[....] Starting enhanced syslogd: rsyslogd[ 13.021375] audit: type=1400 audit(1520514151.951:4): avc: denied { syslog } for pid=3644 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. 2018/03/08 13:02:47 fuzzer started 2018/03/08 13:02:47 dialing manager at 10.128.0.26:36035 2018/03/08 13:02:51 kcov=true, comps=false 2018/03/08 13:02:53 executing program 0: socket$inet(0x2, 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000300)) getpid() clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000040)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f000042cff4)='io\x00') readv(r0, &(0x7f00009f4fd0)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1) execveat(0xffffffffffffffff, &(0x7f0000a4fff8)='./file0\x00', &(0x7f0000a72000), &(0x7f00004c1000), 0x0) open$dir(&(0x7f0000e9f000)='./file0\x00', 0x26102, 0x0) 2018/03/08 13:02:53 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000034000)={0x0, 0x0, 0xf7fffffffffffffe}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="199cdca81334", @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, @multicast2=0xe0000002}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @broadcast=0xffffffff}}}}}}, 0x0) 2018/03/08 13:02:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x800000000100003) perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x47, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000001540), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffd65, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x52) 2018/03/08 13:02:53 executing program 7: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f000077f000)=0x80000, 0x4) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x10, &(0x7f0000bb0000), 0x0, &(0x7f0000878000)}, 0x0) 2018/03/08 13:02:53 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x6}}}}}}}, &(0x7f00000002c0)) 2018/03/08 13:02:53 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="b100485caa2a", @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00003b5000)) 2018/03/08 13:02:53 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00000011c0)="e4", 0x1, 0x0, &(0x7f0000001100)={0xa, 0x204e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f0000cbdfb8)='v', 0x1) shutdown(r0, 0x1) writev(r0, &(0x7f00005a8fe0)=[{&(0x7f0000b44000)="3d879584d44d7d43e8abb80895a5c573a349be69840da2006d847cbcf6b0a87ae4b77e61db84728865436e30b18d74b8ceef03abf8a0045b61852466ea308f2b7e2fe35544f2452b7998d41aecccd721361e4ba2c5a3a001ad9b7e855ff7f7c80a0e23b9568ee52fa1dbe54811e3de7e160d36cd6b5b07ce29c53317c1da02f268398715dfcfb5291a2af0c17c77479381e4c025560f66490b639cee27020cde26ed97a994ca6032ea9d2fee9381d9ed1ef2986f5c9c4d8e7e64c079d37b575ec416748a8a68d9160212a0f8a8bab91041eee02859d22a40995b1e52c3c47f8c9e9195ffb51ff758ded8d0215052217861a7f51baf70d761ac6d7758512f05d8982705b8670ef5371b76716757ddcb1d3690e6fb742006e46ba28befb8ea1f23cd26846d8f3c8eb3cdb9c27799106309d81f00232af8db95e32691ccbca393d93954eaf35a6883e550d83a2c94744371ce306b562ba365512e77267706788beaa2d643a844b4a1a5dddccf5d0d0b9900be7668a80d606378522cc522a4edc3f038e4078661016b52264252676c4d3a75ac249457d22357d86da9a6deb6bd42f91f352d33b2e29cccc0d344d9d8bee343d23543aa745433602b294b05caeed1f6b2497bbb0408dd17e83b9ddb8a1da2874f45b8bc84ddb942df84bdb9904bc2d05b31c3a31a1d36b2b79c3bd1545147d1b962c41bce854102de2b377322decff664a7df9ac3e80a8ea44c699b412086d4dac699517fd3fe2aa3eaeb8b76273bd57d3130f6cdb4f2c8197b7e11bfd311e511a041eadc6bf1a0a84363fc800d5b5d2e3eb57b60a7bf01648ca18ab882c702996d1d84593d254f10cd566a1b64a180f863b43fa3a8e74efce780bb1dcbeb2e34603fc7b5e6b40e2a5998c50db5867eb83dd7442c80e8c8bbc15d77b018a591e03b90ff27665cccd74aa93d98fc78b9a58f79d949174ed17141c492ab8dde78176bd8f2d752e349673f59a4d1d086ee52f5ef9a395983d43b10725de8a86de704e817e7160bd707dc1c525eb58d0f0ac0d65b988b3a06d46dd0463931d7df43b41c571ab380674115548b63d3612f6ebf500c58e62eb82ba00d19caf5fbcbeee8fd173b37117788f265c53d17997e4aea4f5123b959ea013d44e294452f377dc45d5a8ac9f7f48c2337ce41d53f60af77a7a0f609d3c3d0787864b34ea186bc04245964eb37086b6fdce5f3babe5b602a9e2685924e7540c58235ad47e681d811de5f2860a98d52f088d638a53deeb854b9cecf04449981c8ecd032d670bf5f9eb860023c0815ccef4d8d1a1a44f2dfe6cb2feb67ab4bada511773db1db6d46e910e6a47caf687c4998b9ca0b3678804e5a131ca678f8c125369d67b06bd14564ba9dfcfa9cd1d6010133164bab99a5cc0b6f78e8815dfd492e84bfabf002bc2f542e2dbbe313737d14aefcf673d1ff79e24f09fc4f4d28155a2e6321b6a402a402fb80ac198ee355ec13e3b8c6f27d3864b91b4414285fc39040505ab920cd8fa30bd600739cca86fafe73df080092af880174a8ffaaac295f0823931d1019123bc26f7c4ad6a2fbb0ec87911e98eb64e4be1d4df6c6adb8d877271340923527c3f0a6599179182ab00dabd483bcff0942d52cdd5372a6cd6e99960cb723005995a3aa3af6e441c42be8514031ceee9d5333c1a9fb097a5890d8469de2468b4d034f89288cfa5b7afb7c92a2525c66aa9d4f8a4d63fd6564c953d696f664ace18e22c9025b86221abefbaa1c37e989823cfeca7ce3658d975f79e32ff03d7ae15c0b97de444e3547f36b1cbb24aaa74ca92d774409b585b442a6598ad5ebe96a51d4265be099b4676eff0034a8a5f6f7939d34da30eecaf4c74afc8c26aef6664f4bd0271b1b047c16eef6dd69c4e1a4ea3b97110747099acc342f4abf4cb5af06a2b4f50f41bf00b4c2dc84c38bcf6a1f94a89d347676af147ae1835d0d80e97b20f52ec47eb8127d158fc0928a7d8479e7aaff4393b75d0d4553db0c01805d63cc9e24d2df96de", 0x599}], 0x1) 2018/03/08 13:02:53 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000040)=[{0x10}], 0x10}}, {{&(0x7f0000000e80)=@ipx={0x4, 0x0, 0x0, "85016dfe9b78"}, 0x10, &(0x7f0000000f80), 0x0, &(0x7f0000002480)}}], 0x2, 0x0) syzkaller login: [ 34.693063] audit: type=1400 audit(1520514173.621:5): avc: denied { sys_admin } for pid=3860 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.733418] IPVS: Creating netns size=2536 id=1 [ 34.764314] audit: type=1400 audit(1520514173.691:6): avc: denied { net_admin } for pid=3863 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.789416] IPVS: Creating netns size=2536 id=2 [ 34.808607] IPVS: Creating netns size=2536 id=3 [ 34.843151] IPVS: Creating netns size=2536 id=4 [ 34.887187] IPVS: Creating netns size=2536 id=5 [ 34.930474] IPVS: Creating netns size=2536 id=6 [ 34.981553] IPVS: Creating netns size=2536 id=7 [ 35.021927] IPVS: Creating netns size=2536 id=8 [ 37.357199] audit: type=1400 audit(1520514176.291:7): avc: denied { sys_chroot } for pid=3865 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 37.457124] audit: type=1400 audit(1520514176.391:8): avc: denied { net_raw } for pid=5137 comm="syz-executor1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/08 13:02:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x800000000100003) perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x47, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000001540), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffd65, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x52) [ 37.510920] audit: type=1400 audit(1520514176.441:9): avc: denied { dac_override } for pid=5129 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/08 13:02:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x21, &(0x7f0000938ff4)={@multicast1=0xe0000001}, 0xc) 2018/03/08 13:02:56 executing program 1: fchown(0xffffffffffffffff, 0x0, 0x0) eventfd2(0xfffffffffffffff9, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x30) accept4$netrom(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80800) socketpair$inet6(0xa, 0xa, 0x6, &(0x7f0000000100)) 2018/03/08 13:02:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000080)={0x14, 0x32, 0x443}, 0x14}, 0x1}, 0x0) 2018/03/08 13:02:56 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x3a, &(0x7f0000000240)=[{&(0x7f0000000740)=""/189, 0xbd}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3, &(0x7f0000000280)=""/22, 0x16}}, {{&(0x7f00000002c0)=@ethernet={0x0, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000540)=""/142, 0x8e}], 0x3d3, &(0x7f0000000640)=""/31, 0x1f}}], 0x2, 0x22, 0x0) bind$inet(r0, &(0x7f000000f000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x4e23}, 0x10) 2018/03/08 13:02:56 executing program 5: seccomp(0x1, 0x0, &(0x7f0000158000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) prctl$seccomp(0x16, 0x1, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) [ 37.622380] tc_ctl_action: received NO action attribs 2018/03/08 13:02:56 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet(r0, &(0x7f0000f60ff0)={0x2, 0x4e20}, 0x10) socket$netlink(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x10000004e22, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x40000000000000}, 0x1da) 2018/03/08 13:02:56 executing program 7: perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x47, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f0000c54fe0)={0x14, 0xd, 0x6, 0x1}, 0xffbe}, 0x1}, 0x0) 2018/03/08 13:02:56 executing program 1: perf_event_open(&(0x7f0000271000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000009fbf)={0x14, 0x15, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}}, 0x14}, 0x1}, 0x0) 2018/03/08 13:02:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0xce20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x4e20, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/03/08 13:02:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') writev(0xffffffffffffffff, &(0x7f00009eb000), 0x0) pread64(r0, &(0x7f0000fd7000)=""/8, 0xfff8, 0x0) 2018/03/08 13:02:56 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000982f5b)={@random="0352ba8e8227", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @dev={0xac, 0x14}}, @dccp={{0x4e20, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "2099e9", 0x0, "d085f5"}}}}}}, &(0x7f0000000000)) 2018/03/08 13:02:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000080)=@ethtool_test={0x1a}}) 2018/03/08 13:02:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000001400)=@routing, 0x8) sendto$inet6(r0, &(0x7f0000586000)="6644277b3e27db8d29e2f472ea44d88601f280b902a58cab788d91ce76b80fa902b1e4b9beeba44988fd1340b8aece67579944d6a3cf89f35b6de148992919766ea8d86e55cd07989f8e197fad50b467cd150a6fc4a26a502566f463d16a3a8ffa0464a9135a2c31c15d3554bb0046c4386be1278a6ff289a4c216f7ee2a843d8d7e2c370547a7a1658e0ba428bcd7a9c4c1c19f8c7102990bab8184d5dd8ea90febb54172cd8ab875e0f1e165d424bf3d2f37bd72f31dc214f47e16d65420894decd56932f46f345e9fdf31d770995e852e659d36862df760dfc671ed0f9fb19657cb9528784807b5bf54ac242d0454b364809d8fa1dcc999d95d33f51ced4c6cd1c3ec7a566c55c2abe040d7bcb211ab420c5818399e853587555d35170a9d019ad96a5a5a54c5d9638c8da1a7672e680239b16ab8ba2b02ed702adf92b2bae99a612867c7bae0d10745fea2fb40f34795f78b43687e4f1bad4d86b0666c670234eb03cac289a2fe29ebf53d461c1f53dba7fd82dab5e686b2d88882d9522c0197fae65deab829e4865a1965d4a8d38d85143c4f8561ce1167d9884eb06065577e6cffa234029c65095316bbc48fcb2566215759f1aa3cc1fad8ff79df3a5af0fe6b56c3b4c1ec875f1762c31aee0baf0d603494fa6a277bee5e351cc05eaf03f2949331d79a2e1b7ad8621e7cb4d1ea3d050eb43a609ccc458bc99f52503f0a22a38147afbfd54d91ae00df667d508eaeee593f62166ee4b673dd4d69b5876d9fa8bdac1f11fc3e811d6decd6c22115f7636831151b929dea26946dee2169dd162df3e8218e0b62e8683632aceff48272f3cbfbc1002ac259021b8dd5f0a6386e1035b31ff6a8310f2037ca89ec6d5a82eeeda8566e012f90f862ad4cf01fd1389466e826243ee499f290365041a9c6466d9eb6e6dd1397c6cff3427e4a167b66f36a0a561d005d2be686d903182d7a62ed30a20d842703596c2480f55489cf891034b286236c9af64e93ffc0a472c5d226f6c5b63e65ae9e57058c48587b8adb44667c3b9cd0b6869387f1f46a2370c59220053371a5d99dfead40ac26c3bca07e77db3ff2d57cbd27f09ec3128d6f41df15746471d4c9cba8845400efcb3d6317204eaf96750ec3e84a4ee6c73ab5d23dde43d91672db05f20b7c8c875878e18d8be17a1dd152f2964bc27243d5ce5db3bd94c5eb27e5c01c5d5220f95bc5455f6d226817c3d6a29adad740e79ce944c7296f51a42c2f876c554ed527ee0834ec4947fd1c4864bc1e9909157b58220beaff1ea351262b54c4d122e80b2a44276fd56570c7af1addc572ee837292ac73f136d389a539adaab197ec456b1a626665b7f32baf8351ee4ea96b9d15a7647786920f686caa1e727ed06d52eda50ac0b983e07ee023ec09b7bcda351be6009f1894ebdd0aad388f0fe2375159c1a1ddc5355407d0d6ae2db3b972cf784b2addf7d869867cb3cf54bca1cfd81e028cda98a3ca3550f933e02d6c9f430c9fd89d98ac1bb9d612636df8040bad95cb2d49666eb6de0732edb4681187315d72957def42c54116e917ddbb369d12b14df772defb6d549a38b893c1fbc4cf708709b39f9ecf38d6fb7a4980e8438dc7543b91027348814de3ad4cf5592b10f73ce56b9d1e5e6390b9328a508b882b7f586f4ffed221adafb40f938bf77e11dd8d9d38f36b97669a89091df85348df2aaa00bca8a456c931d749cee27c20d9b2c69d50540e0e612ddf144950fcf65bbde7dff9dd6fb934a650441103b521aefcb4ec775e6f6abe9177e9bcfcfa3b254c974cf40923eb09de67d91f15e8e5507fd3238f0e6742d92fd4301b5234afc75948d43b12aa5e8df217aa1ee8bc62744be3d5b2d15e5a099bff988ae6bab4f7bf967a1c0314e7b7898d99f7f4eaf876d00690bf6a6ba22784e0cfeb62a8beadf51a1214f5cb82b81792a63ece59faaf9f208fd7875260df296403611815fcb39aadea21d4ed4d66aee4bf6293cece0ac77c27786f464c5ef428e8a05771e5b369701d73f77e987b35e2abc8d612fecb004db5230d93980cd494742bf1dd17776ca3d3fca515d3ae29702ba3f8d0932f7c13efc7e618f6fbf5605fb523315147c7bafa899a9c0c2aa9919b32e35a1171b4dff2caf8fc130a5ad1a508e3259e2cd941db5b4dc4e0326dac55ae2feb7eaeb7f80a3e2bdcac91438c128ab6022d516be13a89470193f15c81c27fc5bdd1c56ebebf5bcd2212cb37118a29ef550f4f1955a48f36b1dc3b2d88085047c0efd0ddc03593b0eff1f165c21ca8da2c3c523872e456f4be7372fe320e83a4d57836f820f80aec5e51ff6ce7e763e09e3218b22cfb277b5288b1d95c4431cdb7590853724b83cdefa624791251b7679f7b64d6f5c68de726245391e1dd51b1dfa34325feee0db5bdc0ae644cc066ff7325af19f8c0941e7ae833458d283527b5ac88ff7657729b754ea9aaa4baab8b3c5d5a83b7a4f13b2e9a43dea3ad540f4e414884ad2698a8f8ff9ce4db1cecbe6b8590c9232ff19d19a9c2bf6a6530ff61377bba7679cfc6e42a7bbb77c94d0177cba858b8b5b3e381a6dd688c5af406d6dcdf1708328e975562c0d170cb137cbb198fac4eb79dcb8756b81c7b228dde11030b0305cd02ffa1706db21744054b82e63b6729b43fb69bf9cf593ee13290c07cbb265b02f2bd3698a2462e4e60b7549cd27fcd5b0bb44aeb44161606cf2042127dfc88decc85d65b23b071e72aeb81af189ece8f4f97b4a630b1120946a25f154c6b66b430f9894da83460cd3ff9708d995d3812e3d83775d7410b8a8ebff923c5d0a8d048e77f5a119749ee414b24694736ea972b60e9dcfc8e69064e795a4725d6aa", 0x7f0, 0x4c080, &(0x7f00005fa000)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000a86ffc)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/03/08 13:02:56 executing program 3: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000002c00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001900), 0x0, &(0x7f0000001980)=""/27, 0x1b}}, {{&(0x7f00000019c0)=@vsock, 0x10, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)=""/62, 0x3e}}], 0x2, 0x12020, &(0x7f0000002c40)={0x0, r3+30000000}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000069ff8)={0x0, r0}) dup2(r1, r2) tkill(r0, 0x15) 2018/03/08 13:02:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getroute={0x14, 0x1a, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) 2018/03/08 13:02:56 executing program 5: r0 = perf_event_open(&(0x7f00000f0f88)={0x2, 0x78, 0x47, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r1, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) setns(r0, 0x0) sendto$inet6(r1, &(0x7f0000b8cffd)='-', 0x1, 0x0, &(0x7f00001aafe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) writev(r2, &(0x7f000051c000)=[{&(0x7f0000b8cfb7)="480000001400190d09004beafd0d8c560a847f0080ffe00600000000000000a2bc5603ca00000fff89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/03/08 13:02:56 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000704ffb), 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000f67000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) [ 37.923747] audit: type=1400 audit(1520514176.851:10): avc: denied { create } for pid=5243 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 37.963761] ------------[ cut here ]------------ 2018/03/08 13:02:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000481ff7)='net/udp6\x00') r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000bcdffc)=0x3, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) preadv(r0, &(0x7f00005b1ff8)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/03/08 13:02:56 executing program 2: perf_event_open(&(0x7f000057c000)={0x2, 0x78, 0x48, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7ff, 0x4) 2018/03/08 13:02:56 executing program 7: clone(0x200, &(0x7f0000611000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000b40000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000300), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') read$eventfd(r0, &(0x7f0000000000), 0x5f8) perf_event_open(&(0x7f0000001500)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/03/08 13:02:56 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000005c0), &(0x7f0000000600)=0x8) [ 37.968492] audit: type=1400 audit(1520514176.901:11): avc: denied { write } for pid=5243 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 37.992447] WARNING: CPU: 1 PID: 5255 at net/core/dev.c:2466 skb_warn_bad_offload+0x2af/0x390 [ 38.001112] lo: caps=(0x000000a2803b7c69, 0x0000000000000000) len=2102 data_len=2032 gso_size=1992 gso_type=2 ip_summed=0 [ 38.012209] Kernel panic - not syncing: panic_on_warn set ... [ 38.012209] [ 38.019566] CPU: 1 PID: 5255 Comm: syz-executor4 Not tainted 4.9.86-g00db063 #52 [ 38.027080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.036407] ffff8801b359ef60 ffffffff81d956f9 ffffffff83a480c0 ffff8801b359f038 [ 38.044378] ffffffff83ee3400 ffffffff82f3634f 0000000000000009 ffff8801b359f028 [ 38.052355] ffffffff8142f531 0000000041b58ab3 ffffffff8418b470 ffffffff8142f375 [ 38.060327] Call Trace: [ 38.062892] [] dump_stack+0xc1/0x128 [ 38.068229] [] ? skb_warn_bad_offload+0x2af/0x390 [ 38.074696] [] panic+0x1bc/0x3a8 [ 38.079684] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 38.087884] [] ? vprintk_emit+0x3ad/0x750 [ 38.093655] [] ? __warn+0x1a9/0x1e0 [ 38.098904] [] ? skb_warn_bad_offload+0x2af/0x390 [ 38.105364] [] __warn+0x1c4/0x1e0 [ 38.110436] [] warn_slowpath_fmt+0xc4/0x110 [ 38.116379] [] ? __warn+0x1e0/0x1e0 [ 38.121628] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 38.128522] [] ? ___ratelimit+0x53/0x460 [ 38.134202] [] skb_warn_bad_offload+0x2af/0x390 [ 38.140490] [] __skb_gso_segment+0x541/0x680 [ 38.146518] [] validate_xmit_skb+0x44e/0x980 [ 38.152547] [] ? check_preemption_disabled+0x3b/0x200 [ 38.159360] [] ? check_preemption_disabled+0x3b/0x200 [ 38.166168] [] __dev_queue_xmit+0xb2c/0x20a0 [ 38.172194] [] ? __dev_queue_xmit+0x1e2/0x20a0 [ 38.178394] [] ? netdev_pick_tx+0x300/0x300 [ 38.184343] [] ? memcpy+0x45/0x50 [ 38.189414] [] dev_queue_xmit+0x17/0x20 [ 38.195009] [] neigh_resolve_output+0x469/0x770 [ 38.201296] [] ? ip6_finish_output2+0x930/0x1d20 [ 38.207676] [] ? eth_mac_addr+0x1a0/0x1a0 [ 38.213441] [] ip6_finish_output2+0x930/0x1d20 [ 38.219639] [] ? ip6_finish_output2+0x175/0x1d20 [ 38.226016] [] ? ip6_sk_dst_lookup_flow+0x590/0x590 [ 38.232652] [] ? check_preemption_disabled+0x3b/0x200 [ 38.239461] [] ? ip6_mtu+0x209/0x340 [ 38.244796] [] ip6_finish_output+0x2e6/0x750 [ 38.250826] [] ip6_output+0x1f3/0x6a0 [ 38.256246] [] ? ip6_output+0x40c/0x6a0 [ 38.261843] [] ? ip6_finish_output+0x750/0x750 [ 38.268044] [] ? ip6_fragment+0x3390/0x3390 [ 38.273990] [] ip6_local_out+0x95/0x170 [ 38.279587] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 38.285702] [] ip6_send_skb+0xa1/0x340 [ 38.291209] [] udp_v6_send_skb+0x301/0xeb0 [ 38.297064] [] udp_v6_push_pending_frames+0x22f/0x340 [ 38.303874] [] ? udpv6_destroy_sock+0xd0/0xd0 [ 38.309997] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 38.316111] [] udpv6_sendmsg+0x1f38/0x2540 [ 38.321967] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 38.328085] [] ? udp_v6_rehash+0xa0/0xa0 [ 38.333771] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 38.340754] [] ? sock_has_perm+0x1c2/0x3e0 [ 38.346608] [] ? sock_has_perm+0x292/0x3e0 [ 38.352460] [] ? sock_has_perm+0x9f/0x3e0 [ 38.358229] [] ? selinux_file_send_sigiotask+0x310/0x310 [ 38.365300] [] ? check_preemption_disabled+0x3b/0x200 [ 38.372116] [] ? inet_sendmsg+0x201/0x4c0 [ 38.377882] [] inet_sendmsg+0x2bc/0x4c0 [ 38.383475] [] ? inet_sendmsg+0x73/0x4c0 [ 38.389154] [] ? inet_recvmsg+0x4c0/0x4c0 [ 38.394922] [] sock_sendmsg+0xca/0x110 [ 38.400426] [] SYSC_sendto+0x2c8/0x340 [ 38.405938] [] ? SYSC_connect+0x310/0x310 [ 38.411708] [] ? __might_fault+0xe4/0x1d0 [ 38.417479] [] ? udp_lib_setsockopt+0x17a/0x560 [ 38.423770] [] ? SyS_futex+0x22e/0x2d0 [ 38.429275] [] ? do_futex+0x15c0/0x15c0 [ 38.434870] [] ? move_addr_to_kernel+0x50/0x50 [ 38.441069] [] SyS_sendto+0x40/0x50 [ 38.446319] [] ? SyS_getpeername+0x30/0x30 [ 38.452175] [] do_syscall_64+0x1a4/0x490 [ 38.457856] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 38.465282] Dumping ftrace buffer: [ 38.468830] (ftrace buffer empty) [ 38.472510] Kernel Offset: disabled [ 38.476112] Rebooting in 86400 seconds..