[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.627563] audit: type=1400 audit(1519721901.248:6): avc: denied { map } for pid=4211 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. 2018/02/27 08:58:27 fuzzer started syzkaller login: [ 25.092301] audit: type=1400 audit(1519721907.713:7): avc: denied { map } for pid=4222 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/27 08:58:28 dialing manager at 10.128.0.26:35219 [ 27.710542] can: request_module (can-proto-0) failed. [ 27.719619] can: request_module (can-proto-0) failed. 2018/02/27 08:58:30 kcov=true, comps=true [ 28.211787] audit: type=1400 audit(1519721910.832:8): avc: denied { map } for pid=4222 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9458 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/27 08:58:31 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00005c39a2)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/27 08:58:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f000031d000)) 2018/02/27 08:58:31 executing program 0: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 2018/02/27 08:58:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000011bfe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)=ANY=[@ANYBLOB="020f000014000000ffffffffffffffff05000600000000000a004e22000000000000000000000000000000000000000100000000000000000800120000000300ffffffff0000000006000000000000000000000000000000fe800000000000000000000000000000ac14000000000000000090fff022000005000500000000000a004e2000000000ff0100000000000020000000000000010000000000000000"], 0xa0}, 0x1}, 0x0) 2018/02/27 08:58:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001ffc), 0x86, 0x0, &(0x7f0000001ff0)={0x1f}, &(0x7f0000239000), 0x0) 2018/02/27 08:58:31 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000ea9fb0)={{0x4000001ff, 0x80000a}, {}, 0xffffffffffffffff}) 2018/02/27 08:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000004000)=[{&(0x7f0000001f8d)="390000001300090468fe0000810000000700004003000000450001070000001419001a00e3ff010007000012020000080000e10c00f41ee400", 0x39}], 0x1) 2018/02/27 08:58:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000058790)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000d0e000)=[{{}, 0x11, 0xfffffffffffffffa}], 0x18) [ 28.486963] audit: type=1400 audit(1519721911.107:9): avc: denied { map } for pid=4222 comm="syz-fuzzer" path="/root/syzkaller-shm147173244" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 28.529255] audit: type=1400 audit(1519721911.149:10): avc: denied { sys_admin } for pid=4266 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.543926] IPVS: ftp: loaded support on port[0] = 21 [ 28.628662] IPVS: ftp: loaded support on port[0] = 21 [ 28.633934] audit: type=1400 audit(1519721911.254:11): avc: denied { net_admin } for pid=4269 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.670527] IPVS: ftp: loaded support on port[0] = 21 [ 28.711821] IPVS: ftp: loaded support on port[0] = 21 [ 28.768659] IPVS: ftp: loaded support on port[0] = 21 [ 28.846544] IPVS: ftp: loaded support on port[0] = 21 [ 28.948303] IPVS: ftp: loaded support on port[0] = 21 [ 29.047186] IPVS: ftp: loaded support on port[0] = 21 [ 30.218558] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.365945] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.496051] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.518819] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.527058] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.734561] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.897943] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.921834] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.067557] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.073806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.201787] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.207907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.294300] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.300407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.328335] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.358584] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.364704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.397464] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.403673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.527587] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.580831] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.614108] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.620445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.634062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.654673] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.660852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.668332] audit: type=1400 audit(1519721916.289:12): avc: denied { sys_chroot } for pid=4269 comm="syz-executor3" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.698939] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/02/27 08:58:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f000031d000)) 2018/02/27 08:58:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f000031d000)) 2018/02/27 08:58:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f000031d000)) [ 33.793584] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.799803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.811791] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/02/27 08:58:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f000031d000)) 2018/02/27 08:58:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f000031d000)) [ 33.916608] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.922839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.930989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.944488] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.954529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 2018/02/27 08:58:36 executing program 0: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 2018/02/27 08:58:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f000031d000)) [ 33.991106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.008440] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.014525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.083617] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.090780] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.096976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.106527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.140604] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.148279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.159340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.174124] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.255675] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.270636] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.277203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.284450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.298717] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.310328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.319387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/27 08:58:37 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00005c39a2)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/27 08:58:37 executing program 0: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 2018/02/27 08:58:37 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000004200030f07fffd946fa283bc0aeee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/27 08:58:37 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000ea9fb0)={{0x4000001ff, 0x80000a}, {}, 0xffffffffffffffff}) 2018/02/27 08:58:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000004000)=[{&(0x7f0000001f8d)="390000001300090468fe0000810000000700004003000000450001070000001419001a00e3ff010007000012020000080000e10c00f41ee400", 0x39}], 0x1) 2018/02/27 08:58:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001ffc), 0x86, 0x0, &(0x7f0000001ff0)={0x1f}, &(0x7f0000239000), 0x0) 2018/02/27 08:58:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000011bfe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)=ANY=[@ANYBLOB="020f000014000000ffffffffffffffff05000600000000000a004e22000000000000000000000000000000000000000100000000000000000800120000000300ffffffff0000000006000000000000000000000000000000fe800000000000000000000000000000ac14000000000000000090fff022000005000500000000000a004e2000000000ff0100000000000020000000000000010000000000000000"], 0xa0}, 0x1}, 0x0) 2018/02/27 08:58:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000058790)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000d0e000)=[{{}, 0x11, 0xfffffffffffffffa}], 0x18) [ 34.355975] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.362125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.369917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/27 08:58:37 executing program 0: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 2018/02/27 08:58:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000004000)=[{&(0x7f0000001f8d)="390000001300090468fe0000810000000700004003000000450001070000001419001a00e3ff010007000012020000080000e10c00f41ee400", 0x39}], 0x1) 2018/02/27 08:58:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000011bfe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)=ANY=[@ANYBLOB="020f000014000000ffffffffffffffff05000600000000000a004e22000000000000000000000000000000000000000100000000000000000800120000000300ffffffff0000000006000000000000000000000000000000fe800000000000000000000000000000ac14000000000000000090fff022000005000500000000000a004e2000000000ff0100000000000020000000000000010000000000000000"], 0xa0}, 0x1}, 0x0) 2018/02/27 08:58:37 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00005c39a2)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/27 08:58:37 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000004200030f07fffd946fa283bc0aeee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/27 08:58:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000058790)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000d0e000)=[{{}, 0x11, 0xfffffffffffffffa}], 0x18) 2018/02/27 08:58:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001ffc), 0x86, 0x0, &(0x7f0000001ff0)={0x1f}, &(0x7f0000239000), 0x0) 2018/02/27 08:58:37 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000ea9fb0)={{0x4000001ff, 0x80000a}, {}, 0xffffffffffffffff}) 2018/02/27 08:58:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000004000)=[{&(0x7f0000001f8d)="390000001300090468fe0000810000000700004003000000450001070000001419001a00e3ff010007000012020000080000e10c00f41ee400", 0x39}], 0x1) 2018/02/27 08:58:37 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000004200030f07fffd946fa283bc0aeee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/27 08:58:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00005c39a2)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/27 08:58:37 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00005c39a2)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/27 08:58:37 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000ea9fb0)={{0x4000001ff, 0x80000a}, {}, 0xffffffffffffffff}) 2018/02/27 08:58:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000058790)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000d0e000)=[{{}, 0x11, 0xfffffffffffffffa}], 0x18) 2018/02/27 08:58:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000011bfe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)=ANY=[@ANYBLOB="020f000014000000ffffffffffffffff05000600000000000a004e22000000000000000000000000000000000000000100000000000000000800120000000300ffffffff0000000006000000000000000000000000000000fe800000000000000000000000000000ac14000000000000000090fff022000005000500000000000a004e2000000000ff0100000000000020000000000000010000000000000000"], 0xa0}, 0x1}, 0x0) 2018/02/27 08:58:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001ffc), 0x86, 0x0, &(0x7f0000001ff0)={0x1f}, &(0x7f0000239000), 0x0) 2018/02/27 08:58:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000ea9fb0)={{0x4000001ff, 0x80000a}, {}, 0xffffffffffffffff}) 2018/02/27 08:58:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000923000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000330fe8)) 2018/02/27 08:58:37 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000004200030f07fffd946fa283bc0aeee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/27 08:58:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00005c39a2)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/27 08:58:37 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000005ffc)=0x2d) 2018/02/27 08:58:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000ea9fb0)={{0x4000001ff, 0x80000a}, {}, 0xffffffffffffffff}) 2018/02/27 08:58:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000000087) io_setup(0x20, &(0x7f0000c6b000)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00001b0000)}]) 2018/02/27 08:58:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000baeff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, [], 0xffffffffffffffff}]}) 2018/02/27 08:58:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000923000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000330fe8)) 2018/02/27 08:58:37 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0x5) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x0, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) [ 34.558213] audit: type=1400 audit(1519721917.178:13): avc: denied { set_context_mgr } for pid=5628 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 34.583186] binder: BINDER_SET_CONTEXT_MGR already set [ 34.588619] binder: 5628:5633 ioctl 40046207 0 returned -16 2018/02/27 08:58:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000ea9fb0)={{0x4000001ff, 0x80000a}, {}, 0xffffffffffffffff}) 2018/02/27 08:58:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00005c39a2)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/27 08:58:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000923000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000330fe8)) [ 34.619573] audit: type=1400 audit(1519721917.240:14): avc: denied { net_raw } for pid=5638 comm="syz-executor2" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/27 08:58:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000923000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000330fe8)) 2018/02/27 08:58:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000000087) io_setup(0x20, &(0x7f0000c6b000)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00001b0000)}]) 2018/02/27 08:58:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000923000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000330fe8)) 2018/02/27 08:58:37 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000923000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000330fe8)) 2018/02/27 08:58:37 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000005ffc)=0x2d) 2018/02/27 08:58:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000000087) io_setup(0x20, &(0x7f0000c6b000)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00001b0000)}]) 2018/02/27 08:58:37 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0x5) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x0, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) 2018/02/27 08:58:37 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400007) 2018/02/27 08:58:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000000087) io_setup(0x20, &(0x7f0000c6b000)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00001b0000)}]) 2018/02/27 08:58:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000923000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000330fe8)) 2018/02/27 08:58:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000baeff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, [], 0xffffffffffffffff}]}) 2018/02/27 08:58:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000923000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000330fe8)) 2018/02/27 08:58:37 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000005ffc)=0x2d) 2018/02/27 08:58:37 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000923000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000330fe8)) [ 34.776755] binder: BINDER_SET_CONTEXT_MGR already set [ 34.782874] binder: BINDER_SET_CONTEXT_MGR already set [ 34.791402] binder: 5669:5672 ioctl 40046207 0 returned -16 [ 34.797579] binder: 5671:5676 ioctl 40046207 0 returned -16 2018/02/27 08:58:37 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000005ffc)=0x2d) 2018/02/27 08:58:37 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0x5) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x0, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) 2018/02/27 08:58:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000016000)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xd0}], {0x95}}, &(0x7f000000bff6)='syzkaller\x00', 0x1, 0xd1, &(0x7f0000006f2f)=""/209}, 0x48) 2018/02/27 08:58:37 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000923000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000330fe8)) 2018/02/27 08:58:37 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400007) 2018/02/27 08:58:37 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0x5) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x0, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) 2018/02/27 08:58:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000baeff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, [], 0xffffffffffffffff}]}) 2018/02/27 08:58:37 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400007) [ 34.858571] binder: BINDER_SET_CONTEXT_MGR already set [ 34.869147] binder: BINDER_SET_CONTEXT_MGR already set [ 34.882013] binder: 5686:5694 ioctl 40046207 0 returned -16 [ 34.900538] binder: 5683:5693 ioctl 40046207 0 returned -16 2018/02/27 08:58:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000219fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="e16fa12bcfd0a229dd3664d8ebd1af944291a812898dbb538d561f94dace92af2fcd18db83ec8775e35641aba6c6e538f4173fb122535e05c96dd8ba694218265c", 0x41) 2018/02/27 08:58:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000080000)={0x2}) fcntl$getownex(r0, 0x10, &(0x7f000008dff8)) [ 34.943346] audit: type=1400 audit(1519721917.563:15): avc: denied { prog_load } for pid=5703 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/27 08:58:37 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400007) 2018/02/27 08:58:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000016000)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xd0}], {0x95}}, &(0x7f000000bff6)='syzkaller\x00', 0x1, 0xd1, &(0x7f0000006f2f)=""/209}, 0x48) 2018/02/27 08:58:37 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400007) 2018/02/27 08:58:37 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0x5) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x0, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) 2018/02/27 08:58:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000080000)={0x2}) fcntl$getownex(r0, 0x10, &(0x7f000008dff8)) 2018/02/27 08:58:37 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0x5) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x0, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) 2018/02/27 08:58:37 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400007) 2018/02/27 08:58:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000016000)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xd0}], {0x95}}, &(0x7f000000bff6)='syzkaller\x00', 0x1, 0xd1, &(0x7f0000006f2f)=""/209}, 0x48) 2018/02/27 08:58:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000080000)={0x2}) fcntl$getownex(r0, 0x10, &(0x7f000008dff8)) 2018/02/27 08:58:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000baeff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, [], 0xffffffffffffffff}]}) 2018/02/27 08:58:37 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400007) 2018/02/27 08:58:37 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x478, 0xffffffff, 0xd0, 0x2d8, 0x2d8, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, &(0x7f0000e9afc0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@ipv4={[], [0xff, 0xff], @empty}, @mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @empty}, @empty, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @empty}, @mcast2={0xff, 0x2, [], 0x1}]}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d8) syz_emit_ethernet(0x3e, &(0x7f0000ea7cfa)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c000e2", 0x8, 0x2b, 0x0, @ipv4={[0x0, 0xf9], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_reply={0x81}}}}}}, 0x0) 2018/02/27 08:58:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000016000)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xd0}], {0x95}}, &(0x7f000000bff6)='syzkaller\x00', 0x1, 0xd1, &(0x7f0000006f2f)=""/209}, 0x48) 2018/02/27 08:58:37 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0x5) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x0, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) 2018/02/27 08:58:37 executing program 5: seccomp(0x800000000001, 0x0, &(0x7f000033a000)={0x2, &(0x7f000014c885)=[{0x20, 0x0, 0x0, 0x10001}, {0x6}]}) 2018/02/27 08:58:37 executing program 7: syz_emit_ethernet(0x36, &(0x7f00006ba000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x5, 0x0, @multicast1=0xe0000001, "b09b6d5c2a91e414699d955c"}}}}}, &(0x7f0000ea3000)) 2018/02/27 08:58:37 executing program 7: syz_emit_ethernet(0x36, &(0x7f00006ba000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x5, 0x0, @multicast1=0xe0000001, "b09b6d5c2a91e414699d955c"}}}}}, &(0x7f0000ea3000)) 2018/02/27 08:58:37 executing program 5: seccomp(0x800000000001, 0x0, &(0x7f000033a000)={0x2, &(0x7f000014c885)=[{0x20, 0x0, 0x0, 0x10001}, {0x6}]}) 2018/02/27 08:58:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000080000)={0x2}) fcntl$getownex(r0, 0x10, &(0x7f000008dff8)) 2018/02/27 08:58:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x7) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 2018/02/27 08:58:37 executing program 4: r0 = memfd_create(&(0x7f0000000000)='selinux+\x00', 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x1575e4ef) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/8) r4 = eventfd2(0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x4, 0x6, 0x83, 0x2, 0x7, 0x4, 0x401, 0x3}, &(0x7f0000000080)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000018000)={r4, 0x0, 0x400000000000002, r3}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, &(0x7f0000000100)=0x4) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000027fe0)={r4, 0x3, 0x2, r3}) 2018/02/27 08:58:37 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x478, 0xffffffff, 0xd0, 0x2d8, 0x2d8, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, &(0x7f0000e9afc0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@ipv4={[], [0xff, 0xff], @empty}, @mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @empty}, @empty, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @empty}, @mcast2={0xff, 0x2, [], 0x1}]}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d8) syz_emit_ethernet(0x3e, &(0x7f0000ea7cfa)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c000e2", 0x8, 0x2b, 0x0, @ipv4={[0x0, 0xf9], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_reply={0x81}}}}}}, 0x0) 2018/02/27 08:58:37 executing program 7: syz_emit_ethernet(0x36, &(0x7f00006ba000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x5, 0x0, @multicast1=0xe0000001, "b09b6d5c2a91e414699d955c"}}}}}, &(0x7f0000ea3000)) 2018/02/27 08:58:37 executing program 5: seccomp(0x800000000001, 0x0, &(0x7f000033a000)={0x2, &(0x7f000014c885)=[{0x20, 0x0, 0x0, 0x10001}, {0x6}]}) 2018/02/27 08:58:37 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x478, 0xffffffff, 0xd0, 0x2d8, 0x2d8, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, &(0x7f0000e9afc0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@ipv4={[], [0xff, 0xff], @empty}, @mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @empty}, @empty, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @empty}, @mcast2={0xff, 0x2, [], 0x1}]}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d8) syz_emit_ethernet(0x3e, &(0x7f0000ea7cfa)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c000e2", 0x8, 0x2b, 0x0, @ipv4={[0x0, 0xf9], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_reply={0x81}}}}}}, 0x0) [ 35.201053] kasan: CONFIG_KASAN_INLINE enabled [ 35.205773] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 35.213344] general protection fault: 0000 [#1] SMP KASAN [ 35.218882] Dumping ftrace buffer: [ 35.222411] (ftrace buffer empty) [ 35.226106] Modules linked in: [ 35.229294] CPU: 1 PID: 5768 Comm: syz-executor1 Not tainted 4.16.0-rc3+ #331 [ 35.236557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.245907] RIP: 0010:hrtimer_active+0x1da/0x3c0 [ 35.247853] hrtimer: interrupt took 17335 ns [ 35.250644] RSP: 0018:ffff8801cf4df3c0 EFLAGS: 00010202 [ 35.260375] RAX: 0000000000000008 RBX: 1ffff10039e9bea5 RCX: ffffffff81610225 [ 35.267630] RDX: 0000000000010000 RSI: ffffc90003068000 RDI: 0000000000000010 [ 35.274886] RBP: ffff8801cf4df500 R08: 0000000000002c02 R09: 0000000000000000 [ 35.282141] R10: 0000000000000011 R11: ffffed0036126090 R12: 0000000000000010 [ 35.289392] R13: 0000000000000000 R14: ffffed0039e9be83 R15: dffffc0000000000 [ 35.296644] FS: 00007f7ab23ee700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 35.304853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.310716] CR2: 00007f7ab23ac000 CR3: 00000001c975a001 CR4: 00000000001626e0 [ 35.317973] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.325228] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.332480] Call Trace: [ 35.335062] ? hrtimer_forward+0x2d0/0x2d0 [ 35.339291] ? vmx_update_msr_bitmap+0x13a/0x430 [ 35.344040] ? setup_msrs+0x926/0x1d80 [ 35.347913] ? vmx_set_cr4+0x353/0x610 [ 35.351801] hrtimer_try_to_cancel+0x91/0x5b0 [ 35.356276] ? update_exception_bitmap+0x19a/0x200 [ 35.361186] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 35.366090] ? vmx_vcpu_reset+0x55f/0xc70 [ 35.370217] ? load_vmcs12_host_state+0x1fa0/0x1fa0 [ 35.375215] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 35.380035] ? trace_hardirqs_off+0x10/0x10 [ 35.384344] ? kvm_arch_vcpu_load+0x1c1/0x8d0 [ 35.388815] ? futex_wake+0x680/0x680 [ 35.392599] hrtimer_cancel+0x22/0x40 [ 35.396377] kvm_lapic_reset+0x93/0xf40 [ 35.400333] ? kvm_lapic_set_base+0x750/0x750 [ 35.404804] ? kvm_arch_vcpu_free+0x80/0x80 [ 35.409115] kvm_arch_vcpu_setup+0x31/0x50 [ 35.413325] kvm_vm_ioctl+0x52d/0x1cf0 [ 35.417188] ? hash_futex+0x15/0x210 [ 35.420885] ? kvm_set_memory_region+0x50/0x50 [ 35.425449] ? find_held_lock+0x35/0x1d0 [ 35.429486] ? get_futex_key+0x1d50/0x1d50 [ 35.433725] ? lock_release+0xa40/0xa40 [ 35.437689] ? trace_hardirqs_off+0x10/0x10 [ 35.441988] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 35.446984] ? trace_hardirqs_on+0xd/0x10 [ 35.451126] ? find_held_lock+0x35/0x1d0 [ 35.455178] ? __fget+0x342/0x5b0 [ 35.458610] ? lock_downgrade+0x980/0x980 [ 35.462739] ? lock_release+0xa40/0xa40 [ 35.466696] ? __lock_is_held+0xb6/0x140 [ 35.470754] ? __fget+0x36b/0x5b0 [ 35.474208] ? iterate_fd+0x3f0/0x3f0 [ 35.477986] ? check_same_owner+0x320/0x320 [ 35.482288] ? get_unused_fd_flags+0x190/0x190 [ 35.486865] ? kvm_set_memory_region+0x50/0x50 [ 35.491423] do_vfs_ioctl+0x1b1/0x1520 [ 35.495295] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 35.500202] ? ioctl_preallocate+0x2b0/0x2b0 [ 35.504591] ? selinux_capable+0x40/0x40 [ 35.508638] ? SyS_futex+0x1fb/0x390 [ 35.512349] ? security_file_ioctl+0x7d/0xb0 [ 35.516735] ? security_file_ioctl+0x89/0xb0 [ 35.521129] SyS_ioctl+0x8f/0xc0 [ 35.524471] ? do_vfs_ioctl+0x1520/0x1520 [ 35.528601] do_syscall_64+0x281/0x940 [ 35.532465] ? __do_page_fault+0xc90/0xc90 [ 35.536673] ? _raw_spin_unlock_irq+0x27/0x70 [ 35.541147] ? finish_task_switch+0x1c1/0x7e0 [ 35.545620] ? syscall_return_slowpath+0x550/0x550 [ 35.550526] ? syscall_return_slowpath+0x2ac/0x550 [ 35.555432] ? prepare_exit_to_usermode+0x350/0x350 [ 35.560427] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 35.565779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.570611] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 35.575778] RIP: 0033:0x453d69 [ 35.578946] RSP: 002b:00007f7ab23edc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.586632] RAX: ffffffffffffffda RBX: 00007f7ab23ee6d4 RCX: 0000000000453d69 [ 35.593874] RDX: 0000000000000007 RSI: 000000000000ae41 RDI: 0000000000000014 [ 35.601120] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 35.608366] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 35.615612] R13: 000000000000020e R14: 00000000006f31f0 R15: 0000000000000000 [ 35.622885] Code: ff ff 48 8d 85 18 ff ff ff 48 c1 e8 03 4e 8d 34 38 e8 1b f2 0f 00 48 8b 85 f0 fe ff ff c6 00 00 48 8b 85 d8 fe ff ff 48 c1 e8 03 <42> 80 3c 38 00 0f 85 c2 01 00 00 48 8b 85 e8 fe ff ff 48 8b 58 [ 35.642109] RIP: hrtimer_active+0x1da/0x3c0 RSP: ffff8801cf4df3c0 [ 35.648373] ---[ end trace 24ca1464a88bcb82 ]--- [ 35.653133] Kernel panic - not syncing: Fatal exception [ 35.658878] Dumping ftrace buffer: [ 35.662396] (ftrace buffer empty) [ 35.666078] Kernel Offset: disabled [ 35.669672] Rebooting in 86400 seconds..