f155a9fc8fe32dc04137749fe6ba02379a31db4066563125a2b80e02f2b66ed293e66fcc8e4efeed824ccd88fd1c065257158a8fd6cea79412173703672bb69e", 0xda}, {&(0x7f0000ad3000-0x6c)="3876589521a80ab80fb96f85bf31d8995b346a7f7e6034c061c6cf18e22c57d7b243b2afb791965998ad52cc89fc2987f3362b483b9cf8534a07861b44074baa1c55ac01fb748cfb1ad6e29addf61c4f88bb24b0c241b05586018373430cd7ff6c8a45dfbee54a9fd6ee7d08", 0x6c}], 0x3, &(0x7f0000cd1000)={0x100, 0x108, 0x1, "60f5d49461fd654f084ab5fb079b99206d553339e66f55aacfb96acf19c086543e3621365813c2a68cd2c11e9c68798f0a0821e6c0cd4721bc684d541a3dee6a2bb4360e00db1a4761232e37465a1f71f9ef8a66cf4427a33b74c16d17a99c7bfd68bd09a55fe984e6ecd39a62460d8c167bcf40d48d7253a5f0d6a3ab47047d1653e4b53ca7102c4920ab01bb30a7f7f4ddbfac42585a5801204e9161841f39ac8d0543e1c27c5fdd9d530a17c2dbb451f3d9da423900f01affaa0fb9170ec7e645fba1bcb15e20fb41f502916a3dbae29c677c1854a03ea80c47418d6035435753aa7020539cc0c324"}, 0x100, 0x40090}, 0x4000) getsockopt$inet_dccp_buf(r3, 0x21, 0x9, &(0x7f000089d000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000f7d000-0x4)=0x63) mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x3, 0x32, r2, 0x0) mmap(&(0x7f0000000000/0xebd000)=nil, 0xebd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000597000)="2f6465762f6877726e6700", 0x101001, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000f36000-0x28)={&(0x7f0000000000/0x1000)=nil, 0x81, 0x5, 0x8, &(0x7f0000cb3000/0x2000)=nil, 0x5}) r5 = socket$netlink(0x10, 0x3, 0xb) writev(r5, &(0x7f0000eb5000-0x10)=[{&(0x7f0000eb7000)="390000001000093500bb61e1c30500000700004a02000000450001070000801419041a000400020021000007de000008000300ffff06001ee469", 0x3a}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x400002000000e, 0x800, 0x100000001) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/16 07:31:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfe, 0x1653, 0x0, 0x0, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)="2f6465762f73672300", 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) r1 = fcntl$getown(r0, 0x9) sched_getparam(r1, &(0x7f00004b4000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f000029a000)={0x0, 0x0}) getrusage(0x1, &(0x7f000029a000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = gettid() socket$bt_hidp(0x1f, 0x3, 0x6) getpgid(r2) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdd, 0xb66, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x27d000)=nil, 0x27d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000824000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f000036a000)="6365706800", &(0x7f000045e000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000c4c000-0x8c)="", 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f000000b000)="7573657200", &(0x7f000003a000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000008000)="5b1398071567f4871cab5172863f2149fa579ad03c1b681cbb163b1113f4c4dd9d58c867cee42872720398c3e9f52496eb8f24814d3cc53d791e9065e2db5bac7f4cfb4594ca86ab0114e15e727a4b348f48023c692953b8c0055738d8de23f1e1cc071e6d837ab6e56125a5ec00074bcb25f96ac774740b3ebef932439d8615e8a13286a9eeb12ca0c5fbafa331c36b9edbc286841ada3b95b456c41aa7ff2ab2c7e3fc7dbcc338126c79792d2dd16783f31c7ec019fe5b86bffafa0b2ce104", 0xc0, r3) r4 = perf_event_open(&(0x7f0000d0a000-0x78)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000195000-0xe)="6365706800") ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x8001) r6 = syz_open_dev$mice(&(0x7f0000c84000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x80000) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00008ed000-0xe0)={0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0xf, 0x4, 0x0, "8df03f4c4078dfee5dab05ef435e63ea6989befcb62c228514a59f6b80612888e81e13011e1e41def2b5713bc2262818ac37e568b079554ccd23f532607e17de", "efebf1df75f2ea585f4c2f66f519a27f5169306125a18b82c17bba328d755f56050a3cba869c2a7dc9a8cfbca4c9cd800ac2d4aedc94cfc695a156bfbe075d8e", "09493bf54b1d5ce50582ea9152f21916224726c741ce9f070f5fc1c42087a9d0", [0x6, 0x1]}) mmap(&(0x7f0000000000/0xf6a000)=nil, 0xf6a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2017/12/16 07:31:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) syncfs(r0) r1 = open(&(0x7f0000c93000)="2e2f66696c653000", 0x202400, 0x114) setsockopt$inet6_dccp_buf(r1, 0x21, 0x400000000000c0, &(0x7f0000fb1000)="96dc56d0b366b28049719ce10049b3349a79034138e62ca44880b9ee588c20aa9acb61ff3e86ef5eb250b3e5766cd6e88f234975f1780460b95227951c2d636bbe93fe6b14bdc24c93360367b3986b49e9f098dff10d9a372fd4297827dc71f9a3af8c9b91100019881a86bc6721803c0180d17279ee1e5b777f45d8c58675e08f69b589d2db38838cf119256f27b5229834f43b9406a707416557678cdfb6e5f74cd5a16e12f77d2a5cf74e50b8854c270f69cde13757d81675ac3585c727103e18399ac9850900000045f2e76c4227da265f51a89c7214c11d3d67383b9c1a7809806b2544545b85673741d9f6c74cab0f", 0xf2) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x465) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00005fa000)=0x0) tkill(r2, 0x400000000000039) r3 = memfd_create(&(0x7f0000cf3000)="6c6f5c707070312d00", 0x1) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f000054a000-0xc1)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000875000)={@generic="412822659cd5886e62d51dfede26eff8", @ifru_flags=0x2}) fcntl$getown(r1, 0x9) r4 = getpgid(r2) timer_create(0x2, &(0x7f0000299000-0x58)={0x0, 0x40002f, 0x7, @tid=r4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000e58000-0x4)=0x0) timer_getoverrun(r5) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000178000)=0x2f) r6 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000b45000)={0x0, 0x0}, 0x800) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = eventfd2(0x5, 0x80801) pipe(&(0x7f000022e000-0x8)={0x0, 0x0}) ioctl$KVM_GET_MP_STATE(r10, 0x8004ae98, &(0x7f0000d25000-0x4)=0x0) write$eventfd(r8, &(0x7f0000c9e000)=0xffffffffffffffff, 0x8) getpeername$unix(r1, &(0x7f0000c60000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f0000db1000-0x4)=0x8) writev(r8, &(0x7f0000002000-0x28)=[{&(0x7f0000001000-0xcd)="a761a318e721a153", 0x8}, {&(0x7f00004a9000)="f8", 0x1}], 0x2) sendfile(r9, r7, &(0x7f0000029000-0x8)=0x0, 0x8) ioctl$TUNGETIFF(r10, 0x800454d2, &(0x7f00004ff000-0x4)=0x8007ffffffc) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x80) writev(r6, &(0x7f00005cf000-0x8)=[{&(0x7f0000ccd000-0x29)="2900000018001980013d75241a6800210206e30067fff501009600000800050000000200080000bf00", 0x29}], 0x1) 2017/12/16 07:31:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000cd9000-0x58)={0x26, "726e670000000000000000000000", 0x0, 0x0, "647262675f70725f686d61635f736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x9f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000c000-0x6)="2e2f66696c653000", &(0x7f000000b000-0x6)="2e2f62757300") r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000061d000-0x9)="2f6465762f76637300", 0x200000, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f000044e000-0xe)="2f73656c696e75782f7573657200", 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000c29000)=0x0, &(0x7f00001cf000-0x4)=0x4) r2 = accept4$llc(0xffffffffffffff9c, &(0x7f0000b09000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f000000d000)=0x10, 0x80000) getsockopt$sock_buf(r2, 0x1, 0x3f, &(0x7f000070f000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00003fc000-0x4)=0x56) r3 = open(&(0x7f0000f6d000-0x8)="2e2f66696c653000", 0x80040, 0x157) fcntl$setlease(r3, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000cd2000)={@common="726f7365300000000000000000000000", @ifru_addrs={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) uselib(&(0x7f000077a000)="2e2f66696c653000") rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000fcd000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) connect$ax25(r3, &(0x7f00007d6000)={0x3, {"383fed9c590823"}, 0x9}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000fea000-0x4)={r2}) socket$bt_bnep(0x1f, 0x3, 0x4) open(&(0x7f0000195000-0x8)="2e2f62757300", 0x20000000080047, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000d5b000)={0x0, 0x2, 0x10}, &(0x7f0000766000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00007d5000-0x8)={r5, 0x3}, &(0x7f0000ca5000-0x4)=0x8) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000312000-0x4)=0x5, 0x4) 2017/12/16 07:31:54 executing program 4: [ 36.419525] audit: type=1400 audit(1513409514.301:9): avc: denied { map } for pid=3142 comm="syz-fuzzer" path="/root/syzkaller-shm837738994" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2017/12/16 07:31:54 executing program 3: [ 37.510783] audit: type=1400 audit(1513409515.392:10): avc: denied { sys_admin } for pid=3187 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/16 07:31:55 executing program 7: [ 37.707795] audit: type=1400 audit(1513409515.589:11): avc: denied { sys_chroot } for pid=3353 comm="syz-executor7" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/16 07:31:55 executing program 7: 2017/12/16 07:31:55 executing program 7: 2017/12/16 07:31:55 executing program 7: [ 37.777386] audit: type=1400 audit(1513409515.657:12): avc: denied { net_admin } for pid=3391 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/16 07:31:55 executing program 7: mmap(&(0x7f0000000000/0xfd1000)=nil, 0xfd1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000397000-0x20)={0x400008, 0x80000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f000085a000-0x8)={0x9, 0x4, 0x0, 0x0}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000464000-0x38)=[@in6={0xa, 0x1, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) mmap(&(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000fd1000)={0x0, 0x0, ""}, &(0x7f0000fd2000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f000026e000-0x10)={0x7, 0x1, 0x20, 0x5, r1}, 0x10) socketpair(0x10, 0x0, 0x1, &(0x7f0000589000)={0x0, 0x0}) mmap(&(0x7f0000fd2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000fd2000)={{0x7, 0x7, 0x6, 0x0, 0x4, 0x14a}, 0xfcc5, 0x9, 0x7}) sendmmsg$inet_sctp(r0, &(0x7f000045f000-0x118)=[{&(0x7f0000179000-0x1c)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c, &(0x7f0000462000)=[{&(0x7f0000099000-0x1)="47", 0x1}], 0x1, &(0x7f000016c000)=[], 0x0, 0x0}], 0x1, 0x0) [ 37.831932] audit: type=1400 audit(1513409515.713:13): avc: denied { create } for pid=3396 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 2017/12/16 07:31:55 executing program 6: mmap(&(0x7f0000001000/0x5b2000)=nil, 0x5b2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f00002c4000)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000053000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r0, 0xffbfffffffffc44f) mmap(&(0x7f00005b4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4(r0, &(0x7f00005b5000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, &(0x7f00003ea000)=0x60, 0x4) getsockopt(r0, 0x1, 0x4, &(0x7f0000019000)="000000000000000000000000000000", &(0x7f000000e000)=0xf) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x8014, r0, 0x0) mmap(&(0x7f00005b4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005b8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00005b8000)={0x0, 0x0}) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x82, 0x3, &(0x7f0000005000-0x1)="21", 0x1) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 37.905519] audit: type=1400 audit(1513409515.787:14): avc: denied { getopt } for pid=3396 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 2017/12/16 07:31:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000c8d000-0x10)={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r1, 0x3) r2 = accept$inet(r1, &(0x7f0000242000)={0x0, 0x0, @loopback=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00006f6000-0x4)=0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x4008000f, 0x0) socketpair(0x0, 0x0, 0x6, &(0x7f0000b19000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00006b6000-0x64)={&(0x7f0000dd9000-0x14)=[0x4, 0x3, 0x10001, 0x100, 0x3], 0x5, 0x2e1, 0x40006, 0x81, 0x3, 0x1336, {0x8, 0x7fff, 0x2a7, 0x7f, 0x0, 0x6, 0x101, 0x7, 0x0, 0x8, 0x7ff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, "ce48a0b9b2af2a5651e500af038c8acce39bf954e10500000000000000f2954d"}}) getsockopt(0xffffffffffffffff, 0x114, 0xed5, &(0x7f0000b9d000-0x5f0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000033c000-0x4)=0x5f0) syz_emit_ethernet(0x42, &(0x7f000026e000-0x42)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x20000000800, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x10, 0x0, 0xaa}, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x0, []}]}}, @icmp=@redirect={0x5, 0x0, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, @multicast1=0xe0000001, @broadcast=0xffffffff, {[]}}, ""}}}}}, 0x0) setsockopt$sock_str(r2, 0x1, 0x19, &(0x7f0000afc000)="47504c656d312400", 0x8) sendto$inet(r3, &(0x7f00002df000-0x1)="58", 0x1, 0x20000000, &(0x7f000084c000-0x10)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000479000)=0x3, 0x4) shutdown(r3, 0x1) getsockopt$sock_buf(r2, 0x1, 0x3f, &(0x7f0000865000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000cba000)=0x1000) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000ef2000-0x4)=0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00002da000-0x4)=0x0, 0x4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000716000)={{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x309, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, {0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="62901ca4399c6588046353f90a800fe8"}) r7 = socket$inet6(0xa, 0x3, 0x2595) syz_emit_ethernet(0x5e, &(0x7f0000fb9000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x400000000001, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x6, 0x0, 0x0, {0xd, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, @rand_addr=0x6, @broadcast=0xffffffff, {[@cipso={0x86, 0x1a, 0x0, [{0x7, 0x3, "ae"}, {0x7, 0x6, "b8d0d2cf"}, {0x7, 0x7, "53e3a2741e"}, {0x6, 0x4, "9b0f"}]}, @rr={0x7, 0x3, 0x0, []}, @rr={0x7, 0x3, 0x0, []}]}}, ""}}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000b9b000)={r6, 0x18, &(0x7f0000a9d000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f000059f000)={r4, 0x18, &(0x7f0000bb2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000311000-0x4)=r8, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000777000-0x2c)=[], 0x0) sendto$inet(r2, &(0x7f000029e000)="1b5cf46a7e9ce9b12a158e9bd9963a15757f392e7c0fee1eb26ece6ab86d81b8bf40f99c80627ed9a4ac90df72b0b28b6a037855a92d87d3446a46337495e3f718e2e0f17ff59fa2a2c316440d28b0e31423daa37f4116fa4ee77691416db8b40c2d7c5d247e3003ed5b177a91abb49d295f06994acae315cb005caede4324f19aef9bc61b5c07ca6a1fb0c24ebec747c1d106c37c82bb2347304aff6e28bf61e50000c44ab801561a5f7a3bf54588e6ded2d801089bfd042f6639fd493e167c49df0ea7465e3c9a3bc723b7860a5a1a0783d5822733ada81bf8a1de9b646b78d8966f42bc72b2fe35d5640bc886d8eb7b33915eb1d2f073873529662a43d3809dab2b259c2a1b8620bb86bfa3c8753c15a22a4fc68c0a04be84f68d331cee72a5626292ef5ac3ec09462c4d770f309f873e4fc9562bb964c88b5f3bae60fe901f3084ddc5c87e1815ee2af3311ae695d5e766423ffb30c342fd38076600f1d035a1f79447349734a22a2acd2ff398a96de11679edf795e534fade52624e5133b21726772075178c78e3aa9b5aa13706d5f6e5e564ebb51f1990c358f1c67f4528fa0d93b373d6295d301d53df3c90936eeb7a857b06d45a371304ebd5f602afd86c74a4afd1f10b00b423840b6b896700bf219fa1326442a720e0acc050d3257416ca24d3f67f72bb7694f164609b3061d6077539b09ea6d588b93485d0e49d42eaf0f8cada6498fd05ad42de038e83dd45b2bd49d6fb3041ac469b9db983cb089a00c8d3f9df12da22514f46d431defe7d77adc40f81a72f4d88034b0131a2d39cb726de532f7b197ac533f4c9699611346131bc1de0fd54650ad7dfa4c802f1ca52e5df28ac5bd8d098129da116664f6fcf73a3365249a27095e33ab1ab58ea667d97db6bd13991c5d9510314d9bc362a6dcfa5a7495cf7be161f303e9950e8b6e764db038d58e330d4d081a2a99369029e8cd4c96e2411d3c15fc197f09cc1ea499f03ac09c2b54f8d969789942b0ede06bf6e92e6bc0c5d6201c8305d23579b853dfca9fdcf6158e22f6a879794f77bda47a78f1ac7a30676021a24c28031619a512d3b07b80550c4ae7a0eb7c3701aebf993c8de93ff3702f680f47fd862ececf81c857037f86563cda5f8d48b4fde1d28fc80a2fa0a7b00ecb3b24c09746ec0331f760eb67c9359518924edadd565fb69f9cfc6b7b042e0f077c74906423d5afe5bd8a300b9db24ada054e0dea41c191871e92c6be0cf5ecb2e8c14bcc9b202bece66225c90cebe0cf26b5132973930d4c294d099c5f10088b201a5f8ecba07329824c05e4a21b2483917d36f374ff827600cc7d0551b373bd17372df346097e6c16cfd114f3ca1f1535a405e7dd863379699913ebc94a2efe4e8bd464234562634861f5e9fb7f8bca30036321a3c81ea28b2c9165f25b1d3f5e9cdc08f040e8ebb7eb877f7c15a553fabb8306cabe7165702953fcc0a3b9aa47cbd8f30e4be9aca84d3df4722bc0d61095c8097848c8e2b80c81857d911231d791e48a21a02f01f7cf35d719e6d654d4ee3aedf7be3fae4bd1de33f35c8de226ec12f97c55ec5445d67c4bc5d84bef3054a274cf5faa3d45708e4ac0077c2672320e978a5e4ed1250fc078d311ea4a05f6a133a405fc6ce4f0d52a919d10a0e240d25cf4f600e27f210e9138b24f4511b98b62d4eecc44f782115c355f992ec0119c5398934d74f0d68a0a0ee2dd5dde7d9c14f04d43b1c14b6a082e41fdba2feb32bc4fb703fa267d3230396e6a504bda5f371af04fcce7de2161db6d628fb3d501fe802a15deeb60aac4634f532769f7d36c22d91e3572aa3ca4bb8211bed2f47791bb54beac261c54b8e59a0d22439a7cb6e36a42d2cb141e03caa23843ebf2db41c1dc18838294f2a713a087babb50d15c47d61a98039439764e7a1878910cf140f7acc1135eb76223304e342ecd931324a82bff28d22f166fbbe5404b373dead1338ee1629448f004910cd1dbb3baf6fc795cde16db44b06828e1ed257ed69de81fa747e3ddc068ae6036a5b2efbd1e28bcbb859deeea9c02bf47b9bbb9a22daf3874c489df278daf0e80399e7ccdfbee153a2a5c17c78486fffba5c61f1a4a27351c3a2a13e71466e40f11247f3314a64f5cf33d473009814031e98a6a9b692ae78e29c208fdb2d38d0fe1040cfac876fe1290269b5865fc77e70c6a5e87fb1965a13524f553bf206eca974762e8ec5527fece184549f81e0314985bbe17fea00c55cd8b34c10e0973567c78475f148f19e07ea3b0140af4f220efe6579759c19d30b1c2739b03b58be3de03241413bc0f6912414cb2a422d6f9e88bfa9696216091c8a7661023989b7ccb60e10f376319fc71a97f15de6d95b33eb96d9845189c986ec5d6012bca5eff36c203a9b495965f4583c5abf46c0aee18ccaf02b68a8e991fcb646b2651eb0b36fa106c26ed0ee2b209fa5d725da68ab6abd07b55863c540b5f6bd83067a8ea45abccb04dee3d31891f1af911b5f404b003755190199c503f625e45c142439f76fb33e60e4e19a3d311442a49f823262ea115994e511a3b9790fd155274df5544dae7faaceb66b952f6605f6bdd725c84c73295952c0c2be8f485777a218c6d64d4361d4f19a04c12a5696622d966e5e6204d594da4a92fbf6a045ad87e34455849ee2af38caaab66347ca03fcf37ada2a107abb5cf10be15485d917b99bce42c2c26674d898ba36493bb8423fe3ac3c0a753cc41093f328ff43e61cce21e2d7dfa0a3ee48ceeb730626a1f876a447777c7cf04fabc325762a44b27df34aa4f1cd66fc2276eb68db1f1fa7acae2372b566e27fb3d5a7be0555652ea62135a88566a66d777dee31a7ad6941c406949860fb4725aa86d95751556df83a771ec99c79fc0837a4cc521ee2e4cea588089fd4b30ad619536c2de2da248d1c958885cc49b7f1187539b3497bf5871ac5260751b63e52221e20790d376ed74c64fec9370f3fa473be488ff5920249ef8ba5375e7df7f9f482697ca1e2b931c49bfd947e9e31b05c03bc749564ab26a57405530bfa6c1d944692ddfd05b982bd09e89dee50589e3f0ddbddec65a8245bf7eae553fea34250749ef593ea954b98d9744a74c17f6784b5ae9bde630083956bf12fe13c581640081bd9089a40d7dc5135e227aabebd2c0fa2554a8af56ff4aa63e82cb076d05e397f08f2528122e13666ef29c477d6f6e5746fd89c47c315807c69931b402bbe0146751e050e7cfd6af687048136e26e03ebcdaf8db02d3efa26ff56666a2771e08d5d4ed4289633c339bb0f76b9cd44e942974e8280fbb3f7fd33f08a516d4a7c3b79683f39798d9453ca620e82433105f1380affe6fff2aca549c96e6459a60d834c861a775f5e13c59da712bc57ded51da7adb6245ed146cd5f7f90f8c5966ea775eda436014ef3695aa0ba7a17eb4ab1280d640baf40952fb0e96179b1f1ffd09a6d35bd1fc773bdc133975f7733ea796020e980f8792f47d2ad78961441cf48a9917ea8ad0a79b046b47f1f084e0ab3d23c4f6543d3d0cb0f0d3825791a1d1b83a9cf640c299079a5aaef17eba9f7f4b6512e0ac361c4e3a2fa9e003be689d99d6e1b8363923663534834be2e748decba7c44a607f3a2b16e048171858e322962f8f43f2d21889e17ccbc628c9e5d48687d6e7cd5455736ee22f2f66da2eca748ecb3b1271ce8a0829a97f7c8ea38aee227d280fd80222db3c5a9332cc90a5d428e78f72177107641c2c5779cfd725fa12e6ae91ce867b39951b2e8d5ab4a03ff82d14340f359cc9aa93782103bcf22f0f1e32b51c674fabb10df0d9d350cc4bf5f7c3c58143e5e67c02906ed6f398fc62d707fadab6dab1c3e2a9054fa9d661b42da1b459476c4c570de29f317fe43dd0e3da54e2210ccbb41219cb44fe1e7b0d8f5d2234cbb6eb96065d76587f6fb07e951f4bf041375cca34e31676047ec87a0e77aa29cd60e5763790585f19425b7006f9f19ce83664490a14bfe369066f455bc1b83582984d919c33e9e94308773edee6333d88470cbc8438cc1c51d653bbafe905d0bab475fb299c8ec53175b", 0xb51, 0x48810, &(0x7f0000bab000)={0x2, 0x0, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00003e8000-0x4)=0x0, &(0x7f0000184000-0x4)=0x4) [ 37.934448] audit: type=1400 audit(1513409515.815:15): avc: denied { dac_override } for pid=3402 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/16 07:31:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000593000)="2f6465762f72666b696c6c00", 0x68442, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000828000-0x4)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000dd7000-0x9)="6c6f67696e75696400") ioctl$TCSETA(r2, 0x5402, &(0x7f0000128000-0x14)={0x3f, 0xc9, 0x400, 0x9, 0xffffffffffffffff, 0x4, 0x5fe, 0xffffffffffffffe0, 0x7, 0x3}) read$eventfd(r2, &(0x7f00005b8000)=0x0, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000e1000-0x9)="2f6465762f73672300", 0x800, 0x8001) flistxattr(r2, &(0x7f00006ec000-0x83)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x83) r4 = syz_open_procfs(0x0, &(0x7f0000be3000-0x8)="6e65742f61727000") r5 = gettid() waitid(0x3, r5, &(0x7f0000444000)={0x0, 0x0, 0x0, 0x0}, 0x8, &(0x7f0000e63000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r3, r3, 0x0, 0x81) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r6 = syz_open_dev$vcsa(&(0x7f0000886000-0xb)="2f6465762f766373612300", 0x400, 0x7fffc) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000143000)={0x0, 0x0}) write(r6, &(0x7f0000abd000)="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", 0x167) r8 = geteuid() ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000ee6000-0x10)={0x5, &(0x7f00003be000-0x2e4)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}]}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000a92000)={{0x5, 0x9d, 0x9, 0x3, 0x7, 0xf1}, 0x0}) fallocate(r0, 0x10000000000000, 0x8000800, 0xfeb2) getresuid(&(0x7f0000f4c000-0x4)=0x0, &(0x7f0000ceb000-0x4)=0x0, &(0x7f0000534000-0x4)=0x0) recvfrom$unix(r7, &(0x7f0000e37000-0xe1)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe1, 0x2, &(0x7f0000567000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8) setresuid(r8, 0x0, r8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000484000-0xe4)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") sendfile(r4, r4, &(0x7f00001c9000)=0x200, 0x3ff) io_setup(0x80000001, &(0x7f00006b5000-0x8)=0x0) ioctl$TTUNGETFILTER(r3, 0x801054db, &(0x7f000011a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") 2017/12/16 07:31:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000f39000)="2f6465762f73672300", 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000c25000-0x1a)={{0x8f, 0x4}, {0x0, 0x6}, 0xd04, 0x4, 0x6, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl(r1, 0x227f, &(0x7f0000667000-0x2)="52") ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000f67000-0xbc)={0x3ff, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7, "4ca36b2faea035c6", "7eca6b798200eaf55f37816fc9af2436ad98b97bb0fce2147e8e9aa88836dfcf", 0x90a4, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/16 07:31:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00002ed000-0x8)={0x0, 0x0}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000352000-0x44)={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x7, @random="539da48ad501", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x46, {0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common="7465716c300000000000000000000000"}) setpriority(0x0, r0, 0x85) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b88000)="2f6465762f6b766d00", 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = accept$packet(r4, 0x0, &(0x7f0000c6d000-0x4)=0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f00001ed000)={0x7b, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000aad000/0x18000)=nil, &(0x7f0000574000)=[@text32={0x20, &(0x7f00006bf000)="b935010040a0a0b847100000001622d022d00000000f3052c76dfef3ab66b86f00d9bcd1e0e0ea0000f67ab2b2f6e02ec1e8050f3235001000000f01dffc66e955e9550f2924f80f20d835080000000f22d8650f070f01b102000000", 0x5c}], 0x1, 0x0, &(0x7f00003c1000-0x10)=[@cr0={0x0, 0x50021}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00001ef000-0x8)={0x0, 0x0}) fstat(r3, &(0x7f0000c73000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = memfd_create(&(0x7f0000e09000)="2f6465762f6b766d00", 0x3) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000d47000-0x8)=[0x1, 0x5d]) lstat(&(0x7f0000a4c000-0x8)="2e2f66696c653000", &(0x7f0000113000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000a23000)={r0, r7, r9}, 0xc) r10 = accept4(r5, &(0x7f0000fd9000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, &(0x7f00006fc000-0x4)=0x60, 0x80000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000b29000-0x48)={0x0, 0x40, "dae70c65c141f1a17ca9237d29d2aaa6deafc386f9acb091079c4a1d7a64475bcd35d25353826906296db325a679bb4d58890c6beb95d45aa8b98bb5aed7139f"}, &(0x7f0000657000-0x4)=0x48) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000464000-0x8c)={r11, @in6={{0xa, 0x3, 0x100, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000a51000-0x4)=0x8c) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xf6f000)=nil, 0xf6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$mouse(&(0x7f0000b44000)="2f6465762f696e7075742f6d6f7573652300", 0x0, 0x2000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000347000)={0x2, &(0x7f0000662000-0x4)=0x0, 0x6, r12, 0x5}) [ 37.940504] Bearer <> rejected, not supported in standalone mode [ 38.027813] Bearer <> rejected, not supported in standalone mode [ 38.092374] audit: type=1400 audit(1513409515.818:16): avc: denied { create } for pid=3396 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 38.126471] audit: type=1400 audit(1513409515.819:17): avc: denied { write } for pid=3396 comm="syz-executor0" path="socket:[12383]" dev="sockfs" ino=12383 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 38.173394] [ 38.173988] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 38.181876] ============================================ [ 38.187236] kvm [3440]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008f data 0x0 [ 38.187266] kvm [3440]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008e data 0x0 [ 38.187293] kvm [3440]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008d data 0x0 [ 38.187322] kvm [3440]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008c data 0x0 [ 38.187352] kvm [3440]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008b data 0x0 [ 38.187380] kvm [3440]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008a data 0x0 [ 38.187408] kvm [3440]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x40000089 data 0x0 [ 38.187436] kvm [3440]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x40000088 data 0x0 [ 38.187463] kvm [3440]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x40000087 data 0x0 [ 38.187492] kvm [3440]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x40000086 data 0x0 [ 38.272754] WARNING: possible recursive locking detected [ 38.278178] 4.15.0-rc2-mm1+ #39 Not tainted [ 38.282476] -------------------------------------------- [ 38.287899] syz-executor1/3439 is trying to acquire lock: [ 38.293405] (rtnl_mutex){+.+.}, at: [<0000000093c5b9d7>] rtnl_lock+0x17/0x20 [ 38.300657] [ 38.300657] but task is already holding lock: [ 38.306590] (rtnl_mutex){+.+.}, at: [<0000000093c5b9d7>] rtnl_lock+0x17/0x20 [ 38.313832] [ 38.313832] other info that might help us debug this: [ 38.320461] Possible unsafe locking scenario: [ 38.320461] [ 38.326482] CPU0 [ 38.329030] ---- [ 38.331577] lock(rtnl_mutex); [ 38.334821] lock(rtnl_mutex); [ 38.338065] [ 38.338065] *** DEADLOCK *** [ 38.338065] [ 38.344086] May be due to missing lock nesting notation [ 38.344086] [ 38.350975] 1 lock held by syz-executor1/3439: [ 38.355517] #0: (rtnl_mutex){+.+.}, at: [<0000000093c5b9d7>] rtnl_lock+0x17/0x20 [ 38.363196] [ 38.363196] stack backtrace: [ 38.367658] CPU: 1 PID: 3439 Comm: syz-executor1 Not tainted 4.15.0-rc2-mm1+ #39 [ 38.375155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.384471] Call Trace: [ 38.387028] dump_stack+0x194/0x257 [ 38.390620] ? arch_local_irq_restore+0x53/0x53 [ 38.395261] __lock_acquire+0x11cf/0x47f0 [ 38.399373] ? find_held_lock+0x39/0x1d0 [ 38.403404] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 38.408561] ? perf_tp_event+0xae0/0xae0 [ 38.412589] ? memset+0x31/0x40 [ 38.415834] ? perf_trace_lock_acquire+0x532/0x980 [ 38.420729] ? trace_hardirqs_on+0xd/0x10 [ 38.424850] ? __sched_text_start+0x8/0x8 [ 38.428964] ? perf_trace_lock+0x900/0x900 [ 38.433165] lock_acquire+0x1d5/0x580 [ 38.436930] ? rtnl_lock+0x17/0x20 [ 38.440440] ? lock_release+0xda0/0xda0 [ 38.444382] ? rtnl_lock+0x17/0x20 [ 38.447887] ? rtnl_lock+0x17/0x20 [ 38.451392] __mutex_lock+0x16f/0x1a80 [ 38.455247] ? rtnl_lock+0x17/0x20 [ 38.458751] ? lock_release+0xda0/0xda0 [ 38.462691] ? rtnl_lock+0x17/0x20 [ 38.466197] ? is_bpf_text_address+0xa4/0x120 [ 38.470661] ? mutex_lock_io_nested+0x1900/0x1900 [ 38.475471] ? unwind_get_return_address+0x61/0xa0 [ 38.480368] ? trace_hardirqs_off+0xd/0x10 [ 38.484569] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 38.489637] ? depot_save_stack+0x2ca/0x460 [ 38.493925] ? selinux_tun_dev_free_security+0x15/0x20 [ 38.499171] ? save_stack+0xa3/0xd0 [ 38.502765] ? save_stack+0x43/0xd0 [ 38.506357] ? kasan_slab_free+0x71/0xc0 [ 38.510389] ? kfree+0xca/0x250 [ 38.513634] ? selinux_tun_dev_free_security+0x15/0x20 [ 38.518875] ? security_tun_dev_free_security+0x48/0x80 [ 38.524203] ? tun_free_netdev+0x153/0x1f0 [ 38.528403] ? register_netdevice+0x97b/0x1010 [ 38.532950] ? __tun_chr_ioctl+0x1ca3/0x3f10 [ 38.537324] ? tun_chr_ioctl+0x2a/0x40 [ 38.541176] ? do_vfs_ioctl+0x1b1/0x1530 [ 38.545201] ? SyS_ioctl+0x8f/0xc0 [ 38.548709] ? entry_SYSCALL_64_fastpath+0x1f/0x96 [ 38.553603] ? find_held_lock+0x39/0x1d0 [ 38.557631] ? check_noncircular+0x20/0x20 [ 38.561830] ? print_usage_bug+0x3f0/0x3f0 [ 38.566031] ? lock_downgrade+0x980/0x980 [ 38.570143] ? tun_flow_flush+0x41/0xe0 [ 38.574088] ? mark_held_locks+0xb2/0x100 [ 38.578201] ? kfree+0xe4/0x250 [ 38.581449] ? selinux_tun_dev_free_security+0x15/0x20 [ 38.586691] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 38.591687] ? trace_hardirqs_on+0xd/0x10 [ 38.595828] mutex_lock_nested+0x16/0x20 [ 38.599855] ? security_tun_dev_free_security+0x67/0x80 [ 38.605185] ? mutex_lock_nested+0x16/0x20 [ 38.609390] rtnl_lock+0x17/0x20 [ 38.612725] tun_free_netdev+0x158/0x1f0 [ 38.616755] ? tun_xdp+0x410/0x410 [ 38.620262] ? __lockdep_init_map+0xe4/0x650 [ 38.624641] ? tun_detach_all+0xb50/0xb50 [ 38.628756] ? tun_xdp+0x410/0x410 [ 38.632264] register_netdevice+0x97b/0x1010 [ 38.636644] ? netdev_change_features+0x100/0x100 [ 38.641453] ? round_jiffies_up+0xce/0x100 [ 38.645656] ? __round_jiffies_up_relative+0x150/0x150 [ 38.650900] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 38.655797] ? selinux_tun_dev_alloc_security+0x124/0x170 [ 38.661303] __tun_chr_ioctl+0x1ca3/0x3f10 [ 38.665508] ? tun_chr_read_iter+0x1e0/0x1e0 [ 38.669884] ? lock_downgrade+0x980/0x980 [ 38.674001] ? avc_ss_reset+0x110/0x110 [ 38.677946] ? lock_release+0xda0/0xda0 [ 38.681888] ? __lock_is_held+0xbc/0x140 [ 38.685921] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 38.691773] ? get_unused_fd_flags+0x190/0x190 [ 38.696320] ? tun_chr_compat_ioctl+0x30/0x30 [ 38.700780] tun_chr_ioctl+0x2a/0x40 [ 38.704459] ? tun_chr_ioctl+0x2a/0x40 [ 38.708312] do_vfs_ioctl+0x1b1/0x1530 [ 38.712166] ? _cond_resched+0x14/0x30 [ 38.716025] ? ioctl_preallocate+0x2b0/0x2b0 [ 38.720398] ? selinux_capable+0x40/0x40 [ 38.724430] ? syscall_return_slowpath+0x2ad/0x550 [ 38.729325] ? security_file_ioctl+0x89/0xb0 [ 38.733700] SyS_ioctl+0x8f/0xc0 [ 38.737037] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 38.741757] RIP: 0033:0x452a39 [ 38.744911] RSP: 002b:00007f573fb27c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 38.752583] RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452a39 [ 38.759818] RDX: 0000000020533000 RSI: 00000000400454ca RDI: 0000000000000016 [ 38.767052] RBP: 00000000000002ec R08: 0000000000000000 R09: 0000000000000000 [ 38.774285] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f26c0 [ 38.781520] R13: 00000000ffffffff R14: 00007f573fb286d4 R15: 0000000000000000