[....] Starting enhanced syslogd: rsyslogd[ 9.493170] audit: type=1400 audit(1513689065.622:4): avc: denied { syslog } for pid=3186 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-386-4,10.128.0.14' (ECDSA) to the list of known hosts. 2017/12/19 13:11:16 fuzzer started 2017/12/19 13:11:16 dialing manager at 10.128.0.26:44395 2017/12/19 13:11:18 kcov=true, comps=false 2017/12/19 13:11:18 executing program 0: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00004ca000)='/dev/pktcdvd/control\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001000-0x4)=0x2, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000002000-0x1c)={0xa, 0x3, 0xb381, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10001}, 0x1c) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000001000-0x62)=""/98) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000002000-0x10)={&(0x7f0000000000/0x2000)=nil, 0x2000}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000002000-0x1a)=""/26) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x5, 0xfb, &(0x7f0000002000)="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"}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000003000-0xe)={0x0, 0x6, "cc5f95905d77"}, &(0x7f0000004000-0x4)=0xe) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002000)={r1, 0x7, 0x10}, &(0x7f0000002000-0x4)=0xc) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004000)={@common='ip6gre0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000005000-0x8)='./file0\x00', &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@rand_addr=0x3, 0x3, 0x0, 0x1, 0xffffffffffff7b23, 0x11, 0xa0, 0x20, 0xcea, r2, r3}, {0x0, 0x9, 0x10001, 0x100000000, 0x8, 0x4, 0x1f, 0x1000}, {0x3, 0x8, 0x3, 0x7}, 0x40, 0xffff, 0x1000, 0x0, 0x10, 0x0}, {{@in=@multicast2=0xe0000002, 0x7, 0x7ff}, 0x2, @in=@empty=0x0, 0x6, 0x3, 0x2, 0x401, 0x4, 0x8b, 0x2}}, 0xe8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000005000)=0x0, &(0x7f0000004000-0x4)=0x4) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000002000-0x70)={0x5, {0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @rand_addr=0x7fff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4, 0x4, 0x8001, 0x7fffffff, &(0x7f0000007000-0x10)=@common='bpq0\x00', 0x7, 0x450, 0x7f}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000007000)={0x1, r4}) ioctl$TIOCSCTTY(r0, 0x540e, 0xffffffffffffffc1) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc00c6419, &(0x7f0000002000-0xc)={0x8, &(0x7f0000003000-0x84)=""/132, &(0x7f0000008000)=[{0x9, 0xcd, 0x401, &(0x7f0000009000-0xcd)=""/205}, {0x7, 0x9e, 0x1, &(0x7f0000008000)=""/158}, {0x100000001, 0xd7, 0xff, &(0x7f0000009000-0xd7)=""/215}, {0x5, 0xcb, 0x7, &(0x7f0000008000)=""/203}, {0x9, 0xc1, 0x100, &(0x7f0000008000)=""/193}, {0x1f, 0x16, 0x52d758be, &(0x7f0000005000-0x13)=""/22}, {0x100000001, 0x1e, 0x3ff, &(0x7f0000008000)=""/30}, {0x6, 0x21, 0x6, &(0x7f0000009000-0x21)=""/33}]}) 2017/12/19 13:11:18 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x16)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000171000)=0xffff) socketpair(0x1b, 0x5, 0x1, &(0x7f0000001000-0x8)={0x0, 0x0}) mknod(&(0x7f0000001000-0x8)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001000-0x108)={0x0, @in6={{0xa, 0x0, 0x1bff068, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0xfa5a, 0x0, 0xfffffffffffffc01, 0x7, 0x0, 0x5, 0x57b630ec, 0x5, 0x6, 0x7, 0x3, 0x8, 0xb32, 0x8, 0x8000]}, &(0x7f0000002000-0x4)=0x108) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r3, 0x49, "33f5ff170c2c51329fb731921ccc6ee109b90b194ff17aa036aabab4fc276ea6503db40401b48e6d78c6011bb61f256d6e757009473013eb674f5994d72b29d752d43d98e58ad885d1"}, &(0x7f0000001000-0x4)=0x51) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) r5 = getegid() fchown(r2, r4, r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000002000)={0x1, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000003000)='net/arp\x00') mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_wait(r6, &(0x7f0000004000-0x54)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x7, 0x708) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) flock(r1, 0x8) setns(r2, 0x8000000) eventfd2(0x3, 0x80800) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$evdev(r2, &(0x7f0000005000-0x60)=[{{0x0, 0x0}, 0x4, 0x4, 0x101}, {{0x77359400, 0x0}, 0x8, 0x40, 0xfffffffffffffff7}, {{0x0, 0x0}, 0x20, 0x10000, 0x7}, {{0x0, 0x0}, 0x6, 0x4, 0x3}, {{0x0, 0x0}, 0x8001, 0x3, 0x7fffffff}, {{0x77359400, 0x0}, 0x1, 0x400, 0x8001}], 0x60) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000006000-0x50)={{0x8000, 0x4}, {0x3f, 0x3f}, 0x1, 0x7, 0x7, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fchown(r0, r4, r5) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000006000)=""/37, &(0x7f0000005000)=0x25) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000007000)=0x0, &(0x7f0000005000-0x4)=0x4) 2017/12/19 13:11:18 executing program 7: r0 = open(&(0x7f000015f000-0x8)='./file0\x00', 0x20000, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000001000-0x90)={0x18000000000, {{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x7, 0x0, 0x100000000, 0x101]}, &(0x7f0000001000)=0xc) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000002000-0x4)=0x0, &(0x7f0000002000-0x4)=0x4) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000001000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000003000-0x4)=0x0, &(0x7f0000003000-0x4)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000004000-0x8)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003000)=[{{&(0x7f0000003000-0x10)=@in={0x0, 0x0, @loopback=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000004000-0x40)=[{&(0x7f0000003000)=""/68, 0x44}, {&(0x7f0000004000-0x45)=""/69, 0x45}, {&(0x7f0000004000-0xe3)=""/227, 0xe3}, {&(0x7f0000003000)=""/0, 0x0}, {&(0x7f0000001000)=""/75, 0x4b}, {&(0x7f0000003000)=""/92, 0x5c}, {&(0x7f0000004000-0x74)=""/116, 0x74}, {&(0x7f0000001000-0xd6)=""/214, 0xd6}], 0x8, &(0x7f0000003000)=""/0, 0x0, 0x8}, 0x800}, {{&(0x7f0000003000)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, 0x58, &(0x7f0000003000)=[{&(0x7f0000004000-0x2b)=""/43, 0x2b}, {&(0x7f0000002000-0x45)=""/69, 0x45}, {&(0x7f0000003000)=""/221, 0xdd}, {&(0x7f0000001000-0x38)=""/56, 0x38}, {&(0x7f0000002000)=""/220, 0xdc}, {&(0x7f0000003000)=""/223, 0xdf}, {&(0x7f0000003000-0x9)=""/9, 0x9}], 0x7, 0x0, 0x0, 0x2}, 0x100000000}, {{&(0x7f0000001000)=@ax25={0x0, {""/7}, 0x0}, 0x10, &(0x7f0000002000-0x20)=[{&(0x7f0000002000-0xb7)=""/183, 0xb7}, {&(0x7f0000001000)=""/242, 0xf2}, {&(0x7f0000004000-0x1000)=""/4096, 0x1000}, {&(0x7f0000002000-0x83)=""/131, 0x83}], 0x4, &(0x7f0000000000)=""/143, 0x8f, 0x1f}, 0xfff}, {{0x0, 0x0, &(0x7f0000004000-0x28)=[{&(0x7f0000004000-0xc4)=""/196, 0xc4}, {&(0x7f0000003000)=""/55, 0x37}, {&(0x7f0000002000-0xf0)=""/240, 0xf0}, {&(0x7f0000004000-0xa4)=""/164, 0xa4}, {&(0x7f0000004000-0x57)=""/87, 0x57}], 0x5, &(0x7f0000002000-0x7b)=""/123, 0x7b, 0x1}, 0x7}], 0x4, 0x10002, &(0x7f0000003000)={r1, r2+30000000}) 2017/12/19 13:11:18 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x40000) lookup_dcookie(0x9, &(0x7f0000000000)=""/151, 0x97) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000001000)=0x9a) keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/56, 0x38) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x0}, {0x0, 0x1c9c380}}, &(0x7f0000002000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000002000)="33c122fc63b5085679de552f04fd6c2aba223027001c269408109eaa195377a573ca33aea07ac18f3d06a4e2833d4e8eb41580d8cd2cee34ebe3fb64d947dd1570a89bad7b152d62ad141797ca4901e47d4a843fbe2d5ee89607dbc4cedcaf2980269c649308893d2fce4c53140309f659f3346ddb0fcbfdd9e10030fa5502a9501e21d8a4a6ebca41ce64fcdc314088d525679f102bf34ffa34723364c25bbb2f705d836f93ed7481379ba420dd700c4cee2d4261e4d1b56d400c6a1602f8ac9b45") mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000002000-0x14)={0x0, 0x9, 0x4, 0x8, 0x100000000, 0xffffffff}, &(0x7f0000004000-0x4)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000002000-0x98)={r2, @in6={{0xa, 0x2, 0x8, @loopback={0x0, 0x1}, 0xfffffffffffffff9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x7f}, 0x98) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000003000-0x8)={0x5, 0x40, 0x5ecf, 0x5}, 0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000005000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000004000-0x4)=0x7fff) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000006000-0x4)=0x0) sched_getaffinity(r3, 0x8, &(0x7f0000003000)=0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000006000-0xa0)={r2, @in6={{0xa, 0x3, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x781, 0x7, 0x10000, 0x2, 0x29}, &(0x7f0000000000)=0xa0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2c, &(0x7f0000007000-0xee)="71f4bc3c87858969b5e955d3a13e30e18ebf6479a49c1ff5c0d124cd4912416d20f92b48c7ffa149fc4f1712de66751c43775e7abc3577980b1136251e7f482e289a075655031269d57af9d83dfb1cf376246e16acd2d86d3c0310a616f782300d4347226dd0842978bc327316eb5e1a34348846e7e7198c9fffed196c397432eb6ead369386c02e8c0d24a708c4cf23cc5ed5e0b0ac5286abcbd722f2f9810b7e40a8b0dd4221fd52ac7dd1e50f02b4df1d1ac8117579ebfe55cdfec7c1379209f00519b7032bcfc07512e4ad973492fafcf72e9062e7358e42c5f77921bd72e7572a4a28a3ce982b674ba445d9", 0xee) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000002000)={r2, 0xf4, "f76bbcd7cf003dd3abb5a0fc4764282a189650874297ea85cdf741da31ade13c1e4a87e9378f3521aa7b53c9424660cb59f2f3f14330c14a77a0c1314bb4d4e1e94f22ec1942acdb45fbf0547a16c849b83ad4c8d6168764ef3ff4c98fbc7badcfc4fd0d5d0ff9aa9f46f59007cda0ff276668a15cb911127a7bbe154198035da547d028c9140cda19f00bfe8c79872502c1aec5f58d018b5346fafda1e16c28d8322e76feaed7a445f454a66a0340f09bfa46815aa82bf4a8c85871f57f18dfd23f0fe571dfeb2cad58f274b26ee453500fabf37a5f3b2d64f98983873443b9410dd996128fc915f8c26c3df89bd1b763cf7c9c"}, &(0x7f0000002000)=0xfc) ioctl$TIOCGSID(r1, 0x540f, &(0x7f0000006000)=0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000008000-0xa0)={r4, 0x98, "b9affb87739d275f221939af51d537c365296def69ce5b6fde54c7d91d450ac693ce8719b18b122c7b787188ed6b87c1bf14b13a1edb19371483ef54dd99da5f714aea6149365350cf42a38ab12ce928a220218388f3362049eebabedf81dc42bde0b41589331667fec9af64f073ccef78f097018ca012bf921ce0db3a00392b5a611e339993d0dd29152b8440ef663e86703970220ff818"}, &(0x7f0000005000)=0xa0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000009000-0x1)=0x0) 2017/12/19 13:11:18 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000801000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socketpair$llc(0x1a, 0x1, 0x0, &(0x7f0000ba3000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7fffffff, 0x200) poll(&(0x7f000035c000)=[{r0, 0x2000, 0x0}, {r1, 0x400, 0x0}, {r2, 0x0, 0x0}, {r4, 0x200, 0x0}], 0x4, 0xfffffffffffffbff) pivot_root(&(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000001000-0x8)='./file0\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r4, &(0x7f0000002000-0x28)=[{&(0x7f0000001000-0x1000)="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", 0x1000}, {&(0x7f0000001000+0xb6b)="95a415", 0x3}, {&(0x7f0000001000)="3dc75b6e665c12cb30d73034088cef9c6787ab014843b3958564013130825151ca478cd82025cd9223b63250aed6d45c417d96c8952449850ef79bb19a755def375572a0879251c08397303bcea18719355e6766e4bab5baf4e0043bf7f06d571638aec2d2310b07b0f6b9da13dbfafdd297ca09cc95b7e78d458b3db3c94013e46124b4acd95e269664026303e1b21c877efdf1b0e2d295787a6c2812d15235a10386e4a61cae78d359e16dff3ef9e651adc2cd48bdae0ad32e9f38712754f090de1d4775d7f0e47ac2693dc55d334b4ea41398e3757edc", 0xd8}, {&(0x7f0000001000)="f2bbe51ccfa86887cb818a550f66a2095756e85ed4e94e223da558b2a5b8e8a4758947a1cfd2ec8a34b9e6faa7199757176d9a85359f016d60f5d7f4e8a8a418d573f39ba9409376f4aa98eaf644e187a1ee98ef1528b9529ca47759829ac379de4bbb735f6de092bdc5289a33be5735023be05f2a94c8da8588be2841602471b42ae411f8e6ff37905ae1ba2f4f853c2a4b2af650d4a848bbb3e0671143850b8f686422502c1a1f29e8fae58a18ca7fd612eecbccf40e80b40fc039473240ddb05f8d2c012dd9236e452fe483", 0xcd}, {&(0x7f0000001000-0x3)="f22b9f", 0x3}], 0x5, 0x6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x1, 0xaa, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfffffffffffffffa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x1ff, 0x5, 0x3, 0x3c}, &(0x7f0000003000-0x4)=0xa0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001000-0x6)={r5, 0x1f}, &(0x7f0000003000-0x4)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000004000-0x30)=[{r1, 0xc0, 0x0}, {r0, 0x1, 0x0}, {r4, 0x4, 0x0}, {r4, 0x480, 0x0}, {r0, 0x1, 0x0}, {r3, 0x1110, 0x0}], 0x6, &(0x7f0000003000)={r6, r7+30000000}, &(0x7f0000002000)={0x9}, 0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004000)={{{@in=@loopback=0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000005000-0x4)=0xe8) ioprio_get$uid(0x0, r8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000005000)={&(0x7f0000002000/0x1000)=nil, 0x1000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002000)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000004000)={0x1, 0x3, 0x7, 0x0, r9}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000006000)=""/79, &(0x7f0000006000-0x4)=0x4f) 2017/12/19 13:11:18 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x200002, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f000021a000)=0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000001000-0x1c)={&(0x7f0000002000-0x6)=@hci={0x1f, 0xfffffffffffffff9, 0x2}, 0x6, &(0x7f0000000000)=[{&(0x7f0000001000)="7e76fa93c7e5b55f7a9db4e700d403a15c55edd6ea5494b897db6a1ac3171901e2883387df870403e46b1fb5c5134fec815653cb1c6c0961a29892623161f5fc6ca0bebfa6658011d63fb14cd1fefb41448a75b5d235c82cb5c945074ce91d6e09d2fb9ec6d35196b253d60a6e", 0x6d}, {&(0x7f0000001000)="603336cee26353109f76963e2c89c52d04f0c7c316f8ec939a456174a64d9b58c0804253db7d6f42807cafdb1ac9c9eb9cfc3c993769572c8d040b4f39758f53942f5673f87c86f3990c54751687", 0x4e}, {&(0x7f0000001000)="9dd834d4b06b09432aab2825ae3c4fb294d156f710a3d7b4dfaa0955d3b0a9f67df989b7d00e56a5675d790c18374d1a8b21d29ac11a1a12b77f9e8b94f3cafcead5937d98bce3cd9a55de", 0x4b}, {&(0x7f0000001000)="", 0x0}], 0x4, &(0x7f0000001000)=[{0x7c, 0x84, 0x1ff, "403991e88cc5b36bfc8d005cdc121506290b601f2535556f4b2749f1929618c0b737c50d29fb192c54a2003812694b79ce845c2ab7ab38bcec9a155071283b567fa92238db6079dc86745f359da12c0fef070c74c9bde3ffee4545ae7975548983b02c81ec5e6f265d2c366695e13ba0"}, {0xe4, 0xba8ab1ec06398dcf, 0x5, "9c8e4cf45f2d6fae40a4b2092136bc82a74895e37a4e3b05ebbcb7877d919451485705778886351bb24884249d1533b14838fa3c14518cb0784e123603c70e4ff917e4399ba6f407592430c3af5113ed583f321b1ebc2200ef66ad5523e88bccb17e945a55818e5edbe2425caa4057aaf44b26a865a01b3b0958c8ac0ba2bd77eaf3323aa5547741586408940dbe20da43b70fbcaba2ca61eadff231b8e2876d9cfb646750387924bed0e71a6018e33f3f6bf319528b31e1ab13885fe42ec2217633a531312f2efff9de9fac0cbf8ef76a3d471390ea"}, {0x94, 0x88, 0x6, "56e8682581b314f2ec77947f82f64edac69c024591c193e453c5134f8fd11b5999d6255587a1212bd2019d48878c8bd5026111441e2a285a247785acfef23fa4c554a2e65bb7cbe4ee59c1c725f854b0e3b17c8ed35aebd945bb28dfc25026db60b53900bd520d3e204abdaf87dc516266107959371418153687d5d40cdd791bfe8a557ccc528714"}, {0xec, 0x1, 0x4, "60e1d50753d10881f8e737b8733182b0d440e9ffdc3a5086444d8273d53151f9c79d8704909d641a190c43b39e6291d084393408456372d9b790474faac4fbbebab6868539ebfa943ed08867b9ebacd60a3b55c8adcf23eec578aede3ef9334cf389014ac229cc9b2793d429cf7319659c55f3b753c97c20cdc35760201ff6e533fa7d2babbf741112aceaeece1e97cb59331a0549f859f27cc02d7be4731c92ac4071ce56267d5589add6047327a12573894c9a9dd44a93ffd8ff8885679fd963f6cef64abfd859b716a4c6133e995f5c27d018560a185a31199705207d5d"}, {0x4c, 0x11d, 0x3, "1a9b27fef55c6eb96583c756db39def6439afcc2471f38f61a8e8dff0c447cef8e23eac03666585d8d88edbac97c0cd4cea6e2cbe9cf7cfe5069eac9d55783"}, {0x30, 0x105, 0x7, "aa84a4bd3f49d0f304b150ea10b65452c56863624064e66a373691ac3d4e10dc07c849"}], 0x35c, 0x1}, 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000003000-0x8)='./file0\x00', &(0x7f0000002000)='ubifs\x00', 0x800000, &(0x7f0000002000)="6b24ff3028e1e7ef4d5d1cac119f591e2a6600c0f50f43a78c92e09862ce6425e432e2fac74a07b15dd7374c4c6d917bda0406052012a9a694") fchmod(r0, 0x103) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000002000)=""/187) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000003000-0x4)=0xab, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0xff, &(0x7f0000003000)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flistxattr(r2, &(0x7f0000003000)=""/129, 0x81) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000004000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000005000-0x9e)="880f397a98e2c0a83edb8838d135e76050652e7af0c2ff7ce6c0d36974433e069c3cc539b24867cda8e3a83f5dfbaa079804e98dcf0b8f89358684de60d79c4b92c36ae4eb3cc0bb2b931356ae6c20b0da3f8c83a7dad9b7f157b2607403af15f28d125663ae0f4a41bcae3aa0642ac16ae10b30c1f6b94f4f79c901fbebd2f539bcc72954450454843143e3c64479c0d19651b55702ccf8e1f7470f9fd3", 0x9e, 0xfffffffffffffffe) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000003000-0x8)='keyring\x00', &(0x7f0000005000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r3, r4) splice(r1, 0x0, r2, 0x0, 0x401, 0x5) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000005000)=@assoc_value={0x0, 0x0}, &(0x7f0000003000)=0x8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000006000-0x10)={r5, 0x4, 0x401, 0x9}, &(0x7f0000004000)=0x10) 2017/12/19 13:11:18 executing program 5: r0 = memfd_create(&(0x7f0000ad8000-0x1)='\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="7ca4") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001000-0x14)={0x0, 0x6, 0xcec, 0x5, 0x5, 0x2}, &(0x7f0000002000-0x4)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001000-0xa0)={r1, @in={{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfff, 0x3ff, 0x7f, 0x82a4, 0x41}, &(0x7f0000001000-0x4)=0xa0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000003000-0x10)={{0x77359400, 0x0}, {r2, r3/1000+30000}}, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000004000-0x1)=0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40186417, &(0x7f0000004000-0x18)={0x3, 0x0, 0xff, 0x3, 0x8, 0x6}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000003000-0x4)=0x2, 0x4) r4 = getuid() r5 = getegid() fchownat(r0, &(0x7f0000004000-0x8)='./file0\x00', r4, r5, 0x1800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001000)=0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000004000)=r6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005000-0xa)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) set_thread_area(&(0x7f0000006000-0x10)={0x2, 0x20100000, 0xffffffff, 0x4, 0x0, 0x9bbf, 0x0, 0x5, 0x8, 0x6}) getpriority(0x2, r6) close(r7) setfsuid(r4) ioctl$TCSETAF(r7, 0x5404, &(0x7f0000005000)={0xb0, 0x22, 0x7, 0x1, 0x8, 0x8, 0x7ff, 0x27, 0x8, 0x1}) mknod$loop(&(0x7f0000002000-0x8)='./file0\x00', 0x4, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000002000)={0x77, &(0x7f0000005000-0x77)=""/119}) socket$inet_udp(0x2, 0x2, 0x0) 2017/12/19 13:11:18 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000071d000)={{{@in=@rand_addr=0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000-0x4)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000354000-0xc)={r1, @rand_addr=0x7f, @broadcast=0xffffffff}, 0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4008641a, &(0x7f0000001000-0x8)={0x1, &(0x7f0000001000)=[0x2]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001000-0x8)={0x0, 0x9}, &(0x7f0000002000)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001000)={r3, 0x80000001, 0x6, 0x4, 0xd76, 0x8}, 0x14) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000003000-0x8)={0x2, &(0x7f0000002000-0x10)=[{0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000001000-0x8)={r4, 0x2}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002000)={0x0, 0x0, 0x0}, &(0x7f0000003000)=0xc) lchown(&(0x7f0000000000)='./file0\x00', r2, r6) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000005000-0x8)={0x0, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000006000-0x12)={@common='tunl0\x00', 0x6}) ptrace$getregs(0xc, r5, 0x6, &(0x7f0000005000-0xc9)=""/201) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000005000-0x4)=0x0, &(0x7f0000006000)=0x4) ioprio_get$uid(0x3, r2) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r8, 0x4b4d, &(0x7f0000008000-0x8)={0x8, 0x0}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000008000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000008000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002000)={r3, 0x8, 0x11, "809ba2b99afc0e7c32f8d8fdc4a92f03c2"}, 0x19) ioctl$KDSETMODE(r7, 0x4b3a, 0x725) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000009000)={0x0, 0x0}) syzkaller login: [ 22.849726] audit: type=1400 audit(1513689078.972:5): avc: denied { sys_admin } for pid=3394 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 22.903835] IPVS: Creating netns size=2536 id=1 [ 23.009702] IPVS: Creating netns size=2536 id=2 [ 23.021762] audit: type=1400 audit(1513689079.152:6): avc: denied { sys_chroot } for pid=3551 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 23.047995] IPVS: Creating netns size=2536 id=3 2017/12/19 13:11:19 executing program 2: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000012000-0x8)=[0x7ff, 0x0]) fallocate(r0, 0x0, 0x10000, 0x2) mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x2, 0x11, r0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000015000)={0x0, 0x0, 0x0, 0x0}, &(0x7f000000a000-0x4)=0xc) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000002000-0x8)={0x8, 0xfa3}) mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x8000000000000001, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) close(r0) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_init1(0x0) mmap(&(0x7f0000fa5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000af8000-0x3)='./control\x00', 0x80000101) clock_settime(0x2, &(0x7f0000e1d000-0x10)={0x0, 0x0}) mmap(&(0x7f0000fa6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000001000-0x6)='./bus\x00', 0x141042, 0x6) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e5f000/0x4000)=nil, 0x4000, 0x3, 0x810, r1, 0x0) truncate(&(0x7f0000012000)='./bus\x00', 0xffff) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000023e000/0x1000)=nil, 0x1000, 0x0, 0x110, r1, 0x0) r2 = open(&(0x7f0000012000-0x6)='./bus\x00', 0x0, 0x0) readv(r2, &(0x7f0000014000-0x40)=[{&(0x7f0000013000)=""/1, 0x1}], 0x1) fadvise64(r2, 0x0, 0xb8b3, 0x4) open(&(0x7f0000fa7000-0x6)='./bus\x00', 0x804, 0x0) 2017/12/19 13:11:19 executing program 2: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000012000-0x8)=[0x7ff, 0x0]) fallocate(r0, 0x0, 0x10000, 0x2) mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x2, 0x11, r0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000015000)={0x0, 0x0, 0x0, 0x0}, &(0x7f000000a000-0x4)=0xc) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000002000-0x8)={0x8, 0xfa3}) mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x8000000000000001, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) close(r0) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_init1(0x0) mmap(&(0x7f0000fa5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000af8000-0x3)='./control\x00', 0x80000101) clock_settime(0x2, &(0x7f0000e1d000-0x10)={0x0, 0x0}) mmap(&(0x7f0000fa6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000001000-0x6)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e5f000/0x4000)=nil, 0x4000, 0x3, 0x810, r1, 0x0) truncate(&(0x7f0000012000)='./bus\x00', 0xffff) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x0, 0x11, r1, 0x0) r2 = open(&(0x7f0000012000-0x6)='./bus\x00', 0x0, 0x0) readv(r2, &(0x7f0000014000-0x40)=[{&(0x7f0000013000)=""/1, 0x1}], 0x1) fadvise64(r2, 0x0, 0xc7, 0x5) open(&(0x7f0000fa7000-0x6)='./bus\x00', 0x804, 0x0) [ 23.052085] audit: type=1400 audit(1513689079.172:7): avc: denied { dac_override } for pid=3604 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 23.095990] IPVS: Creating netns size=2536 id=4 [ 23.120014] IPVS: Creating netns size=2536 id=5 [ 23.133811] IPVS: Creating netns size=2536 id=6 [ 23.142392] audit: type=1400 audit(1513689079.272:8): avc: denied { net_admin } for pid=3627 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 23.168409] IPVS: Creating netns size=2536 id=7 [ 23.196625] IPVS: Creating netns size=2536 id=8 2017/12/19 13:11:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) r0 = socket(0x6b0d1d343bb157cb, 0x5, 0x7fff) creat(&(0x7f0000b0b000)='./control\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f000029b000-0xb)='/dev/hwrng\x00', 0x800, 0x0) r1 = fanotify_init(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x400) fanotify_mark(r1, 0x11, 0x8000029, 0xffffffffffffff9c, &(0x7f000003f000-0xa)='./control\x00') open(&(0x7f000098b000-0xa)='./control\x00', 0x0, 0x0) socketpair(0x11, 0x0, 0x1, &(0x7f0000af4000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000fb0000)='/dev/usbmon#\x00', 0x0, 0x20000) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setreuid(0x0, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f000002f000-0x4)=0x0) perf_event_open(&(0x7f0000001000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000004000-0x6)='./control\x00', 0x4) r4 = open(&(0x7f000003c000)='./control\x00', 0x141042, 0x0) write(r4, &(0x7f0000039000)='X', 0x1) recvfrom(r4, &(0x7f000029b000-0x86)=""/134, 0x86, 0x100, &(0x7f000007d000)=@rc={0x1f, {0xad96, 0x0, 0x6, 0x6, 0x1ff, 0x3ff}, 0x1}, 0xa) creat(&(0x7f0000017000)='./bus\x00', 0x0) chmod(&(0x7f000003d000-0x6)='./bus\x00', 0x62565e4bad8a76e8) 2017/12/19 13:11:19 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f00009b5000-0x10)='/dev/sequencer2\x00', 0x4a00, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000012000-0xe0)=""/24, &(0x7f0000011000)=0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000008000-0x24)={@generic="60c3d44c45dce834ba568c3d67de0212", &(0x7f0000011000-0xa3)=@ethtool_regs={0x4, 0x533, 0x97, "59a68abfc1655aded52a5fc5ab566c5c70a7f37363a7070a77d3b017bb5bdef6873f74b90f518b5e58504c2b788e934296f7aa65bd02c2b9f928ccfc187b9804c515aa388075a674d11392589679e89d3802d6b8893a867bb64aa86a75714247ee23fe5c7e0d23dc8c8ed993061749be5f8bcd8f4db799c7705b1feb3acdd06d3706f71f45e836a834ee97b749d0dc8a0779b166cad664"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/19 13:11:19 executing program 7: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000012000-0x8)=[0x7ff, 0x0]) fallocate(r0, 0x0, 0x10000, 0x2) mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x2, 0x11, r0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000015000)={0x0, 0x0, 0x0, 0x0}, &(0x7f000000a000-0x4)=0xc) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000002000-0x8)={0x8, 0xfa3}) mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x8000000000000001, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) close(r0) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_init1(0x0) mmap(&(0x7f0000fa5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x3, 0x7, 0x5, &(0x7f0000fa2000)={0x0, 0x0}) inotify_add_watch(r1, &(0x7f0000af8000-0x3)='./control\x00', 0x80000101) mmap(&(0x7f0000fa3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(r1, &(0x7f0000fa3000)={{0x0, 0x0}, {0x0, 0x0}}) clock_settime(0x3, &(0x7f0000e1d000-0x10)={0x0, r2}) mmap(&(0x7f0000fa6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000001000-0x6)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r3, 0x227b, &(0x7f0000001000)="06") fcntl$setstatus(r3, 0x4, 0x2800) r4 = getpgid(0xffffffffffffffff) capset(&(0x7f0000003000)={0x0, r4}, &(0x7f0000007000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read(r3, &(0x7f0000003000)=""/77, 0x4d) 2017/12/19 13:11:19 executing program 5: mmap(&(0x7f0000000000/0xd24000)=nil, 0xd24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000970000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00006e6000-0x28)={@common='gretap0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00001db000)={@loopback={0x0, 0x1}, 0x6, r1}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000c0d000+0x3da)='/selinux/context\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000d24000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d25000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000d26000-0x8)=[{&(0x7f0000d25000-0xe5)="1525df747b1f2dfbc1ffe0342b1ac3c37ccc3fab672c43af3b0e51cf6aec89cc085e2354beaaecc7799f750863b43dc5ec1558aa1adf4076d6b63c0b5286d94f75f404d6888cb9f0b7f8de86c851879be666edd00800000000000000838e794632f728d4099f6e648298fb30586853e3577b0a8cb09d81552cb5ecd357dfd0a37184a40fa86451d7edd7279dcaf4ae5870f829f90c2a6e2e12042bde8a1439f8bcc87c4d1a0f58e3e8e9c501cf577f3fe658a0a6f807cf28383d6653e189f053f4e6fa0c13011eaaf83c4054a9f0517efdb5922ceeb90500cc78b72b952b9c5c5b789e1efe", 0xe5}], 0x1) keyctl$session_to_parent(0x12) mmap(&(0x7f0000d26000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d27000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fremovexattr(r2, &(0x7f0000d28000-0x1a)=@known='com.apple.system.Security\x00') fcntl$F_SET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000d27000-0x8)=0x3) 2017/12/19 13:11:19 executing program 4: mmap(&(0x7f0000000000/0xe59000)=nil, 0xe59000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xb, 0x1000000807, 0xa453) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000992000)='/dev/ppp\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) pipe2(&(0x7f000034b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f000066a000-0x1f)="1f0000000203ffde0000c3e801000000261f000009000180f97eee00018407", 0x1f) splice(r2, 0x0, r1, 0x0, 0x400010000, 0x0) mmap(&(0x7f0000e59000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000e59000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/19 13:11:19 executing program 6: mmap(&(0x7f0000000000/0xe59000)=nil, 0xe59000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000992000)='/dev/ppp\x00', 0x2, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000c04000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5) pipe2(&(0x7f000034b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r2, &(0x7f000066a000-0x1f)="1f0000000203ffde0000c3e801000000261f000009000180f97eee00018407", 0x1f) splice(r1, 0x0, r0, 0x0, 0x400010000, 0x0) mmap(&(0x7f0000e59000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000e5a000-0x4)=0x0) 2017/12/19 13:11:19 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xbbe000)=nil, 0xbbe000, 0x3, 0x32, r0, 0x80000000000000) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000ab8000)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f0000bb8000)=[{0x14, 0x203, 0xd09, 0x10001, 0x0, '\t'}], 0x14}], 0x1, &(0x7f00003c3000)=[], 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000039c000-0x8)={0x6, &(0x7f000067b000-0x30)=[{0x10001, 0x6, 0x80000000, 0xfc12}, {0x3, 0x2, 0x1, 0x1}, {0x0, 0x80, 0x8, 0x4}, {0x100000001, 0x6, 0x10000, 0x6}, {0x7, 0x5, 0x3, 0x3}, {0x9, 0x1, 0x3, 0x7}]}, 0x8) recvfrom(r1, &(0x7f00007bd000)=""/40, 0x28, 0x2000, 0x0, 0x0) mmap(&(0x7f0000bbe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000bbe000)='./file0\x00', 0x400, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000256000-0x4)='bic\x00', 0x4) 2017/12/19 13:11:19 executing program 1: mmap(&(0x7f0000000000/0xf5c000)=nil, 0xf5c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000f59000)=@file={0x1, "e8"}, 0x3) mmap(&(0x7f0000f5c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000f5d000-0x15)='/dev/pktcdvd/control\x00', 0xcc040, 0x0) read(r0, &(0x7f0000f58000)=""/1, 0x1) close(r0) close(r1) [ 23.297204] audit: type=1400 audit(1513689079.422:9): avc: denied { create } for pid=3661 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 23.303781] audit: type=1400 audit(1513689079.422:10): avc: denied { net_raw } for pid=3653 comm="syz-executor0" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 ** 4200 printk messages dropped ** [ 23.332704] Read of size 4 by task syz-executor7/3662 ** 2122 printk messages dropped ** [ 23.343424] [] _raw_write_lock_irqsave+0x56/0x62 ** 1916 printk messages dropped ** [ 23.353066] [] ? avc_policy_seqno+0x9/0x20 ** 1932 printk messages dropped ** [ 23.362705] (stack is not available) ** 1372 printk messages dropped ** [ 23.369541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ** 2634 printk messages dropped ** [ 23.382872] do_fast_syscall_32+0x2f7/0x890 ** 1538 printk messages dropped ** [ 23.390638] [] ? avc_policy_seqno+0x9/0x20 ** 1798 printk messages dropped ** [ 23.399699] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 3411 printk messages dropped ** [ 23.416900] ffff8801c0e7f950 ffffffff81d90a29 ffff8801d77ff640 ffff8801cb972000 ** 2213 printk messages dropped ** [ 23.428107] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1962 printk messages dropped ** [ 23.437783] [] ? fsnotify+0xf30/0xf30 ** 1951 printk messages dropped ** [ 23.447621] [] dump_stack+0xc1/0x128 ** 1674 printk messages dropped ** [ 23.456091] sg_fasync+0x86/0xb0 ** 1314 printk messages dropped ** [ 23.462703] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2232 printk messages dropped ** [ 23.473963] ^ ** 2776 printk messages dropped ** [ 23.488027] SyS_fcntl+0x658/0xc70 ** 1321 printk messages dropped ** [ 23.494660] [] queued_write_lock_slowpath+0x116/0x150 ** 2394 printk messages dropped ** [ 23.506694] [] ? avc_policy_seqno+0x9/0x20 ** 2434 printk messages dropped ** [ 23.518954] [] _raw_write_lock_irqsave+0x56/0x62 ** 2052 printk messages dropped ** [ 23.529205] [] ? avc_policy_seqno+0x9/0x20 ** 1801 printk messages dropped ** [ 23.538305] ^ ** 1928 printk messages dropped ** [ 23.548048] [] sg_read+0xa1c/0x1440 ** 1802 printk messages dropped ** [ 23.557117] entry_SYSENTER_compat+0x51/0x60 ** 1472 printk messages dropped ** [ 23.564554] [] ? rw_verify_area+0xe5/0x2b0 2017/12/19 13:11:19 executing program 0: mmap(&(0x7f0000000000/0x33000)=nil, 0x33000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000001f000-0x10)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000023000-0x4)={0xffffffff}, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xf11, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000028000)=0x1) socketpair$inet6(0xa, 0x7, 0x7, &(0x7f0000033000-0x8)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}, &(0x7f000002d000-0x4)=0x8) mmap(&(0x7f000002b000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) ** 1952 printk messages dropped ** [ 23.574381] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2335 printk messages dropped ** [ 23.586240] [] ? do_fast_syscall_32+0xcf/0x890 ** 1999 printk messages dropped ** [ 23.596340] ffff8801cb972100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2063 printk messages dropped ** [ 23.606678] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1920 printk messages dropped ** [ 23.616399] [] ? vfs_copy_file_range+0x740/0x740 ** 2716 printk messages dropped ** [ 23.630111] [] ? vfs_copy_file_range+0x740/0x740 ** 1912 printk messages dropped ** [ 23.639833] PID = 3662 ** 1101 printk messages dropped ** [ 23.645367] (stack is not available) ** 1335 printk messages dropped ** [ 23.652305] [] SyS_read+0xd9/0x1b0 ** 1634 printk messages dropped ** [ 23.660575] [] ? do_fast_syscall_32+0xcf/0x890 ** 1856 printk messages dropped ** [ 23.669932] (stack is not available) ** 1334 printk messages dropped ** [ 23.676702] [] vfs_read+0x11e/0x380 ** 1667 printk messages dropped ** [ 23.685069] Read of size 4 by task syz-executor7/3662 ** 1666 printk messages dropped ** [ 23.693516] [] ? SyS_getpgid+0xfa/0x280 ** 1726 printk messages dropped ** [ 23.702210] ^ ** 1882 printk messages dropped ** [ 23.711749] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1959 printk messages dropped ** [ 23.721609] [] ? selinux_file_permission+0x82/0x460 ** 1940 printk messages dropped ** [ 23.731373] ================================================================== ** 2110 printk messages dropped ** [ 23.742066] CPU: 1 PID: 3662 Comm: syz-executor7 Tainted: G B 4.9.70-g9542d2a #5 ** 2821 printk messages dropped ** [ 23.756344] [] ? SyS_getpgid+0xfa/0x280 ** 1724 printk messages dropped ** [ 23.765004] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2071 printk messages dropped ** [ 23.775422] [] __vfs_read+0x103/0x670 ** 1697 printk messages dropped ** [ 23.784031] [] ? __might_fault+0x114/0x1d0 ** 1812 printk messages dropped ** [ 23.793148] BUG: KASAN: slab-out-of-bounds in native_queued_spin_lock_slowpath+0x6a1/0x6c0 at addr ffff8801cb972064 ** 2725 printk messages dropped ** [ 23.806895] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2096 printk messages dropped ** [ 23.817472] ^ ** 1887 printk messages dropped ** [ 23.827010] kasan_kmalloc+0xad/0xe0 ** 1797 printk messages dropped ** [ 23.836053] [] kasan_object_err+0x1c/0x70 ** 1752 printk messages dropped ** [ 23.844915] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2100 printk messages dropped ** [ 23.855532] entry_SYSENTER_compat+0x51/0x60 ** 1486 printk messages dropped ** [ 23.863077] save_stack+0x43/0xd0 ** 1285 printk messages dropped ** [ 23.869588] [] ? trace_hardirqs_off_thunk+0x1a/0x1c 2017/12/19 13:11:20 executing program 0: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000a96000)='./file0\x00', 0x40c0, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001000-0x1c)=@req3={0x2, 0x9, 0x8000, 0x800, 0xf0d, 0xfffffffffffffffc, 0x8}, 0x1c) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) munmap(&(0x7f0000b1c000/0x3000)=nil, 0x3000) mlock(&(0x7f0000b1f000/0x1000)=nil, 0x1000) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000b1c000-0x10)={0x0, 0x0, 0xfffffffffffffffc, 0x0}) ** 1923 printk messages dropped ** [ 23.879281] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2066 printk messages dropped ** [ 23.889711] [] sg_finish_rem_req+0x295/0x340 ** 1809 printk messages dropped ** [ 23.898858] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2134 printk messages dropped ** [ 23.909636] [] sg_read+0xa1c/0x1440 ** 1888 printk messages dropped ** [ 23.919140] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2219 printk messages dropped ** [ 23.930360] kmem_cache_alloc+0xba/0x290 ** 1408 printk messages dropped ** [ 23.937476] [] ? selinux_file_permission+0x82/0x460 ** 1920 printk messages dropped ** [ 23.947073] kasan_kmalloc+0xad/0xe0 ** 1341 printk messages dropped ** [ 23.953833] [] ? avc_policy_seqno+0x9/0x20 ** 1789 printk messages dropped ** [ 23.962869] sg_fasync+0x86/0xb0 ** 1273 printk messages dropped ** [ 23.969327] [] vfs_read+0x11e/0x380 ** 1639 printk messages dropped ** [ 23.977613] [] entry_SYSENTER_compat+0x51/0x60 ** 1889 printk messages dropped ** [ 23.987173] [] ? fsnotify+0x86/0xf30 ** 1703 printk messages dropped ** [ 23.995792] [] ? security_file_permission+0x89/0x1e0 ** 1951 printk messages dropped ** [ 24.005650] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2120 printk messages dropped ** [ 24.016370] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1958 printk messages dropped ** [ 24.026262] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2094 printk messages dropped ** [ 24.036838] ================================================================== ** 2061 printk messages dropped ** [ 24.047244] [] sg_read+0xa1c/0x1440 ** 1666 printk messages dropped ** [ 24.055691] entry_SYSENTER_compat+0x51/0x60 ** 1473 printk messages dropped ** [ 24.063155] [] vfs_read+0x11e/0x380 ** 1649 printk messages dropped ** [ 24.071503] sg_fasync+0x86/0xb0 ** 1269 printk messages dropped ** [ 24.077912] [] ? avc_policy_seqno+0x9/0x20 ** 1765 printk messages dropped ** [ 24.086849] [] ? fsnotify+0x86/0xf30 ** 1665 printk messages dropped ** [ 24.095239] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2066 printk messages dropped ** [ 24.105669] [] sg_read+0xa1c/0x1440 ** 1685 printk messages dropped ** [ 24.114171] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2083 printk messages dropped ** [ 24.124765] fasync_helper+0x37/0xb0 ** 1340 printk messages dropped ** [ 24.131523] [] ? security_file_permission+0x89/0x1e0 ** 1941 printk messages dropped ** [ 24.141332] Read of size 4 by task syz-executor7/3662 ** 1630 printk messages dropped ** [ 24.149575] BUG: KASAN: slab-out-of-bounds in native_queued_spin_lock_slowpath+0x6a1/0x6c0 at addr ffff8801cb972064 ** 2695 printk messages dropped ** [ 24.163208] PID = 3662 ** 1098 printk messages dropped ** [ 24.168739] entry_SYSENTER_compat+0x51/0x60 ** 1476 printk messages dropped ** [ 24.176210] [] ? SyS_getpgid+0xfa/0x280 ** 1737 printk messages dropped ** [ 24.184936] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2091 printk messages dropped ** [ 24.195503] (stack is not available) ** 1337 printk messages dropped ** [ 24.202267] [] ? SyS_getpgid+0xfa/0x280 ** 1724 printk messages dropped ** [ 24.210941] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2063 printk messages dropped ** [ 24.221360] [] ? sg_remove_request+0x70/0x120 ** 1816 printk messages dropped ** [ 24.230519] ================================================================== ** 2094 printk messages dropped ** [ 24.241116] compat_SyS_fcntl64+0xce/0x4f0 ** 1443 printk messages dropped ** [ 24.248354] Read of size 4 by task syz-executor7/3662 ** 1625 printk messages dropped ** [ 24.256617] ^ ** 1886 printk messages dropped ** [ 24.266163] save_stack+0x43/0xd0 ** 1275 printk messages dropped ** [ 24.272609] [] ? selinux_file_permission+0x82/0x460 ** 1921 printk messages dropped ** [ 24.282314] kasan_slab_alloc+0x12/0x20 ** 1390 printk messages dropped ** [ 24.289388] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2095 printk messages dropped ** [ 24.299960] ================================================================== ** 2064 printk messages dropped ** [ 24.310428] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1918 printk messages dropped ** [ 24.320136] [] do_fast_syscall_32+0x2f7/0x890 ** 1829 printk messages dropped ** [ 24.329356] [] vfs_read+0x11e/0x380 ** 1642 printk messages dropped ** [ 24.337634] PID = 3662 ** 1102 printk messages dropped ** [ 24.343188] Memory state around the buggy address: ** 1581 printk messages dropped ** [ 24.351155] [] kasan_object_err+0x1c/0x70 ** 1732 printk messages dropped ** [ 24.359944] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1927 printk messages dropped ** [ 24.369636] ================================================================== ** 2095 printk messages dropped ** [ 24.380276] do_fast_syscall_32+0x2f7/0x890 ** 1460 printk messages dropped ** [ 24.387639] [] sg_finish_rem_req+0x295/0x340 ** 1803 printk messages dropped ** [ 24.396750] entry_SYSENTER_compat+0x51/0x60 ** 1479 printk messages dropped ** [ 24.404257] [] do_fast_syscall_32+0x2f7/0x890 ** 1822 printk messages dropped ** [ 24.413436] [] ? default_llseek+0x290/0x290 ** 1782 printk messages dropped ** [ 24.422434] [] entry_SYSENTER_compat+0x51/0x60 ** 1838 printk messages dropped ** [ 24.431702] PID = 3662 ** 1098 printk messages dropped ** [ 24.437242] entry_SYSENTER_compat+0x51/0x60 ** 1476 printk messages dropped ** [ 24.444719] [] ? SyS_getpgid+0xfa/0x280 ** 1743 printk messages dropped ** [ 24.453495] [] __asan_report_load4_noabort+0x29/0x30 ** 1937 printk messages dropped ** [ 24.463306] save_stack+0x43/0xd0 ** 1283 printk messages dropped ** [ 24.469792] [] ? vfs_copy_file_range+0x740/0x740 ** 1876 printk messages dropped ** [ 24.479233] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2091 printk messages dropped ** [ 24.489787] ^ ** 1881 printk messages dropped ** [ 24.499332] [] entry_SYSENTER_compat+0x51/0x60 ** 1857 printk messages dropped ** [ 24.508669] ^ ** 1895 printk messages dropped ** [ 24.518249] entry_SYSENTER_compat+0x51/0x60 ** 1474 printk messages dropped ** [ 24.525755] [] SyS_read+0xd9/0x1b0 ** 1631 printk messages dropped ** [ 24.534032] [] SyS_read+0xd9/0x1b0 ** 1640 printk messages dropped ** [ 24.542295] Allocated: ** 1095 printk messages dropped ** [ 24.547806] sg_fasync+0x86/0xb0 ** 1265 printk messages dropped ** [ 24.554174] [] __vfs_read+0x103/0x670 ** 1686 printk messages dropped ** [ 24.562633] [] __asan_report_load4_noabort+0x29/0x30 ** 1939 printk messages dropped ** [ 24.572435] kasan_slab_alloc+0x12/0x20 ** 1393 printk messages dropped ** [ 24.579434] [] queued_write_lock_slowpath+0x116/0x150 ** 1960 printk messages dropped ** [ 24.589285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ** 2456 printk messages dropped ** [ 24.601659] [] __asan_report_load4_noabort+0x29/0x30 ** 1936 printk messages dropped ** [ 24.611434] save_stack_trace+0x16/0x20 ** 1391 printk messages dropped ** [ 24.618419] [] kasan_object_err+0x1c/0x70 ** 1764 printk messages dropped ** [ 24.627314] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2128 printk messages dropped ** [ 24.638052] [] ? fsnotify+0x86/0xf30 ** 1668 printk messages dropped ** [ 24.646436] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2069 printk messages dropped ** [ 24.656872] [] ? default_llseek+0x290/0x290 ** 1634 printk messages dropped ** [ 24.665114] [] ? avc_policy_seqno+0x9/0x20 ** 1795 printk messages dropped ** [ 24.674152] PID = 0 ** 1042 printk messages dropped ** [ 24.679385] [] __asan_report_load4_noabort+0x29/0x30 ** 1942 printk messages dropped ** [ 24.689946] sg_fasync+0x86/0xb0 ** 1269 printk messages dropped ** [ 24.696539] [] ? avc_policy_seqno+0x9/0x20 ** 1768 printk messages dropped ** [ 24.705470] [] ? selinux_file_permission+0x82/0x460 ** 1922 printk messages dropped ** [ 24.715159] kmem_cache_alloc+0xba/0x290 ** 1410 printk messages dropped ** [ 24.722259] [] ? rw_verify_area+0xe5/0x2b0 ** 1774 printk messages dropped ** [ 24.731203] [] do_fast_syscall_32+0x2f7/0x890 ** 1789 printk messages dropped ** [ 24.740200] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2069 printk messages dropped ** [ 24.750630] [] ? __might_fault+0x114/0x1d0 ** 1763 printk messages dropped ** [ 24.759667] [] sg_finish_rem_req+0x295/0x340 ** 1844 printk messages dropped ** [ 24.769001] [] ? fsnotify+0xf30/0xf30 ** 1683 printk messages dropped ** [ 24.777460] [] __asan_report_load4_noabort+0x29/0x30 ** 1931 printk messages dropped ** [ 24.787228] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1933 printk messages dropped ** [ 24.796946] CPU: 1 PID: 3662 Comm: syz-executor7 Tainted: G B 4.9.70-g9542d2a #5 ** 2319 printk messages dropped ** [ 24.808660] [] kasan_report.part.1+0x21c/0x500 ** 1835 printk messages dropped ** [ 24.817905] [] kasan_report.part.1+0x21c/0x500 ** 2015 printk messages dropped ** [ 24.828088] do_fast_syscall_32+0x2f7/0x890 ** 1462 printk messages dropped ** [ 24.835463] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1927 printk messages dropped ** [ 24.845193] save_stack_trace+0x16/0x20 ** 1398 printk messages dropped ** [ 24.851996] [] _raw_write_lock_irqsave+0x56/0x62 ** 1878 printk messages dropped ** [ 24.861445] Memory state around the buggy address: ** 1573 printk messages dropped ** [ 24.869351] Read of size 4 by task syz-executor7/3662 ** 1641 printk messages dropped ** [ 24.877607] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2091 printk messages dropped ** [ 24.888142] ^ ** 1925 printk messages dropped ** [ 24.897850] [] ? sg_remove_request+0x70/0x120 ** 1823 printk messages dropped ** [ 24.907025] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2095 printk messages dropped ** [ 24.917590] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2077 printk messages dropped ** [ 24.928109] [] ? security_file_permission+0x89/0x1e0 ** 1945 printk messages dropped ** [ 24.937881] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2095 printk messages dropped ** [ 24.948443] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2069 printk messages dropped ** [ 24.958891] [] ? __might_fault+0x114/0x1d0 ** 1764 printk messages dropped ** [ 24.967770] [] sg_read+0xa1c/0x1440 ** 1643 printk messages dropped ** [ 24.976059] [] ? rw_verify_area+0xe5/0x2b0 ** 1775 printk messages dropped ** [ 24.985022] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1925 printk messages dropped ** [ 24.994705] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2043 printk messages dropped ** [ 25.005007] ================================================================== ** 2066 printk messages dropped ** [ 25.015448] [] __vfs_read+0x103/0x670 ** 1713 printk messages dropped ** [ 25.024200] [] do_fast_syscall_32+0x2f7/0x890 ** 1825 printk messages dropped ** [ 25.033386] [] ? avc_policy_seqno+0x9/0x20 ** 1768 printk messages dropped ** [ 25.042285] [] ? selinux_file_permission+0x82/0x460 ** 1932 printk messages dropped ** [ 25.052020] Memory state around the buggy address: ** 1582 printk messages dropped ** [ 25.059969] [] kasan_report.part.1+0x21c/0x500 ** 1837 printk messages dropped ** [ 25.069216] [] __asan_report_load4_noabort+0x29/0x30 ** 1934 printk messages dropped ** [ 25.078967] Allocated: ** 1095 printk messages dropped ** [ 25.084494] sg_fasync+0x86/0xb0 ** 1278 printk messages dropped ** [ 25.090958] [] ? vfs_copy_file_range+0x740/0x740 ** 1875 printk messages dropped ** [ 25.100383] [] kasan_report.part.1+0x21c/0x500 ** 1831 printk messages dropped ** [ 25.109611] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2077 printk messages dropped ** [ 25.120092] PID = 3662 ** 1094 printk messages dropped ** [ 25.125604] sg_fasync+0x86/0xb0 ** 1270 printk messages dropped ** [ 25.132031] [] ? selinux_file_permission+0x82/0x460 ** 1935 printk messages dropped ** [ 25.141828] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2091 printk messages dropped ** [ 25.152411] save_stack+0x43/0xd0 ** 1283 printk messages dropped ** [ 25.158881] [] ? vfs_copy_file_range+0x740/0x740 ** 1876 printk messages dropped ** [ 25.168298] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2091 printk messages dropped ** [ 25.178850] ^ ** 1875 printk messages dropped ** [ 25.188332] [] ? vfs_copy_file_range+0x740/0x740 ** 1860 printk messages dropped ** [ 25.197722] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2059 printk messages dropped ** [ 25.208142] [] __asan_report_load4_noabort+0x29/0x30 ** 1929 printk messages dropped ** [ 25.217977] [] ? vfs_copy_file_range+0x740/0x740 ** 1876 printk messages dropped ** [ 25.227453] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2088 printk messages dropped ** [ 25.238033] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2051 printk messages dropped ** [ 25.248394] ffff8801c0e7f950 ffffffff81d90a29 ffff8801d77ff640 ffff8801cb972000 ** 2081 printk messages dropped ** [ 25.258960] save_stack+0x43/0xd0 ** 1281 printk messages dropped ** [ 25.265461] [] ? SyS_getpgid+0xfa/0x280 ** 1708 printk messages dropped ** [ 25.274091] save_stack_trace+0x16/0x20 ** 1438 printk messages dropped ** [ 25.281372] Freed: ** 1022 printk messages dropped ** [ 25.286535] Memory state around the buggy address: ** 1582 printk messages dropped ** [ 25.294534] [] kasan_report.part.1+0x21c/0x500 ** 1852 printk messages dropped ** [ 25.303891] [] ? fsnotify+0x86/0xf30 ** 1667 printk messages dropped ** [ 25.312282] ^ ** 1877 printk messages dropped ** [ 25.321794] [] ? do_fast_syscall_32+0xcf/0x890 ** 1837 printk messages dropped ** [ 25.331072] [] do_fast_syscall_32+0x2f7/0x890 ** 1818 printk messages dropped ** [ 25.340270] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1980 printk messages dropped ** [ 25.350256] [] ? security_file_permission+0x89/0x1e0 ** 1939 printk messages dropped ** [ 25.360011] ================================================================== ** 2053 printk messages dropped ** [ 25.370415] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2055 printk messages dropped ** [ 25.380827] [] ? avc_policy_seqno+0x9/0x20 ** 1765 printk messages dropped ** [ 25.389760] [] ? fsnotify+0x86/0xf30 ** 1667 printk messages dropped ** [ 25.398153] ^ ** 1879 printk messages dropped ** [ 25.407667] [] do_fast_syscall_32+0x2f7/0x890 ** 1846 printk messages dropped ** [ 25.416960] fasync_helper+0x37/0xb0 ** 1344 printk messages dropped ** [ 25.423765] [] ? vfs_copy_file_range+0x740/0x740 ** 1877 printk messages dropped ** [ 25.433225] [] kasan_object_err+0x1c/0x70 ** 1745 printk messages dropped ** [ 25.442093] entry_SYSENTER_compat+0x51/0x60 ** 1469 printk messages dropped ** [ 25.449490] [] ? avc_policy_seqno+0x9/0x20 ** 1765 printk messages dropped ** [ 25.458384] [] ? fsnotify+0x86/0xf30 ** 1667 printk messages dropped ** [ 25.466794] ^ ** 1882 printk messages dropped ** [ 25.476325] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1922 printk messages dropped ** [ 25.486003] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2062 printk messages dropped ** [ 25.496404] [] _raw_write_lock_irqsave+0x56/0x62 ** 1874 printk messages dropped ** [ 25.505890] entry_SYSENTER_compat+0x51/0x60 ** 1471 printk messages dropped ** [ 25.513315] [] ? security_file_permission+0x89/0x1e0 ** 1932 printk messages dropped ** [ 25.523041] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2070 printk messages dropped ** [ 25.533497] [] ? __might_fault+0x114/0x1d0 ** 1791 printk messages dropped ** [ 25.542587] kasan_kmalloc+0xad/0xe0 ** 1339 printk messages dropped ** [ 25.549329] [] ? fsnotify+0x86/0xf30 ** 1661 printk messages dropped ** [ 25.557693] PID = 0 ** 1050 printk messages dropped ** [ 25.563035] [] sg_read+0xa1c/0x1440 ** 1642 printk messages dropped ** [ 25.571305] [] ? security_file_permission+0x89/0x1e0 ** 1948 printk messages dropped ** [ 25.581111] [] dump_stack+0xc1/0x128 ** 1662 printk messages dropped ** [ 25.589533] [] do_fast_syscall_32+0x2f7/0x890 ** 1821 printk messages dropped ** [ 25.598688] [] __vfs_read+0x103/0x670 ** 1684 printk messages dropped ** [ 25.607146] [] kasan_report.part.1+0x21c/0x500 ** 1859 printk messages dropped ** [ 25.616533] [] SyS_read+0xd9/0x1b0 ** 1635 printk messages dropped ** [ 25.624782] [] ? vfs_copy_file_range+0x740/0x740 ** 1877 printk messages dropped ** [ 25.634196] [] __asan_report_load4_noabort+0x29/0x30 ** 1939 printk messages dropped ** [ 25.643982] kasan_slab_alloc+0x12/0x20 ** 1390 printk messages dropped ** [ 25.650960] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2086 printk messages dropped ** [ 25.661497] (stack is not available) ** 1331 printk messages dropped ** [ 25.668241] [] ? selinux_file_permission+0x82/0x460 ** 1960 printk messages dropped ** [ 25.678113] [] sg_finish_rem_req+0x295/0x340 ** 1796 printk messages dropped ** [ 25.687212] kasan_slab_alloc+0x12/0x20 ** 1391 printk messages dropped ** [ 25.694206] [] __asan_report_load4_noabort+0x29/0x30 ** 1939 printk messages dropped ** [ 25.704035] kasan_slab_alloc+0x12/0x20 ** 1397 printk messages dropped ** [ 25.711067] [] sg_remove_request+0x70/0x120 ** 1780 printk messages dropped ** [ 25.720049] [] ? security_file_permission+0x89/0x1e0 ** 1939 printk messages dropped ** [ 25.729778] ================================================================== ** 2058 printk messages dropped ** [ 25.740148] [] sg_remove_request+0x70/0x120 ** 1777 printk messages dropped ** [ 25.749175] [] ? fsnotify+0xf30/0xf30 ** 1685 printk messages dropped ** [ 25.757657] [] queued_write_lock_slowpath+0x116/0x150 ** 1949 printk messages dropped ** [ 25.767508] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2064 printk messages dropped ** [ 25.777953] [] ? sg_remove_request+0x70/0x120 ** 1826 printk messages dropped ** [ 25.787179] [] dump_stack+0xc1/0x128 ** 1658 printk messages dropped ** [ 25.795566] [] ? vfs_copy_file_range+0x740/0x740 ** 1904 printk messages dropped ** [ 25.805166] [] ? SyS_getpgid+0xfa/0x280 ** 1790 printk messages dropped ** [ 25.814172] Memory state around the buggy address: ** 1583 printk messages dropped ** [ 25.822156] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2097 printk messages dropped ** [ 25.832722] Read of size 4 by task syz-executor7/3662 ** 1928 printk messages dropped ** [ 25.842455] [] ? default_llseek+0x290/0x290 ** 1789 printk messages dropped ** [ 25.851496] kasan_slab_alloc+0x12/0x20 ** 1391 printk messages dropped ** [ 25.858445] [] __asan_report_load4_noabort+0x29/0x30 ** 1952 printk messages dropped ** [ 25.868245] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2055 printk messages dropped ** [ 25.878576] [] kasan_object_err+0x1c/0x70 ** 1744 printk messages dropped ** [ 25.887396] do_fast_syscall_32+0x2f7/0x890 ** 1453 printk messages dropped ** [ 25.894707] [] __asan_report_load4_noabort+0x29/0x30 ** 1931 printk messages dropped ** [ 25.904510] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 2196 printk messages dropped ** [ 25.915595] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2069 printk messages dropped ** [ 25.926058] [] ? __might_fault+0x114/0x1d0 ** 1805 printk messages dropped ** [ 25.935120] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2079 printk messages dropped ** [ 25.945610] [] vfs_read+0x11e/0x380 ** 1651 printk messages dropped ** [ 25.953927] compat_SyS_fcntl64+0xce/0x4f0 ** 1445 printk messages dropped ** [ 25.961173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ** 2464 printk messages dropped ** [ 25.973589] [] sg_read+0xa1c/0x1440 ** 1649 printk messages dropped ** [ 25.981932] [] ? vfs_copy_file_range+0x740/0x740 ** 1877 printk messages dropped ** [ 25.991347] [] __asan_report_load4_noabort+0x29/0x30 ** 1942 printk messages dropped ** [ 26.001141] sg_fasync+0x86/0xb0 ** 1268 printk messages dropped ** [ 26.007526] [] ? fsnotify+0xf30/0xf30 ** 1681 printk messages dropped ** [ 26.015966] [] kasan_report.part.1+0x21c/0x500 ** 1842 printk messages dropped ** [ 26.025242] [] ? sg_remove_request+0x70/0x120 ** 1815 printk messages dropped ** [ 26.034383] ffff8801cb972100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2062 printk messages dropped ** [ 26.044792] [] sg_read+0xa1c/0x1440 ** 1647 printk messages dropped ** [ 26.053109] [] ? SyS_getpgid+0xfa/0x280 ** 1754 printk messages dropped ** [ 26.061939] [] ? __might_fault+0x114/0x1d0 ** 1768 printk messages dropped ** [ 26.070859] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1919 printk messages dropped ** [ 26.080556] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1934 printk messages dropped ** [ 26.090259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ** 2457 printk messages dropped ** [ 26.102636] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2061 printk messages dropped ** [ 26.113061] [] ? vfs_copy_file_range+0x740/0x740 ** 1878 printk messages dropped ** [ 26.122499] [] kasan_report.part.1+0x21c/0x500 ** 1836 printk messages dropped ** [ 26.131742] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2095 printk messages dropped ** [ 26.142295] ================================================================== ** 2059 printk messages dropped ** [ 26.152685] [] sg_finish_rem_req+0x295/0x340 ** 1810 printk messages dropped ** [ 26.161782] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2061 printk messages dropped ** [ 26.172182] [] _raw_write_lock_irqsave+0x56/0x62 ** 1878 printk messages dropped ** [ 26.181635] Memory state around the buggy address: ** 1581 printk messages dropped ** [ 26.189585] [] kasan_object_err+0x1c/0x70 ** 1782 printk messages dropped ** [ 26.198594] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1919 printk messages dropped ** [ 26.208250] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1920 printk messages dropped ** [ 26.217940] PID = 0 ** 1052 printk messages dropped ** [ 26.223261] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1988 printk messages dropped ** [ 26.233301] [] do_fast_syscall_32+0x2f7/0x890 ** 1820 printk messages dropped ** [ 26.242481] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1920 printk messages dropped ** [ 26.252166] [] entry_SYSENTER_compat+0x51/0x60 ** 1858 printk messages dropped ** [ 26.261508] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2071 printk messages dropped ** [ 26.271950] [] ? fsnotify+0xf30/0xf30 ** 1674 printk messages dropped ** [ 26.280334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ** 2448 printk messages dropped ** [ 26.292647] ffff8801c0e7f950 ffffffff81d90a29 ffff8801d77ff640 ffff8801cb972000 ** 2095 printk messages dropped ** [ 26.303259] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2058 printk messages dropped ** [ 26.313661] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2122 printk messages dropped ** [ 26.324400] [] ? default_llseek+0x290/0x290 ** 1790 printk messages dropped ** [ 26.333441] kmem_cache_alloc+0xba/0x290 ** 1401 printk messages dropped ** [ 26.340493] [] ? __might_fault+0x114/0x1d0 ** 1762 printk messages dropped ** [ 26.349393] [] sg_remove_request+0x70/0x120 ** 1780 printk messages dropped ** [ 26.358396] [] ? security_file_permission+0x89/0x1e0 ** 1939 printk messages dropped ** [ 26.368162] ================================================================== ** 2061 printk messages dropped ** [ 26.378602] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1924 printk messages dropped ** [ 26.388327] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1922 printk messages dropped ** [ 26.397991] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2058 printk messages dropped ** [ 26.408367] [] __asan_report_load4_noabort+0x29/0x30 ** 1938 printk messages dropped ** [ 26.418191] kasan_kmalloc+0xad/0xe0 ** 1338 printk messages dropped ** [ 26.424935] [] ? default_llseek+0x290/0x290 ** 1787 printk messages dropped ** [ 26.433981] save_stack+0x43/0xd0 ** 1284 printk messages dropped ** [ 26.440466] [] do_fast_syscall_32+0x2f7/0x890 ** 1820 printk messages dropped ** [ 26.449612] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1956 printk messages dropped ** [ 26.459432] [] kasan_object_err+0x1c/0x70 ** 1740 printk messages dropped ** [ 26.468244] fasync_helper+0x37/0xb0 ** 1335 printk messages dropped ** [ 26.474993] [] ? default_llseek+0x290/0x290 ** 1782 printk messages dropped ** [ 26.484016] [] entry_SYSENTER_compat+0x51/0x60 ** 1851 printk messages dropped ** [ 26.493361] PID = 0 ** 1045 printk messages dropped ** [ 26.498623] [] do_raw_write_lock+0xc7/0x1d0 ** 1780 printk messages dropped ** [ 26.507602] [] ? fsnotify+0xf30/0xf30 ** 1685 printk messages dropped ** [ 26.516061] [] queued_write_lock_slowpath+0x116/0x150 ** 1964 printk messages dropped ** [ 26.525947] Call Trace: ** 1109 printk messages dropped ** [ 26.531548] [] ? avc_policy_seqno+0x9/0x20 ** 1765 printk messages dropped ** [ 26.540456] [] ? fsnotify+0x86/0xf30 ** 1665 printk messages dropped ** [ 26.548831] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2062 printk messages dropped ** [ 26.559226] [] _raw_write_lock_irqsave+0x56/0x62 ** 1860 printk messages dropped ** [ 26.568640] [] entry_SYSENTER_compat+0x51/0x60 ** 1837 printk messages dropped ** [ 26.577915] Allocated: ** 1129 printk messages dropped ** [ 26.583588] [] ? sg_remove_request+0x70/0x120 ** 1823 printk messages dropped ** [ 26.592775] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2096 printk messages dropped ** [ 26.603362] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2062 printk messages dropped ** [ 26.613760] [] ? sg_remove_request+0x70/0x120 ** 1813 printk messages dropped ** [ 26.622915] ^ ** 1894 printk messages dropped ** [ 26.632488] do_fast_syscall_32+0x2f7/0x890 ** 1456 printk messages dropped ** [ 26.639821] [] do_raw_write_lock+0xc7/0x1d0 ** 1777 printk messages dropped ** [ 26.648801] [] __vfs_read+0x103/0x670 ** 1682 printk messages dropped ** [ 26.657262] [] dump_stack+0xc1/0x128 ** 1552 printk messages dropped ** [ 26.665102] ffff8801cb972100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2066 printk messages dropped ** [ 26.675551] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1917 printk messages dropped ** [ 26.685803] [] ? vfs_copy_file_range+0x740/0x740 ** 1876 printk messages dropped ** [ 26.695211] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2093 printk messages dropped ** [ 26.705773] ffff8801cb972100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2105 printk messages dropped ** [ 26.716385] ^ ** 1878 printk messages dropped ** [ 26.725874] [] ? vfs_copy_file_range+0x740/0x740 ** 1870 printk messages dropped ** [ 26.735253] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2096 printk messages dropped ** [ 26.745862] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2065 printk messages dropped ** [ 26.756326] [] sg_read+0xa1c/0x1440 ** 1643 printk messages dropped ** [ 26.764632] [] ? rw_verify_area+0xe5/0x2b0 ** 1770 printk messages dropped ** [ 26.773570] [] ? vfs_copy_file_range+0x740/0x740 ** 1880 printk messages dropped ** [ 26.783007] [] __asan_report_load4_noabort+0x29/0x30 ** 1930 printk messages dropped ** [ 26.792759] [] do_fast_syscall_32+0x2f7/0x890 ** 1825 printk messages dropped ** [ 26.801934] [] ? avc_policy_seqno+0x9/0x20 ** 1771 printk messages dropped ** [ 26.810891] [] vfs_read+0x11e/0x380 ** 1648 printk messages dropped ** [ 26.819177] fasync_helper+0x37/0xb0 ** 1349 printk messages dropped ** [ 26.825985] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 2083 printk messages dropped ** [ 26.836423] [] _raw_write_lock_irqsave+0x56/0x62 ** 1898 printk messages dropped ** [ 26.845974] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2097 printk messages dropped ** [ 26.856355] Read of size 4 by task syz-executor7/3662 ** 1628 printk messages dropped ** [ 26.864589] ================================================================== ** 2064 printk messages dropped ** [ 26.875055] [] ? __might_fault+0x114/0x1d0 ** 1769 printk messages dropped ** [ 26.883972] [] __vfs_read+0x103/0x670 ** 1689 printk messages dropped ** [ 26.892460] [] do_raw_write_lock+0xc7/0x1d0 ** 2963 printk messages dropped ** [ 26.907395] entry_SYSENTER_compat+0x51/0x60 ** 1480 printk messages dropped ** [ 26.914875] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1928 printk messages dropped ** [ 26.924741] ffff8801cb972100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2074 printk messages dropped ** [ 26.935447] [] ? rw_verify_area+0xe5/0x2b0 ** 1763 printk messages dropped ** [ 26.944318] [] ? fsnotify+0xf30/0xf30 ** 1681 printk messages dropped ** [ 26.952752] [] kasan_report.part.1+0x21c/0x500 ** 1847 printk messages dropped ** [ 26.962078] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 2031 printk messages dropped ** [ 26.972343] [] queued_write_lock_slowpath+0x116/0x150 ** 1955 printk messages dropped ** [ 26.982175] ================================================================== ** 2064 printk messages dropped ** [ 26.992594] [] ? __might_fault+0x114/0x1d0 ** 1769 printk messages dropped ** [ 27.001511] [] __vfs_read+0x103/0x670 ** 1681 printk messages dropped ** [ 27.009946] Call Trace: ** 1109 printk messages dropped ** [ 27.015567] [] ? avc_policy_seqno+0x9/0x20 ** 1762 printk messages dropped ** [ 27.024425] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1915 printk messages dropped ** [ 27.034101] [] ? SyS_getpgid+0xfa/0x280 ** 1722 printk messages dropped ** [ 27.042769] Memory state around the buggy address: ** 1579 printk messages dropped ** [ 27.050737] Call Trace: ** 1109 printk messages dropped ** [ 27.056418] [] ? avc_policy_seqno+0x9/0x20 ** 1799 printk messages dropped ** [ 27.065462] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2071 printk messages dropped ** [ 27.075915] [] __vfs_read+0x103/0x670 ** 1681 printk messages dropped ** [ 27.084370] Call Trace: ** 1112 printk messages dropped ** [ 27.089981] [] ? rw_verify_area+0xe5/0x2b0 ** 1763 printk messages dropped ** [ 27.098852] [] ? fsnotify+0xf30/0xf30 ** 1713 printk messages dropped ** [ 27.107497] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1921 printk messages dropped ** [ 27.117171] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2058 printk messages dropped ** [ 27.127551] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2092 printk messages dropped ** [ 27.138155] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2053 printk messages dropped ** [ 27.148522] [] kasan_report.part.1+0x21c/0x500 ** 1840 printk messages dropped ** [ 27.157810] [] do_raw_write_lock+0xc7/0x1d0 ** 1777 printk messages dropped ** [ 27.166828] [] __vfs_read+0x103/0x670 ** 1678 printk messages dropped ** [ 27.175280] ffff8801c0e7f950 ffffffff81d90a29 ffff8801d77ff640 ffff8801cb972000 ** 2099 printk messages dropped ** [ 27.185878] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2062 printk messages dropped ** [ 27.196338] [] sg_finish_rem_req+0x295/0x340 ** 1798 printk messages dropped ** [ 27.205413] fasync_helper+0x37/0xb0 ** 1336 printk messages dropped ** [ 27.212152] [] ? fsnotify+0x86/0xf30 ** 1646 printk messages dropped ** [ 27.220460] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1931 printk messages dropped ** [ 27.230142] CPU: 1 PID: 3662 Comm: syz-executor7 Tainted: G B 4.9.70-g9542d2a #5 ** 2351 printk messages dropped ** [ 27.242125] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1923 printk messages dropped ** [ 27.251807] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2067 printk messages dropped ** [ 27.262242] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1985 printk messages dropped ** [ 27.272282] [] ? SyS_getpgid+0xfa/0x280 ** 1717 printk messages dropped ** [ 27.280936] do_fast_syscall_32+0x2f7/0x890 ** 1458 printk messages dropped ** [ 27.288266] [] ? sg_remove_request+0x70/0x120 ** 1825 printk messages dropped ** [ 27.297468] Call Trace: ** 1111 printk messages dropped ** [ 27.303122] [] ? security_file_permission+0x89/0x1e0 ** 1950 printk messages dropped ** [ 27.312913] [] kasan_report.part.1+0x21c/0x500 ** 1840 printk messages dropped ** [ 27.322213] [] do_raw_write_lock+0xc7/0x1d0 ** 1784 printk messages dropped ** [ 27.331220] [] ? rw_verify_area+0xe5/0x2b0 ** 1768 printk messages dropped ** [ 27.340125] [] vfs_read+0x11e/0x380 ** 1638 printk messages dropped ** [ 27.348367] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1926 printk messages dropped ** [ 27.358022] ^ ** 1880 printk messages dropped ** [ 27.367558] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1960 printk messages dropped ** [ 27.377430] [] ? avc_policy_seqno+0x9/0x20 ** 1768 printk messages dropped ** [ 27.386360] [] ? selinux_file_permission+0x82/0x460 ** 1914 printk messages dropped ** [ 27.396051] [] entry_SYSENTER_compat+0x51/0x60 ** 1853 printk messages dropped ** [ 27.405379] Memory state around the buggy address: ** 1572 printk messages dropped ** [ 27.413322] BUG: KASAN: slab-out-of-bounds in native_queued_spin_lock_slowpath+0x6a1/0x6c0 at addr ffff8801cb972064 ** 2692 printk messages dropped ** [ 27.426918] [] entry_SYSENTER_compat+0x51/0x60 ** 1831 printk messages dropped ** [ 27.436159] [] ? do_fast_syscall_32+0xcf/0x890 ** 1835 printk messages dropped ** [ 27.445426] [] ? do_fast_syscall_32+0xcf/0x890 ** 1838 printk messages dropped ** [ 27.454725] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1941 printk messages dropped ** [ 27.464483] [] kasan_report.part.1+0x21c/0x500 ** 1812 printk messages dropped ** [ 27.473641] entry_SYSENTER_compat+0x51/0x60 ** 1460 printk messages dropped ** [ 27.480979] [] sg_read+0xa1c/0x1440 ** 1607 printk messages dropped ** [ 27.489052] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2001 printk messages dropped ** [ 27.499345] [] ? default_llseek+0x290/0x290 ** 1799 printk messages dropped ** [ 27.508608] (stack is not available) ** 1318 printk messages dropped ** [ 27.515433] [] ? sg_remove_request+0x70/0x120 ** 1803 printk messages dropped ** [ 27.524726] compat_SyS_fcntl64+0xce/0x4f0 ** 1419 printk messages dropped ** [ 27.532024] save_stack_trace+0x16/0x20 ** 1374 printk messages dropped ** [ 27.539021] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2063 printk messages dropped ** [ 27.549546] [] _raw_write_lock_irqsave+0x56/0x62 ** 1861 printk messages dropped ** [ 27.559053] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1934 printk messages dropped ** [ 27.568779] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2090 printk messages dropped ** [ 27.579342] Freed: ** 1026 printk messages dropped ** [ 27.584482] ^ ** 1900 printk messages dropped ** [ 27.594064] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2064 printk messages dropped ** [ 27.604482] [] ? sg_remove_request+0x70/0x120 ** 1816 printk messages dropped ** [ 27.613621] ================================================================== ** 2068 printk messages dropped ** [ 27.624056] [] ? fsnotify+0x86/0xf30 ** 1696 printk messages dropped ** [ 27.632599] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1921 printk messages dropped ** [ 27.642291] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1970 printk messages dropped ** [ 27.652235] [] entry_SYSENTER_compat+0x51/0x60 ** 1840 printk messages dropped ** [ 27.661521] save_stack+0x43/0xd0 ** 1283 printk messages dropped ** [ 27.667959] [] ? vfs_copy_file_range+0x740/0x740 ** 1875 printk messages dropped ** [ 27.677358] [] kasan_report.part.1+0x21c/0x500 ** 1835 printk messages dropped ** [ 27.686612] [] kasan_report.part.1+0x21c/0x500 ** 1837 printk messages dropped ** [ 27.695859] [] __asan_report_load4_noabort+0x29/0x30 ** 1951 printk messages dropped ** [ 27.705701] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2062 printk messages dropped ** [ 27.716093] [] do_raw_write_lock+0xc7/0x1d0 ** 1784 printk messages dropped ** [ 27.725103] [] ? rw_verify_area+0xe5/0x2b0 ** 1776 printk messages dropped ** [ 27.734044] [] entry_SYSENTER_compat+0x51/0x60 ** 1842 printk messages dropped ** [ 27.743316] kasan_slab_alloc+0x12/0x20 ** 1390 printk messages dropped ** [ 27.750280] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2122 printk messages dropped ** [ 27.760982] [] ? default_llseek+0x290/0x290 ** 1778 printk messages dropped ** [ 27.769954] [] ? do_fast_syscall_32+0xcf/0x890 ** 1833 printk messages dropped ** [ 27.779224] [] ? vfs_copy_file_range+0x740/0x740 ** 1877 printk messages dropped ** [ 27.788678] [] kasan_object_err+0x1c/0x70 ** 1749 printk messages dropped ** [ 27.797507] Memory state around the buggy address: ** 1581 printk messages dropped ** [ 27.805470] [] kasan_object_err+0x1c/0x70 ** 1756 printk messages dropped ** [ 27.814310] ================================================================== ** 2186 printk messages dropped ** [ 27.825332] [] kasan_object_err+0x1c/0x70 ** 1746 printk messages dropped ** [ 27.834144] Freed: ** 1024 printk messages dropped ** [ 27.839292] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2065 printk messages dropped ** [ 27.849698] [] sg_finish_rem_req+0x295/0x340 ** 1793 printk messages dropped ** [ 27.858760] save_stack_trace+0x16/0x20 ** 1399 printk messages dropped ** [ 27.865805] [] ? sg_remove_request+0x70/0x120 ** 1823 printk messages dropped ** [ 27.875001] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2097 printk messages dropped ** [ 27.885577] ^ ** 1926 printk messages dropped ** [ 27.895292] [] sg_remove_request+0x70/0x120 ** 1782 printk messages dropped ** [ 27.904287] [] vfs_read+0x11e/0x380 ** 1643 printk messages dropped ** [ 27.912573] save_stack_trace+0x16/0x20 ** 1396 printk messages dropped ** [ 27.919583] [] queued_write_lock_slowpath+0x116/0x150 ** 1972 printk messages dropped ** [ 27.929542] [] do_raw_write_lock+0xc7/0x1d0 ** 1776 printk messages dropped ** [ 27.938496] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1916 printk messages dropped ** [ 27.948161] [] ? do_fast_syscall_32+0xcf/0x890 ** 1844 printk messages dropped ** [ 27.957462] save_stack+0x43/0xd0 ** 1285 printk messages dropped ** [ 27.963981] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1924 printk messages dropped ** [ 27.973660] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2064 printk messages dropped ** [ 27.984066] [] sg_remove_request+0x70/0x120 ** 1799 printk messages dropped ** [ 27.993159] fasync_helper+0x37/0xb0 ** 1334 printk messages dropped ** [ 27.999873] [] __vfs_read+0x103/0x670 ** 1684 printk messages dropped ** [ 28.008349] [] kasan_report.part.1+0x21c/0x500 ** 1828 printk messages dropped ** [ 28.017550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ** 2484 printk messages dropped ** [ 28.030140] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1935 printk messages dropped ** [ 28.039895] ffff8801c0e7f950 ffffffff81d90a29 ffff8801d77ff640 ffff8801cb972000 ** 2085 printk messages dropped ** [ 28.050461] fasync_helper+0x37/0xb0 ** 1340 printk messages dropped ** [ 28.057238] [] ? security_file_permission+0x89/0x1e0 ** 1953 printk messages dropped ** [ 28.067086] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2052 printk messages dropped ** [ 28.077442] [] ? default_llseek+0x290/0x290 ** 1782 printk messages dropped ** [ 28.086440] [] entry_SYSENTER_compat+0x51/0x60 ** 1835 printk messages dropped ** [ 28.095699] [] entry_SYSENTER_compat+0x51/0x60 ** 1854 printk messages dropped ** [ 28.105020] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2065 printk messages dropped ** [ 28.115445] [] sg_remove_request+0x70/0x120 ** 1779 printk messages dropped ** [ 28.124409] [] ? selinux_file_permission+0x82/0x460 ** 1920 printk messages dropped ** [ 28.134056] kasan_kmalloc+0xad/0xe0 ** 1346 printk messages dropped ** [ 28.140845] [] SyS_read+0xd9/0x1b0 ** 1629 printk messages dropped ** [ 28.149072] [] ? rw_verify_area+0xe5/0x2b0 ** 1798 printk messages dropped ** [ 28.158119] ^ ** 1885 printk messages dropped ** [ 28.167640] save_stack_trace+0x16/0x20 ** 1401 printk messages dropped ** [ 28.174709] [] sg_finish_rem_req+0x295/0x340 ** 1809 printk messages dropped ** [ 28.183852] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2021 printk messages dropped ** [ 28.194054] Allocated: ** 1064 printk messages dropped ** [ 28.199378] [] sg_read+0xa1c/0x1440 ** 1599 printk messages dropped ** [ 28.207443] Freed: ** 993 printk messages dropped ** [ 28.212559] [] ? selinux_file_permission+0x82/0x460 ** 1859 printk messages dropped ** [ 28.222252] do_fast_syscall_32+0x2f7/0x890 ** 1412 printk messages dropped ** [ 28.229621] [] do_fast_syscall_32+0x2f7/0x890 ** 1755 printk messages dropped ** [ 28.238664] [] ? fsnotify+0x86/0xf30 ** 1644 printk messages dropped ** [ 28.247234] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1932 printk messages dropped ** [ 28.257251] Read of size 4 by task syz-executor7/3662 ** 1650 printk messages dropped ** [ 28.265767] [] sg_read+0xa1c/0x1440 ** 1643 printk messages dropped ** [ 28.274072] [] ? rw_verify_area+0xe5/0x2b0 ** 1817 printk messages dropped ** [ 28.283229] [] queued_write_lock_slowpath+0x116/0x150 ** 1958 printk messages dropped ** [ 28.293092] Read of size 4 by task syz-executor7/3662 ** 1631 printk messages dropped ** [ 28.301311] Read of size 4 by task syz-executor7/3662 ** 1618 printk messages dropped ** [ 28.309497] Freed: ** 1025 printk messages dropped ** [ 28.314654] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2061 printk messages dropped ** [ 28.325052] [] _raw_write_lock_irqsave+0x56/0x62 ** 1865 printk messages dropped ** [ 28.334514] save_stack+0x43/0xd0 ** 1298 printk messages dropped ** [ 28.341050] compat_SyS_fcntl64+0xce/0x4f0 ** 1435 printk messages dropped ** [ 28.348306] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2057 printk messages dropped ** [ 28.358651] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2104 printk messages dropped ** [ 28.369247] [] dump_stack+0xc1/0x128 ** 1657 printk messages dropped ** [ 28.377657] [] SyS_read+0xd9/0x1b0 ** 1627 printk messages dropped ** [ 28.385884] [] ? selinux_file_permission+0x82/0x460 ** 1923 printk messages dropped ** [ 28.395564] fasync_helper+0x37/0xb0 ** 1334 printk messages dropped ** [ 28.402296] [] __vfs_read+0x103/0x670 ** 1713 printk messages dropped ** [ 28.410971] [] do_fast_syscall_32+0x2f7/0x890 ** 1818 printk messages dropped ** [ 28.420140] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1985 printk messages dropped ** [ 28.430176] [] ? SyS_getpgid+0xfa/0x280 ** 1708 printk messages dropped ** [ 28.438807] save_stack_trace+0x16/0x20 ** 1393 printk messages dropped ** [ 28.445821] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2089 printk messages dropped ** [ 28.456398] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2061 printk messages dropped ** [ 28.466821] [] do_raw_write_lock+0xc7/0x1d0 ** 1789 printk messages dropped ** [ 28.475863] [] ? do_fast_syscall_32+0xcf/0x890 ** 1834 printk messages dropped ** [ 28.485121] [] ? SyS_getpgid+0xfa/0x280 ** 1712 printk messages dropped ** [ 28.493748] kmem_cache_alloc+0xba/0x290 ** 1416 printk messages dropped ** [ 28.500903] [] ? vfs_copy_file_range+0x740/0x740 ** 1878 printk messages dropped ** [ 28.510339] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2048 printk messages dropped ** [ 28.520703] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1987 printk messages dropped ** [ 28.530712] [] ? vfs_copy_file_range+0x740/0x740 ** 1875 printk messages dropped ** [ 28.540183] [] kasan_report.part.1+0x21c/0x500 ** 1857 printk messages dropped ** [ 28.549577] [] ? rw_verify_area+0xe5/0x2b0 ** 1762 printk messages dropped ** [ 28.558466] [] ? fsnotify+0x86/0xf30 ** 1658 printk messages dropped ** [ 28.566852] do_fast_syscall_32+0x2f7/0x890 ** 1459 printk messages dropped ** [ 28.574230] [] sg_remove_request+0x70/0x120 ** 1789 printk messages dropped ** [ 28.583304] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1900 printk messages dropped ** [ 28.592910] [] ? do_fast_syscall_32+0xcf/0x890 ** 1799 printk messages dropped ** [ 28.601937] Read of size 4 by task syz-executor7/3662 ** 1626 printk messages dropped ** [ 28.610221] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2063 printk messages dropped ** [ 28.620904] [] sg_read+0xa1c/0x1440 ** 1643 printk messages dropped ** [ 28.629197] [] ? rw_verify_area+0xe5/0x2b0 ** 1735 printk messages dropped ** [ 28.637936] BUG: KASAN: slab-out-of-bounds in native_queued_spin_lock_slowpath+0x6a1/0x6c0 at addr ffff8801cb972064 ** 2671 printk messages dropped ** [ 28.651423] [] sg_read+0xa1c/0x1440 ** 1502 printk messages dropped ** [ 28.659203] [] ? fsnotify+0x86/0xf30 ** 1651 printk messages dropped ** [ 28.667660] kasan_kmalloc+0xad/0xe0 ** 1375 printk messages dropped ** [ 28.674586] ^ ** 1881 printk messages dropped ** [ 28.684992] [] entry_SYSENTER_compat+0x51/0x60 ** 1843 printk messages dropped ** [ 28.694290] kmem_cache_alloc+0xba/0x290 ** 1397 printk messages dropped ** [ 28.701331] [] sg_finish_rem_req+0x295/0x340 ** 1788 printk messages dropped ** [ 28.710389] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1923 printk messages dropped ** [ 28.720118] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2059 printk messages dropped ** [ 28.730503] [] __asan_report_load4_noabort+0x29/0x30 ** 1941 printk messages dropped ** [ 28.740361] fasync_helper+0x37/0xb0 ** 1335 printk messages dropped ** [ 28.747094] [] ? default_llseek+0x290/0x290 ** 1778 printk messages dropped ** [ 28.756082] [] ? do_fast_syscall_32+0xcf/0x890 ** 1836 printk messages dropped ** [ 28.765350] [] ? vfs_copy_file_range+0x740/0x740 ** 1866 printk messages dropped ** [ 28.774741] Read of size 4 by task syz-executor7/3662 ** 1623 printk messages dropped ** [ 28.782927] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2064 printk messages dropped ** [ 28.793377] [] sg_remove_request+0x70/0x120 ** 1824 printk messages dropped ** [ 28.802607] Call Trace: ** 1102 printk messages dropped ** [ 28.808169] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1976 printk messages dropped ** [ 28.818140] [] ? fsnotify+0x86/0xf30 ** 1654 printk messages dropped ** [ 28.826549] fasync_helper+0x37/0xb0 ** 1527 printk messages dropped ** [ 28.834271] [] queued_write_lock_slowpath+0x116/0x150 ** 1962 printk messages dropped ** [ 28.844223] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2090 printk messages dropped ** [ 28.854560] Freed: ** 1023 printk messages dropped ** [ 28.859702] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2061 printk messages dropped ** [ 28.870089] [] queued_write_lock_slowpath+0x116/0x150 ** 1956 printk messages dropped ** [ 28.879976] ================================================================== ** 2055 printk messages dropped ** [ 28.890354] [] do_raw_write_lock+0xc7/0x1d0 ** 1777 printk messages dropped ** [ 28.899332] [] __vfs_read+0x103/0x670 ** 1676 printk messages dropped ** [ 28.907773] CPU: 1 PID: 3662 Comm: syz-executor7 Tainted: G B 4.9.70-g9542d2a #5 ** 2323 printk messages dropped ** [ 28.919545] [] queued_write_lock_slowpath+0x116/0x150 ** 1950 printk messages dropped ** [ 28.929424] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2089 printk messages dropped ** [ 28.940008] Allocated: ** 1097 printk messages dropped ** [ 28.945544] compat_SyS_fcntl64+0xce/0x4f0 ** 1454 printk messages dropped ** [ 28.952859] [] __asan_report_load4_noabort+0x29/0x30 ** 1931 printk messages dropped ** [ 28.962660] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1929 printk messages dropped ** [ 28.972339] ================================================================== ** 2059 printk messages dropped ** [ 28.982729] [] sg_remove_request+0x70/0x120 ** 1781 printk messages dropped ** [ 28.991720] [] ? rw_verify_area+0xe5/0x2b0 ** 1767 printk messages dropped ** [ 29.000643] [] ? rw_verify_area+0xe5/0x2b0 ** 1762 printk messages dropped ** [ 29.009523] [] ? fsnotify+0x86/0xf30 ** 1648 printk messages dropped ** [ 29.017823] PID = 3662 ** 1103 printk messages dropped ** [ 29.023369] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2059 printk messages dropped ** [ 29.033791] [] __asan_report_load4_noabort+0x29/0x30 ** 1931 printk messages dropped ** [ 29.043619] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1930 printk messages dropped ** [ 29.053314] ================================================================== ** 2103 printk messages dropped ** [ 29.063934] ^ ** 1893 printk messages dropped ** [ 29.073479] compat_SyS_fcntl64+0xce/0x4f0 ** 1436 printk messages dropped ** [ 29.080706] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2061 printk messages dropped ** [ 29.091085] [] _raw_write_lock_irqsave+0x56/0x62 ** 1861 printk messages dropped ** [ 29.100531] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1922 printk messages dropped ** [ 29.110199] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2059 printk messages dropped ** [ 29.120577] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2063 printk messages dropped ** [ 29.131027] [] ? do_fast_syscall_32+0xcf/0x890 ** 1835 printk messages dropped ** [ 29.140296] [] ? do_fast_syscall_32+0xcf/0x890 ** 1803 printk messages dropped ** [ 29.149349] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2047 printk messages dropped ** [ 29.159668] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2013 printk messages dropped ** [ 29.170067] entry_SYSENTER_compat+0x51/0x60 ** 1457 printk messages dropped ** [ 29.177572] [] ? sg_remove_request+0x70/0x120 ** 1790 printk messages dropped ** [ 29.186863] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1942 printk messages dropped ** [ 29.196817] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2075 printk messages dropped ** [ 29.207434] kasan_kmalloc+0xad/0xe0 ** 1339 printk messages dropped ** [ 29.214260] [] ? fsnotify+0x86/0xf30 ** 1660 printk messages dropped ** [ 29.222698] Freed: ** 1024 printk messages dropped ** [ 29.227906] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2058 printk messages dropped ** [ 29.238286] [] __asan_report_load4_noabort+0x29/0x30 ** 1942 printk messages dropped ** [ 29.248117] sg_fasync+0x86/0xb0 ** 1266 printk messages dropped ** [ 29.254512] [] ? default_llseek+0x290/0x290 ** 1780 printk messages dropped ** [ 29.263513] [] do_fast_syscall_32+0x2f7/0x890 ** 1826 printk messages dropped ** [ 29.272729] [] ? selinux_file_permission+0x82/0x460 ** 1933 printk messages dropped ** [ 29.282448] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2063 printk messages dropped ** [ 29.292836] [] _raw_write_lock_irqsave+0x56/0x62 ** 1876 printk messages dropped ** [ 29.302300] PID = 0 ** 1045 printk messages dropped ** [ 29.307569] [] do_raw_write_lock+0xc7/0x1d0 ** 1787 printk messages dropped ** [ 29.316617] [] ? vfs_copy_file_range+0x740/0x740 ** 1898 printk messages dropped ** [ 29.326159] [] ? selinux_file_permission+0x82/0x460 ** 1924 printk messages dropped ** [ 29.335857] sg_fasync+0x86/0xb0 ** 1269 printk messages dropped ** [ 29.342269] [] ? avc_policy_seqno+0x9/0x20 ** 1780 printk messages dropped ** [ 29.351276] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1928 printk messages dropped ** [ 29.360953] ================================================================== ** 2058 printk messages dropped ** [ 29.371323] [] sg_remove_request+0x70/0x120 ** 1776 printk messages dropped ** [ 29.380272] [] ? fsnotify+0x86/0xf30 ** 1665 printk messages dropped ** [ 29.388663] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2066 printk messages dropped ** [ 29.399109] [] sg_read+0xa1c/0x1440 ** 1637 printk messages dropped ** [ 29.407394] [] ? default_llseek+0x290/0x290 ** 1776 printk messages dropped ** [ 29.416394] [] ? vfs_copy_file_range+0x740/0x740 ** 1878 printk messages dropped ** [ 29.425854] [] kasan_report.part.1+0x21c/0x500 ** 1822 printk messages dropped ** [ 29.435075] ffff8801cb972100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2044 printk messages dropped ** [ 29.445387] CPU: 1 PID: 3662 Comm: syz-executor7 Tainted: G B 4.9.70-g9542d2a #5 ** 2349 printk messages dropped ** [ 29.457334] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1937 printk messages dropped ** [ 29.467140] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2079 printk messages dropped ** [ 29.477661] save_stack+0x43/0xd0 ** 1281 printk messages dropped ** [ 29.484114] [] ? SyS_getpgid+0xfa/0x280 ** 1718 printk messages dropped ** [ 29.492794] entry_SYSENTER_compat+0x51/0x60 ** 1472 printk messages dropped ** [ 29.500276] [] ? rw_verify_area+0xe5/0x2b0 ** 1775 printk messages dropped ** [ 29.509249] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1924 printk messages dropped ** [ 29.518914] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2062 printk messages dropped ** [ 29.529287] [] _raw_write_lock_irqsave+0x56/0x62 ** 1869 printk messages dropped ** [ 29.538739] fasync_helper+0x37/0xb0 ** 1334 printk messages dropped ** [ 29.545459] [] __vfs_read+0x103/0x670 ** 1686 printk messages dropped ** [ 29.553936] [] __asan_report_load4_noabort+0x29/0x30 ** 1929 printk messages dropped ** [ 29.563712] [] ? vfs_copy_file_range+0x740/0x740 ** 1881 printk messages dropped ** [ 29.573159] [] _raw_write_lock_irqsave+0x56/0x62 ** 1903 printk messages dropped ** [ 29.582793] [] _raw_write_lock_irqsave+0x56/0x62 ** 1874 printk messages dropped ** [ 29.592256] entry_SYSENTER_compat+0x51/0x60 ** 1471 printk messages dropped ** [ 29.599667] [] ? security_file_permission+0x89/0x1e0 ** 1933 printk messages dropped ** [ 29.609422] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2063 printk messages dropped ** [ 29.619809] [] ? sg_remove_request+0x70/0x120 ** 1813 printk messages dropped ** [ 29.628973] ^ ** 1885 printk messages dropped ** [ 29.638540] save_stack_trace+0x16/0x20 ** 1394 printk messages dropped ** [ 29.645545] [] __asan_report_load4_noabort+0x29/0x30 ** 1930 printk messages dropped ** [ 29.655318] [] do_fast_syscall_32+0x2f7/0x890 ** 1815 printk messages dropped ** [ 29.664468] [] sg_finish_rem_req+0x295/0x340 ** 1794 printk messages dropped ** [ 29.673533] save_stack+0x43/0xd0 ** 1283 printk messages dropped ** [ 29.680041] [] ? vfs_copy_file_range+0x740/0x740 ** 1876 printk messages dropped ** [ 29.689479] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2090 printk messages dropped ** [ 29.700042] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2055 printk messages dropped ** [ 29.710431] [] kasan_report.part.1+0x21c/0x500 ** 1858 printk messages dropped ** [ 29.719850] [] vfs_read+0x11e/0x380 ** 1644 printk messages dropped ** [ 29.728165] save_stack+0x43/0xd0 ** 1275 printk messages dropped ** [ 29.734617] [] ? selinux_file_permission+0x82/0x460 ** 1924 printk messages dropped ** [ 29.744395] sg_fasync+0x86/0xb0 ** 1273 printk messages dropped ** [ 29.750845] [] vfs_read+0x11e/0x380 ** 1639 printk messages dropped ** [ 29.759151] [] entry_SYSENTER_compat+0x51/0x60 ** 1831 printk messages dropped ** [ 29.768361] [] ? do_fast_syscall_32+0xcf/0x890 ** 1837 printk messages dropped ** [ 29.777629] [] do_fast_syscall_32+0x2f7/0x890 ** 1820 printk messages dropped ** [ 29.786806] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1925 printk messages dropped ** [ 29.796535] save_stack+0x43/0xd0 ** 1280 printk messages dropped ** [ 29.803003] [] ? vfs_copy_file_range+0x740/0x740 ** 1876 printk messages dropped ** [ 29.812419] [] dump_stack+0xc1/0x128 ** 1660 printk messages dropped ** [ 29.820861] [] ? do_fast_syscall_32+0xcf/0x890 ** 1830 printk messages dropped ** [ 29.830068] [] ? rw_verify_area+0xe5/0x2b0 ** 1771 printk messages dropped ** [ 29.838999] [] ? SyS_getpgid+0xfa/0x280 ** 1752 printk messages dropped ** [ 29.847832] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1917 printk messages dropped ** [ 29.857519] [] ? vfs_copy_file_range+0x740/0x740 ** 1874 printk messages dropped ** [ 29.866954] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2086 printk messages dropped ** [ 29.877524] compat_SyS_fcntl64+0xce/0x4f0 ** 1434 printk messages dropped ** [ 29.884744] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2062 printk messages dropped ** [ 29.895158] [] do_raw_write_lock+0xc7/0x1d0 ** 1789 printk messages dropped ** [ 29.904241] [] ? do_fast_syscall_32+0xcf/0x890 ** 1839 printk messages dropped ** [ 29.913515] [] entry_SYSENTER_compat+0x51/0x60 ** 1833 printk messages dropped ** [ 29.922742] [] do_fast_syscall_32+0x2f7/0x890 ** 1827 printk messages dropped ** [ 29.931934] [] ? security_file_permission+0x89/0x1e0 ** 1955 printk messages dropped ** [ 29.941778] [] do_raw_write_lock+0xc7/0x1d0 ** 1782 printk messages dropped ** [ 29.950767] [] ? selinux_file_permission+0x82/0x460 ** 1921 printk messages dropped ** [ 29.960453] kasan_slab_alloc+0x12/0x20 ** 1383 printk messages dropped ** [ 29.967399] ffff8801c0e7f950 ffffffff81d90a29 ffff8801d77ff640 ffff8801cb972000 ** 2126 printk messages dropped ** [ 29.978115] [] ? __might_fault+0x114/0x1d0 ** 1733 printk messages dropped ** [ 29.986877] PID = 0 ** 1000 printk messages dropped ** [ 29.991941] [] ? vfs_copy_file_range+0x740/0x740 ** 1789 printk messages dropped ** [ 30.000967] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2004 printk messages dropped ** [ 30.011457] [] __vfs_read+0x103/0x670 ** 1639 printk messages dropped ** [ 30.020085] [] vfs_read+0x11e/0x380 ** 1593 printk messages dropped ** [ 30.028406] ^ ** 1889 printk messages dropped ** [ 30.038201] kmem_cache_alloc+0xba/0x290 ** 1407 printk messages dropped ** [ 30.045491] [] ? avc_policy_seqno+0x9/0x20 ** 1774 printk messages dropped ** [ 30.054559] [] ? SyS_getpgid+0xfa/0x280 ** 1707 printk messages dropped ** [ 30.063155] PID = 3662 ** 1096 printk messages dropped ** [ 30.068673] compat_SyS_fcntl64+0xce/0x4f0 ** 1439 printk messages dropped ** [ 30.075939] ffff8801cb972100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2059 printk messages dropped ** [ 30.086334] [] ? sg_remove_request+0x70/0x120 ** 1820 printk messages dropped ** [ 30.095504] CPU: 1 PID: 3662 Comm: syz-executor7 Tainted: G B 4.9.70-g9542d2a #5 ** 2344 printk messages dropped ** [ 30.107367] [] ? vfs_copy_file_range+0x740/0x740 ** 1872 printk messages dropped ** [ 30.116772] ffff8801c0e7f950 ffffffff81d90a29 ffff8801d77ff640 ffff8801cb972000 ** 2090 printk messages dropped ** [ 30.127348] entry_SYSENTER_compat+0x51/0x60 ** 1469 printk messages dropped ** [ 30.134782] [] ? avc_policy_seqno+0x9/0x20 ** 1762 printk messages dropped ** [ 30.143739] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 2857 printk messages dropped ** [ 30.158197] [] ? default_llseek+0x290/0x290 ** 1916 printk messages dropped ** [ 30.167855] [] do_fast_syscall_32+0x2f7/0x890 ** 1823 printk messages dropped ** [ 30.177169] [] ? fsnotify+0x86/0xf30 ** 1665 printk messages dropped ** [ 30.185625] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2066 printk messages dropped ** [ 30.196056] [] sg_read+0xa1c/0x1440 ** 1671 printk messages dropped ** [ 30.204497] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2061 printk messages dropped ** [ 30.214895] [] queued_write_lock_slowpath+0x116/0x150 ** 1953 printk messages dropped ** [ 30.224737] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2098 printk messages dropped ** [ 30.235351] entry_SYSENTER_compat+0x51/0x60 ** 1473 printk messages dropped ** [ 30.242780] [] vfs_read+0x11e/0x380 ** 1641 printk messages dropped ** [ 30.251054] Allocated: ** 1093 printk messages dropped ** [ 30.256610] kmem_cache_alloc+0xba/0x290 ** 1408 printk messages dropped ** [ 30.263707] [] ? selinux_file_permission+0x82/0x460 ** 1931 printk messages dropped ** [ 30.273452] (stack is not available) ** 1320 printk messages dropped ** [ 30.280094] [] sg_finish_rem_req+0x295/0x340 ** 1787 printk messages dropped ** [ 30.289126] [] do_fast_syscall_32+0x2f7/0x890 ** 1816 printk messages dropped ** [ 30.298284] [] sg_read+0xa1c/0x1440 ** 1660 printk messages dropped ** [ 30.306754] kmem_cache_alloc+0xba/0x290 ** 1407 printk messages dropped ** [ 30.313878] [] ? avc_policy_seqno+0x9/0x20 ** 1768 printk messages dropped ** [ 30.322817] [] ? selinux_file_permission+0x82/0x460 ** 1929 printk messages dropped ** [ 30.332533] Freed: ** 1024 printk messages dropped ** [ 30.337677] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2071 printk messages dropped ** [ 30.348120] [] __vfs_read+0x103/0x670 ** 1680 printk messages dropped ** [ 30.356554] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2122 printk messages dropped ** [ 30.367275] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1917 printk messages dropped ** [ 30.376983] [] ? vfs_copy_file_range+0x740/0x740 ** 1876 printk messages dropped ** [ 30.386411] [] dump_stack+0xc1/0x128 ** 1656 printk messages dropped ** [ 30.394831] [] vfs_read+0x11e/0x380 ** 1648 printk messages dropped ** [ 30.403128] fasync_helper+0x37/0xb0 ** 1336 printk messages dropped ** [ 30.409903] [] ? fsnotify+0x86/0xf30 ** 1665 printk messages dropped ** [ 30.418282] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2062 printk messages dropped ** [ 30.428670] [] _raw_write_lock_irqsave+0x56/0x62 ** 1861 printk messages dropped ** [ 30.438088] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1918 printk messages dropped ** [ 30.447756] PID = 0 ** 1052 printk messages dropped ** [ 30.453059] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1983 printk messages dropped ** [ 30.463108] [] SyS_read+0xd9/0x1b0 ** 1635 printk messages dropped ** [ 30.471372] [] ? vfs_copy_file_range+0x740/0x740 ** 1880 printk messages dropped ** [ 30.480823] [] do_raw_write_lock+0xc7/0x1d0 ** 1780 printk messages dropped ** [ 30.489818] [] ? fsnotify+0xf30/0xf30 ** 1716 printk messages dropped ** [ 30.498458] save_stack_trace+0x16/0x20 ** 1412 printk messages dropped ** [ 30.505568] [] ? selinux_file_permission+0x82/0x460 ** 1919 printk messages dropped ** [ 30.515240] save_stack+0x43/0xd0 ** 1287 printk messages dropped ** [ 30.521755] Object at ffff8801cb972000, in cache fasync_cache size: 96 ** 1901 printk messages dropped ** [ 30.531349] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1925 printk messages dropped ** [ 30.541026] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2064 printk messages dropped ** [ 30.551546] [] sg_finish_rem_req+0x295/0x340 ** 1794 printk messages dropped ** [ 30.560613] save_stack+0x43/0xd0 ** 1282 printk messages dropped ** [ 30.567074] [] ? do_fast_syscall_32+0xcf/0x890 ** 1833 printk messages dropped ** [ 30.576309] [] ? vfs_copy_file_range+0x740/0x740 ** 1870 printk messages dropped ** [ 30.585720] CPU: 1 PID: 3662 Comm: syz-executor7 Tainted: G B 4.9.70-g9542d2a #5 ** 2315 printk messages dropped ** [ 30.597437] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2095 printk messages dropped ** [ 30.608006] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2063 printk messages dropped ** [ 30.618442] [] sg_remove_request+0x70/0x120 ** 1811 printk messages dropped ** [ 30.627584] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2055 printk messages dropped ** [ 30.637948] [] kasan_report.part.1+0x21c/0x500 ** 1829 printk messages dropped ** [ 30.647181] ffff8801c0e7f950 ffffffff81d90a29 ffff8801d77ff640 ffff8801cb972000 ** 2090 printk messages dropped ** [ 30.657827] entry_SYSENTER_compat+0x51/0x60 ** 1386 printk messages dropped ** [ 30.664803] [] queued_write_lock_slowpath+0x116/0x150 ** 1966 printk messages dropped ** [ 30.674728] [] kasan_object_err+0x1c/0x70 ** 1749 printk messages dropped ** [ 30.684017] Memory state around the buggy address: ** 1573 printk messages dropped ** [ 30.691936] Read of size 4 by task syz-executor7/3662 ** 1624 printk messages dropped ** [ 30.700124] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2052 printk messages dropped ** [ 30.710481] Call Trace: ** 1114 printk messages dropped ** [ 30.716149] [] SyS_read+0xd9/0x1b0 ** 1629 printk messages dropped ** [ 30.724362] [] ? rw_verify_area+0xe5/0x2b0 ** 1767 printk messages dropped ** [ 30.733314] [] ? rw_verify_area+0xe5/0x2b0 ** 1769 printk messages dropped ** [ 30.742220] [] SyS_read+0xd9/0x1b0 ** 1627 printk messages dropped ** [ 30.750433] [] ? selinux_file_permission+0x82/0x460 ** 1958 printk messages dropped ** [ 30.760284] [] ? sg_remove_request+0x70/0x120 ** 1816 printk messages dropped ** [ 30.769434] ================================================================== ** 2052 printk messages dropped ** [ 30.779804] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2102 printk messages dropped ** [ 30.790430] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2078 printk messages dropped ** [ 30.800981] save_stack_trace+0x16/0x20 ** 1394 printk messages dropped ** [ 30.807998] [] __asan_report_load4_noabort+0x29/0x30 ** 1931 printk messages dropped ** [ 30.817804] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 2089 printk messages dropped ** [ 30.828316] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1986 printk messages dropped ** [ 30.838349] [] ? do_fast_syscall_32+0xcf/0x890 ** 1837 printk messages dropped ** [ 30.847447] [] do_fast_syscall_32+0x2f7/0x890 ** 1827 printk messages dropped ** [ 30.856644] [] ? security_file_permission+0x89/0x1e0 ** 1950 printk messages dropped ** [ 30.866441] [] kasan_report.part.1+0x21c/0x500 ** 1837 printk messages dropped ** [ 30.875685] [] __asan_report_load4_noabort+0x29/0x30 ** 1975 printk messages dropped ** [ 30.885623] [] _raw_write_lock_irqsave+0x56/0x62 ** 1883 printk messages dropped ** [ 30.895094] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2067 printk messages dropped ** [ 30.905565] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1918 printk messages dropped ** [ 30.915243] [] do_fast_syscall_32+0x2f7/0x890 ** 1823 printk messages dropped ** [ 30.924392] [] ? fsnotify+0x86/0xf30 ** 1677 printk messages dropped ** [ 30.932808] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2096 printk messages dropped ** [ 30.943379] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2061 printk messages dropped ** [ 30.953756] [] _raw_write_lock_irqsave+0x56/0x62 ** 1880 printk messages dropped ** [ 30.963209] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2063 printk messages dropped ** [ 30.973613] [] ? sg_remove_request+0x70/0x120 ** 1829 printk messages dropped ** [ 30.982814] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2125 printk messages dropped ** [ 30.993536] [] ? avc_policy_seqno+0x9/0x20 ** 1778 printk messages dropped ** [ 31.002489] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1960 printk messages dropped ** [ 31.012333] [] ? avc_policy_seqno+0x9/0x20 ** 1768 printk messages dropped ** [ 31.021239] [] ? selinux_file_permission+0x82/0x460 ** 1929 printk messages dropped ** [ 31.030937] Freed: ** 1025 printk messages dropped ** [ 31.036128] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2071 printk messages dropped ** [ 31.046557] [] ? default_llseek+0x290/0x290 ** 1780 printk messages dropped ** [ 31.055526] [] do_fast_syscall_32+0x2f7/0x890 ** 1827 printk messages dropped ** [ 31.064719] [] ? security_file_permission+0x89/0x1e0 ** 1946 printk messages dropped ** [ 31.074495] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2096 printk messages dropped ** [ 31.085039] ^ ** 1900 printk messages dropped ** [ 31.094607] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2071 printk messages dropped ** [ 31.105055] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1938 printk messages dropped ** [ 31.114775] Memory state around the buggy address: ** 1583 printk messages dropped ** [ 31.122722] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2093 printk messages dropped ** [ 31.133231] ffff8801cb972100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2098 printk messages dropped ** [ 31.143806] Freed: ** 1025 printk messages dropped ** [ 31.148946] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2067 printk messages dropped ** [ 31.159367] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1988 printk messages dropped ** [ 31.169417] [] do_fast_syscall_32+0x2f7/0x890 ** 1818 printk messages dropped ** [ 31.178561] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1990 printk messages dropped ** [ 31.188608] [] entry_SYSENTER_compat+0x51/0x60 ** 1834 printk messages dropped ** [ 31.197874] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1924 printk messages dropped ** [ 31.207541] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2063 printk messages dropped ** [ 31.217948] [] ? sg_remove_request+0x70/0x120 ** 1831 printk messages dropped ** [ 31.227179] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2054 printk messages dropped ** [ 31.237551] [] ? fsnotify+0xf30/0xf30 ** 1689 printk messages dropped ** [ 31.246048] [] sg_remove_request+0x70/0x120 ** 1780 printk messages dropped ** [ 31.255032] [] ? security_file_permission+0x89/0x1e0 ** 1951 printk messages dropped ** [ 31.264844] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2124 printk messages dropped ** [ 31.275570] [] ? fsnotify+0xf30/0xf30 ** 1688 printk messages dropped ** [ 31.284065] [] ? sg_remove_request+0x70/0x120 ** 1822 printk messages dropped ** [ 31.293238] ffff8801c0e7f950 ffffffff81d90a29 ffff8801d77ff640 ffff8801cb972000 ** 2098 printk messages dropped ** [ 31.303820] ^ ** 1889 printk messages dropped ** [ 31.313352] kmem_cache_alloc+0xba/0x290 ** 1407 printk messages dropped ** [ 31.320423] [] ? avc_policy_seqno+0x9/0x20 ** 1767 printk messages dropped ** [ 31.329317] [] ? avc_policy_seqno+0x9/0x20 ** 1771 printk messages dropped ** [ 31.338238] [] vfs_read+0x11e/0x380 ** 1647 printk messages dropped ** [ 31.346530] kmem_cache_alloc+0xba/0x290 ** 1407 printk messages dropped ** [ 31.353631] [] ? avc_policy_seqno+0x9/0x20 ** 1767 printk messages dropped ** [ 31.362542] [] ? avc_policy_seqno+0x9/0x20 ** 1775 printk messages dropped ** [ 31.371494] [] ? do_fast_syscall_32+0xcf/0x890 ** 1862 printk messages dropped ** [ 31.380850] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2070 printk messages dropped ** [ 31.391289] [] ? fsnotify+0x86/0xf30 ** 1663 printk messages dropped ** [ 31.399626] Memory state around the buggy address: ** 1612 printk messages dropped ** [ 31.407724] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1925 printk messages dropped ** [ 31.417370] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2063 printk messages dropped ** [ 31.427788] [] sg_remove_request+0x70/0x120 ** 1778 printk messages dropped ** [ 31.436765] [] ? avc_policy_seqno+0x9/0x20 ** 1771 printk messages dropped ** [ 31.445698] [] vfs_read+0x11e/0x380 ** 1653 printk messages dropped ** [ 31.454017] entry_SYSENTER_compat+0x51/0x60 ** 1480 printk messages dropped ** [ 31.461515] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1930 printk messages dropped ** [ 31.471183] ================================================================== ** 2063 printk messages dropped ** [ 31.481604] [] ? __might_fault+0x114/0x1d0 ** 1767 printk messages dropped ** [ 31.490480] [] ? __might_fault+0x114/0x1d0 ** 1766 printk messages dropped ** [ 31.499409] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1988 printk messages dropped ** [ 31.509433] [] do_fast_syscall_32+0x2f7/0x890 ** 1836 printk messages dropped ** [ 31.518680] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1926 printk messages dropped ** [ 31.528356] ^ ** 1924 printk messages dropped ** [ 31.538063] [] _raw_write_lock_irqsave+0x56/0x62 ** 1864 printk messages dropped ** [ 31.547506] save_stack_trace+0x16/0x20 ** 1400 printk messages dropped ** [ 31.554539] [] sg_remove_request+0x70/0x120 ** 1788 printk messages dropped ** [ 31.563591] [] do_fast_syscall_32+0x2f7/0x890 ** 1829 printk messages dropped ** [ 31.572805] [] vfs_read+0x11e/0x380 ** 1654 printk messages dropped ** [ 31.581108] Freed: ** 1025 printk messages dropped ** [ 31.586244] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2068 printk messages dropped ** [ 31.596636] [] ? __might_fault+0x114/0x1d0 ** 1773 printk messages dropped ** [ 31.605558] [] ? avc_policy_seqno+0x9/0x20 ** 1764 printk messages dropped ** [ 31.614456] [] ? default_llseek+0x290/0x290 ** 1785 printk messages dropped ** [ 31.623453] PID = 3662 ** 1099 printk messages dropped ** [ 31.628970] Freed: ** 1026 printk messages dropped ** [ 31.634150] ^ ** 1881 printk messages dropped ** [ 31.643660] [] entry_SYSENTER_compat+0x51/0x60 ** 1834 printk messages dropped ** [ 31.652884] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1971 printk messages dropped ** [ 31.662845] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1927 printk messages dropped ** [ 31.672535] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2068 printk messages dropped ** [ 31.683002] [] __vfs_read+0x103/0x670 ** 1684 printk messages dropped ** [ 31.691455] [] kasan_report.part.1+0x21c/0x500 ** 1835 printk messages dropped ** [ 31.700690] [] kasan_report.part.1+0x21c/0x500 ** 1842 printk messages dropped ** [ 31.709970] [] ? sg_remove_request+0x70/0x120 ** 1815 printk messages dropped ** [ 31.719103] ffff8801cb972100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2061 printk messages dropped ** [ 31.729508] [] sg_finish_rem_req+0x295/0x340 ** 1803 printk messages dropped ** [ 31.738618] entry_SYSENTER_compat+0x51/0x60 ** 1475 printk messages dropped ** [ 31.746058] [] ? vfs_copy_file_range+0x740/0x740 ** 1877 printk messages dropped ** [ 31.755499] [] kasan_object_err+0x1c/0x70 ** 1750 printk messages dropped ** [ 31.764316] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2070 printk messages dropped ** [ 31.774747] [] ? __might_fault+0x114/0x1d0 ** 1769 printk messages dropped ** [ 31.783662] [] __vfs_read+0x103/0x670 ** 1713 printk messages dropped ** [ 31.792290] [] do_fast_syscall_32+0x2f7/0x890 ** 1825 printk messages dropped ** [ 31.801465] [] ? avc_policy_seqno+0x9/0x20 ** 1767 printk messages dropped ** [ 31.810369] [] ? avc_policy_seqno+0x9/0x20 ** 1771 printk messages dropped ** [ 31.819327] [] vfs_read+0x11e/0x380 ** 1638 printk messages dropped ** [ 31.827577] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1925 printk messages dropped ** [ 31.837249] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2039 printk messages dropped ** [ 31.847564] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2055 printk messages dropped ** [ 31.857917] [] kasan_report.part.1+0x21c/0x500 ** 1837 printk messages dropped ** [ 31.867284] [] __asan_report_load4_noabort+0x29/0x30 ** 1932 printk messages dropped ** [ 31.877111] [] entry_SYSENTER_compat+0x51/0x60 ** 1838 printk messages dropped ** [ 31.886362] PID = 3662 ** 1103 printk messages dropped ** [ 31.891906] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2062 printk messages dropped ** [ 31.902324] [] do_raw_write_lock+0xc7/0x1d0 ** 1778 printk messages dropped ** [ 31.911291] [] ? default_llseek+0x290/0x290 ** 1781 printk messages dropped ** [ 31.920273] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1943 printk messages dropped ** [ 31.930042] [] __asan_report_load4_noabort+0x29/0x30 ** 1931 printk messages dropped ** [ 31.939804] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1930 printk messages dropped ** [ 31.949629] ================================================================== ** 2066 printk messages dropped ** [ 31.960099] [] ? default_llseek+0x290/0x290 ** 1781 printk messages dropped ** [ 31.969085] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1925 printk messages dropped ** [ 31.978739] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2041 printk messages dropped ** [ 31.989017] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2062 printk messages dropped ** [ 31.999430] [] sg_finish_rem_req+0x295/0x340 ** 1801 printk messages dropped ** [ 32.008629] compat_SyS_fcntl64+0xce/0x4f0 ** 1445 printk messages dropped ** [ 32.015925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ** 2464 printk messages dropped ** [ 32.028359] [] sg_read+0xa1c/0x1440 ** 1649 printk messages dropped ** [ 32.036683] [] ? vfs_copy_file_range+0x740/0x740 ** 1877 printk messages dropped ** [ 32.046105] [] __asan_report_load4_noabort+0x29/0x30 ** 1971 printk messages dropped ** [ 32.056033] [] __asan_report_load4_noabort+0x29/0x30 ** 1937 printk messages dropped ** [ 32.065823] save_stack+0x43/0xd0 ** 1285 printk messages dropped ** [ 32.072305] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1936 printk messages dropped ** [ 32.082044] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2097 printk messages dropped ** [ 32.092620] ^ ** 1895 printk messages dropped ** [ 32.102168] entry_SYSENTER_compat+0x51/0x60 ** 1471 printk messages dropped ** [ 32.109568] [] ? security_file_permission+0x89/0x1e0 ** 1935 printk messages dropped ** [ 32.119277] ^ ** 1886 printk messages dropped ** [ 32.128818] save_stack+0x43/0xd0 ** 1283 printk messages dropped ** [ 32.135296] [] ? vfs_copy_file_range+0x740/0x740 ** 1883 printk messages dropped ** [ 32.144781] [] sg_remove_request+0x70/0x120 ** 1781 printk messages dropped ** [ 32.153783] [] ? rw_verify_area+0xe5/0x2b0 ** 1771 printk messages dropped ** [ 32.162716] [] ? SyS_getpgid+0xfa/0x280 ** 1722 printk messages dropped ** [ 32.171365] Memory state around the buggy address: ** 1582 printk messages dropped ** [ 32.179339] [] kasan_report.part.1+0x21c/0x500 ** 1865 printk messages dropped ** [ 32.188768] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1919 printk messages dropped ** [ 32.198387] Freed: ** 1027 printk messages dropped ** [ 32.203543] ffff8801cb972080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ** 2068 printk messages dropped ** [ 32.214016] [] __vfs_read+0x103/0x670 ** 1688 printk messages dropped ** [ 32.222527] [] queued_write_lock_slowpath+0x116/0x150 ** 1952 printk messages dropped ** [ 32.232357] ^ ** 1890 printk messages dropped ** [ 32.241897] fasync_helper+0x37/0xb0 ** 1340 printk messages dropped ** [ 32.248652] [] ? security_file_permission+0x89/0x1e0 ** 1954 printk messages dropped ** [ 32.258486] [] queued_write_lock_slowpath+0x116/0x150 ** 1962 printk messages dropped ** [ 32.268341] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2126 printk messages dropped ** [ 32.279055] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1927 printk messages dropped ** [ 32.288782] kasan_slab_alloc+0x12/0x20 ** 1393 printk messages dropped ** [ 32.295786] [] queued_write_lock_slowpath+0x116/0x150 ** 1956 printk messages dropped ** [ 32.305643] ================================================================== ** 2095 printk messages dropped ** [ 32.316234] entry_SYSENTER_compat+0x51/0x60 ** 1480 printk messages dropped ** [ 32.323704] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1924 printk messages dropped ** [ 32.333370] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2066 printk messages dropped ** [ 32.343801] [] sg_read+0xa1c/0x1440 ** 1646 printk messages dropped ** [ 32.352111] [] ? vfs_copy_file_range+0x740/0x740 ** 1886 printk messages dropped ** [ 32.361583] [] sg_remove_request+0x70/0x120 ** 1782 printk messages dropped ** [ 32.370574] [] vfs_read+0x11e/0x380 ** 1645 printk messages dropped ** [ 32.378859] kasan_kmalloc+0xad/0xe0 ** 1335 printk messages dropped ** [ 32.385565] [] ? __might_fault+0x114/0x1d0 ** 1769 printk messages dropped ** [ 32.394468] [] __vfs_read+0x103/0x670 ** 1685 printk messages dropped ** [ 32.402949] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2090 printk messages dropped ** [ 32.413516] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2067 printk messages dropped ** [ 32.423943] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1992 printk messages dropped ** [ 32.434004] Allocated: ** 1093 printk messages dropped ** [ 32.439502] kmem_cache_alloc+0xba/0x290 ** 1439 printk messages dropped ** [ 32.446743] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2113 printk messages dropped ** [ 32.457408] ================================================================== ** 2065 printk messages dropped ** [ 32.467874] [] __vfs_read+0x103/0x670 ** 1689 printk messages dropped ** [ 32.476366] [] do_raw_write_lock+0xc7/0x1d0 ** 1781 printk messages dropped ** [ 32.485349] [] ? avc_policy_seqno+0x9/0x20 ** 1765 printk messages dropped ** [ 32.494241] [] ? fsnotify+0x86/0xf30 ** 1684 printk messages dropped ** [ 32.502718] [] __asan_report_load4_noabort+0x29/0x30 ** 1939 printk messages dropped ** [ 32.512511] kasan_slab_alloc+0x12/0x20 ** 1392 printk messages dropped ** [ 32.519508] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2051 printk messages dropped ** [ 32.529834] [] __vfs_read+0x103/0x670 ** 1676 printk messages dropped ** [ 32.538242] CPU: 1 PID: 3662 Comm: syz-executor7 Tainted: G B 4.9.70-g9542d2a #5 ** 2325 printk messages dropped ** [ 32.550012] [] _raw_write_lock_irqsave+0x56/0x62 ** 1859 printk messages dropped ** [ 32.559436] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1925 printk messages dropped ** [ 32.569129] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2091 printk messages dropped ** [ 32.579715] save_stack+0x43/0xd0 ** 1289 printk messages dropped ** [ 32.586221] PID = 3662 ** 1099 printk messages dropped ** [ 32.591753] Freed: ** 1025 printk messages dropped ** [ 32.596923] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2061 printk messages dropped ** [ 32.607347] [] _raw_write_lock_irqsave+0x56/0x62 ** 1860 printk messages dropped ** [ 32.616744] [] entry_SYSENTER_compat+0x51/0x60 ** 1832 printk messages dropped ** [ 32.625976] [] ? vfs_copy_file_range+0x740/0x740 ** 1870 printk messages dropped ** [ 32.635397] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2096 printk messages dropped ** [ 32.646000] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2068 printk messages dropped ** [ 32.656454] [] ? __might_fault+0x114/0x1d0 ** 1659 printk messages dropped ** [ 32.664822] sg_fasync+0x86/0xb0 ** 1270 printk messages dropped ** [ 32.671222] [] ? selinux_file_permission+0x82/0x460 ** 1923 printk messages dropped ** [ 32.681495] fasync_helper+0x37/0xb0 ** 1334 printk messages dropped ** [ 32.688188] [] __vfs_read+0x103/0x670 ** 1688 printk messages dropped ** [ 32.696677] [] queued_write_lock_slowpath+0x116/0x150 ** 1987 printk messages dropped ** [ 32.706722] [] ? selinux_file_permission+0x82/0x460 ** 1920 printk messages dropped ** [ 32.716412] kasan_kmalloc+0xad/0xe0 ** 1342 printk messages dropped ** [ 32.723184] [] ? selinux_file_permission+0x82/0x460 ** 1916 printk messages dropped ** [ 32.732873] Allocated: ** 1095 printk messages dropped ** [ 32.738394] sg_fasync+0x86/0xb0 ** 1269 printk messages dropped ** [ 32.744798] [] ? avc_policy_seqno+0x9/0x20 ** 1767 printk messages dropped ** [ 32.753706] [] ? avc_policy_seqno+0x9/0x20 ** 1775 printk messages dropped ** [ 32.762662] [] ? do_fast_syscall_32+0xcf/0x890 ** 1833 printk messages dropped ** [ 32.771898] [] ? vfs_copy_file_range+0x740/0x740 ** 1883 printk messages dropped ** [ 32.781361] [] do_raw_write_lock+0xc7/0x1d0 ** 1780 printk messages dropped ** [ 32.790346] [] ? fsnotify+0xf30/0xf30 ** 1677 printk messages dropped ** [ 32.798771] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2096 printk messages dropped ** [ 32.809326] ^ ** 1881 printk messages dropped ** [ 32.818872] [] entry_SYSENTER_compat+0x51/0x60 ** 2058 printk messages dropped ** [ 32.829244] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2095 printk messages dropped ** [ 32.839835] kasan_slab_alloc+0x12/0x20 ** 1394 printk messages dropped ** [ 32.846826] [] do_raw_write_lock+0xc7/0x1d0 ** 1785 printk messages dropped ** [ 32.855594] [] vfs_read+0x11e/0x380 ** 1647 printk messages dropped ** [ 32.863914] kmem_cache_alloc+0xba/0x290 ** 1411 printk messages dropped ** [ 32.871016] [] vfs_read+0x11e/0x380 ** 1641 printk messages dropped ** [ 32.879295] Allocated: ** 1104 printk messages dropped ** [ 32.884851] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2061 printk messages dropped ** [ 32.895230] [] queued_write_lock_slowpath+0x116/0x150 ** 1958 printk messages dropped ** [ 32.905085] Read of size 4 by task syz-executor7/3662 ** 1636 printk messages dropped ** [ 32.913337] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2099 printk messages dropped ** [ 32.923903] ================================================================== ** 2061 printk messages dropped ** [ 32.934312] [] sg_read+0xa1c/0x1440 ** 1648 printk messages dropped ** [ 32.942630] [] ? do_fast_syscall_32+0xcf/0x890 ** 1838 printk messages dropped ** [ 32.951877] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1965 printk messages dropped ** [ 32.961783] [] SyS_read+0xd9/0x1b0 ** 1630 printk messages dropped ** [ 32.969991] [] vfs_read+0x11e/0x380 ** 1643 printk messages dropped ** [ 32.978254] save_stack_trace+0x16/0x20 ** 1407 printk messages dropped ** [ 32.985345] [] __vfs_read+0x103/0x670 ** 1687 printk messages dropped ** [ 32.993816] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2056 printk messages dropped ** [ 33.004184] [] ? selinux_file_permission+0x82/0x460 ** 1921 printk messages dropped ** [ 33.013858] kasan_slab_alloc+0x12/0x20 ** 1401 printk messages dropped ** [ 33.020902] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 ** 1990 printk messages dropped ** [ 33.030950] [] entry_SYSENTER_compat+0x51/0x60 ** 1833 printk messages dropped ** [ 33.040180] [] do_fast_syscall_32+0x2f7/0x890 ** 1808 printk messages dropped ** [ 33.049244] [] __asan_report_load4_noabort+0x29/0x30 ** 1922 printk messages dropped ** [ 33.058935] [] ? security_file_permission+0x89/0x1e0 ** 1945 printk messages dropped ** [ 33.068825] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2089 printk messages dropped ** [ 33.079464] entry_SYSENTER_compat+0x51/0x60 ** 1472 printk messages dropped ** [ 33.086919] [] ? rw_verify_area+0xe5/0x2b0 ** 1812 printk messages dropped ** [ 33.096036] [] kasan_object_err+0x1c/0x70 ** 1752 printk messages dropped ** [ 33.104874] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2061 printk messages dropped ** [ 33.115270] [] _raw_write_lock_irqsave+0x56/0x62 ** 1869 printk messages dropped ** [ 33.124711] fasync_helper+0x37/0xb0 ** 1346 printk messages dropped ** [ 33.131489] [] ? do_fast_syscall_32+0xcf/0x890 ** 1841 printk messages dropped ** [ 33.140766] Allocated: ** 1093 printk messages dropped ** [ 33.146289] kmem_cache_alloc+0xba/0x290 ** 1409 printk messages dropped ** [ 33.153378] [] ? security_file_permission+0x89/0x1e0 ** 1945 printk messages dropped ** [ 33.163131] ffff8801cb972060 ffffed003972e40c ffff8801cb972064 ffff8801c0e7f978 ** 2094 printk messages dropped ** [ 33.173676] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2062 printk messages dropped ** [ 33.184063] [] do_raw_write_lock+0xc7/0x1d0 ** 1778 printk messages dropped ** [ 33.193033] [] ? default_llseek+0x290/0x290 ** 1801 printk messages dropped ** [ 33.202091] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2114 printk messages dropped ** [ 33.212759] ================================================================== ** 2103 printk messages dropped ** [ 33.223355] ^ ** 1883 printk messages dropped ** [ 33.232853] Allocated: ** 1091 printk messages dropped ** [ 33.238327] kasan_kmalloc+0xad/0xe0 ** 1346 printk messages dropped ** [ 33.245124] [] SyS_read+0xd9/0x1b0 ** 1628 printk messages dropped ** [ 33.253332] [] ? security_file_permission+0x89/0x1e0 ** 1938 printk messages dropped ** [ 33.263064] ================================================================== ** 2067 printk messages dropped ** [ 33.273518] [] ? default_llseek+0x290/0x290 ** 1781 printk messages dropped ** [ 33.282519] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1925 printk messages dropped ** [ 33.292174] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2069 printk messages dropped ** [ 33.302615] [] ? sg_proc_seq_show_debug+0xd10/0xd10 ** 1929 printk messages dropped ** [ 33.312345] fasync_helper+0x37/0xb0 ** 1338 printk messages dropped ** [ 33.319086] [] ? avc_policy_seqno+0x9/0x20 ** 1766 printk messages dropped ** [ 33.327979] [] ? fsnotify+0xf30/0xf30 ** 1682 printk messages dropped ** [ 33.336408] [] ? native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2094 printk messages dropped ** [ 33.346967] ================================================================== ** 2101 printk messages dropped ** [ 33.357575] ffff8801cb971f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2061 printk messages dropped ** [ 33.367964] [] queued_write_lock_slowpath+0x116/0x150 ** 1952 printk messages dropped ** [ 33.377820] ^ ** 1887 printk messages dropped ** [ 33.387368] kasan_kmalloc+0xad/0xe0 ** 1338 printk messages dropped ** [ 33.394110] [] ? default_llseek+0x290/0x290 ** 1784 printk messages dropped ** [ 33.403123] Allocated: ** 1095 printk messages dropped ** [ 33.408629] sg_fasync+0x86/0xb0 ** 1271 printk messages dropped ** [ 33.415040] [] ? security_file_permission+0x89/0x1e0 ** 1953 printk messages dropped ** [ 33.424851] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2057 printk messages dropped ** [ 33.435239] [] ? security_file_permission+0x89/0x1e0 ** 1946 printk messages dropped ** [ 33.445007] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2094 printk messages dropped ** [ 33.455558] ffff8801cb971f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ** 2080 printk messages dropped ** [ 33.466056] [] SyS_read+0xd9/0x1b0 ** 1632 printk messages dropped ** [ 33.474284] [] ? vfs_copy_file_range+0x740/0x740 ** 1906 printk messages dropped ** [ 33.483879] [] ? vfs_copy_file_range+0x740/0x740 ** 1877 printk messages dropped ** [ 33.493277] [] __asan_report_load4_noabort+0x29/0x30 ** 1934 printk messages dropped ** [ 33.503050] Allocated: ** 1092 printk messages dropped ** [ 33.508564] kasan_slab_alloc+0x12/0x20 ** 1391 printk messages dropped ** [ 33.515555] [] __asan_report_load4_noabort+0x29/0x30 ** 1941 printk messages dropped ** [ 33.525369] fasync_helper+0x37/0xb0 ** 1348 printk messages dropped ** [ 33.532174] [] do_fast_syscall_32+0x2f7/0x890 ** 1836 printk messages dropped ** [ 33.541422] [] ? trace_hardirqs_off_thunk+0x1a/0x1c ** 1956 printk messages dropped ** [ 33.551234] [] __vfs_read+0x103/0x670 ** 1686 printk messages dropped ** [ 33.559676] [] __asan_report_load4_noabort+0x29/0x30 ** 1937 printk messages dropped ** [ 33.569409] save_stack+0x43/0xd0 ** 1290 printk messages dropped ** [ 33.575889] save_stack_trace+0x16/0x20 ** 1397 printk messages dropped ** [ 33.582890] [] do_raw_write_lock+0xc7/0x1d0 ** 1781 printk messages dropped ** [ 33.591871] [] ? avc_policy_seqno+0x9/0x20 ** 1769 printk messages dropped ** [ 33.600787] [] ? security_file_permission+0x89/0x1e0 ** 1939 printk messages dropped ** [ 33.610514] ================================================================== ** 2094 printk messages dropped ** [ 33.621102] do_fast_syscall_32+0x2f7/0x890 ** 1459 printk messages dropped ** [ 33.628444] [] sg_remove_request+0x70/0x120 ** 1778 printk messages dropped ** [ 33.637430] [] ? avc_policy_seqno+0x9/0x20 ** 1775 printk messages dropped ** [ 33.646391] [] ? do_fast_syscall_32+0xcf/0x890 ** 1836 printk messages dropped ** [ 33.655653] [] ? vfs_copy_file_range+0x740/0x740 ** 1880 printk messages dropped ** [ 33.665109] [] do_raw_write_lock+0xc7/0x1d0 ** 1782 printk messages dropped ** [ 33.674095] [] ? selinux_file_permission+0x82/0x460 ** 1935 printk messages dropped ** [ 33.683821] >ffff8801cb972000: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc ** 2063 printk messages dropped ** [ 33.694213] [] sg_remove_request+0x70/0x120 ** 1783 printk messages dropped ** [ 33.703210] [] SyS_read+0xd9/0x1b0 ** 1635 printk messages dropped ** [ 33.711450] [] ? vfs_copy_file_range+0x740/0x740 ** 1881 printk messages dropped ** [ 33.720884] [] _raw_write_lock_irqsave+0x56/0x62 ** 1870 printk messages dropped ** [ 33.730323] sg_fasync+0x86/0xb0 ** 1268 printk messages dropped ** [ 33.736706] [] ? fsnotify+0xf30/0xf30 ** 1684 printk messages dropped ** [ 33.745148] [] native_queued_spin_lock_slowpath+0x6a1/0x6c0 ** 2100 printk messages dropped ** [ 33.755713] ffffffff8153a45c ffffed003972e40c ffff8801d77ff640 0000000000000000 ** 2096 printk messages dropped ** [ 33.766295] ^ ** 1881 printk messages dropped ** [ 33.775806] [] entry_SYSENTER_compat+0x51/0x60 ** 1838 printk messages dropped ** [ 33.785066] PID = 3662 ** 1099 printk messages dropped ** [ 33.790607] Freed: ** 1033 printk messages dropped ** [ 33.795802] CPU: 1 PID: 3662 Comm: syz-executor7 Tainted: G B 4.9.70-g9542d2a #5 ** 2324 printk messages dropped ** [ 33.807510] [] do_raw_write_lock+0xc7/0x1d0