[....] Starting enhanced syslogd: rsyslogd[ 13.007176] audit: type=1400 audit(1516330471.942:5): avc: denied { syslog } for pid=3502 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.621719] audit: type=1400 audit(1516330477.557:6): avc: denied { map } for pid=3641 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.231' (ECDSA) to the list of known hosts. 2018/01/19 02:54:43 fuzzer started [ 24.846982] audit: type=1400 audit(1516330483.782:7): avc: denied { map } for pid=3652 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/01/19 02:54:44 dialing manager at 10.128.0.26:40619 [ 28.350685] can: request_module (can-proto-0) failed. [ 28.359857] can: request_module (can-proto-0) failed. 2018/01/19 02:54:47 kcov=true, comps=true [ 28.884515] audit: type=1400 audit(1516330487.820:8): avc: denied { map } for pid=3652 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=8894 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/01/19 02:54:49 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f000026b000)={0x52, 0x8002, 0x4, 0x10000, 0x0}, &(0x7f0000e08000)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000e23000)={r1, 0xffffffffffffff22, 0x7ff, 0xfffffffffffffffd, 0x3, 0xe8b}, &(0x7f0000892000-0x4)=0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001000)={r2, 0x5, "c09142431a"}, &(0x7f0000000000)=0xd) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000)=r3, 0x4) r4 = getuid() setfsuid(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000002000-0x14)={@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f0000003000-0x4)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@multicast1=0xe0000001, 0x1, 0x100000001, 0x3, 0x101, 0x0, 0xa0, 0x20, 0x0, r5, r4}, {0x7, 0x6, 0xa26, 0x10000, 0x81, 0x0, 0x521, 0x209d}, {0x9, 0x1000, 0x80, 0x2}, 0x0, 0x8, 0x0, 0x1, 0x3, 0x0}, {{@in=@dev={0xac, 0x14, 0x0, 0xa}, 0x3, 0x33}, 0xa, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x2, 0x7, 0x3, 0x5, 0x1f, 0x6, 0x40}}, 0xe8) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000004000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000005000-0xb)='/dev/vcsa#\x00', 0x7, 0x400) flistxattr(r6, &(0x7f0000001000-0x1000)=""/4096, 0x1000) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$kcm(r6, &(0x7f0000004000-0x38)={&(0x7f0000006000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10, &(0x7f0000002000)=[], 0x0, &(0x7f0000001000)=""/109, 0x6d, 0x1}, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_MAP(r7, 0x4018ae50, &(0x7f0000006000)={0x0, 0x800, 0x100}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000008000-0x410)={0x3, {{0xa, 0x1, 0x20, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x100000001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x7, [{{0xa, 0x3, 0xffffffffffffc7c2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9a}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x1000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x44, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x80000000, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast2=0xe0000002}, 0x35}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x85, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x410) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$unix(r7, &(0x7f0000009000-0x64)=@file={0x0, ""/98}, &(0x7f0000009000-0x4)=0x64) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r7, &(0x7f0000009000)=@random={'security.', '/selinux/avc/cache_threshold\x00'}, &(0x7f000000a000-0x7f)=""/127, 0x7f) 2018/01/19 02:54:49 executing program 2: getresuid(&(0x7f000083d000-0x4)=0x0, &(0x7f0000495000-0x4)=0x0, &(0x7f00008be000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000822000)=0xc) syz_fuseblk_mount(&(0x7f00001c4000)='./file0\x00', &(0x7f0000de4000-0x8)='./file0\x00', 0xf002, r1, r3, 0x3, 0x9, 0x2801000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x40000, 0xa1) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(r4, &(0x7f0000002000-0x8)='./file0\x00', 0x200000, 0x22) ftruncate(r4, 0x83a) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000003000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_map={0x100000001, 0x9, 0x8000000000000, 0x8, 0x7, 0x7}}) accept$ax25(r5, 0x0, &(0x7f0000000000)=0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$midi(&(0x7f0000004000-0xb)='/dev/midi#\x00', 0x3f, 0x0) prlimit64(r2, 0xd, &(0x7f0000001000-0x10)={0x5, 0x2}, &(0x7f0000000000)={0x0, 0x0}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x0, 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_add_watch(r4, &(0x7f0000004000)='./file0\x00', 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_fuseblk_mount(&(0x7f0000005000)='./file0\x00', &(0x7f0000001000)='./file0\x00', 0x0, r0, r3, 0x67c3e6ec, 0x8, 0x80001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000005000-0xbc)={0x3, 0x2, 'client1\x00', 0x4, "313317df9f314abf", "3976f1fb06c5f48dc4c1f4fc8a7ecd8742278b867a71f2af5301ad959b7804ea", 0x8, 0x400, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001000-0x8)={0x0, 0x1, 0x4}, &(0x7f0000007000-0x4)=0x8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000006000)={0x8001, 0x820e, 0x10000, 0x3422, r8}, 0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000008000-0xb)='/dev/hwrng\x00', 0x4000, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r9 = openat(r7, &(0x7f0000009000-0x8)='./file0\x00', 0x30000, 0x109) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000004000-0xa5)="6890a0b53b872ab0074816a089c79cb73e47e9734398760c55f4f40c12320313334e9f925defbb56d329ff413201a37946cc5d5d6d29fccc7debc9071390001fcb9fe59883c8a228ef4044457bbe58bf01165725e54797ccac443f4a0b14aa07cb341a56b5e2df6207afe21650c2ba96845e8b654a7bf252e0a7dfe7948ddef2bb2882666c7a6a93193d85e510726aa5f30020b8fc1e6bac70647cc611f4cee26804fd703d", 0xa5) 2018/01/19 02:54:49 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffff9c, 0x50, &(0x7f0000001000-0x50)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001000-0x4)=r0, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000001000-0xd)='/dev/usbmon#\x00', 0x7, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000002000-0x4)=0x40000000000000, 0x4) arch_prctl(0x1004, &(0x7f0000001000-0xf1)="abc5621087b0ce2fdfbe34c0f5c53581963bb23d81c89cd1ada6f069d78be1d97264c8a9819f77a1382521982cedcf20f750255bd478b9890e6dab6e43ae6554e642431901d98c44fc70e05521dd4e9178d6df6ca4897f85c35017d0c5940aba96340e226c4db2cd0d2a90f2dcf2c251a1a5f7a2e7797e7f952b06d8a89f32b0fe790743c276d4e6e76bca5377e507029f07eeb0023df2eb272014ba119f1bea9830093e1b50421185ff35c19a56fc77bef769a151b17974730c5efd16cb15154f900fde032c00b241b0ee9cce9c117caa1353f1134402646d00b2824f93fb34c4ed91cfcd247065c80023667e80d96c53") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001000-0x8)={0x1, [0x0]}, &(0x7f0000002000)=0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000003000)={@common='sit0\x00', @ifru_addrs={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000002000)={r2, @in6={{0xa, 0x3, 0xff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9c9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80000000, 0x9dc1}, &(0x7f0000005000-0x4)=0x98) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000006000-0x8)=0x1) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000007000-0x10)={0x9, 0x2, 0x3ff, 0x7, r2}, 0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000007000)='trusted\x00', &(0x7f0000008000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000008000-0xd)='/dev/usbmon#\x00', 0xfffffffffffffffe) keyctl$invalidate(0x15, r3) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f0000004000)=0x10001) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000007000-0x2)={0x0, 0x0}) io_setup(0x2, &(0x7f0000005000)=0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000005000-0x8)={0x0, 0x0}) 2018/01/19 02:54:49 executing program 3: r0 = dup(0xffffffffffffff9c) r1 = fcntl$getown(0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001000-0x4)=r1) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002000-0x8)={0x0, 0x4, 0x7f}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001000-0x18)={r3, 0x4, 0x30, 0x0, 0x6}, &(0x7f0000000000)=0x18) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000003000-0x10)={0x1, 0x1, 0x1, 0x81, r3}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001000)={r4, 0xef, 0x5, 0xf800000000000000}, 0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000004000-0x24)={0x5, 0x5, 0x2, 0x6, 0x8000, 0x100000000, 0x3331, 0x7, 0x200, 0x9, 0xffffffff, 0x712}) getsockopt(r2, 0x2, 0x0, &(0x7f0000000000)=""/4096, &(0x7f0000002000-0x4)=0x1000) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000005000-0x4)=0x0, &(0x7f0000002000-0x4)=0x4) r5 = eventfd(0x1) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000005000)=""/20, &(0x7f0000005000)=0x14) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000006000)=""/221, 0xdd, 0x12062, 0x0, 0x0) setns(r2, 0x0) semget$private(0x0, 0x3, 0x400) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000002000)={0x6, 0xffffffffffffff00, 0x8200, 0x80000001, 0x0, 0x1f, 0x7ff, 0x4, r4}, 0x20) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000006000-0x4)=0x68a, 0x4) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000008000-0x8)=0x7) lseek(r5, 0x0, 0x0) 2018/01/19 02:54:49 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x0, 0x0}, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000001000)={0x0, 0x1000}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001000)={0x3, 0x8004, 0x800, 0x0, r1}, 0x10) readv(r0, &(0x7f0000002000-0x10)=[{&(0x7f0000001000-0xb6)=""/182, 0xb6}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000000)={0x0, 0x1a81, 0xf1c, &(0x7f0000000000)=0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001000)=0x0) getpgrp(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$audion(&(0x7f0000003000)='/dev/audio#\x00', 0x0, 0x105000) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000002000)=0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000004000)='/dev/rfkill\x00', 0x2, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000005000-0x28)={@common=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000005000)={0x3, 0xff, 0x8000}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000000000/0x4000)=nil) read(r3, &(0x7f0000002000-0xdb)=""/219, 0xdb) setsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000006000-0x4)=0x40, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000005000-0x14)={0x0, r0, 0x4, 0x3, 0x0}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002000-0xe8)={{{@in=@multicast1=0x0, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@broadcast=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000002000-0x4)=0xe8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000006000)={0x1, 0x3, 0x9, 0x0, 0x8, 0x200}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000008000-0x8)={@broadcast=0xffffffff, @rand_addr=0x382}, 0x8) 2018/01/19 02:54:49 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000-0xb)='net/psched\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000001000-0x10c)={0xffff, 0xfd, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x809, 0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KDMKTONE(r0, 0x4b30, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000002000-0x8)={0x0, 0x0}) rt_sigaction(0x32, &(0x7f0000001000)={0x1, {0x5}, 0x1, 0xeb0}, &(0x7f0000002000-0x20)={0x0, {0x0}, 0x0, 0x0}, 0x8, &(0x7f0000001000-0x8)={0x0}) ioctl$KDMKTONE(r0, 0x4b30, 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000002000)=0x9, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000003000)=0x0, 0x91) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000003000)={0x60, 0x9, 0x4, 'queue0\x00', 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = creat(&(0x7f0000002000-0x8)='./file0\x00', 0x189) r2 = semget$private(0x0, 0x6, 0x400) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f0000003000-0xa9)=""/169) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000004000)={0x0, 0x4000, 0x8, 0x1, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0]}) syz_open_dev$sndctrl(&(0x7f0000004000-0x13)='/dev/snd/controlC#\x00', 0x5, 0x10840) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000006000-0x94)={{0x22, 0x40, 0x0, 0x7f, 0x0, 0x5}, 0x20, 0x4, 0x10001, 0x7fffffff, 0x9a, "0efae1aabeeaf58250c0fc7bc52015507bbc2b6d5432aaa005ab98f312a6722825c754df7bc59b4a2ae202a718c5802018cbee9144a0ebd4c3d473083291f164313e9067d0ec7635d62d8495c8ff2f7264e5b4d8400b5e5174e36a47e2bb409faa2b2112216fa08b1024e9e851decc56df8b9328e1a434995f7f49c7b70b3716"}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000007000-0x38)={0x6, [0x3, 0x4, 0x100000001, 0xcd, 0x3, 0x2]}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000008000-0x94)={{0x7f, 0x6, 0x5, 0x1, 0xa95, 0x1}, 0x5, 0x1, 0x5, 0x9333, 0x1000, "922c963889c33f13ede1166eac56301970742dc0e4f3338a47753151a57b6e4367f747fa8018de6f83aaca9bad3baf12fd3f734ebcf660b71e18dcff5a7fa8b255fe1bdd023d6b9ea22f7fb1cb99c9da07142d79416ab26a91ec8026ef32beb10678909f3416eec4a1898fed68355af9e6cf57b1de5a90c8a6ef616ce447b479"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000002000)={0xfff, 0x80, 0x713e, 'queue0\x00', 0x100, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000008000)={0x0, 0x5}, &(0x7f0000003000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r3, 0x3, 0x0, 0x6}, &(0x7f0000001000)=0x10) 2018/01/19 02:54:49 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={0x80000000}, 0x0, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000002000-0x8)={0x0, 0x0}, 0x4800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept$llc(r0, 0x0, &(0x7f0000001000)=0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffb, 0x3, 0x40}, &(0x7f0000001000)=0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000003000-0xa0)={r3, @in={{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x1, 0x2, 0xfffffffffffffff7, 0x2}, 0xa0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000004000-0x18)={0x7ff, 0x1f, 0x5}) chmod(&(0x7f0000003000-0x8)='./file0\x00', 0x110) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000005000-0x8)={r3, 0xffff}, 0x8) rt_sigreturn() rt_sigpending(&(0x7f0000002000)={0x0}, 0x8) readahead(r0, 0x43, 0x7) utime(&(0x7f0000002000)='./file0\x00', &(0x7f0000004000)={0x6, 0xfff}) fcntl$addseals(r2, 0x409, 0x4) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000003000-0x10)={0x6, &(0x7f0000003000)=[0x6, 0x9, 0x10001, 0x6, 0xbfb, 0x81]}) r4 = syz_open_dev$vcsn(&(0x7f0000002000-0xa)='/dev/vcs#\x00', 0x0, 0x400000) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000006000-0x30)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write(r1, &(0x7f0000002000-0xb0)="7d2191dfb89e8159633ca4626e5f232f532a78a119d083ed3b330b084763dba3a886e6aa5642cd60daba6cebfeac5a78c704a75554764e8d02172efdb19e7ab3ef463fa833263f50dd6ca1d591d2f7f04c1fe147444eb242f41c8d1ed672689b019242de3a553f28e9cdd6066474447b74984496d80a5555165f8ddc3aeb5289136bdd648051cca9eb3f673e6fd5cdb169bd05fb7731c1aec09af845f1e8462553272b101fc68a462831bd89ce45c0d0", 0xb0) syz_open_dev$amidi(&(0x7f0000004000)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x20000) ioctl$KVM_SMI(r0, 0xaeb7) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = add_key(&(0x7f0000007000-0x8)='rxrpc_s\x00', &(0x7f0000006000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000006000)="483fc004a37002467756dd52f9951bbdd469cf35794d03478b84fd47f050d86a78600003c1d640a422a247ac7455b9055075ec76cd6241a26da58d2f1370ed3d7352e2547846b43f9d9361493afbd4daa0238b1bb9562e1c0534", 0x5a, 0xfffffffffffffffb) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = add_key(&(0x7f0000005000)='logon\x00', &(0x7f0000005000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000003000)="778fa6bf3bf163b87164323930bb6a06bc30feb0ea9ead7a1db8479a8a16dc0a01ae54ede28626d0a44b5a685cc70ed1893f3e7a3002b723c3219e0fef46ee494cca6bd455cfb949affeb2bb9a028a4493fc2f5ea139a56a", 0x58, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r5, &(0x7f0000004000)=[{&(0x7f0000006000)="b610500bcf11a77dc299bbb4976082b0ae5c755a5c10c4333c2522b3db90e9aa051350d858e6540f905c095608bf20f26c0236a8b9486ac21a25ad5c0c399c816a9d5c0d731fd11c8e5f4d6c4b8e92ddaa4f9ae1049b74150598c0346614b78bab3f10f25e34ef7a54f6e5ceed2dc1588d61842b6e55e371495eeee1ece4a28d30a15345c5c917818dfba99cfc9b1d5d", 0x90}, {&(0x7f0000006000)="d1ceb09ef9860dbf9215ab67c472e8b9", 0x10}, {&(0x7f0000006000)="9d708ed55879988825781c537c658006c82c8bff830a5389ca4bf65c2d5a6aa61ea720df9ed553826df9d261e7a519ae167339b59054527c2d6ab7a6975766442f0d67921d2528161d00136f907106c78c3977", 0x53}, {&(0x7f0000007000-0xc)="1b05991a14ad000219e520f1", 0xc}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000004000-0xcd)="77e87a6b13de6e0bafa30dd35b51af627cfcb4c7b15049bf6edc7e62bc2730a11c653a3321f437d8d474c86f1e5b469566b09ec74c78e6c8dc2227c8450b4551d8966254fbc8f274dd53bbba66474c035b3cc86ed24a852ed881bf0c931cf1571966fa96bf210c271c0bc32e0a8ce788f1ac684813d6da82b8cfd0dc97b2d3fa1645e8e556610560203c36bb0efae592b557d087d4e89a1ccf83846f181cee79d0bd5cb8ff314b4368a1cfef742e7ac42efcf1d408832d26fa543d12a2bc75c3a09ed5676916ac13231524262d", 0xcd}, {&(0x7f0000007000-0xd2)="66a86c627b53b1a8ae3e5038dd2fad279acf086f70053a0aca8f59abc7b994702aa2915f6246b22008d2e48abbf59e0edf2f954a966ee1a1e89a5055777d2bbff40693ab3bb70bfc196c9b0f290ea65ca8b55f1d0f0abc6e1cc2e5181eb70ae337513ff09d6e766273c2ca3535d8fa6495dc8c29aa3e318166d247b90b576e888ed80ae756112c1d799bb0f182245045eb1ec47b739fccc178220a0cf0be360920e7e9b2d9ad6dc4e9a249e585567303696fa7454853ec9a0c53a113496c9a082040b93409faaca0eaf4faf18d3bb9568354", 0xd2}, {&(0x7f0000007000-0xa0)="1b20cde9624b7f84e170ad27a58df46850f87d36ea274fa79f854a165fdb5e4f82528e23b39b98f34000fde01c37529d61afbcaa6048a5fb2b1c077da14835caf700d91e9da2489216dce4f2d9f89f6747c98b953dbee4b1aa8b9b60c737d2809b416700f7826b53363d4b1f557c9b64656ff58c34b7b44f06659d4f66bb63d5bbe0f546b3c7225b154910a3096ae793aee8d65814dfd6fa19f77a4b9088f38f", 0xa0}, {&(0x7f0000006000)="52336c6c61c304ca103d02f346fc581430f3d1d99c6c461697fa1e0078ca4a136d7ed818f63b6784ea501e2f7d9f52ac2856f86a2b151ec1874e76dce345e8df4c35f53a50e1566f226b7bb4df1799f3ecdfceef03e9332d125db666073240fd4dca042729cdd92a9e13ddadaf3dbe407cb2791aa091b94ec299b7975b8565bedcd4b8ef", 0x84}, {&(0x7f0000007000-0x98)="18ab2e2b1904621dc9e081d9966203403d7389586fa9a23d15a07682ff04a29971cbba3a0f1cc7976d5fa54b150d303642996f56bcf8065a6cbbd586b30ec886c18b0f923dfdddc3972040bba054f8327892bf8a9205660e9da986b5afd100cbb96d0c83f9312d23e2744af6e4517f130fa4f25d3d42811fce744724bb89daaed63a1497ed969f3879f1414b9bf70d9a38f1dfeb8e9652d0", 0x98}], 0xa, r6) 2018/01/19 02:54:49 executing program 6: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4(r0, &(0x7f0000001000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, &(0x7f00008d1000-0x4)=0x58, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000001000-0x4)=0x0, &(0x7f00006b0000-0x4)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x1, 0x4, 0x4}}, 0x26) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000003000-0x49)=""/73, &(0x7f0000003000-0x4)=0x49) r2 = syz_open_dev$usbmon(&(0x7f0000002000-0xd)='/dev/usbmon#\x00', 0x8, 0x2000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) socket$inet6(0xa, 0x800, 0x18d50ea2) r3 = dup(r0) socket(0x3, 0x6, 0x5) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000004000-0x20)={0x81, 0x0, 0x2, 0x7}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000001000)={0x7, r4}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000004000)='./file0\x00', 0xc008, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000006000-0x10)={r3, 0x28, &(0x7f0000006000-0x28)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000007000-0x10)={r4, 0x1}) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000002000)={0x1, 0x2, 0x5}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000008000-0xf7)=""/247) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000008000)={0x0, 0x0}) [ 30.690278] audit: type=1400 audit(1516330489.625:9): avc: denied { map } for pid=3652 comm="syz-fuzzer" path="/root/syzkaller-shm378581866" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 31.317987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.044880] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.455064] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.538330] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.772807] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.895883] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.139293] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.154830] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.903072] audit: type=1400 audit(1516330492.838:10): avc: denied { sys_admin } for pid=3696 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.002696] audit: type=1400 audit(1516330492.899:11): avc: denied { sys_chroot } for pid=4422 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.959835] audit: type=1400 audit(1516330493.895:12): avc: denied { dac_override } for pid=4681 comm="syz-executor1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.005436] audit: type=1400 audit(1516330493.940:13): avc: denied { ipc_owner } for pid=4681 comm="syz-executor1" capability=15 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/19 02:54:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000b73000-0x11)='/dev/vga_arbiter\x00', 0x300, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000e94000-0x8)={0x38, 0x488a}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000d31000)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000f9c000)={0x22f, 0x7, 0x200, 0x4, 0x6a, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) creat(&(0x7f0000ffd000)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f000044c000-0x60)={0x20000000, 0x15, 0x2, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/19 02:54:54 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000001, 0x103000) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000001000-0x1e)={0x18, 0x0, {0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000004000)={0x18, 0xfffffdfd, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @syzn={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}}}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000006000-0x30)={0x1, 0x0, [{0x4, 0x1de8, 0x7, 0x8000, 0x3, 0x7fffffff, 0x3f, [0x0, 0x0, 0x0]}]}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000006000)=[@in6={0xa, 0x0, 0x392, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x9}, @in={0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x12}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x2c) 2018/01/19 02:54:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e, 0x0, ""}], 0x10, 0x0}, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000cad000)="eb010000") 2018/01/19 02:54:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x4000000000b, 0x0, &(0x7f0000064000-0x10)={0x800002e5a, 0x0}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) poll(&(0x7f0000999000-0x20)=[], 0x0, 0xf8d4) recvfrom(r2, &(0x7f0000013000-0x8d)=""/0, 0x0, 0x0, &(0x7f0000013000-0x10)=@ax25={0x6, {"2d13d4162d9f33"}, 0x0}, 0x10) r3 = gettid() socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f000020e000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r5, &(0x7f000004c000-0x5e)=""/1, 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) dup2(r4, r5) tkill(r0, 0x16) r6 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r7 = dup2(r1, r2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000069b000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fcntl$setown(r7, 0x8, r6) tkill(r0, 0x16) 2018/01/19 02:54:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = gettid() accept4$packet(0xffffffffffffffff, &(0x7f0000c35000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000811000-0x4)=0x14, 0x800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000c84000-0x14)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, r2}, 0x14) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000ee5000-0x10)={0x77359400, 0x0}, 0x10) r3 = dup(r0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000c64000)={{{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000fc4000)=0xe8) recvmsg$kcm(r3, &(0x7f000087f000-0x38)={&(0x7f00000b6000-0x10)=@ethernet={0x0, @random=""/6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000cf8000)=[{&(0x7f000081b000-0x1000)=""/4096, 0x1000}, {&(0x7f0000b04000-0x3c)=""/60, 0x3c}, {&(0x7f00009be000-0xf4)=""/244, 0xf4}, {&(0x7f000090c000-0xad)=""/173, 0xad}, {&(0x7f0000ec2000)=""/158, 0x9e}], 0x5, &(0x7f0000efd000-0x9d)=""/157, 0x9d, 0x3fff80000}, 0x1) setuid(r4) listen$netrom(r3, 0x1) readv(r0, &(0x7f00003c2000)=[{&(0x7f0000ee5000-0xd1)=""/209, 0xd1}], 0x1) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) tkill(r1, 0x1000000000016) 2018/01/19 02:54:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000b73000)={0x4000000000006, 0x4, 0x1a723ef9, 0x3f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) r0 = syz_open_dev$sndpcmc(&(0x7f0000b40000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x163801) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000384000-0x4)=0x609ab40f) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000e38000-0x88)={0x3f, {{0xa, 0x3, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) 2018/01/19 02:54:54 executing program 3: mmap(&(0x7f0000000000/0xfdc000)=nil, 0xfdc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000a, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000682000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000931000)={0x1, 0x20}) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000c22000)="2f4403995462e4cd332c8ce78c2d1da4a5e4bffb64e638d13f0e87036739e3dd4fa78f191dc12392a7bcff56dc167ec7f772627a5447079135c9783b6d4d41e4b04aefbf26c782293e096360a6d78e16347216eb0a1f", 0x56, 0x0) mmap(&(0x7f0000fdc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000fdc000)=0x0, &(0x7f0000fdd000-0x4)=0x4) sendto(r0, &(0x7f0000001000-0xb8)="", 0x0, 0x0, &(0x7f0000fdb000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="169196e50fdd", [0x0, 0x0]}, 0x10) 2018/01/19 02:54:54 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000001000-0xb)='/dev/adsp#\x00', 0xb11b, 0x200000) fremovexattr(r0, &(0x7f000033b000)=@known='security.capability\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000e51000)=""/21) seccomp(0x1, 0x0, &(0x7f000034c000-0x10)={0x1, &(0x7f0000000000)=[{0x410d, 0x0, 0x0, 0x407ffc0003}]}) fchown(0xffffffffffffffff, 0x0, 0x0) [ 35.253247] audit: type=1400 audit(1516330494.188:14): avc: denied { map_create } for pid=4751 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/01/19 02:54:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000ca1000-0x78)={0x2, 0x78, 0x8e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000d6c000-0x8)={0x0, 0xfffffffffffffffb}, &(0x7f0000c16000-0x4)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f000055f000-0x6)={r0, 0xb0e}, 0x6) mmap(&(0x7f0000000000/0xffb000)=nil, 0xffb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004fa000-0x1c)={0x3, 0x4, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f000041c000-0x1c)={0xc, 0x0, 0x0, 0x0, 0x0, r1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) openat$audio(0xffffffffffffff9c, &(0x7f00000df000-0xb)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') unlinkat(r2, &(0x7f0000be6000)='./file0\x00', 0x0) 2018/01/19 02:54:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000193000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [], ""}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], ""}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], ""}}}}}}, &(0x7f0000aab000-0x14)={0x0, 0x0, []}) 2018/01/19 02:54:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x11, &(0x7f000040f000-0x1)="", 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000001000-0x90)={0x80000000, {{0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) 2018/01/19 02:54:54 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000e07000)='/dev/vga_arbiter\x00', 0x24002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000a66000-0x28)={'vcan0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000d2d000-0x14)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, r1}, 0x14) r2 = syz_open_dev$loop(&(0x7f0000c22000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00001fc000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x31, "734f268462e85be5c3deb2dcf5e1290548cbea578a90ca8984afc4626ec8590490a0ffcfa48acfa9a1f58ee6f94ca2665927c530328f2a806687da603e5419f8", "0f10e254024b8d621c8cb667d19e2428b0141b6e510b2859e3d987eb6623ff27", [0x8000000, 0x2], 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$llc(0x1a, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 2018/01/19 02:54:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00008e1000-0x12)='/dev/snd/pcmC#D#c\x00', 0x698, 0x8000) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f000030d000)={0x101, 0x9, 0x5, 0x7}, 0x8) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b9000-0x4)=0x51) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000b8000)='/dev/audio\x00', 0x2000, 0x0) listen(r1, 0x3) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000829000)={0x3, 0x0, [{0xf, 0x6, 0x2, 0x2, 0x7, 0xb2, 0x7, [0x0, 0x0, 0x0]}, {0x4, 0x9, 0x0, 0x1f0d, 0x100000000, 0x9, 0x1ff, [0x0, 0x0, 0x0]}, {0xc0000001, 0x9, 0x4, 0x8, 0x5, 0x8001, 0x6, [0x0, 0x0, 0x0]}]}) mincore(&(0x7f0000254000/0x4000)=nil, 0x4000, &(0x7f00005b3000)=""/234) ppoll(&(0x7f0000811000)=[{r0, 0x14, 0x0}], 0x1, &(0x7f0000560000)={0x77359400, 0x0}, &(0x7f0000b71000)={0x0}, 0x8) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000e45000-0x1e)={0x18, 0x0, {0x2, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @common='syzkaller0\x00'}}) 2018/01/19 02:54:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0x27e, &(0x7f0000016000-0x10)={&(0x7f000000b000-0x2c)={0x14, 0x21, 0xb01, 0xffffffffffffffff, 0xffffffffffffffff, {0x10, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xaea000)=nil, 0xaea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000ae7000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0x0}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x1, 0x21, 0x0, @dev={0xac, 0x14, 0xffffffffffffffff, 0x0}, @multicast1=0xe0000001, {[]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x689, 0x82e, 0x0, "fba762", 0x0, "e8df1c"}, ""}}}}}, &(0x7f00003b5000)={0x0, 0x0, []}) 2018/01/19 02:54:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) pwrite64(r0, &(0x7f0000be0000-0xd8)="abd170032eb1fd62ca04e7865089f424da894ced9bca75713468f10752dd0666e54cbe7bb574a43b41d3e3c9c937f45bc6609ac30b7d3e6ad1f41b4c615cfa4cb0d0583a530d54d178c05d7c8130ea5fa83d04379cfb046096c00f2999ed536423793a705c1a7a10105e6217dd0ce0b26ee2bc9568e361f7fcdc93346259c2ce11fd0f11bdf604fd57123af4b28346793a844418266497f5ad225ec433ac5ddcdee085df264bd62c44a07570ffe7fd7293ebf6c7e456020f6be5d08609bd0071125f459efd29b7736254403657da479ec3db4cbc9279db1e", 0xd8, 0x0) mkdir(&(0x7f0000f03000-0xa)='./control\x00', 0x0) unlink(&(0x7f0000eb9000-0x10)='./control/file0\x00') r1 = open(&(0x7f00002e5000)='./control\x00', 0x0, 0x0) lseek(r1, 0x8000, 0x0) rmdir(&(0x7f000009b000)='./control\x00') [ 35.344730] audit: type=1400 audit(1516330494.280:15): avc: denied { map_read map_write } for pid=4771 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/01/19 02:54:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, &(0x7f000001d000-0x50)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$mice(&(0x7f0000765000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000cd6000-0x4)=0x3ff, 0x4) 2018/01/19 02:54:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) membarrier(0x10, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) membarrier(0x8, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000841000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) prctl$setfpexc(0xc, 0x1) 2018/01/19 02:54:54 executing program 3: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000000b000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000006000-0x14)={0x0, 0x80000000, 0x0, 0x0, 0x0}) r2 = dup(r0) ioctl$TCSBRKP(r2, 0x5425, 0x100000001) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000006000-0x20)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) [ 35.410461] audit: type=1400 audit(1516330494.321:16): avc: denied { create } for pid=4784 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/01/19 02:54:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000991000-0xe8)={{{@in=@multicast1=0x0, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@loopback=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000028f000)=0xe8) bind$packet(r0, &(0x7f0000fd6000)={0x11, 0xff, r1, 0x1, 0xffffffff900a01bb, 0x6, @random="2f3acacb8d5d", [0x0, 0x0]}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2283, 0x7fffffffefff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00003a7000)={r0, 0x50, &(0x7f00006b8000-0x50)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) [ 35.411556] dccp_invalid_packet: invalid packet type 2018/01/19 02:54:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000c22000)='/dev/loop#\x00', 0x20003, 0x3fd) fadvise64(r0, 0x0, 0x0, 0x3) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000052c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000b6b000-0x8)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000e18000-0x3b)=""/59) getresgid(&(0x7f0000a38000-0x4)=0x0, &(0x7f00003b1000)=0x0, &(0x7f0000a92000)=0x0) [ 35.473610] audit: type=1400 audit(1516330494.326:17): avc: denied { write } for pid=4784 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 35.513921] audit: type=1400 audit(1516330494.341:18): avc: denied { dac_read_search } for pid=4785 comm="syz-executor3" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/19 02:54:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000fdf000-0x78)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000af5000)={&(0x7f00002e9000)=@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c, &(0x7f0000814000)=[{&(0x7f000000b000-0x1000)="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", 0x1ad}], 0x1, &(0x7f0000646000)=[], 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x200000400, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x0) mknod$loop(&(0x7f0000dcf000-0x8)='./file0\x00', 0x0, 0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000ebc000)='/dev/snd/midiC#D#\x00', 0xff, 0x80300) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000344000-0x8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)="") 2018/01/19 02:54:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = semget(0xffffffffffffffff, 0xa, 0x0) semtimedop(r0, &(0x7f000000c000)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000006000-0x10)={0x0, 0x0}) keyctl$session_to_parent(0x12) unshare(0xc000000) 2018/01/19 02:54:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x97, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl(0x1004, &(0x7f0000e0c000)="") r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00007e8000)='/selinux/checkreqprot\x00', 0x309200, 0x0) bind$alg(r0, &(0x7f0000fd1000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(seqiv(ccm_base(ecb(serpent),michael_mic)))\x00'}, 0x58) 2018/01/19 02:54:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f00001e1000)={{0x4000001ff, 0x80000a}, {0x0, 0x0}, 0xfffffffffffffffe, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/19 02:54:54 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000b35000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x2, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x14, &(0x7f0000ace000)={@random="43827added00", @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {@generic={0xf7, "27f8dbfaa35d"}}}, &(0x7f00004a9000-0xc)={0x3, 0x1, [0x0]}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000a4c000-0x11)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000783000)=0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) syz_open_dev$vcsa(&(0x7f0000c07000-0xb)='/dev/vcsa#\x00', 0x1, 0x80) accept4$nfc_llcp(r2, 0x0, &(0x7f00001c0000)=0x0, 0x80000) 2018/01/19 02:54:54 executing program 4: mlock2(&(0x7f000067f000/0x4000)=nil, 0x4000, 0x4000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000001000-0xa)='/dev/dsp#\x00', 0x8, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000001000-0xc)={0x10, 0x0, 0x0, 0x400}, 0xc) 2018/01/19 02:54:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000acd000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000a29000-0xc)='/dev/audio#\x00', 0x100000000, 0x222100) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c83000)='./file0\x00', &(0x7f0000a98000)={0xac3, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00006cf000)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000648000-0x138)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/01/19 02:54:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000933000-0xb)='/dev/vcsa#\x00', 0x7, 0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f000071b000-0x84)={0x0, 0x7c, "103cd4a3b93b071dc11007c2ee086760d7de68dca7d4ee038f4598b7c34493f3083e2468105932a9c043b9db238bbba737e2c6a562682e2a6559c2ffe4a10431f0371c169339a5b0f60a278e46a2ab30a53567d3cccd64dc3e0137ae4fd2f57720c9c4bc1ca21020488d207a55cf93e17def8d3372581719ad58a980"}, &(0x7f0000b29000)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00006cd000)={0xfffffffffffffff7, 0x8, 0x8200, 0x9f, 0x22, 0x3, 0x29af, 0x60000000, r1}, &(0x7f000010d000)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000787000)=[{&(0x7f0000784000)="77b376ecbbe9d37f40047f1fd3bf1b50118057d655ffee8e22a4cd287f97ba4c8a369d564ee01acb0985e1", 0x2b}, {&(0x7f00005ad000)="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", 0x1000}, {&(0x7f0000df7000-0xa0)="8532e1884d05e1d97eccdb157b1264e0e74a6e54b93bbe662bae709cdc1237447c438c46d102d6368d25e2f23d98f18c17e63b7b620b613499d924954bb7bda391cd8850068b5d5c0357c9818dea9e361e1eb2077f37028b2bab262e56933bfab7b7e7f92ad1ebef01f7873c95f6f4f256fd86b0abb48f785d6692a9724b7308edb6bea41119f4aa67bd8d8d38823ef32076d0af4759124910aeb133ded880d6", 0xa0}, {&(0x7f0000d11000-0xf4)="91ab8146e8b8242ffe1aa9f10e9a810fcf3b7993057c1e480bec96623a613733903797bf305d1264e6deb85defd0aef58f41cc13b82fa95ed29102c1efd6fe6402dd828e023dc91fb1aac2acf59c7a161eb575339daf423b95cc6255e3c33c073e97d4ca5586e6c3d52b9a43efb14093f034c936508a93952481ed0c33ee82dc416f755f3f4e405cf7881ce147a405375fcb466f5db01952e527a0340ef3fe57ae0d79a1e322ffeadb6059587b0dc1118654d4e910f5a1c5805f3a853dde69d76622fb41e4fe43ddbf25098d862707147067e771547573cfb1ba7b347e18e076c4ce986f74ac937d3f79b8958a03cdd72e6cd7bf", 0xf4}], 0x4, 0x0) syz_open_dev$loop(&(0x7f0000b23000+0x5e8)='/dev/loop#\x00', 0x100000000, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x0, 0x4, 0x0}}, 0x2e) close(r2) 2018/01/19 02:54:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00005aa000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00008ff000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, &(0x7f000093d000)="dbc604c23efedfb809704bd25eacbdb2ca3d92d51b12d345c79835692dcbccfecc141be239ee9bdb3b122e8333b956fa6bd76208dafb876ac043cb656d5f3c57a05663dff35f0e85a68ee028c385f7eb44a79b472179b1ac5e88bc1aa03c556768882a2b8c04935034e6c92b0f7fd359498dd9535c7c16898623b6d7aa490b28", 0x80) r3 = getpid() syz_open_procfs(r3, &(0x7f00001d1000-0x9)='status\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [], {0x95, 0x0, 0x0, 0x0}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000154000)={r1, r4}) sendmsg$key(r5, &(0x7f00001fd000-0x38)={0x0, 0x0, &(0x7f00000d0000-0x10)={&(0x7f0000e91000-0x10)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x1ba}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r4, 0x8915, &(0x7f0000007000-0x20)={"b2d819c8b0e724d0373d70f5d60c52f3", {0x4, 0xfffffffffffffffc, 0x40, "ce5c3e9ea35a", 0x0, 0x0}}) [ 35.601107] QAT: Invalid ioctl 2018/01/19 02:54:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x0, 0x0, &(0x7f0000b09000-0x8)={0x0, 0x0}) ioctl$KDADDIO(r0, 0x4b34, 0x7f) 2018/01/19 02:54:54 executing program 6: r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000)={0xaa, 0x0, 0x0}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000003000-0x8)='./file0\x00', 0x300, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000011000)=[@in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7f}, @in={0x2, 0x1, @dev={0xac, 0x14, 0x0, 0x15}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x7, @loopback={0x0, 0x1}, 0x5}, @in6={0xa, 0x1, 0x2, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x6}, @in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000001000-0x8)='big_key\x00', &(0x7f0000011000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000011000)="79bf2c41cb96afeed2a84f79531e658b08f420870b58fb93aaf76ca59fa2fd14bd7305840b828b7c8bd564aa58d0a741fb9c7d28da438091fa1a51b080bf948fb0fa8e", 0x43, r2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) getrandom(&(0x7f0000013000-0x7d)=""/1, 0x3e, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000003000)={{0x3, 0x3, 0x24, 0x1, 0x20, 0xb15}, 0x5, 0xa3, 0x5}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b6c000)="", &(0x7f00008a3000)=0x0, &(0x7f000057c000)=0x0, &(0x7f0000ac4000)="") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00003b8000)='/dev/sequencer\x00', 0x300, 0x0) bind$inet6(r3, &(0x7f0000707000-0x1c)={0xa, 0x2, 0x4, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @broadcast=0xffffffff}, 0x7}, 0x1c) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000326000)=""/199) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00009a2000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000060000)=0x0) r5 = getpgid(0xffffffffffffffff) setpgid(r4, r5) [ 35.649228] QAT: Invalid ioctl [ 35.654867] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 35.711658] audit: type=1400 audit(1516330494.647:19): avc: denied { prog_load } for pid=4838 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/01/19 02:54:54 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x13) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000784000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000001000-0x2)=0x0, &(0x7f0000001000-0x8)=0x2) mmap(&(0x7f0000000000/0xfd2000)=nil, 0xfd2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000369000-0x4)=0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000fcf000)="240000001a0025f0006bb4040000001d0a0b00ff0010d300001000eb080002007fffe5b7", 0x24) mmap(&(0x7f0000fd2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000fd2000)=0x3f, 0x4) 2018/01/19 02:54:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b00000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000973000-0x38)={0x0, 0x0, []}) write$fuse(0xffffffffffffffff, &(0x7f0000723000-0x28)={0x28, 0x0, 0x0, @fuse_notify_delete_out={0x0, 0x0, 0x0}}, 0x28) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000eb7000-0x4)=0x1, 0x4) write$evdev(0xffffffffffffffff, &(0x7f0000b04000)=[{{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x18) getsockname$inet(r3, &(0x7f0000d7c000-0x10)={0x0, 0xffffffffffffffff, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000c08000)=0x10) eventfd2(0x3, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000977000)={&(0x7f000000c000-0x8)='./file0\x00', 0x0, 0x8}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00008d7000-0x8)=@assoc_value={0x0, 0x17a3}, &(0x7f0000809000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000ad6000)={r4, 0x4865, 0x30, 0x1000, 0x15}, &(0x7f0000bd0000-0x4)=0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f000098a000)={r5, 0x8}, &(0x7f0000f8c000)=0x8) fgetxattr(r3, &(0x7f0000e34000-0xd)=@known='security.evm\x00', &(0x7f00002f4000)=""/250, 0xfa) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00008eb000)={0x0, 0x0}, &(0x7f0000cfa000)=0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00009bd000)="39087bcd0fa122c1df7adfbe2bf2d441", 0x10) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000295000-0x78)={0xd3, {0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x140, 0x1, 0x4, 0x8000, 0x6, &(0x7f0000f8e000)=@common='bcsh0\x00', 0x2, 0xe3, 0x1c}) dup2(r1, r1) socketpair(0x0, 0x0, 0x0, &(0x7f000023a000-0x8)={0x0, 0x0}) 2018/01/19 02:54:54 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/audio\x00', 0x200000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="ad60833f92085116465e11318c7ec2bc", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000007, 0x805, 0xfffffffffffffffc) clock_gettime(0x0, &(0x7f0000443000)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000634000+0x434)=[{0x9a4c, 0x2, 0x3, 0x9, @time={0x77359400, 0x0}, {0x8, 0x5}, {0x100000000, 0x0}, @connect={{0x4, 0x6}, {0x38, 0x7953}}}, {0x2, 0x0, 0xa5c8, 0x8, @time={r2, r3+30000000}, {0x89a, 0x401}, {0x7, 0xffff}, @quote={{0x3, 0x8}, 0xdff, 0x0}}, {0x2, 0x101, 0x80000000, 0x7ff, @tick=0x0, {0x9, 0x2}, {0x8, 0x1ff}, @addr={0x8, 0x2}}, {0x6, 0x100, 0x6, 0xffffffff, @time={0x0, 0x0}, {0x80000000, 0x100}, {0x3, 0xdff}, @ext={0x8, &(0x7f0000927000-0x8)="6507ab9719d6b85e"}}, {0xb0c, 0x4, 0x2b, 0x6, @tick=0x0, {0x80000001, 0x100000000}, {0x1, 0x6}, @time=@time={0x0, 0x0}}, {0x8, 0x200, 0x400, 0xcc, @tick=0x4, {0xf922, 0x1}, {0xc34, 0x9}, @time=@tick=0x8001}, {0x0, 0x947e, 0x800, 0x0, @time={0x77359400, 0x0}, {0x5, 0x1ff}, {0xfffffffffffff800, 0x0}, @queue={0x6, {0x100000000, 0xffffffff}}}, {0x20, 0x8, 0x8000, 0x6, @tick=0x40b0742a, {0xffffffff00000001, 0x1d3903d6}, {0x779f, 0x9ae8}, @time=@tick=0x4d30}, {0x8, 0x7558, 0x1, 0x53ff, @tick=0x6, {0x8, 0xffffffffffffffed}, {0x2, 0xb30a}, @quote={{0x100000001, 0x0}, 0xff, &(0x7f00007c8000)={0x6, 0x2, 0xe9, 0x4, @time={0x0, 0x0}, {0x9, 0x6}, {0x3ff, 0xffffffff}, @ext={0xe, &(0x7f00009d7000-0xe)="9b58357f61395150b54365b4b250"}}}}], 0x1b0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00006dc000-0x4)=0x0, 0x4) 2018/01/19 02:54:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000095000-0x8)='./file0\x00', 0x0) signalfd4(r0, &(0x7f0000026000)={0x8001}, 0x8, 0x80800) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000135000)=0x7, 0x4) mount(&(0x7f00009b1000)='./file0\x00', &(0x7f000006e000)='./file0\x00', &(0x7f00009e0000-0xa)='hugetlbfs\x00', 0x0, &(0x7f0000ef7000)="") setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000848000-0x4)=0x100000000, 0x4) 2018/01/19 02:54:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d00000)='mounts\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x0, &(0x7f0000120000-0x10)={0x0, 0x5}) ftruncate(r0, 0x3d) 2018/01/19 02:54:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000c85000-0x4)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f000042d000-0xb7)={0x0, 0xaf, "6a64fc6c4256ecf9ac91cd161313c724227e3bf7d725a063a62e11919c0c64e5c46257c8f6a198948676cbab4bb65ac8a620b167125780527770177362c0f99bcd8cc259fad4c6c75050d7c267c1601607e62163203766b83a304bbcc39b06682bb71b18c392c7bd5c7a6df8a4b937dcd09706718b9c7da7112bba5bc794d755bfd47c55dbf660a9bf8571e2a9288ff7470d4e2e69e65990dba87140023b575868dde30fd909e47dc358ba977c2e7c"}, &(0x7f0000163000-0x4)=0xb7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000a52000-0x8)={r1, 0x2, 0x200}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x3f}]}, &(0x7f0000f92000-0x4)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0x8000, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000161000-0x8)=0x80) r3 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00009da000)=r2, 0x4) write(r3, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/19 02:54:54 executing program 4: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005000)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast2=0xe0000002}, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2, 0x0, 0x3, 0x3, 0xa, 0xa0, 0x20, 0x3b, r1, 0x0}, {0x7fff, 0xffffffff7fffffff, 0x6635, 0x7, 0xb0a, 0x0, 0x7f, 0x3}, {0x0, 0x1, 0x1, 0x3}, 0x5, 0xb, 0x1, 0x1, 0x3, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x2, 0x32}, 0x2, @in=@multicast2=0xe0000002, 0x2, 0x2, 0x0, 0x3, 0xffd, 0x80, 0x7}}, 0xe8) ioctl$int_in(r0, 0x80000000005021, &(0x7f0000004000-0x8)=0x0) 2018/01/19 02:54:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000bfc000)={0x0, 0x0}, 0x80000) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000190000)={0x9d, &(0x7f0000926000)=""/157}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00009ee000-0x58)={0x26, 'skcipher\x00', 0x0, 0x8d, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000d48000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) close(r1) r2 = open(&(0x7f0000bd2000-0x8)='./file0\x00', 0x3ac01, 0xd0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f000091b000)=""/125) [ 35.750931] audit: type=1400 audit(1516330494.685:20): avc: denied { prog_run } for pid=4838 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/01/19 02:54:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001ee000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvmsg(r0, &(0x7f0000d1b000-0x38)={&(0x7f000093c000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0}}, 0x2e, &(0x7f000046f000-0x10)=[], 0x0, &(0x7f0000746000-0x62)=""/98, 0x62, 0x0}, 0x102) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000817000)={0x22, {{0x2, 0x3, @rand_addr=0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) sendto$inet(r0, &(0x7f0000763000-0x1)="", 0xfdc7, 0x0, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r2, &(0x7f0000d05000)="", 0x0, 0x0, &(0x7f0000030000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom(r1, &(0x7f00004a0000-0x32)=""/50, 0x32, 0x2060, &(0x7f0000d61000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x4, 0x1, 0x3}}, 0x2e) recvfrom$inet(r0, &(0x7f0000db1000)=""/109, 0x6d, 0x0, &(0x7f0000798000-0x3)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/19 02:54:54 executing program 3: mmap(&(0x7f0000000000/0xf61000)=nil, 0xf61000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet(r0, &(0x7f0000ac1000-0x45)="c4", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f000056f000-0x4)=0x4, 0x4) mmap(&(0x7f0000f61000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000513000-0x10)={0x6, 0x0, 0x1, 0xff, 0x0}, &(0x7f0000f62000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000dc4000-0x6f)={r1, 0x0, ""}, &(0x7f0000f61000-0x4)=0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000823000-0x83)=""/131, &(0x7f0000eb0000)=0x83) 2018/01/19 02:54:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000bd5000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000556000-0xa)='/dev/cuse\x00', 0x8000, 0x0) accept(0xffffffffffffffff, &(0x7f0000711000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ead000)=0x2e) r0 = syz_open_dev$sndpcmp(&(0x7f000091f000-0x12)='/dev/snd/pcmC#D#p\x00', 0x3, 0x2) accept4$packet(r0, &(0x7f0000f23000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000b5b000)=0x14, 0x20000000007fd) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000255000-0x4)=0x0, 0x80800) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f000039d000-0x16)='/selinux/checkreqprot\x00', 0x600000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000131000-0x10)='/selinux/policy\x00', 0x0, 0x0) tee(r1, 0xffffffffffffffff, 0x9, 0x0) 2018/01/19 02:54:54 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001000)=0x17, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002000-0x4)=0x7, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/qat_adf_ctl\x00', 0x288140, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000ed8000-0x28)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dd4f285, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x40100000000001, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x44c, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000007000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x400) getsockname$netrom(r3, &(0x7f0000e44000-0x10)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000c7a000-0x4)=0x10) bind$alg(r1, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) r4 = syz_open_dev$mice(&(0x7f0000135000)='/dev/input/mice\x00', 0x0, 0x101006) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000409000-0xe8)={{{@in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000320000-0x4)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000914000)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100000001, 0x8ce, 0x3, 0x100, 0xa00000000000, 0x2800000, r5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000b88000-0xb0)={{0x2, 0x10001}, 'port1\x00', 0x20, 0x0, 0xfffffffffffff801, 0x34, 0x8ae, 0xff, 0x200, 0x0, 0x7, 0xed, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/19 02:54:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000a43000-0x8)={0x0, 0x0}) ioctl$sock_netrom_TIOCOUTQ(r0, 0x5411, &(0x7f00007b1000-0x4)=0x0) r1 = socket$inet6(0xa, 0x806, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000ff1000-0x12)="ff02047f0100000effffff78d60000d8144e000000000205", 0x18) 2018/01/19 02:54:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000559000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000921000-0x10)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00006a1000)=""/210) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000079a000)="", 0x0) r2 = accept$alg(r0, 0x0, 0x0) recvfrom$packet(r2, &(0x7f0000e03000-0xc8)=""/200, 0xc8, 0x0, 0x0, 0x0) 2018/01/19 02:54:54 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = getpgid(0x0) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000001000)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000003000)=0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001000)='/dev/usbmon#\x00', 0x81, 0x20000) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003000)='/dev/rfkill\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000003000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$nfc_llcp(r5, &(0x7f0000005000-0x60)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f0000003000-0x4)=0x60, 0x800) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x4800) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4, &(0x7f0000001000-0x20)=[&(0x7f0000003000)={0x0, 0x0, 0x0, 0x7, 0x1ff, r0, &(0x7f0000001000)="da3de767932217c99d9f504af1a3e86bda19cdd02e5dd1be2e5766fe553fe7ccbe550eb6bbfd36dcf700edea4dc4b925", 0x30, 0x6, 0x0, 0x1, r4}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000002000)="c43a119fe25c4df924437444e6307b711e5194676356723e68bc6dc13e0d0209fdc773ff02037c0eee66ee60aaf4d72aaf262ee23e04f4eb5220ed072f05902359e899160255a0cb7dc92d9a90e9e87905e47c36fa672f893ff724d9e9221c4850de36b37a89891cacf8832cad33c7eadb564b1d68984cbd42dcc0e19aa014ecd48f2dc96be6e28ec7a1ddc1537db4b7011083ff7fd3e0ba44", 0x99, 0x101, 0x0, 0x0, r5}, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000004000-0x1000)="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", 0x1000, 0x800, 0x0, 0x0, r6}, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000001000-0xb4)="65fc39c6c8d31bb57ab1d44490f83b0deb972c7d355e1e12ff7bd88b0a5be9daa59d5463676a3644689f2c1c14dac80a4152727c976cd47f3b635da081a8cabcecf35412cf572ffbd86482bb0fcb5e4b9be9d185588c6aa28cef823adc0dfa3607856befe79e0fda79579982f6c2367b270823478241d4dfdebfe325d421bfa103cb5905d3d683b0f3346116878b2bb27e38ff9d12b61b255dab615d908a23db6d04d4a9a5c449415aa162acce53ae2841c018b6", 0xb4, 0x8, 0x0, 0x1, r7}]) ptrace$setopts(0x4206, r2, 0x0, 0x400000000) 2018/01/19 02:54:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100000000000, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x0, 0x0, &(0x7f0000001000)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x3, 0x1, &(0x7f000004a000-0x10)={0x0, 0x989680}, &(0x7f0000a2a000)=0x0, 0x0) [ 35.918066] audit: type=1326 audit(1516330494.853:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4894 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452e99 code=0x7ffc0000 2018/01/19 02:54:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d9e000-0x1c)={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) listen(r1, 0x0) sendto$inet(r0, &(0x7f0000a29000-0x1)="", 0x0, 0x20008045, &(0x7f00005f0000-0x10)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = accept(r1, &(0x7f0000fd7000+0xb75)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000f7e000)=0x10) sendmmsg(r2, &(0x7f0000426000-0x1a4)=[{{&(0x7f00007ab000-0x60)=@pppoe={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}}}, 0x1e, &(0x7f0000afe000-0x70)=[{&(0x7f0000037000-0x1000)='L', 0x1}], 0x1, &(0x7f0000972000)=[], 0x0, 0x0}, 0x0}], 0x1, 0x48040) close(r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000ee6000)={0x0, 0x5}, &(0x7f00009b2000)=0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f000076c000-0x4)='tls\x00', 0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000f2f000-0x8)=@assoc_value={r3, 0x34}, 0x8) r4 = syz_open_dev$vcsn(&(0x7f000049f000)='/dev/vcs#\x00', 0x7, 0x101080) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000642000+0x704)={@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, @rand_addr=0x0, 0x0}, &(0x7f0000c06000+0x17b)=0xc) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000c1d000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r5}, 0x14) [ 35.999956] audit: type=1326 audit(1516330494.874:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4894 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452e99 code=0x7ffc0000 [ 36.050296] audit: type=1326 audit(1516330494.894:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4894 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x452e99 code=0x7ffc0000 [ 36.085289] audit: type=1326 audit(1516330494.894:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4894 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452e99 code=0x7ffc0000 [ 36.094728] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 36.125210] audit: type=1326 audit(1516330494.894:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4894 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452e99 code=0x7ffc0000 [ 36.125714] ================================================================== [ 36.125734] BUG: KASAN: slab-out-of-bounds in tcp_v6_syn_recv_sock+0x1612/0x23a0 [ 36.125740] Write of size 160 at addr ffff8801bef05460 by task syz-executor0/4923 [ 36.125742] [ 36.125749] CPU: 1 PID: 4923 Comm: syz-executor0 Not tainted 4.15.0-rc8+ #268 [ 36.125753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.125756] Call Trace: [ 36.125758] [ 36.125768] dump_stack+0x194/0x257 [ 36.125781] ? arch_local_irq_restore+0x53/0x53 [ 36.125791] ? show_regs_print_info+0x18/0x18 [ 36.125803] ? tcp_add_backlog+0x890/0x890 [ 36.125812] ? tcp_v6_syn_recv_sock+0x1612/0x23a0 [ 36.125823] print_address_description+0x73/0x250 [ 36.125831] ? tcp_v6_syn_recv_sock+0x1612/0x23a0 [ 36.125840] kasan_report+0x25b/0x340 [ 36.125855] check_memory_region+0x137/0x190 [ 36.125864] memcpy+0x37/0x50 [ 36.125874] tcp_v6_syn_recv_sock+0x1612/0x23a0 [ 36.125888] ? tcp_rcv_state_process+0x3d0f/0x4830 [ 36.125900] ? tcp_v6_conn_request+0x270/0x270 [ 36.125907] ? SYSC_sendto+0x361/0x5c0 [ 36.125912] ? SyS_sendto+0x40/0x50 [ 36.125928] ? xfrm_policy_lookup+0x70/0x70 [ 36.125949] ? find_held_lock+0x35/0x1d0 [ 36.125971] ? ip_route_output_key_hash+0x229/0x370 [ 36.125980] ? lock_downgrade+0x980/0x980 [ 36.125987] ? selinux_netlbl_inet_conn_request+0x81/0x3c0 [ 36.125999] ? lock_release+0xa40/0xa40 [ 36.126017] ? rcu_read_lock_sched_held+0x108/0x120 [ 36.126034] tcp_get_cookie_sock+0x102/0x540 [ 36.126046] ? cookie_ecn_ok+0x120/0x120 [ 36.126052] ? ip_route_output_key_hash+0x252/0x370 [ 36.126063] ? ip_route_output_key_hash_rcu+0x2c40/0x2c40 [ 36.126084] ? xfrm_lookup_route+0x4f/0x1a0 [ 36.126091] ? tcp_select_initial_window+0x30c/0x410 [ 36.126109] cookie_v4_check+0x1a87/0x2920 [ 36.126117] ? sk_filter_trim_cap+0x40a/0x9c0 [ 36.126142] ? cookie_v4_init_sequence+0xe0/0xe0 [ 36.126148] ? __lock_is_held+0xb6/0x140 [ 36.126175] ? sk_filter_trim_cap+0xe7/0x9c0 [ 36.126210] ? tcp_v4_reqsk_send_ack+0x3e0/0x3e0 [ 36.126225] tcp_v4_do_rcv+0x6e9/0x7d0 [ 36.126237] tcp_v4_rcv+0x275f/0x2eb0 [ 36.126248] ? rt_mutex_adjust_prio_chain+0x162/0x1560 [ 36.126279] ? tcp_v4_early_demux+0xa40/0xa40 [ 36.126304] ip_local_deliver_finish+0x2f1/0xc50 [ 36.126319] ? ip_rcv_finish+0x1e30/0x1e30 [ 36.126333] ? nf_hook_slow+0xd3/0x1a0 [ 36.126350] ip_local_deliver+0x1ce/0x6e0 [ 36.126360] ? ip_call_ra_chain+0x6d0/0x6d0 [ 36.126373] ? check_noncircular+0x20/0x20 [ 36.126388] ? ip_rcv_finish+0x1e30/0x1e30 [ 36.126398] ? find_held_lock+0x35/0x1d0 [ 36.126412] ip_rcv_finish+0x959/0x1e30 [ 36.126440] ? inet_del_offload+0x40/0x40 [ 36.126460] ? ip_rcv+0xf22/0x1840 [ 36.126469] ? lock_downgrade+0x980/0x980 [ 36.126482] ? lock_release+0xa40/0xa40 [ 36.126495] ? __lock_is_held+0xb6/0x140 [ 36.126508] ? nf_hook_slow+0xd3/0x1a0 [ 36.126525] ip_rcv+0xc5a/0x1840 [ 36.126543] ? ip_local_deliver+0x6e0/0x6e0 [ 36.126551] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 36.126557] ? update_curr+0x2e3/0xa60 [ 36.126564] ? __enqueue_entity+0x109/0x1e0 [ 36.126591] ? inet_del_offload+0x40/0x40 [ 36.126604] ? ip_local_deliver+0x6e0/0x6e0 [ 36.126618] __netif_receive_skb_core+0x1a41/0x3460 [ 36.126640] ? nf_ingress+0x9f0/0x9f0 [ 36.126651] ? check_noncircular+0x20/0x20 [ 36.126674] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 36.126689] ? print_irqtrace_events+0x270/0x270 [ 36.126709] ? __lock_acquire+0x664/0x3e00 [ 36.126723] ? update_blocked_averages+0x87e/0x1b60 [ 36.126733] ? lock_downgrade+0x980/0x980 [ 36.126751] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 36.126763] ? check_noncircular+0x20/0x20 [ 36.126771] ? check_noncircular+0x20/0x20 [ 36.126779] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 36.126790] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 36.126800] ? trace_hardirqs_on+0xd/0x10 [ 36.126812] ? update_blocked_averages+0x87e/0x1b60 [ 36.126832] ? find_held_lock+0x35/0x1d0 [ 36.126850] ? lock_acquire+0x1d5/0x580 [ 36.126855] ? process_backlog+0x45f/0x740 [ 36.126860] ? lock_acquire+0x1d5/0x580 [ 36.126867] ? process_backlog+0x1ab/0x740 [ 36.126885] ? lock_release+0xa40/0xa40 [ 36.126910] __netif_receive_skb+0x2c/0x1b0 [ 36.126917] ? __netif_receive_skb+0x2c/0x1b0 [ 36.126928] process_backlog+0x203/0x740 [ 36.126934] ? mark_held_locks+0xaf/0x100 [ 36.126957] net_rx_action+0x792/0x1910 [ 36.126965] ? lock_release+0xa40/0xa40 [ 36.126989] ? napi_complete_done+0x6c0/0x6c0 [ 36.127005] ? rebalance_domains+0x396/0xcc0 [ 36.127012] ? _raw_spin_unlock_irq+0x27/0x70 [ 36.127036] ? pick_next_task_fair+0x16b0/0x16b0 [ 36.127046] ? trigger_dyntick_cpu.isra.29+0x180/0x180 [ 36.127052] ? check_noncircular+0x20/0x20 [ 36.127066] ? timerqueue_add+0x1e9/0x280 [ 36.127083] ? enqueue_hrtimer+0x171/0x4a0 [ 36.127092] ? __remove_hrtimer+0x190/0x190 [ 36.127115] ? run_rebalance_domains+0x378/0x770 [ 36.127136] ? rebalance_domains+0xcc0/0xcc0 [ 36.127156] ? rcu_pm_notify+0xc0/0xc0 [ 36.127179] ? check_noncircular+0x20/0x20 [ 36.127188] ? print_irqtrace_events+0x270/0x270 [ 36.127202] ? lock_downgrade+0x980/0x980 [ 36.127215] ? __irqentry_text_end+0x1f8cf4/0x1f8cf4 [ 36.127225] ? do_timer+0x50/0x50 [ 36.127241] ? __lock_is_held+0xb6/0x140 [ 36.127269] __do_softirq+0x2d7/0xb85 [ 36.127274] ? task_prio+0x40/0x40 [ 36.127295] ? __irqentry_text_end+0x1f8cf4/0x1f8cf4 [ 36.127301] ? irq_exit+0xbb/0x200 [ 36.127309] ? smp_apic_timer_interrupt+0x16b/0x700 [ 36.127315] ? smp_reschedule_interrupt+0xe6/0x670 [ 36.127323] ? smp_call_function_single_interrupt+0x640/0x640 [ 36.127331] ? _raw_spin_lock+0x32/0x40 [ 36.127344] ? _raw_spin_unlock+0x22/0x30 [ 36.127352] ? handle_edge_irq+0x2b4/0x7c0 [ 36.127361] ? task_prio+0x40/0x40 [ 36.127383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 36.127401] do_softirq_own_stack+0x2a/0x40 [ 36.127404] [ 36.127412] do_softirq.part.19+0x14d/0x190 [ 36.127423] ? ip_finish_output2+0x93b/0x1560 [ 36.127430] __local_bh_enable_ip+0x1ee/0x230 [ 36.127441] ip_finish_output2+0x96e/0x1560 [ 36.127459] ? ip_copy_metadata+0xac0/0xac0 [ 36.127465] ? check_noncircular+0x20/0x20 [ 36.127471] ? find_held_lock+0x35/0x1d0 [ 36.127491] ? __is_insn_slot_addr+0x1fc/0x330 [ 36.127501] ? lock_downgrade+0x980/0x980 [ 36.127510] ? ipv4_mtu+0x34d/0x4c0 [ 36.127519] ? rt_cpu_seq_show+0x2c0/0x2c0 [ 36.127530] ? __lock_is_held+0xb6/0x140 [ 36.127555] ip_finish_output+0x864/0xd10 [ 36.127562] ? ip_finish_output+0x864/0xd10 [ 36.127574] ? ip_fragment.constprop.47+0x200/0x200 [ 36.127596] ? nf_hook_slow+0xd3/0x1a0 [ 36.127612] ip_output+0x1d2/0x860 [ 36.127624] ? ip_mc_output+0x1360/0x1360 [ 36.127648] ? ip_fragment.constprop.47+0x200/0x200 [ 36.127668] ip_local_out+0x95/0x160 [ 36.127682] ip_queue_xmit+0x8c6/0x18e0 [ 36.127688] ? tcp_rcv_state_process+0x3d0f/0x4830 [ 36.127707] ? ip_build_and_send_pkt+0xc30/0xc30 [ 36.127718] ? refcount_dec_if_one+0x20/0x20 [ 36.127731] ? __tcp_v4_send_check+0x1be/0x360 [ 36.127737] ? tcp_options_write+0x228/0x940 [ 36.127756] tcp_transmit_skb+0x1b1b/0x38c0 [ 36.127786] ? __tcp_select_window+0x900/0x900 [ 36.127794] ? kasan_kmalloc+0xad/0xe0 [ 36.127808] ? __kmalloc_node_track_caller+0x47/0x70 [ 36.127823] ? memset+0x31/0x40 [ 36.127834] ? __alloc_skb+0x57e/0x780 [ 36.127848] ? skb_copy_and_csum_dev+0x370/0x370 [ 36.127858] ? __lock_is_held+0xb6/0x140 [ 36.127885] ? sock_def_wakeup+0x225/0x350 [ 36.127911] tcp_send_ack.part.41+0x389/0x610 [ 36.127925] tcp_send_ack+0x49/0x60 [ 36.127933] tcp_rcv_state_process+0x3d0f/0x4830 [ 36.127954] ? tcp_finish_connect+0x410/0x410 [ 36.127972] ? __release_sock+0xca/0x360 [ 36.127981] ? lock_downgrade+0x980/0x980 [ 36.128006] ? __local_bh_enable_ip+0x121/0x230 [ 36.128022] tcp_v4_do_rcv+0x55c/0x7d0 [ 36.128028] ? tcp_v4_do_rcv+0x55c/0x7d0 [ 36.128041] __release_sock+0x124/0x360 [ 36.128062] release_sock+0xa4/0x2a0 [ 36.128073] ? __release_sock+0x360/0x360 [ 36.128079] ? lock_sock_nested+0x91/0x110 [ 36.128086] ? trace_hardirqs_on+0xd/0x10 [ 36.128093] ? __local_bh_enable_ip+0x121/0x230 [ 36.128110] tcp_sendmsg+0x3a/0x50 [ 36.128121] inet_sendmsg+0x11f/0x5e0 [ 36.128127] ? __might_sleep+0x95/0x190 [ 36.128136] ? inet_recvmsg+0x5f0/0x5f0 [ 36.128148] ? selinux_socket_sendmsg+0x36/0x40 [ 36.128156] ? security_socket_sendmsg+0x89/0xb0 [ 36.128164] ? inet_recvmsg+0x5f0/0x5f0 [ 36.128173] sock_sendmsg+0xca/0x110 [ 36.128184] SYSC_sendto+0x361/0x5c0 [ 36.128198] ? SYSC_connect+0x4a0/0x4a0 [ 36.128211] ? inet6_bind+0x12d/0x1020 [ 36.128234] ? SYSC_bind+0x290/0x410 [ 36.128259] ? __fdget+0x18/0x20 [ 36.128273] ? SyS_futex+0x269/0x390 [ 36.128288] ? do_futex+0x22a0/0x22a0 [ 36.128294] ? SyS_socket+0x12d/0x1d0 [ 36.128303] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 36.128321] SyS_sendto+0x40/0x50 [ 36.128336] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 36.128342] RIP: 0033:0x452e99 [ 36.128346] RSP: 002b:00007fc7acc82c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 36.128353] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452e99 [ 36.128357] RDX: 0000000000000000 RSI: 0000000020a28fff RDI: 0000000000000013 [ 36.128361] RBP: 000000000000004e R08: 00000000205efff0 R09: 0000000000000010 [ 36.128364] R10: 0000000020008045 R11: 0000000000000212 R12: 00000000006ee7f0 [ 36.128368] R13: 00000000ffffffff R14: 00007fc7acc836d4 R15: 0000000000000000 [ 36.128396] [ 36.128399] Allocated by task 4923: [ 36.128406] save_stack+0x43/0xd0 [ 36.128411] kasan_kmalloc+0xad/0xe0 [ 36.128416] kasan_slab_alloc+0x12/0x20 [ 36.128424] kmem_cache_alloc+0x12e/0x760 [ 36.128430] sk_prot_alloc+0x65/0x2a0 [ 36.128435] sk_clone_lock+0x152/0x1570 [ 36.128440] inet_csk_clone_lock+0x92/0x4f0 [ 36.128445] tcp_create_openreq_child+0x9b/0x1b70 [ 36.128450] tcp_v4_syn_recv_sock+0x119/0x1270 [ 36.128455] tcp_v6_syn_recv_sock+0x1574/0x23a0 [ 36.128460] tcp_get_cookie_sock+0x102/0x540 [ 36.128465] cookie_v4_check+0x1a87/0x2920 [ 36.128469] tcp_v4_do_rcv+0x6e9/0x7d0 [ 36.128473] tcp_v4_rcv+0x275f/0x2eb0 [ 36.128479] ip_local_deliver_finish+0x2f1/0xc50 [ 36.128484] ip_local_deliver+0x1ce/0x6e0 [ 36.128490] ip_rcv_finish+0x959/0x1e30 [ 36.128495] ip_rcv+0xc5a/0x1840 [ 36.128500] __netif_receive_skb_core+0x1a41/0x3460 [ 36.128505] __netif_receive_skb+0x2c/0x1b0 [ 36.128510] process_backlog+0x203/0x740 [ 36.128515] net_rx_action+0x792/0x1910 [ 36.128520] __do_softirq+0x2d7/0xb85 [ 36.128522] [ 36.128525] Freed by task 0: [ 36.128527] (stack is not available) [ 36.128528] [ 36.128533] The buggy address belongs to the object at ffff8801bef04a80 [ 36.128533] which belongs to the cache TCP of size 2528 [ 36.128538] The buggy address is located 0 bytes to the right of [ 36.128538] 2528-byte region [ffff8801bef04a80, ffff8801bef05460) [ 36.128540] The buggy address belongs to the page: [ 36.128546] page:ffffea0006fbc100 count:1 mapcount:0 mapping:ffff8801bef04000 index:0xffff8801bef05ffd compound_mapcount: 0 [ 36.128555] flags: 0x2fffc0000008100(slab|head) [ 36.128563] raw: 02fffc0000008100 ffff8801bef04000 ffff8801bef05ffd 0000000100000003 [ 36.128570] raw: ffffea00075798a0 ffff8801d8399248 ffff8801d7f6e640 0000000000000000 [ 36.128573] page dumped because: kasan: bad access detected [ 36.128575] [ 36.128577] Memory state around the buggy address: [ 36.128582] ffff8801bef05300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.128587] ffff8801bef05380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.128592] >ffff8801bef05400: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 36.128595] ^ [ 36.128599] ffff8801bef05480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.128604] ffff8801bef05500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.128606] ================================================================== [ 36.128608] Disabling lock debugging due to kernel taint [ 36.128626] Kernel panic - not syncing: panic_on_warn set ... [ 36.128626] [ 36.128632] CPU: 1 PID: 4923 Comm: syz-executor0 Tainted: G B 4.15.0-rc8+ #268 [ 36.128635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.128637] Call Trace: [ 36.128639] [ 36.128645] dump_stack+0x194/0x257 [ 36.128654] ? arch_local_irq_restore+0x53/0x53 [ 36.128662] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 36.128669] ? vsnprintf+0x1ed/0x1900 [ 36.128675] ? tcp_v6_syn_recv_sock+0x1600/0x23a0 [ 36.128682] panic+0x1e4/0x41c [ 36.128688] ? refcount_error_report+0x214/0x214 [ 36.128696] ? add_taint+0x1c/0x50 [ 36.128703] ? add_taint+0x1c/0x50 [ 36.128711] ? tcp_v6_syn_recv_sock+0x1612/0x23a0 [ 36.128717] kasan_end_report+0x50/0x50 [ 36.128724] kasan_report+0x144/0x340 [ 36.128733] check_memory_region+0x137/0x190 [ 36.128739] memcpy+0x37/0x50 [ 36.128746] tcp_v6_syn_recv_sock+0x1612/0x23a0 [ 36.128755] ? tcp_rcv_state_process+0x3d0f/0x4830 [ 36.128763] ? tcp_v6_conn_request+0x270/0x270 [ 36.128767] ? SYSC_sendto+0x361/0x5c0 [ 36.128772] ? SyS_sendto+0x40/0x50 [ 36.128782] ? xfrm_policy_lookup+0x70/0x70 [ 36.128794] ? find_held_lock+0x35/0x1d0 [ 36.128806] ? ip_route_output_key_hash+0x229/0x370 [ 36.128813] ? lock_downgrade+0x980/0x980 [ 36.128818] ? selinux_netlbl_inet_conn_request+0x81/0x3c0 [ 36.128827] ? lock_release+0xa40/0xa40 [ 36.128835] ? rcu_read_lock_sched_held+0x108/0x120 [ 36.128845] tcp_get_cookie_sock+0x102/0x540 [ 36.128853] ? cookie_ecn_ok+0x120/0x120 [ 36.128858] ? ip_route_output_key_hash+0x252/0x370 [ 36.128866] ? ip_route_output_key_hash_rcu+0x2c40/0x2c40 [ 36.128878] ? xfrm_lookup_route+0x4f/0x1a0 [ 36.128885] ? tcp_select_initial_window+0x30c/0x410 [ 36.128895] cookie_v4_check+0x1a87/0x2920 [ 36.128900] ? sk_filter_trim_cap+0x40a/0x9c0 [ 36.128915] ? cookie_v4_init_sequence+0xe0/0xe0 [ 36.128920] ? __lock_is_held+0xb6/0x140 [ 36.128935] ? sk_filter_trim_cap+0xe7/0x9c0 [ 36.128954] ? tcp_v4_reqsk_send_ack+0x3e0/0x3e0 [ 36.128963] tcp_v4_do_rcv+0x6e9/0x7d0 [ 36.128971] tcp_v4_rcv+0x275f/0x2eb0 [ 36.128979] ? rt_mutex_adjust_prio_chain+0x162/0x1560 [ 36.128996] ? tcp_v4_early_demux+0xa40/0xa40 [ 36.129014] ip_local_deliver_finish+0x2f1/0xc50 [ 36.129024] ? ip_rcv_finish+0x1e30/0x1e30 [ 36.129031] ? nf_hook_slow+0xd3/0x1a0 [ 36.129042] ip_local_deliver+0x1ce/0x6e0 [ 36.129049] ? ip_call_ra_chain+0x6d0/0x6d0 [ 36.129058] ? check_noncircular+0x20/0x20 [ 36.129067] ? ip_rcv_finish+0x1e30/0x1e30 [ 36.129074] ? find_held_lock+0x35/0x1d0 [ 36.129083] ip_rcv_finish+0x959/0x1e30 [ 36.129095] ? inet_del_offload+0x40/0x40 [ 36.129106] ? ip_rcv+0xf22/0x1840 [ 36.129113] ? lock_downgrade+0x980/0x980 [ 36.129122] ? lock_release+0xa40/0xa40 [ 36.129130] ? __lock_is_held+0xb6/0x140 [ 36.129139] ? nf_hook_slow+0xd3/0x1a0 [ 36.129149] ip_rcv+0xc5a/0x1840 [ 36.129160] ? ip_local_deliver+0x6e0/0x6e0 [ 36.129166] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 36.129171] ? update_curr+0x2e3/0xa60 [ 36.129176] ? __enqueue_entity+0x109/0x1e0 [ 36.129191] ? inet_del_offload+0x40/0x40 [ 36.129200] ? ip_local_deliver+0x6e0/0x6e0 [ 36.129209] __netif_receive_skb_core+0x1a41/0x3460 [ 36.129222] ? nf_ingress+0x9f0/0x9f0 [ 36.129230] ? check_noncircular+0x20/0x20 [ 36.129243] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 36.129253] ? print_irqtrace_events+0x270/0x270 [ 36.129265] ? __lock_acquire+0x664/0x3e00 [ 36.129275] ? update_blocked_averages+0x87e/0x1b60 [ 36.129282] ? lock_downgrade+0x980/0x980 [ 36.129293] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 36.129301] ? check_noncircular+0x20/0x20 [ 36.129308] ? check_noncircular+0x20/0x20 [ 36.129313] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 36.129321] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 36.129328] ? trace_hardirqs_on+0xd/0x10 [ 36.129336] ? update_blocked_averages+0x87e/0x1b60 [ 36.129348] ? find_held_lock+0x35/0x1d0 [ 36.129359] ? lock_acquire+0x1d5/0x580 [ 36.129364] ? process_backlog+0x45f/0x740 [ 36.129369] ? lock_acquire+0x1d5/0x580 [ 36.129375] ? process_backlog+0x1ab/0x740 [ 36.129385] ? lock_release+0xa40/0xa40 [ 36.129400] __netif_receive_skb+0x2c/0x1b0 [ 36.129405] ? __netif_receive_skb+0x2c/0x1b0 [ 36.129413] process_backlog+0x203/0x740 [ 36.129418] ? mark_held_locks+0xaf/0x100 [ 36.129436] net_rx_action+0x792/0x1910 [ 36.129442] ? lock_release+0xa40/0xa40 [ 36.129456] ? napi_complete_done+0x6c0/0x6c0 [ 36.129465] ? rebalance_domains+0x396/0xcc0 [ 36.129472] ? _raw_spin_unlock_irq+0x27/0x70 [ 36.129486] ? pick_next_task_fair+0x16b0/0x16b0 [ 36.129492] ? trigger_dyntick_cpu.isra.29+0x180/0x180 [ 36.129497] ? check_noncircular+0x20/0x20 [ 36.129506] ? timerqueue_add+0x1e9/0x280 [ 36.129517] ? enqueue_hrtimer+0x171/0x4a0 [ 36.129523] ? __remove_hrtimer+0x190/0x190 [ 36.129537] ? run_rebalance_domains+0x378/0x770 [ 36.129549] ? rebalance_domains+0xcc0/0xcc0 [ 36.129561] ? rcu_pm_notify+0xc0/0xc0 [ 36.129575] ? check_noncircular+0x20/0x20 [ 36.129582] ? print_irqtrace_events+0x270/0x270 [ 36.129590] ? lock_downgrade+0x980/0x980 [ 36.129599] ? __irqentry_text_end+0x1f8cf4/0x1f8cf4 [ 36.129606] ? do_timer+0x50/0x50 [ 36.129616] ? __lock_is_held+0xb6/0x140 [ 36.129632] __do_softirq+0x2d7/0xb85 [ 36.129636] ? task_prio+0x40/0x40 [ 36.129649] ? __irqentry_text_end+0x1f8cf4/0x1f8cf4 [ 36.129654] ? irq_exit+0xbb/0x200 [ 36.129661] ? smp_apic_timer_interrupt+0x16b/0x700 [ 36.129666] ? smp_reschedule_interrupt+0xe6/0x670 [ 36.129673] ? smp_call_function_single_interrupt+0x640/0x640 [ 36.129679] ? _raw_spin_lock+0x32/0x40 [ 36.129688] ? _raw_spin_unlock+0x22/0x30 [ 36.129694] ? handle_edge_irq+0x2b4/0x7c0 [ 36.129700] ? task_prio+0x40/0x40 [ 36.129713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 36.129724] do_softirq_own_stack+0x2a/0x40 [ 36.129726] [ 36.129732] do_softirq.part.19+0x14d/0x190 [ 36.129738] ? ip_finish_output2+0x93b/0x1560 [ 36.129744] __local_bh_enable_ip+0x1ee/0x230 [ 36.129752] ip_finish_output2+0x96e/0x1560 [ 36.129763] ? ip_copy_metadata+0xac0/0xac0 [ 36.129768] ? check_noncircular+0x20/0x20 [ 36.129774] ? find_held_lock+0x35/0x1d0 [ 36.129785] ? __is_insn_slot_addr+0x1fc/0x330 [ 36.129792] ? lock_downgrade+0x980/0x980 [ 36.129798] ? ipv4_mtu+0x34d/0x4c0 [ 36.129805] ? rt_cpu_seq_show+0x2c0/0x2c0 [ 36.129813] ? __lock_is_held+0xb6/0x140 [ 36.129827] ip_finish_output+0x864/0xd10 [ 36.129833] ? ip_finish_output+0x864/0xd10 [ 36.129841] ? ip_fragment.constprop.47+0x200/0x200 [ 36.129854] ? nf_hook_slow+0xd3/0x1a0 [ 36.129864] ip_output+0x1d2/0x860 [ 36.129872] ? ip_mc_output+0x1360/0x1360 [ 36.129887] ? ip_fragment.constprop.47+0x200/0x200 [ 36.129899] ip_local_out+0x95/0x160 [ 36.129908] ip_queue_xmit+0x8c6/0x18e0 [ 36.129914] ? tcp_rcv_state_process+0x3d0f/0x4830 [ 36.129925] ? ip_build_and_send_pkt+0xc30/0xc30 [ 36.129933] ? refcount_dec_if_one+0x20/0x20 [ 36.129942] ? __tcp_v4_send_check+0x1be/0x360 [ 36.129947] ? tcp_options_write+0x228/0x940 [ 36.129958] tcp_transmit_skb+0x1b1b/0x38c0 [ 36.129975] ? __tcp_select_window+0x900/0x900 [ 36.129981] ? kasan_kmalloc+0xad/0xe0 [ 36.129990] ? __kmalloc_node_track_caller+0x47/0x70 [ 36.130000] ? memset+0x31/0x40 [ 36.130008] ? __alloc_skb+0x57e/0x780 [ 36.130017] ? skb_copy_and_csum_dev+0x370/0x370 [ 36.130024] ? __lock_is_held+0xb6/0x140 [ 36.130039] ? sock_def_wakeup+0x225/0x350 [ 36.130054] tcp_send_ack.part.41+0x389/0x610 [ 36.130063] tcp_send_ack+0x49/0x60 [ 36.130070] tcp_rcv_state_process+0x3d0f/0x4830 [ 36.130082] ? tcp_finish_connect+0x410/0x410 [ 36.130093] ? __release_sock+0xca/0x360 [ 36.130100] ? lock_downgrade+0x980/0x980 [ 36.130115] ? __local_bh_enable_ip+0x121/0x230 [ 36.130124] tcp_v4_do_rcv+0x55c/0x7d0 [ 36.130129] ? tcp_v4_do_rcv+0x55c/0x7d0 [ 36.130138] __release_sock+0x124/0x360 [ 36.130151] release_sock+0xa4/0x2a0 [ 36.130158] ? __release_sock+0x360/0x360 [ 36.130163] ? lock_sock_nested+0x91/0x110 [ 36.130169] ? trace_hardirqs_on+0xd/0x10 [ 36.130175] ? __local_bh_enable_ip+0x121/0x230 [ 36.130186] tcp_sendmsg+0x3a/0x50 [ 36.130193] inet_sendmsg+0x11f/0x5e0 [ 36.130198] ? __might_sleep+0x95/0x190 [ 36.130204] ? inet_recvmsg+0x5f0/0x5f0 [ 36.130212] ? selinux_socket_sendmsg+0x36/0x40 [ 36.130218] ? security_socket_sendmsg+0x89/0xb0 [ 36.130224] ? inet_recvmsg+0x5f0/0x5f0 [ 36.130231] sock_sendmsg+0xca/0x110 [ 36.130239] SYSC_sendto+0x361/0x5c0 [ 36.130247] ? SYSC_connect+0x4a0/0x4a0 [ 36.130255] ? inet6_bind+0x12d/0x1020 [ 36.130269] ? SYSC_bind+0x290/0x410 [ 36.130282] ? __fdget+0x18/0x20 [ 36.130291] ? SyS_futex+0x269/0x390 [ 36.130300] ? do_futex+0x22a0/0x22a0 [ 36.130306] ? SyS_socket+0x12d/0x1d0 [ 36.130312] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 36.130323] SyS_sendto+0x40/0x50 [ 36.130333] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 36.130337] RIP: 0033:0x452e99 [ 36.130340] RSP: 002b:00007fc7acc82c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 36.130346] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452e99 [ 36.130349] RDX: 0000000000000000 RSI: 0000000020a28fff RDI: 0000000000000013 [ 36.130352] RBP: 000000000000004e R08: 00000000205efff0 R09: 0000000000000010 [ 36.130355] R10: 0000000020008045 R11: 0000000000000212 R12: 00000000006ee7f0 [ 36.130359] R13: 00000000ffffffff R14: 00007fc7acc836d4 R15: 0000000000000000 [ 36.149902] Dumping ftrace buffer: [ 36.149905] (ftrace buffer empty) [ 36.149908] Kernel Offset: disabled [ 38.180417] Rebooting in 86400 seconds..