[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 11.740616] sshd (3022) used greatest stack depth: 14504 bytes left [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 12.854641] audit: type=1400 audit(1513506388.368:6): avc: denied { map } for pid=3130 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-5,10.128.0.33' (ECDSA) to the list of known hosts. syzkaller login: [ 19.092769] audit: type=1400 audit(1513506394.606:7): avc: denied { map } for pid=3141 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/17 10:26:35 fuzzer started 2017/12/17 10:26:35 dialing manager at 10.128.0.26:42473 2017/12/17 10:26:44 kcov=true, comps=true [ 28.901588] audit: type=1400 audit(1513506404.415:8): avc: denied { map } for pid=3141 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1160 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2017/12/17 10:26:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)="2f6465762f6c6f6f702300", 0x0, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000f58000-0xc)="2f6465762f72666b696c6c00", 0xfffffffffffffffe, 0x0) r2 = memfd_create(&(0x7f000041f000)="2f6465762f6c6f6f702300", 0x3) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000c61000-0x4)=0x379, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000656000)={@generic="366d87c4bb39eda2335bc42f07a7ad70", @ifru_mtu=0x8}) mremap(&(0x7f0000508000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009df000/0x1000)=nil) r3 = syz_open_dev$loop(&(0x7f0000920000)="2f6465762f6c6f6f702300", 0x0, 0x40) r4 = memfd_create(&(0x7f00000ee000-0xb)="2f6465762f6c6f6f702300", 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000c0000)={@generic="6f3bf400b97ab4915419e415edc96d94", @ifru_addrs={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = add_key(&(0x7f000056a000)="73797a6b616c6c657200", &(0x7f0000e6d000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000316000)="e12999bd1823f1fd8d642c898bdc35edcaaf4f391a58a335044211b96fb3b7cb14e4e18f675a0a98023296739123389a30c595b4cd7f1f51d668def8668c6cfb308e035f995b5ca2217b9054a7e661cf7418854cc91ec70b30d6080eaf6110ff1a6ed562a782f52d12ac7e5c1d6840a26c9266f6becb4114488a57823ac2dd340efb0f54ef1b63dd08ead463b6ef8e49977e6f4cc307713a6715a3250eaa4e2be36262cdc68a97fa1ce301e4cf1fea6550176bcfa7478a9377b6930038efc18a33ef42628682f5ee7b44f061fd6b8246b1d67fc0", 0xd4, 0xfffffffffffffffe) r6 = add_key(&(0x7f0000e48000)="69645f6c656761637900", &(0x7f0000ea5000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000d46000)="a9753f2f58213ed3fe15d36831283049fe768d0ab3c55d0a6b20e350a7d07c2b79efab14a1906e0b034ca4f5820ab4c6f29505c0cd1657ff8c79ecac99212baf268ab56f4a557b398780ad06277b2c223ff5b9da9632cbc78a9faf14410e4e94527321b5728b09dc732494a3df57b827a388b2ccbe728b89b180669439e5acb42924f91b378b8b7076231a8ef5d5c3c8986737ce07ea00066895ece4f7e22bf37955dd94e3324198baae9d98d935d5cc507bc435173064dcda4df5054d361067a8f7e0a012286c1ec734cf099a48c96b3a151e08e7845e971c6078a649fc1f", 0xdf, r5) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000e43000-0x4)=0x0) keyctl$read(0xb, r6, &(0x7f00000cc000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000b80000-0x5c)={0x1, 0x40000001, {0x2, 0x3, 0x1, 0xfffffffffffffffd, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pwritev(r4, &(0x7f000098e000)=[{&(0x7f000013a000-0xab)="", 0x0}, {&(0x7f0000166000)="dc9ec6c223ff1c68ed110015ae5fae0651105dafaab37cb300006b4a0da2579ac3ae72afccde95bc47429cfdf4775ccb15a220a55b8dd6bc6cb9828359724deaa8cbad24c13983f8dec1b9bc48859537705db4a269e78f32cc624f800bf4e900000002f47d3fc1dc3e90681ff1b071d125bacdf8db704282138c80f53f36a5bac86e766b61a72889608dee4723baa98e", 0x90}], 0x2, 0x20003) ioctl$TCSETAF(r2, 0x5404, &(0x7f000089f000)={0x4af, 0x4, 0x2, 0x5, 0x8000000000000, 0x401, 0xc72, 0x9, 0x8, 0xffffffffffffff1d}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) sync_file_range(r2, 0x200, 0x401, 0x200000000000003) socket$packet(0x11, 0x3, 0x300) write(r0, &(0x7f0000f84000-0xb9)="8745a59591de91ac241889a07d6db7125660854551dddd7beaac9dc2fcf8999a2a9b347ac501443b7a213d95ceeafcf9a8b268af81084775cd99187d5019609c5696626ad2351692285200000000000002007ec0c28234c3f9265b5f169b0fde34797bbf7c8729fa633639eb4e6a42e852d6724cc4bf3ecc6eeadf6ff3e5e6867223f4d2310e12d3f43fbc7f7332f4cf9172f0f88fbcd18bd5ecc467c60f118ce1084fbcabaf561f2bc4d6ff4d92d473b03669ae12de97b2", 0xb8) lstat(&(0x7f0000d01000-0x8)="2e2f66696c653000", &(0x7f00003a4000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000187000-0xc)="2f6465762f72666b696c6c00", 0x20001, 0x0) getgid() ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000e97000)={{{{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x9, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x92, 0x3ff, 0x400000205b, "455b7225fcc58e2f3da2b52380cf381ba47627b55d07539d06f0779bece8fb9bc8719b892bb8c800fd26bc76d577be0e670e9fb7a5e31edfd0eaae600cb380aeecd4d8780c2e9df90fcdde8a4783f979"}, 0x160) setns(r7, 0x44000000) sendfile(r0, r3, &(0x7f0000fbe000-0x8)=0x0, 0x100000001) fallocate(r0, 0x3, 0x200, 0x44400006) 2017/12/17 10:26:44 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f000059f000-0xe)="2f73656c696e75782f6c6f616400", 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000001000-0x8)={0x0, 0x4}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00007fc000-0x4)=r1, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00003cd000)="2f6465762f72746300", 0x688200, 0x0) accept4$inet6(r2, 0x0, &(0x7f0000ead000+0x1a3)=0x0, 0x800) r3 = shmget(0x0, 0x400000, 0x540000a9, &(0x7f0000481000/0x400000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000691000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r4 = socket$inet6(0xa, 0x80003, 0x8010000000000086) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f000082d000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) pkey_alloc(0x0, 0x1) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup2(r5, r7) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f000084a000)=0xfff, 0x4) connect$inet(r7, &(0x7f0000868000-0x10)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r8, &(0x7f0000c5a000-0x3e)="643566c6139b680daec87b0d17732222480cb3ef1703d0a864a089e0192975a1e974870a367b43b8fb4b78dbbdbc2d800460815b46e9281c27e86c561a38", 0x3e, 0x1, &(0x7f00001ad000)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000b1e000-0x8)={0x1, [0x0]}, &(0x7f0000a02000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f000061e000)={r9, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, &(0x7f000045c000)=0x98) close(r4) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000dd3000-0x10)={0xff, 0x201, 0x2, 0x0, r10}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000696000-0xb8)={r10, 0xfffffffffffffffb, 0x3f, 0x2, 0x100000001, 0x6, 0xff, 0x4, {r10, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x8, 0xc2, 0x0, 0x8}}, &(0x7f0000df9000-0x4)=0xb8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f000002b000-0x8)={r10, 0x0}, &(0x7f00003a4000-0x4)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f000078c000)={r8, 0x18, &(0x7f0000a1c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000fe1000-0x38)=[@in6={0xa, 0x2, 0xffffffffffffffff, @loopback={0x0, 0x1}, 0x10000}, @in6={0xa, 0x3, 0x7f, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}], 0x38) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000e94000)={r12, 0x25, "e664101848f16dfba87645f6e2219554b869e6da6743b88dfb829cd0a0c29924a4d8295053"}, &(0x7f0000c0f000-0x4)=0x2d) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f000023a000-0x28)={@common="62707130000000000000000000000000", @ifru_data=&(0x7f0000fe2000-0x20)="6b70f34c67b7dd683c5d4b59d5624d9cd473a2da65a1dc09580bce9773cc08d4"}) getsockname$packet(r5, &(0x7f0000cd4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00007da000-0x4)=0x14) connect$packet(r6, &(0x7f00009ad000)={0x11, 0xff, r13, 0x1, 0xfc4, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000c6b000)={r11, @in={{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) dup3(r6, r4, 0x0) 2017/12/17 10:26:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000861000)={0x26, "6861736800000000000000000000", 0x0, 0x0, "736861312d7373736533000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f6d000)={0x0, 0x0, &(0x7f000061d000-0x50)=[{&(0x7f00007f4000-0x31)="94f57d4e88079c143cac11d5eb0943874c0a6be3881cefb20c8f524995d3590c7553e4c735a92b6e8b189db6cea6b765", 0x30}, {&(0x7f0000bf4000-0x10)="4f735bd0afa1626e9adc9e87d41376d746c74edef7ab78aa37e1c152eaa00eadcef29a55efb1076de3929403e8666d57f6a487c3e6ad8f4820c75a24323f883456c049e7d6af7e5f26ccca9a8c60d74dc04967ff4ff33e22025dc309a790f27f11fc608326678e1dae233ed87469d9caea6cba3438e51339142b3e7a5e8b3814ca06de907b62df52459ef80dd5808dc3f7db3ed32b9432f74c571df5756e154c9acca7f0e9c7c4657ba3fc1a206310db73a5ca3b3374978289c1d0ec6fb5212b702cbd10ca277d76dce1af791046c5ba76d4dfbd7e42962a2039b27a468cd196f5014e2ac6e964397b7cba881557d5e4e6efc94d3ce5", 0xf6}, {&(0x7f000060b000)="d8388f357c27c4cba923e878c013f07670b63ba3df41d6ee95080320529c296d999eb6e57d3d4605de3b8b00b6e76743b5df97e982a3199fd9009dcb11b6602a514e5f4457c1c2fcf24d359db6f4823c95e51906aa805a04990d9ba517eceea2903df90d26de557e9e38c3e45cc131f59eff0cffb373a58d4f0174dd281c67c5972a8fb6fb80faac090e7d347c9382cd123734c302d124b2c07fece457764f96", 0xa0}, {&(0x7f0000f74000-0xcf)="52167d5f18c192abf966896918b9057b91646f2475ab80bb5047774241a64404da4f18851baad01bf3823ee94e11971e97c83598c1288b0fb990e17cfe06b4cd7317ea9b38482b3387e21b1d80e09179baf0337a3d22b82896a8b3ab518fe9251de5b6e6f7ce43baef11736af76547b5b8fb7c08b99d2bd15a145d9bf057a9563e3b7a1dc79cf89da1243009addb62f7522850486688956b9970843367ec263bcc38ecf9e676f1b0d8ec0a56c0d978e20d9069b45755bb1a80df5033e55974d75a21bd7333e93a2decff647ad70548", 0xcf}, {&(0x7f0000f11000)="198437476240a36df2a755a225acfa339409e01083d51d8ecf1779e22e8af429d6d759afd30b0269f87dabd981a212e64bb67fe4d626e3f294277a1f45549f6276859c528958087a141989a1f8f38dd298ea5930b920412cad61793dc063519946e84a7a7fbb52b455ef2899faa888de5f2099e4391ea473da4588f8084ae2e78f6621a9f5f868b84d88826281b598f5e11fd348f9b98f1ff6592458917c3870b89f2f29a5339edb2323587fdf79f2e49b4da5e2a0da1712c43766d581d2a43e004e72e42df5c7ffaf2a8cbe3c8d89c4e3421e81f146", 0xd6}], 0x5, &(0x7f00005d0000-0x50)=[], 0x0, 0xfffffffffffffffc}, 0x0) 2017/12/17 10:26:44 executing program 5: r0 = open(&(0x7f0000223000)="2e2f66696c653000", 0x8084, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f000050b000)={@multicast2=0x0, @remote={0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f00009c4000+0x595)=0xc) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f000085d000-0x4)=0x0, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tun(&(0x7f0000cf2000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000fc2000)=0x101) select(0x40, &(0x7f0000816000)={0x6, 0x6, 0x200, 0x3, 0x10000004, 0x8, 0x10, 0x3f}, &(0x7f000031a000)={0x3f, 0x7, 0x3, 0x3, 0x401, 0x9, 0x7ff, 0x3f}, &(0x7f0000129000)={0x6, 0x3e6, 0x4f0c, 0x3, 0x1f, 0xffffffffffffff39, 0x5, 0xff}, &(0x7f0000175000-0x8)={0x77359400, 0x0}) timer_create(0x5, &(0x7f000004e000-0x58)={0x0, 0x23, 0x2, @thr={&(0x7f00009d3000)="0f438df763c442c218f6a1e1bbd458ea3dcfbc0bc621", &(0x7f0000aa8000)="8192445b78ee02e5890033f4b0a48e7d27b696f3748a7188b57e6264d37d90ccf7ee508fb61482e93f0140c233adcb5df7848cd0580292faea018f8c22d0bb990ff463b918d0c2d6a91a855dc1c0f8f70863303a5d8633e99936c57a8662337724aee700ad614f995ddaabd07af55aa69a42bd95416ade71b3a637aea187f4f305d26fcc6ac61a0f493b7c69bfd55b4c7ad970bf"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000765000-0x4)=0x0) timerfd_gettime(r2, &(0x7f0000523000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) timer_settime(r4, 0x1, &(0x7f0000e72000-0x10)={{r3, 0x1c9c380}, {0x0, r5}}, &(0x7f0000891000)={{0x0, 0x0}, {0x0, 0x0}}) clock_getres(0x0, &(0x7f00006fc000)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000fdf000-0x4)={0x0}, 0x0, &(0x7f00001f4000)={r7, r6}, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000533000)={@generic="0200000004000000f004008000e9bc22", @ifru_settings={0x1000010001, 0x0, @fr=&(0x7f0000cb8000)={0x0, 0xfffffffffffffffd, 0x0, 0x200, 0x0, 0x0, 0x0}}}) r8 = socket(0x10, 0x803, 0x0) clock_gettime(0x5, &(0x7f000004b000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000d5c000)={0x4, 0x7, 0x200, 0x7, 0xa, 0x7, 0x1, 0x0, 0x0}, &(0x7f0000d22000)=0x20) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000f9000)=@assoc_value={r9, 0x1}, &(0x7f000042d000-0x4)=0x8) sendto(r8, &(0x7f000001f000-0xb8)="120000001600e7ff025e0000000f49000ae9c3360000000000000800d205f56600000001000000002fe8d9030059dbac4987947a9d0076a8c279ab4a1e57885fb3bb0e2476603887a954062e890f3b9e834b676035095804322608dd7eff822585de8e032737b629416363c3179836721fef0d439d52adb58879a1ce75d73cfd1eb1dd9791158e2f35b6b1d3153bfe89651ba9705c1812c7b12947ad6fe2aa999c3d2be90de264df39d68c5a65d7faf92bec032d469f583d", 0xb8, 0x4, 0x0, 0x0) bind$llc(r8, &(0x7f0000f08000)={0x1a, 0x1f, 0x8, 0x5, 0x27ffffd, 0xffff, @random="0e68860cd3af", [0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000152000-0x4)=0x3) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00009dd000-0x4)=0xfffffffffffffbf8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000076a000-0x8)={0x1, [0x0]}, &(0x7f000063c000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f000089f000-0x8c)={0x0, @in={{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000f90000-0x4)=0x8c) socketpair(0xffff7fffffffffff, 0x80006, 0x7, &(0x7f00002bc000-0x8)={0x0, 0x0}) 2017/12/17 10:26:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000771000-0x4)=0x0, &(0x7f00001de000)=0x4) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x80a, 0x2, &(0x7f0000f04000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x100000001, 0x40, 0x400}, 0x10) r0 = socket(0x11, 0x80002, 0x300) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1d, &(0x7f000032b000-0xd8)="5e38592ed9d83f1ff52a921c3a54477f6cd143318a26d2eb40a9295ecc37e8ee3ca996db4f8384c621e7cd1b450cba11c51244ba0b5673e57d63ab0a084f0137d8f1150967c69171295223991ac2039045b229fe0fb4fc1640b20be063d6db4a9c248a4dfd4708c7c00379f134426cce1d9395d831a2cfc09b3109e05715934a1b47a2ec4625c84df198c3ee685f15cbd5e766f45f97fa282340f5ccf782f9c6347da884bf3f29fd0ce05a15ead42aeb517c64c9943ca03d6b4c34f68379d00c85b2196e84dd0e49a2691312aa8434fbe30dc61d7c37971f", 0xd8) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000)="", 0x47e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000266000)={0x0, &(0x7f0000650000)=[]}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f000060e000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x42c02) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="0252734fb088526cca26b5239cab12c4"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000440000)={@common="67726530000000000000000000000000", @ifru_flags=0x7f01}) write$tun(r2, &(0x7f0000b4b000-0x22)=@hdr={0x1, 0x0, 0x0, 0x0, 0x4, 0x8, @eth={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="1f282b7879c5", [{[], {0x8100, 0x4, 0x6, 0x8000000000}}], {{0x88ca, @llc={0x4, @llc={0x400000000005, 0xff, "4b0b", ""}}}}}}, 0x22) writev(r2, &(0x7f0000189000)=[{&(0x7f00002eb000)="c9cc4d90d9e6b286397e022709228cc4b2178baac71d46e949ed08259f8d2a7df3966b04ec4938caf25b7f0f868ef4b9a4047a33c134dbc04940e0761e73f4e1f9bffb72c2050bc32fca174596e3fcea6141bdb4d04849ffdd8336ec67f097a86380c7ada61ce4077386e4e7bc702f4b66015bc1acaa7022b8ec8b7bab56184c7e2b9c410870122c36f0cf86002c88ff05e9352d9861f3a26c00146d4db8bfb2a5eda941", 0xa4}, {&(0x7f000072e000-0x1000)="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", 0x1000}, {&(0x7f0000b37000)="8c38efde965e6f145ea4f08ca753024961be75972121d5af62688a96b458403c170868b9dab7216c646461163fb4fedd7e79e81186c7a2f940c173b24655c55423efdf0b70f57bc8074f25d00d9b1a97b7c37c2934ec41e446f0941c0f619b9154a62fcc555808e18721d81cd13b8de80e8fdae7711fbfca37f76e4eee8047ba5aa7d64eda9ecc43a76cdc01f7458bdd369c1b9bb382dd59ad61e89c2ec5777c39bb3ebc1b34", 0xa6}], 0x3) 2017/12/17 10:26:44 executing program 1: mmap(&(0x7f0000000000/0xeba000)=nil, 0xeba000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000ebb000-0xa)="2f6465762f6375736500", 0x408000, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x10000000000080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) iopl(0x0) socketpair$inet(0x2, 0x0, 0xfffffffffffffffd, &(0x7f000029c000-0x8)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000e50000-0x4)=0x0) mmap(&(0x7f0000000000/0xfde000)=nil, 0xfde000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f24000)={0x0, @in={{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x6}, &(0x7f0000fde000)=0x98) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000fdf000-0x8)={0x0, 0x20}, &(0x7f0000cf2000)=0x8) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000a02000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000fdf000-0x5)=@ethtool_sset_info={0x37, 0x5, 0x3, [0x3, 0x7dd, 0xfffffffffbfff581, 0x1000, 0x8]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x800, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f000042a000-0x4)="6e657400") ioctl$TIOCMGET(r3, 0x5415, &(0x7f000012b000-0x4)=0x0) r4 = syz_open_dev$tun(&(0x7f0000ef5000)="2f6465762f6e65742f74756e00", 0x0, 0x2) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00002ca000)=0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000f58000)={@generic="431df1f38e6e0000112f648d1c22ce26", @ifru_addrs=@rc={0x1f, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0}, 0x3}}) connect$inet(r2, &(0x7f00003ca000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0xc) 2017/12/17 10:26:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f000086e000)="2f6465762f6175746f667300", 0x90000163000, 0x0) kexec_load(0x7fffffff, 0x1, &(0x7f0000a3a000-0x20)=[{&(0x7f0000fb8000-0xbd)="8aeb59a872966a1922a818dea46076c8f6b31a614a5252a2097e97544959faef0a1b61f374f6142d25985343b49291885999ed30ebc68befd8258a16ec00a876846c72e06f73afe66bf1671433315a1cfc3fecb474b8308b57f8ec5bc16006be53d0ce464f6702ea13992378af193d9eb804cc5f9b4e283b0783d304c6cdef76e260f04f6ffd003d99e349f400869f49262431ccbd65893e36d258dd947c4452f784e170f0a5cf3fca7128b6c34476e37d1fe223857dc0215fdb9449ef", 0xbd, 0x2, 0x0}], 0x360001) openat$sequencer(0xffffffffffffff9c, &(0x7f000000a000-0xf)="2f6465762f73657175656e63657200", 0x1, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x7, 0x0) sched_setattr(0x0, &(0x7f000081e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff}, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f000041c000-0x8)={0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f000062d000-0xb)="2f6465762f6c6f6f702300", 0x4, 0x2000004800) io_setup(0x22, &(0x7f0000a01000-0x8)=0x0) io_submit(r1, 0x1, &(0x7f00001f8000-0x50)=[&(0x7f00004dc000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000da4000-0x1000)="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", 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2017/12/17 10:26:44 executing program 3: [ 29.364923] audit: type=1400 audit(1513506404.878:9): avc: denied { map } for pid=3141 comm="syz-fuzzer" path="/root/syzkaller-shm141980469" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 30.517427] audit: type=1400 audit(1513506406.031:10): avc: denied { sys_admin } for pid=3186 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 30.703735] audit: type=1400 audit(1513506406.217:11): avc: denied { sys_chroot } for pid=3357 comm="syz-executor7" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/17 10:26:46 executing program 7: 2017/12/17 10:26:46 executing program 7: [ 30.765827] audit: type=1400 audit(1513506406.229:12): avc: denied { net_raw } for pid=3385 comm="syz-executor7" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2017/12/17 10:26:46 executing program 7: 2017/12/17 10:26:46 executing program 7: 2017/12/17 10:26:46 executing program 2: 2017/12/17 10:26:46 executing program 7: 2017/12/17 10:26:46 executing program 2: 2017/12/17 10:26:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00006aa000)=0x81, 0x4) bind$inet(r1, &(0x7f0000339000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = semget(0x1, 0x6, 0x40) semctl$IPC_RMID(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000070c000)={0x1, &(0x7f0000e35000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r1, &(0x7f0000987000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmsg(r0, &(0x7f0000717000-0x38)={0x0, 0x0, &(0x7f000082d000)=[{&(0x7f0000bbd000)="", 0x0}], 0x1, &(0x7f0000e76000)=[], 0x0, 0x0}, 0x800) sendto$inet(r1, &(0x7f0000b10000)="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", 0x237, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000b0e000)=@abs={0x0, 0x0, 0x0}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000b39000)={0xb09, 0xfff, 0x1, 0xca1, 0x0, 0x5, 0x0, 0x6, 0x0}, &(0x7f0000f8e000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000036f000-0x10)={r3, 0x9, 0x1ff, 0x983f}, &(0x7f0000679000-0x4)=0x10) 2017/12/17 10:26:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f6e000-0x29)={0x26, "6165616400000000000000000000", 0x0, 0x0, "726663373533392863686163686132302d67656e657269632c7368613531322d67656e6572696329000000000000000000000000000000000000000000000000"}, 0x58) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000016000-0xb6)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000025d000)=0xb6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000052000)="e5fcb5bf91aa7855fbcdfef1ddb42113", 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000cf4000)="93540874c50ccc08ae54aac10174a8e2fa7b4a125c429617e09150df8b5fe86d114e28d20293ec06a276d39bc5469b8c84ed55", 0x33) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000c5a000-0x38)={&(0x7f00001a3000)=@un=@abs={0x4, 0x0, 0x0}, 0x8, &(0x7f0000b77000)=[], 0x0, &(0x7f0000bd7000)=[{0x10, 0x117, 0x4, ""}], 0x10, 0x0}, 0x0) [ 30.931121] audit: type=1400 audit(1513506406.443:13): avc: denied { net_admin } for pid=3410 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 30.956513] [ 30.958135] ============================================ [ 30.963563] WARNING: possible recursive locking detected [ 30.968984] 4.15.0-rc2-mm1+ #39 Not tainted [ 30.973286] -------------------------------------------- [ 30.978706] syz-executor1/3412 is trying to acquire lock: [ 30.984218] (rtnl_mutex){+.+.}, at: [<00000000298bc199>] rtnl_lock+0x17/0x20 [ 30.991494] [ 30.991494] but task is already holding lock: [ 30.997447] (rtnl_mutex){+.+.}, at: [<00000000298bc199>] rtnl_lock+0x17/0x20 [ 31.004799] [ 31.004799] other info that might help us debug this: [ 31.011427] Possible unsafe locking scenario: [ 31.011427] [ 31.017447] CPU0 [ 31.019992] ---- [ 31.022539] lock(rtnl_mutex); [ 31.025785] lock(rtnl_mutex); [ 31.029031] [ 31.029031] *** DEADLOCK *** [ 31.029031] [ 31.035057] May be due to missing lock nesting notation [ 31.035057] [ 31.041959] 1 lock held by syz-executor1/3412: [ 31.046503] #0: (rtnl_mutex){+.+.}, at: [<00000000298bc199>] rtnl_lock+0x17/0x20 [ 31.054183] [ 31.054183] stack backtrace: [ 31.058643] CPU: 0 PID: 3412 Comm: syz-executor1 Not tainted 4.15.0-rc2-mm1+ #39 [ 31.066138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.075454] Call Trace: [ 31.078009] dump_stack+0x194/0x257 [ 31.081605] ? arch_local_irq_restore+0x53/0x53 [ 31.086240] __lock_acquire+0x11cf/0x47f0 [ 31.090360] ? __unwind_start+0x169/0x330 [ 31.094476] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 31.099630] ? perf_tp_event+0xae0/0xae0 [ 31.103659] ? perf_trace_run_bpf_submit+0x206/0x330 [ 31.108726] ? perf_trace_run_bpf_submit+0x206/0x330 [ 31.113793] ? memset+0x31/0x40 [ 31.117042] ? perf_trace_lock_acquire+0x532/0x980 [ 31.121935] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 31.127184] ? perf_trace_lock+0x4d6/0x900 [ 31.131396] ? trace_event_raw_event_lock+0x340/0x340 [ 31.136557] ? check_noncircular+0x20/0x20 [ 31.140755] ? perf_trace_lock+0x900/0x900 [ 31.144958] lock_acquire+0x1d5/0x580 [ 31.148725] ? rtnl_lock+0x17/0x20 [ 31.152232] ? lock_release+0xda0/0xda0 [ 31.156172] ? rcu_note_context_switch+0x710/0x710 [ 31.161065] ? __might_sleep+0x95/0x190 [ 31.165016] ? rtnl_lock+0x17/0x20 [ 31.168544] __mutex_lock+0x16f/0x1a80 [ 31.172406] ? rtnl_lock+0x17/0x20 [ 31.175911] ? lock_release+0xda0/0xda0 [ 31.179848] ? rtnl_lock+0x17/0x20 [ 31.183352] ? mutex_lock_io_nested+0x1900/0x1900 [ 31.188168] ? unwind_get_return_address+0x61/0xa0 [ 31.193069] ? trace_hardirqs_off+0xd/0x10 [ 31.197277] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 31.202352] ? depot_save_stack+0x2ca/0x460 [ 31.206638] ? selinux_tun_dev_free_security+0x15/0x20 [ 31.211879] ? save_stack+0xa3/0xd0 [ 31.215469] ? save_stack+0x43/0xd0 [ 31.219058] ? kasan_slab_free+0x71/0xc0 [ 31.223087] ? kfree+0xca/0x250 [ 31.226329] ? selinux_tun_dev_free_security+0x15/0x20 [ 31.231568] ? security_tun_dev_free_security+0x48/0x80 [ 31.236895] ? tun_free_netdev+0x153/0x1f0 [ 31.241095] ? register_netdevice+0x97b/0x1010 [ 31.245639] ? __tun_chr_ioctl+0x1ca3/0x3f10 [ 31.250015] ? tun_chr_ioctl+0x2a/0x40 [ 31.253875] ? do_vfs_ioctl+0x1b1/0x1530 [ 31.257903] ? SyS_ioctl+0x8f/0xc0 [ 31.261413] ? entry_SYSCALL_64_fastpath+0x1f/0x96 [ 31.266310] ? find_held_lock+0x39/0x1d0 [ 31.270347] ? check_noncircular+0x20/0x20 [ 31.274550] ? print_usage_bug+0x3f0/0x3f0 [ 31.278750] ? lock_downgrade+0x980/0x980 [ 31.282862] ? tun_flow_flush+0x41/0xe0 [ 31.286805] ? mark_held_locks+0xb2/0x100 [ 31.290930] ? kfree+0xe4/0x250 [ 31.294181] ? selinux_tun_dev_free_security+0x15/0x20 [ 31.299425] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 31.304404] ? trace_hardirqs_on+0xd/0x10 [ 31.308520] mutex_lock_nested+0x16/0x20 [ 31.312549] ? security_tun_dev_free_security+0x67/0x80 [ 31.317883] ? mutex_lock_nested+0x16/0x20 [ 31.322093] rtnl_lock+0x17/0x20 [ 31.325434] tun_free_netdev+0x158/0x1f0 [ 31.329459] ? tun_xdp+0x410/0x410 [ 31.332965] ? __lockdep_init_map+0xe4/0x650 [ 31.337338] ? tun_detach_all+0xb50/0xb50 [ 31.341457] ? tun_xdp+0x410/0x410 [ 31.344968] register_netdevice+0x97b/0x1010 [ 31.349342] ? netdev_change_features+0x100/0x100 [ 31.354157] ? round_jiffies_up+0xce/0x100 [ 31.358364] ? __round_jiffies_up_relative+0x150/0x150 [ 31.363605] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 31.368502] ? selinux_tun_dev_alloc_security+0x124/0x170 [ 31.374014] __tun_chr_ioctl+0x1ca3/0x3f10 [ 31.378224] ? tun_chr_read_iter+0x1e0/0x1e0 [ 31.382597] ? lock_downgrade+0x980/0x980 [ 31.386712] ? avc_ss_reset+0x110/0x110 [ 31.390652] ? lock_release+0xda0/0xda0 [ 31.394597] ? __lock_is_held+0xbc/0x140 [ 31.398631] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 31.404490] ? get_unused_fd_flags+0x190/0x190 [ 31.409046] ? tun_chr_compat_ioctl+0x30/0x30 [ 31.413521] tun_chr_ioctl+0x2a/0x40 [ 31.417200] ? tun_chr_ioctl+0x2a/0x40 [ 31.421063] do_vfs_ioctl+0x1b1/0x1530 [ 31.424921] ? _cond_resched+0x14/0x30 [ 31.428773] ? ioctl_preallocate+0x2b0/0x2b0 [ 31.433148] ? selinux_capable+0x40/0x40 [ 31.437178] ? SyS_futex+0x269/0x390 [ 31.440859] ? security_file_ioctl+0x89/0xb0 [ 31.445232] SyS_ioctl+0x8f/0xc0 [ 31.448567] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 31.453287] RIP: 0033:0x452a39 [ 31.456443] RSP: 002b:00007ff77e396c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 31.464118] RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452a39 [ 31.471353] RDX: 0000000020f58000 RSI: 00000000400454ca RDI: 0000000000000017 2017/12/17 10:26:47 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket(0x11, 0xa, 0x300) r2 = socket$inet(0x2, 0x1, 0x215a) epoll_pwait(r0, &(0x7f000033f000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x8, 0x200, &(0x7f0000e96000)={0xf7}, 0x8) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f000024d000)=0x0, 0x1f) r3 = syz_open_dev$tun(&(0x7f0000c55000)="2f6465762f6e65742f74756e00", 0x0, 0x100000a) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = socket(0x2000000011, 0x3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000928000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_settings={0x5, 0x0, @sync=&(0x7f00001a4000-0xc)={0x0, 0x0, 0x0}}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x20301}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000b13000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$packet(r5, &(0x7f0000c85000)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14) getrandom(&(0x7f00003f4000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f000063f000-0xc)={0x0, 0x0, 0x0}, &(0x7f00003ea000-0x4)=0xc) ioprio_get$uid(0x3, r7) r8 = socket$packet(0x11, 0x3, 0x300) sendto(r8, &(0x7f00007c9000-0x37)="567d8708e3f2b059b381eccd31041f80f5907c00d3a9af6268439b2c5de31f09587efcdd56a9fb2ee7caa31f64022dc774fa5b7f72f903", 0x37, 0x1, &(0x7f00006ae000-0x14)=@ll={0x11, 0x0, r6, 0x1, 0xfffffffffffffe01, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14) accept4$inet(r4, 0x0, &(0x7f0000616000-0x4)=0x0, 0x80000) r9 = dup2(r0, r3) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f0000300000-0x4)=0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000923000)={0x0, 0x0, 0x0}, &(0x7f0000a9a000)=0xc) getsockopt$SO_PEERCRED(r4, 0x1, 0x11, &(0x7f0000e0c000)={0x0, 0x0, 0x0}, 0xc) getresgid(&(0x7f0000e1e000-0x4)=0x0, &(0x7f0000833000)=0x0, &(0x7f0000e73000)=0x0) setgroups(0x3, &(0x7f000012a000-0xc)=[r10, r11, r12]) 2017/12/17 10:26:47 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000246000)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$sg(&(0x7f000065d000-0x9)="2f6465762f73672300", 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000047a000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000b26000)=0xc) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000427000)={0x0, 0x0, 0x0}, 0xc) r3 = syz_open_procfs(r1, &(0x7f0000630000)="73657373696f6e696400") perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000d8c000)="2f6465762f73657175656e6365723200", 0x4001, 0x0) add_key$keyring(&(0x7f0000f8b000)="6b657972696e6700", &(0x7f000019d000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000037000)="7573657200", &(0x7f0000c10000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000001b000-0x1)="f9", 0x1, 0xfffffffffffffffe) socket$inet(0x2, 0x2, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) rt_sigqueueinfo(r2, 0x0, &(0x7f0000145000-0x10)={0x24, 0x3, 0x3, 0x1683}) r5 = syz_open_dev$tun(&(0x7f000004c000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xa) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00007e4000-0xb)={0x80, 0x0, 0x729, 0x0, 0x7fffffff, 0x0, 0x400000, 0xc28a, 0x4, 0x40000000000000, 0x0}, 0xb) getpid() ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00006c8000)={0x6, {{0xa, 0x3, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffff0001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2, [{{0xa, 0x3, 0x7f, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x0, @loopback={0x0, 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x190) syz_open_dev$evdev(&(0x7f0000bcf000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x4, 0x78, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000000000000, 0x0, 0x800004000000000, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xc) socket(0x11, 0x1, 0x300) connect$ax25(r4, &(0x7f0000eb0000)={0x3, {"e80107fffc1508"}, 0x18000}, 0x10) accept4$packet(r4, &(0x7f0000d88000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00003e0000-0x4)=0x14, 0x80800) bind(r0, &(0x7f0000dab000-0x14)=@ll={0x11, 0x0, r6, 0x1, 0x9, 0x6, @random="a9bb6cb1fb1f", [0x0, 0x0]}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000e43000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x20000000800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@redirect={0x11, 0x0, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, {0x5, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @broadcast=0xffffffff, {[]}}, ""}}}}}, 0x0) preadv(r3, &(0x7f0000005000)=[{&(0x7f0000001000-0x1)="00", 0x1}], 0x1, 0x10000000000000) [ 31.478586] RBP: 00000000000005b9 R08: 0000000000000000 R09: 0000000000000000 [ 31.485824] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f69f8 [ 31.493061] R13: 00000000ffffffff R14: 00007ff77e3976d4 R15: 0000000000000000 [ 31.517467] syz-executor6 uses obsolete (PF_INET,SOCK_PACKET) [ 31.520938] audit: type=1400 audit(1513506407.031:14): avc: denied { dac_override } for pid=3432 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 31.594664] audit: type=1400 audit(1513506407.108:15): avc: denied { setgid } for pid=3428 comm="syz-executor4" capability=6 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1