[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 18.708516] audit: type=1400 audit(1519722047.667:6): avc: denied { map } for pid=4221 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.193' (ECDSA) to the list of known hosts. 2018/02/27 09:00:54 fuzzer started syzkaller login: [ 25.038147] audit: type=1400 audit(1519722053.996:7): avc: denied { map } for pid=4232 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/27 09:00:54 dialing manager at 10.128.0.26:35219 [ 27.816005] can: request_module (can-proto-0) failed. [ 27.824872] can: request_module (can-proto-0) failed. 2018/02/27 09:00:57 kcov=true, comps=true [ 28.314577] audit: type=1400 audit(1519722057.273:8): avc: denied { map } for pid=4232 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9444 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/27 09:00:57 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0), 0x0) 2018/02/27 09:00:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000b93ffc), 0x6c81a57652e977ef) 2018/02/27 09:00:57 executing program 3: r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ad000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x0, 0x98, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, &(0x7f00000affa0), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r1 = socket$inet(0x2, 0x3, 0x88) sendmsg(r1, &(0x7f0000043000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f00003b3ff0)=[], 0x0, &(0x7f00003b3000)=[]}, 0x0) 2018/02/27 09:00:57 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00005ddf48)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @empty}}}}, &(0x7f0000e7bffc)=0xb8) 2018/02/27 09:00:57 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) 2018/02/27 09:00:57 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f00000000c0)=[]}, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/27 09:00:57 executing program 6: mbind(&(0x7f0000ecb000/0x1000)=nil, 0xfffffffffffffdb2, 0x0, &(0x7f0000885ff8), 0x5, 0x0) 2018/02/27 09:00:57 executing program 7: getgroups(0x1c1, &(0x7f0000762000)=[]) [ 28.665816] audit: type=1400 audit(1519722057.624:9): avc: denied { sys_admin } for pid=4276 comm="syz-executor1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.685807] IPVS: ftp: loaded support on port[0] = 21 [ 28.720719] IPVS: ftp: loaded support on port[0] = 21 [ 28.736057] audit: type=1400 audit(1519722057.689:10): avc: denied { net_admin } for pid=4279 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.776203] IPVS: ftp: loaded support on port[0] = 21 [ 28.805588] IPVS: ftp: loaded support on port[0] = 21 [ 28.847201] IPVS: ftp: loaded support on port[0] = 21 [ 28.895508] IPVS: ftp: loaded support on port[0] = 21 [ 28.936248] IPVS: ftp: loaded support on port[0] = 21 [ 29.004327] IPVS: ftp: loaded support on port[0] = 21 [ 30.122696] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.149347] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.286089] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.415722] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.462663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.515426] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.547573] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.716604] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.040508] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.046636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.088820] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.095131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.216130] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.222344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.260149] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.266337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.358975] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.365201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.385432] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.401803] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.429038] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.435148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.460427] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.476499] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.482721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.535663] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.605595] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.611715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.683802] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.690747] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.706816] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.713429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.722080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.738684] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.744795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.751732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.755080] audit: type=1400 audit(1519722062.711:11): avc: denied { sys_chroot } for pid=4280 comm="syz-executor1" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/27 09:01:02 executing program 7: getgroups(0x1c1, &(0x7f0000762000)=[]) 2018/02/27 09:01:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000b93ffc), 0x6c81a57652e977ef) 2018/02/27 09:01:02 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0), 0x0) [ 33.789602] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.795819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.806364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/27 09:01:02 executing program 7: getgroups(0x1c1, &(0x7f0000762000)=[]) 2018/02/27 09:01:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000b93ffc), 0x6c81a57652e977ef) 2018/02/27 09:01:02 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0), 0x0) [ 33.861115] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.868206] audit: type=1400 audit(1519722062.778:12): avc: denied { net_raw } for pid=5510 comm="syz-executor1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/27 09:01:02 executing program 7: getgroups(0x1c1, &(0x7f0000762000)=[]) 2018/02/27 09:01:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000b93ffc), 0x6c81a57652e977ef) [ 33.935690] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.941899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.951768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.991538] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.011223] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.017601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.025708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.045857] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.054077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.067698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.105370] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) [ 34.122043] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.128218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.136243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.145316] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.151582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.158919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.165422] audit: type=1400 audit(1519722063.123:13): avc: denied { name_bind } for pid=5579 comm="syz-executor5" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 2018/02/27 09:01:03 executing program 3: r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ad000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x0, 0x98, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, &(0x7f00000affa0), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r1 = socket$inet(0x2, 0x3, 0x88) sendmsg(r1, &(0x7f0000043000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f00003b3ff0)=[], 0x0, &(0x7f00003b3000)=[]}, 0x0) [ 34.165439] audit: type=1400 audit(1519722063.124:14): avc: denied { node_bind } for pid=5579 comm="syz-executor5" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 34.167256] audit: type=1400 audit(1519722063.126:15): avc: denied { name_connect } for pid=5579 comm="syz-executor5" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 2018/02/27 09:01:03 executing program 6: mbind(&(0x7f0000ecb000/0x1000)=nil, 0xfffffffffffffdb2, 0x0, &(0x7f0000885ff8), 0x5, 0x0) 2018/02/27 09:01:03 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) 2018/02/27 09:01:03 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00005ddf48)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @empty}}}}, &(0x7f0000e7bffc)=0xb8) 2018/02/27 09:01:03 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f00000000c0)=[]}, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/27 09:01:03 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0), 0x0) 2018/02/27 09:01:03 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0xa452a71ad042b2b5, &(0x7f0000000000)=0xfce9) recvmmsg(r0, &(0x7f0000108000)=[{{&(0x7f000075c000)=@ax25, 0x10, &(0x7f00002d3491)=[], 0x0, &(0x7f0000a38000)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000f15ff0)={0x77359400}) sendmmsg(r0, &(0x7f000000d680)=[{{&(0x7f000000d480)=@ax25={0x3, {"3fcc3715c0678a"}}, 0x10, &(0x7f000000d5c0)=[{&(0x7f000000d4c0)="89", 0x1}], 0x1, &(0x7f000000d600)=[]}}], 0x1, 0x0) 2018/02/27 09:01:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000c35fd4)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9}, 0x2c) 2018/02/27 09:01:03 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00005ddf48)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @empty}}}}, &(0x7f0000e7bffc)=0xb8) [ 34.241605] audit: type=1400 audit(1519722063.200:16): avc: denied { map } for pid=5582 comm="syz-executor2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14974 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 2018/02/27 09:01:03 executing program 3: r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ad000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x0, 0x98, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, &(0x7f00000affa0), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r1 = socket$inet(0x2, 0x3, 0x88) sendmsg(r1, &(0x7f0000043000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f00003b3ff0)=[], 0x0, &(0x7f00003b3000)=[]}, 0x0) 2018/02/27 09:01:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000c35fd4)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9}, 0x2c) 2018/02/27 09:01:03 executing program 6: mbind(&(0x7f0000ecb000/0x1000)=nil, 0xfffffffffffffdb2, 0x0, &(0x7f0000885ff8), 0x5, 0x0) 2018/02/27 09:01:03 executing program 1: r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ad000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x0, 0x98, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, &(0x7f00000affa0), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r1 = socket$inet(0x2, 0x3, 0x88) sendmsg(r1, &(0x7f0000043000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f00003b3ff0)=[], 0x0, &(0x7f00003b3000)=[]}, 0x0) 2018/02/27 09:01:03 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) 2018/02/27 09:01:03 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f00000000c0)=[]}, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/27 09:01:03 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00005ddf48)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @empty}}}}, &(0x7f0000e7bffc)=0xb8) 2018/02/27 09:01:03 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0xa452a71ad042b2b5, &(0x7f0000000000)=0xfce9) recvmmsg(r0, &(0x7f0000108000)=[{{&(0x7f000075c000)=@ax25, 0x10, &(0x7f00002d3491)=[], 0x0, &(0x7f0000a38000)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000f15ff0)={0x77359400}) sendmmsg(r0, &(0x7f000000d680)=[{{&(0x7f000000d480)=@ax25={0x3, {"3fcc3715c0678a"}}, 0x10, &(0x7f000000d5c0)=[{&(0x7f000000d4c0)="89", 0x1}], 0x1, &(0x7f000000d600)=[]}}], 0x1, 0x0) [ 34.289491] audit: type=1400 audit(1519722063.240:17): avc: denied { map_create } for pid=5587 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/27 09:01:03 executing program 1: r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ad000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x0, 0x98, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, &(0x7f00000affa0), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r1 = socket$inet(0x2, 0x3, 0x88) sendmsg(r1, &(0x7f0000043000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f00003b3ff0)=[], 0x0, &(0x7f00003b3000)=[]}, 0x0) 2018/02/27 09:01:03 executing program 6: mbind(&(0x7f0000ecb000/0x1000)=nil, 0xfffffffffffffdb2, 0x0, &(0x7f0000885ff8), 0x5, 0x0) 2018/02/27 09:01:03 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f00000000c0)=[]}, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/27 09:01:03 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) 2018/02/27 09:01:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000c35fd4)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9}, 0x2c) 2018/02/27 09:01:03 executing program 3: r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ad000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x0, 0x98, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, &(0x7f00000affa0), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r1 = socket$inet(0x2, 0x3, 0x88) sendmsg(r1, &(0x7f0000043000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f00003b3ff0)=[], 0x0, &(0x7f00003b3000)=[]}, 0x0) 2018/02/27 09:01:03 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0xa452a71ad042b2b5, &(0x7f0000000000)=0xfce9) recvmmsg(r0, &(0x7f0000108000)=[{{&(0x7f000075c000)=@ax25, 0x10, &(0x7f00002d3491)=[], 0x0, &(0x7f0000a38000)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000f15ff0)={0x77359400}) sendmmsg(r0, &(0x7f000000d680)=[{{&(0x7f000000d480)=@ax25={0x3, {"3fcc3715c0678a"}}, 0x10, &(0x7f000000d5c0)=[{&(0x7f000000d4c0)="89", 0x1}], 0x1, &(0x7f000000d600)=[]}}], 0x1, 0x0) 2018/02/27 09:01:03 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f00000000c0)=[]}, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/27 09:01:03 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f00000000c0)=[]}, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/27 09:01:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000c35fd4)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9}, 0x2c) 2018/02/27 09:01:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) dup3(r0, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/27 09:01:03 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f00004d4000)="944db01c", 0x4, 0x0, &(0x7f000053efe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00006d6000)=0xb7, 0x4) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/02/27 09:01:03 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f00000000c0)=[]}, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/27 09:01:03 executing program 1: r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ad000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x0, 0x98, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, &(0x7f00000affa0), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r1 = socket$inet(0x2, 0x3, 0x88) sendmsg(r1, &(0x7f0000043000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f00003b3ff0)=[], 0x0, &(0x7f00003b3000)=[]}, 0x0) 2018/02/27 09:01:03 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0xa452a71ad042b2b5, &(0x7f0000000000)=0xfce9) recvmmsg(r0, &(0x7f0000108000)=[{{&(0x7f000075c000)=@ax25, 0x10, &(0x7f00002d3491)=[], 0x0, &(0x7f0000a38000)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000f15ff0)={0x77359400}) sendmmsg(r0, &(0x7f000000d680)=[{{&(0x7f000000d480)=@ax25={0x3, {"3fcc3715c0678a"}}, 0x10, &(0x7f000000d5c0)=[{&(0x7f000000d4c0)="89", 0x1}], 0x1, &(0x7f000000d600)=[]}}], 0x1, 0x0) 2018/02/27 09:01:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x400, &(0x7f0000000080)) r0 = add_key(&(0x7f0000002000)='big_key\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000003000)="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", 0x4d1, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f00000046a9)=""/2392, 0x958) 2018/02/27 09:01:03 executing program 7: syz_emit_ethernet(0x312, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x4e20, 0x4e20, 0x8}}}}}}, &(0x7f0000775000)) 2018/02/27 09:01:03 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f00000000c0)=[]}, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/27 09:01:03 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f00000000c0)=[]}, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/27 09:01:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) dup3(r0, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/27 09:01:03 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f00004d4000)="944db01c", 0x4, 0x0, &(0x7f000053efe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00006d6000)=0xb7, 0x4) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/02/27 09:01:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f00004d4000)="944db01c", 0x4, 0x0, &(0x7f000053efe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00006d6000)=0xb7, 0x4) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/02/27 09:01:03 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f00000000c0)=[]}, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/27 09:01:03 executing program 7: syz_emit_ethernet(0x312, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x4e20, 0x4e20, 0x8}}}}}}, &(0x7f0000775000)) 2018/02/27 09:01:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) dup3(r0, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/27 09:01:03 executing program 7: syz_emit_ethernet(0x312, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x4e20, 0x4e20, 0x8}}}}}}, &(0x7f0000775000)) 2018/02/27 09:01:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) dup3(r0, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/27 09:01:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) dup3(r0, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/27 09:01:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f00004d4000)="944db01c", 0x4, 0x0, &(0x7f000053efe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00006d6000)=0xb7, 0x4) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/02/27 09:01:03 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f00004d4000)="944db01c", 0x4, 0x0, &(0x7f000053efe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00006d6000)=0xb7, 0x4) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/02/27 09:01:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x400, &(0x7f0000000080)) r0 = add_key(&(0x7f0000002000)='big_key\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000003000)="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", 0x4d1, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f00000046a9)=""/2392, 0x958) 2018/02/27 09:01:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) dup3(r0, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/27 09:01:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') lseek(r0, 0x2, 0x0) 2018/02/27 09:01:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f00004d4000)="944db01c", 0x4, 0x0, &(0x7f000053efe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00006d6000)=0xb7, 0x4) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/02/27 09:01:03 executing program 7: syz_emit_ethernet(0x312, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x4e20, 0x4e20, 0x8}}}}}}, &(0x7f0000775000)) 2018/02/27 09:01:03 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f00004d4000)="944db01c", 0x4, 0x0, &(0x7f000053efe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00006d6000)=0xb7, 0x4) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/02/27 09:01:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) dup3(r0, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/27 09:01:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) dup3(r0, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/27 09:01:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x400, &(0x7f0000000080)) r0 = add_key(&(0x7f0000002000)='big_key\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000003000)="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", 0x4d1, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f00000046a9)=""/2392, 0x958) 2018/02/27 09:01:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000014ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000040)={0x18, 0x29, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/27 09:01:03 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000003, 0x0, 0x0, @tick, {}, {}, @time=@tick}], 0x30) 2018/02/27 09:01:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) dup3(r0, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/27 09:01:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') pread64(r0, &(0x7f0000f81800)=""/2048, 0x800, 0x0) 2018/02/27 09:01:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') lseek(r0, 0x2, 0x0) [ 34.701403] audit: type=1400 audit(1519722063.659:18): avc: denied { dac_override } for pid=5697 comm="syz-executor4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/27 09:01:03 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000003, 0x0, 0x0, @tick, {}, {}, @time=@tick}], 0x30) 2018/02/27 09:01:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') lseek(r0, 0x2, 0x0) [ 34.770098] audit: type=1400 audit(1519722063.726:19): avc: denied { create } for pid=5710 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/27 09:01:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) dup3(r0, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/27 09:01:03 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000003, 0x0, 0x0, @tick, {}, {}, @time=@tick}], 0x30) 2018/02/27 09:01:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x400, &(0x7f0000000080)) r0 = add_key(&(0x7f0000002000)='big_key\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000003000)="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", 0x4d1, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f00000046a9)=""/2392, 0x958) 2018/02/27 09:01:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000014ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000040)={0x18, 0x29, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/27 09:01:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000040)={0x1, 0x0, [{}]}) 2018/02/27 09:01:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') lseek(r0, 0x2, 0x0) 2018/02/27 09:01:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x400, &(0x7f0000000080)) r0 = add_key(&(0x7f0000002000)='big_key\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000003000)="c4babd4854e1e897195b6a6d2cc6c85182517decb2763fb6039b8a9dab3796aa4c87fed7eb953c0ee3f610ef15f6a52912b4d60d79d3f6ebf80cc17f9490e5a14d3475885b23a1579bab021b970a1201a97f7bee17cdf723e4449a22425de9beb00069ee37a42979fa0836c1242e88fc45e8e6483841dd5dbe430fe2fb08f9fa17ce69df2530c76edf768334ea987c6d0afa9a2bea0c5f781e775d12fa1d61cc777789c034bcc6f877c108c9fa8960d921cb0dfa43776c9259865a8be72d1f5b03b2fc1bee00d1905dd88247851d26c7174e1dba8f96dfcfd7202420b33b088641523be39a2d2020bf300668e1a0486fb7a06a62594d941b79bd65949e3ea928ecc7f3bf5f04ca7d1854d7d484aa19ba072dfd7d167f2463c0642ed2b53ec5bf884cd2cd863a64e99fbe898d7dff4a86bfd834a544d3ad652d73c2c01615074c7d3819aa44fe4491a545b8c1cc9e163465d68a591188732466aebe87d322210b36949fe34744fa675bf8d8cd46581cdeb64c2731f99aa82b97a92e09a418509f6db89dc0aabf9a502517c08aca85cbcf5e7449572af9f619b58d1fcbe070ece236df53ee99b9164399f83eed4f8ae8337ae7d167d61f8255c738acba9697745cd4787858f0884231817dfafa01be62ba296d7da22d39038396d95c943e17c8b282c2fa3e76df777fc042afafaff30077037c2b8cb2895841709e9375b6ca314d8c9dfdca50547fe735c8c91c5356805b27d36ac773ede01195257a5842e5a18a046aa781e0edc832913a32f9ebd782f5dd960dd3697ee1fde8f8b48040d37ccbb5b444854032586acda7395f75cd283585b427764f92a28ad033d15379bfe0daef231edf3af9208d80d11beb4e9b74a45cb481515a87fafe02e5968405dc026965b42312c735a88b22a89844004941635344c51794a1aa925de696541bb0261803d3fca47acb5192c4b7a8b6d5f3719661b2ce6abb90ddfb88341b804b39489933e4d6090b00997c5efef9d0e91f93b945bbc1b099cde60075905ff502fab87a89934da2d2f5a8e2fa1a0e472cba85d2ad1ceee44ad55896f71d54aacd10bf78ee8d3c60497882cf0279678dff17a4521899974041bce6d86e8f53b14a73b2840d24ee59c8457e3de9186d007569adb9d822253717c0bda052b55ae535f35dc3481879a700899ea02dee6196208842336b20179dd2d44dd227333cd89e1ef514fc7974867a1a0fbbdfa70755fd9379e808eca0355e5f5ce1f1aea3d129145afcf12f82088cbe709abc8b7213844f62c2429a5a68e6749bd6ffe569af590896be9b6dee0916d9334fd715a762f331e48cef8d2d0e2deef0b741823f7cd8f7ffa82b019516aeb6f838f3610261d96817fee55b16cfa3b32b30268c079de839be0172e27b6c70341e0b18351b2a7bcec917eed2eb779cc90e5d6f19e5eeb7199cbbb2000a879e6118f28e350ba335b6443a5fbff41380cbce4a08af34fe25737478cb90f187c983ee6755688a556fad2edbf18bc61c93cbc9141746acab173e1c307bd3609b178f3f7de201650ad8356a613f74a52c3159cb0e3fc164186052d5ced168ea67f151bb829af14f8f2f1f791de76740e8745b2ba5e059004a3b9f1d7d52af6d81232791ee1b23a88ea8ac093892fe02eb866dbc5993710cb3e7001b1877861f9a9a3fde697d3944de7c823d1b73c2e43d9cb8630383a8682122d30cd3af0e6d68074d7b70885d6e8e174d9c5b5c", 0x4d1, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f00000046a9)=""/2392, 0x958) 2018/02/27 09:01:03 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000003, 0x0, 0x0, @tick, {}, {}, @time=@tick}], 0x30) [ 34.815174] audit: type=1400 audit(1519722063.760:20): avc: denied { write } for pid=5710 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/27 09:01:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4400000000001279, &(0x7f0000013000)) 2018/02/27 09:01:03 executing program 0: msgrcv(0x0, &(0x7f0000e88000)={0x0, ""/170}, 0x66, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)) 2018/02/27 09:01:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000014ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000040)={0x18, 0x29, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) [ 34.937085] kasan: CONFIG_KASAN_INLINE enabled [ 34.941775] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 34.949178] general protection fault: 0000 [#1] SMP KASAN [ 34.954706] Dumping ftrace buffer: [ 34.958237] (ftrace buffer empty) [ 34.962499] Modules linked in: [ 34.965677] CPU: 1 PID: 5740 Comm: syz-executor2 Not tainted 4.16.0-rc3+ #331 [ 34.972920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.981287] kasan: CONFIG_KASAN_INLINE enabled [ 34.982259] RIP: 0010:hrtimer_active+0x1da/0x3c0 [ 34.982266] RSP: 0018:ffff8801afad73c0 EFLAGS: 00010202 [ 34.986832] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 34.991552] RAX: 0000000000000008 RBX: 1ffff10035f5aea5 RCX: ffffffff81610225 [ 34.991556] RDX: 0000000000010000 RSI: ffffc90002fc0000 RDI: 0000000000000010 [ 34.991562] RBP: ffff8801afad7500 R08: 0000000000002c02 R09: 0000000000000000 [ 35.025939] R10: 0000000000000011 R11: ffffed00399fc078 R12: 0000000000000010 [ 35.033182] R13: 0000000000000000 R14: ffffed0035f5ae83 R15: dffffc0000000000 [ 35.040428] FS: 00007f462ef78700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 35.048626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.054480] CR2: 00007f462ef36000 CR3: 00000001b19d7006 CR4: 00000000001626e0 [ 35.061729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.068970] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.076210] Call Trace: [ 35.078778] ? hrtimer_forward+0x2d0/0x2d0 [ 35.082989] ? vmx_update_msr_bitmap+0x13a/0x430 [ 35.087724] ? setup_msrs+0x926/0x1d80 [ 35.091583] ? vmx_set_cr4+0x353/0x610 [ 35.095451] hrtimer_try_to_cancel+0x91/0x5b0 [ 35.099920] ? update_exception_bitmap+0x19a/0x200 [ 35.104821] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 35.109724] ? vmx_vcpu_reset+0x55f/0xc70 [ 35.113846] ? load_vmcs12_host_state+0x1fa0/0x1fa0 [ 35.118839] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 35.123654] ? trace_hardirqs_off+0x10/0x10 [ 35.127954] ? kvm_arch_vcpu_load+0x1c1/0x8d0 [ 35.132429] ? futex_wake+0x680/0x680 [ 35.136207] hrtimer_cancel+0x22/0x40 [ 35.139985] kvm_lapic_reset+0x93/0xf40 [ 35.143933] ? kvm_lapic_set_base+0x750/0x750 [ 35.148401] ? kvm_arch_vcpu_free+0x80/0x80 [ 35.152705] kvm_arch_vcpu_setup+0x31/0x50 [ 35.156915] kvm_vm_ioctl+0x52d/0x1cf0 [ 35.160776] ? hash_futex+0x15/0x210 [ 35.164465] ? kvm_set_memory_region+0x50/0x50 [ 35.169025] ? find_held_lock+0x35/0x1d0 [ 35.173058] ? get_futex_key+0x1d50/0x1d50 [ 35.177269] ? perf_trace_lock+0xd6/0x900 [ 35.181394] ? trace_event_raw_event_lock+0x340/0x340 [ 35.186558] ? lock_release+0xa40/0xa40 [ 35.190513] ? trace_hardirqs_off+0x10/0x10 [ 35.194809] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 35.199798] ? trace_hardirqs_on+0xd/0x10 [ 35.203928] ? find_held_lock+0x35/0x1d0 [ 35.207971] ? __fget+0x342/0x5b0 [ 35.211398] ? lock_downgrade+0x980/0x980 [ 35.215522] ? lock_release+0xa40/0xa40 [ 35.219474] ? __lock_is_held+0xb6/0x140 [ 35.223519] ? __fget+0x36b/0x5b0 [ 35.226950] ? iterate_fd+0x3f0/0x3f0 [ 35.230724] ? check_same_owner+0x320/0x320 [ 35.235018] ? get_unused_fd_flags+0x190/0x190 [ 35.239583] ? kvm_set_memory_region+0x50/0x50 [ 35.244140] do_vfs_ioctl+0x1b1/0x1520 [ 35.248007] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 35.252912] ? ioctl_preallocate+0x2b0/0x2b0 [ 35.257298] ? selinux_capable+0x40/0x40 [ 35.261336] ? SyS_futex+0x1fb/0x390 [ 35.265030] ? security_file_ioctl+0x7d/0xb0 [ 35.269412] ? security_file_ioctl+0x89/0xb0 [ 35.273797] SyS_ioctl+0x8f/0xc0 [ 35.277140] ? do_vfs_ioctl+0x1520/0x1520 [ 35.281263] do_syscall_64+0x281/0x940 [ 35.285123] ? __do_page_fault+0xc90/0xc90 [ 35.289332] ? _raw_spin_unlock_irq+0x27/0x70 [ 35.293800] ? finish_task_switch+0x1c1/0x7e0 [ 35.298272] ? syscall_return_slowpath+0x550/0x550 [ 35.303174] ? syscall_return_slowpath+0x2ac/0x550 [ 35.308078] ? prepare_exit_to_usermode+0x350/0x350 [ 35.313066] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 35.318406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.323230] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 35.328391] RIP: 0033:0x453d69 [ 35.331552] RSP: 002b:00007f462ef77c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.339234] RAX: ffffffffffffffda RBX: 00007f462ef786d4 RCX: 0000000000453d69 [ 35.346476] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000014 [ 35.353718] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 35.360962] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 35.368205] R13: 000000000000020e R14: 00000000006f31f0 R15: 0000000000000000 [ 35.375456] Code: ff ff 48 8d 85 18 ff ff ff 48 c1 e8 03 4e 8d 34 38 e8 1b f2 0f 00 48 8b 85 f0 fe ff ff c6 00 00 48 8b 85 d8 fe ff ff 48 c1 e8 03 <42> 80 3c 38 00 0f 85 c2 01 00 00 48 8b 85 e8 fe ff ff 48 8b 58 [ 35.394578] RIP: hrtimer_active+0x1da/0x3c0 RSP: ffff8801afad73c0 [ 35.400789] general protection fault: 0000 [#2] SMP KASAN [ 35.400838] ---[ end trace a52f628cd4f5c508 ]--- [ 35.406311] Dumping ftrace buffer: [ 35.406315] (ftrace buffer empty) [ 35.406319] Modules linked in: [ 35.411054] Kernel panic - not syncing: Fatal exception [ 35.426725] CPU: 0 PID: 5749 Comm: syz-executor2 Tainted: G D 4.16.0-rc3+ #331 [ 35.435271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.444601] RIP: 0010:hrtimer_active+0x1da/0x3c0 [ 35.449326] RSP: 0018:ffff8801d3a173c0 EFLAGS: 00010202 [ 35.454665] RAX: 0000000000000008 RBX: 1ffff1003a742ea5 RCX: ffffffff81610225 [ 35.461908] RDX: 000000000000f125 RSI: ffffc900030c2000 RDI: 0000000000000010 [ 35.469151] RBP: ffff8801d3a17500 R08: 0000000000002c02 R09: 0000000000000000 [ 35.476396] R10: 0000000000000011 R11: ffffed003a77a080 R12: 0000000000000010 [ 35.483640] R13: 0000000000000000 R14: ffffed003a742e83 R15: dffffc0000000000 [ 35.490885] FS: 00007f462ef57700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 35.499084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.504939] CR2: 00007f462ef14000 CR3: 00000001b19d7005 CR4: 00000000001626f0 [ 35.512194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.519436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.526680] Call Trace: [ 35.529248] ? hrtimer_forward+0x2d0/0x2d0 [ 35.533459] ? vmx_update_msr_bitmap+0x13a/0x430 [ 35.538198] ? setup_msrs+0x926/0x1d80 [ 35.542059] ? vmx_set_cr4+0x353/0x610 [ 35.545925] hrtimer_try_to_cancel+0x91/0x5b0 [ 35.550395] ? update_exception_bitmap+0x19a/0x200 [ 35.555302] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 35.560204] ? vmx_vcpu_reset+0x55f/0xc70 [ 35.564329] ? load_vmcs12_host_state+0x1fa0/0x1fa0 [ 35.569322] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 35.574145] ? kvm_arch_vcpu_load+0x1c1/0x8d0 [ 35.578616] ? futex_wake+0x680/0x680 [ 35.582391] hrtimer_cancel+0x22/0x40 [ 35.586172] kvm_lapic_reset+0x93/0xf40 [ 35.590124] ? kvm_lapic_set_base+0x750/0x750 [ 35.594593] ? kvm_arch_vcpu_free+0x80/0x80 [ 35.598896] kvm_arch_vcpu_setup+0x31/0x50 [ 35.603106] kvm_vm_ioctl+0x52d/0x1cf0 [ 35.606969] ? hash_futex+0x15/0x210 [ 35.610659] ? kvm_set_memory_region+0x50/0x50 [ 35.615223] ? get_futex_key+0x1d50/0x1d50 [ 35.619433] ? trace_hardirqs_on+0xd/0x10 [ 35.623571] ? do_futex+0x86f/0x22a0 [ 35.627259] ? lock_acquire+0x1d5/0x580 [ 35.631213] ? exit_robust_list+0x240/0x240 [ 35.635510] ? avc_has_extended_perms+0x7fa/0x12c0 [ 35.640416] ? lock_acquire+0x1d5/0x580 [ 35.644363] ? lock_acquire+0x1d5/0x580 [ 35.648310] ? __fget+0x342/0x5b0 [ 35.651741] ? lock_downgrade+0x980/0x980 [ 35.655864] ? lock_release+0xa40/0xa40 [ 35.659819] ? debug_check_no_obj_freed+0x3da/0xf1f [ 35.664815] ? __fget+0x36b/0x5b0 [ 35.668248] ? iterate_fd+0x3f0/0x3f0 [ 35.672021] ? check_same_owner+0x320/0x320 [ 35.676316] ? get_unused_fd_flags+0x190/0x190 [ 35.680873] ? rcu_note_context_switch+0x710/0x710 [ 35.685781] ? kvm_set_memory_region+0x50/0x50 [ 35.690338] do_vfs_ioctl+0x1b1/0x1520 [ 35.694204] ? ioctl_preallocate+0x2b0/0x2b0 [ 35.698590] ? selinux_capable+0x40/0x40 [ 35.702628] ? SyS_futex+0x1fb/0x390 [ 35.706325] ? security_file_ioctl+0x7d/0xb0 [ 35.710705] ? security_file_ioctl+0x89/0xb0 [ 35.715092] SyS_ioctl+0x8f/0xc0 [ 35.718436] ? do_vfs_ioctl+0x1520/0x1520 [ 35.722560] do_syscall_64+0x281/0x940 [ 35.726424] ? __do_page_fault+0xc90/0xc90 [ 35.730634] ? _raw_spin_unlock_irq+0x27/0x70 [ 35.735106] ? finish_task_switch+0x1c1/0x7e0 [ 35.739579] ? syscall_return_slowpath+0x550/0x550 [ 35.744482] ? syscall_return_slowpath+0x2ac/0x550 [ 35.749388] ? prepare_exit_to_usermode+0x350/0x350 [ 35.754377] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 35.759720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.764540] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 35.769705] RIP: 0033:0x453d69 [ 35.772866] RSP: 002b:00007f462ef56c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.780549] RAX: ffffffffffffffda RBX: 00007f462ef576d4 RCX: 0000000000453d69 [ 35.787791] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000018 [ 35.795035] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 35.802278] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 35.809519] R13: 000000000000020e R14: 00000000006f31f0 R15: 0000000000000001 [ 35.816771] Code: ff ff 48 8d 85 18 ff ff ff 48 c1 e8 03 4e 8d 34 38 e8 1b f2 0f 00 48 8b 85 f0 fe ff ff c6 00 00 48 8b 85 d8 fe ff ff 48 c1 e8 03 <42> 80 3c 38 00 0f 85 c2 01 00 00 48 8b 85 e8 fe ff ff 48 8b 58 [ 35.835892] RIP: hrtimer_active+0x1da/0x3c0 RSP: ffff8801d3a173c0 [ 35.842493] Dumping ftrace buffer: [ 35.846011] (ftrace buffer empty) [ 35.849690] Kernel Offset: disabled [ 35.853289] Rebooting in 86400 seconds..