[....] Starting enhanced syslogd: rsyslogd[ 13.464754] audit: type=1400 audit(1516040242.743:5): avc: denied { syslog } for pid=3501 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.031346] audit: type=1400 audit(1516040248.309:6): avc: denied { map } for pid=3642 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.215' (ECDSA) to the list of known hosts. 2018/01/15 18:17:34 fuzzer started [ 25.210368] audit: type=1400 audit(1516040254.489:7): avc: denied { map } for pid=3653 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/01/15 18:17:34 dialing manager at 10.128.0.26:40975 [ 28.901368] can: request_module (can-proto-0) failed. [ 28.910797] can: request_module (can-proto-0) failed. 2018/01/15 18:17:38 kcov=true, comps=true [ 29.370343] audit: type=1400 audit(1516040258.649:8): avc: denied { map } for pid=3653 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=8799 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/01/15 18:17:40 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000e3c000)=0x10001, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001000)=""/4096) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000002000)=0xff, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000004000-0x38)=[@in6={0xa, 0x2, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16}, 0x11}, @in6={0xa, 0x2, 0x200, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, 0x4}], 0x38) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000004000-0x4)=0x0, &(0x7f0000005000-0x4)=0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006000-0x9)='/dev/ppp\x00', 0x40, 0x0) r2 = getuid() mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000007000-0x4)=0xe8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0}, 0x0, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000007000-0x4)=0xe8) setresuid(r2, r3, r4) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000008000-0x4)=0x0, &(0x7f0000004000-0x4)=0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000008000)={0x792, 0x80000000, 0x2b0}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000006000-0x11)='/dev/qat_adf_ctl\x00', 0x203, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000001000)=0x0) fstatfs(r5, &(0x7f0000004000)=""/187) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000002000)={0x0, 0x80}, &(0x7f0000009000)=0x6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000009000-0x6)={0x0, 0xfe}, &(0x7f0000005000-0x4)=0x6) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001000-0xb8)={r6, 0x7, 0x10001, 0x7, 0x10000, 0x80, 0x100, 0x401, {r7, @in={{0x2, 0x1, @dev={0xac, 0x14, 0x0, 0x17}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2, 0xfffffffffffffffd, 0x1, 0xbf7d}}, &(0x7f0000009000)=0xb8) 2018/01/15 18:17:40 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000b98000-0x10)={0x0, 0xffffffffffffffff, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a31000)=0x10, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000001000-0x8)={0x0, 0xffffffffffffffc1}, &(0x7f000050a000-0x4)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000ca0000-0x8)={r1, 0x1ff}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002000-0x11)='/dev/vga_arbiter\x00', 0x88040, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x1}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000002000-0x8)={r1, 0xbb0e, 0x4}, &(0x7f0000002000-0x4)=0x8) r3 = gettid() mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0xe, r3, 0x634, &(0x7f0000003000)=""/249) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000005000-0x8)='./file0\x00', 0x8) r4 = socket(0x1, 0xa, 0x10000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000006000-0xe8)={{{@in=@empty=0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000005000)=0xe8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$packet(r2, &(0x7f0000006000-0x14)={0x11, 0x19, r5, 0x1, 0xa5, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0]}, 0x14) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={r1, 0x0}, &(0x7f0000007000-0x4)=0x8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$ipx(r4, &(0x7f0000007000)={0x4, 0x5, 0xffffffff, "eeeb0b77ce23", 0x8, 0x0}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000006000-0xe8)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001, 0x0, 0x8, 0x0, 0x9, 0x0, 0xa0, 0xa0, 0x3c, r5, r6}, {0x5, 0x1, 0x9, 0x9, 0x3f, 0xfdf, 0x80, 0x200}, {0x1, 0xffff, 0x80000000, 0x81}, 0x3, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in=@multicast1=0xe0000001, 0x2, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x0, 0x10}, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x100000000, 0x4ce2, 0x3ff}}, 0xe8) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000002000)={0x5, 0x0, 0x10000, 0x8f8e}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000008000)={0x7, r7, 0x1, 0x2}) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003000-0x2)={0x0, 0x0}, 0x2) 2018/01/15 18:17:40 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000711000)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000a2000)={0x100000000, 0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00007cb000)={0x9, 0x8, 0x9, 0xfffffffffffff001}) connect$bt_rfcomm(r0, &(0x7f0000893000-0x9)={0x1f, {0x2, 0x9, 0x7, 0x3c, 0x7ff, 0x3}, 0xff}, 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x7e, "f4b61d93bec859f655a09012661fab755107a695b24a6803a7975514aa3def9ffe8224158f9d5456d5c76dbdf79426c26e9214979a99b941d7b088e4c0408ff5e01fc31a1733a3ab5e79dca36e77d5db2478d1e11d38f382024169443346df3841a03ddd8090febdc61f9ff682779c0c27cf889410669a3bfb04a01543c7"}, &(0x7f0000000000)=0x86) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r1, 0x4) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x8, 0x5, 0x2, 0x0, 0x5, 0xffff, 0x13, 0x72, 0xc86}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/124) fallocate(r0, 0x0, 0x7, 0x1000) ioctl$int_out(r0, 0x5460, &(0x7f0000001000-0x8)=0x0) pause() ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000)=0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat(r0, &(0x7f0000002000)='./file0\x00', 0x2000, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000003000)={0x0, 0x0}) getuid() mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000005000-0x1)={0xfffffffffffffff8}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000-0x8)={0x0, 0x0}) r3 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000001000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000006000-0xa)='/dev/dsp#\x00', 0x7fffffff, 0x10000) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r2, &(0x7f0000004000-0x8)='./file0\x00', &(0x7f0000007000-0xde)={0xde, 0x7f, "91f90c5ef9b312d9b934aec7db2ff9e94fd629907daa86f720d74aacf78b7ad69ba159cfb618f9f7a8d0756af8a122fa55bbe9dfa95d6cc33de819b0f9b00f4c995af5b038266bba1fdc8ac404da305d1d1cd860720649c349a3a319aec0882d2611d8395e3ac30884caabdc9499a58a06bd2479dabb9f1591a4face8bdb8b864c7a51ce1650bda6b99c404fdac17bf8c54f4bb4e38bdf0f534e47526500fe805a8008bf1f7e86044487a22a0ac6a9a9cd56c512f153a338a8faf60926293e0146040f7c12a6fc39518b4f2da72cbcf7e0a8d5727c5c"}, &(0x7f0000005000)=0x0, 0x1000) 2018/01/15 18:17:40 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000ce2000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000ba7000)={0x40, 0xfff, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd56, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl(r0, 0xffffffffffffff74, &(0x7f0000103000-0x1000)="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") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000001000-0x8)=0x0, r0, &(0x7f0000001000-0x8)=0x0, 0x4, 0xd) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000002000-0xa)={0x1, 0x1, [@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}]}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x156) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000002000)={&(0x7f0000000000/0x1000)=nil, 0x1, 0x3, 0x24, &(0x7f0000000000/0x2000)=nil, 0x2}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000004000-0x4)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000001000)='./file0\x00', &(0x7f0000002000)=[&(0x7f0000001000)='md5sum})self/#ppp1:mime_type\x00', &(0x7f0000005000-0x8)='/dev/snd/pcmC#D#c\x00', &(0x7f0000005000-0x6)='@proc\x00', &(0x7f0000003000)='\x00'], &(0x7f0000001000)=[&(0x7f0000001000-0x12)='/dev/snd/pcmC#D#c\x00', &(0x7f0000003000-0x1)='\x00'], 0xc00) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000006000-0x8)='./file0\x00', 0x2) flock(r0, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000004000)={0x6, 0x0, {0x3, 0x2, 0x2, 0x3, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$llc(r0, &(0x7f0000007000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0]}, &(0x7f0000007000-0x4)=0x10) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) prctl$setmm(0x23, 0x7, &(0x7f000079d000/0x10000)=nil) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000007000)=0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000009000-0x8)={0xffffffff80000000, 0x4}) 2018/01/15 18:17:40 executing program 5: r0 = add_key$user(&(0x7f00005bf000-0x5)='user\x00', &(0x7f0000f4b000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00003a7000)="dda59d587e7df637ebdc0797d2108da13923be6ef2cbaebbd4f98471157c8fbb6a3d59309ac87ac2cbc3df0a67d72075f5aeef6da59ad8cf47abb7cdcb290a9a4afd1c9d17e33d8fb4f24c2361cc18a6527b6fc45eb48805c7c0be6448c87bb350fd19970c8979f96615d437770cdcdf8954d3f4366ebdd022c02eae5f3f4dfacd5259eb6d4e55a2f145d77d83ce4a4db94592f5569502aa429f0da5c79152687ea699cd93b1b7851da729a50d8f67fac509c0a3796a235f509256fb879cfa336d609fc3ab7314ee1011f85ae4262e3a5d592b1e02bdb0dfe3c13d7c0c438b28c80fc65587ec177679", 0xe9, 0x0) keyctl$revoke(0x3, r0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept$nfc_llcp(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f0000000000)=0x60) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000002000-0xc)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001000-0xe8)={{{@in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, @in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000-0x4)=0xe8) fremovexattr(r1, &(0x7f0000002000-0x15)=@random={'btrfs.\x00', 'bdevlokeyring\x00'}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003000-0x8)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000003000-0x10)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000004000-0x10)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$evdev(r1, &(0x7f0000004000-0x90)=[{{r4, r5/1000+30000}, 0xfffffffffffffffd, 0x80000001, 0x85}, {{r6, r7/1000+10000}, 0x2, 0x7, 0x7}, {{0x0, 0x0}, 0x0, 0x5, 0x1ff}, {{0x77359400, 0x0}, 0x0, 0x4, 0x80}, {{0x0, 0x7530}, 0x7, 0x0, 0x2}, {{0x77359400, 0x0}, 0x31b, 0x4, 0x80000001}], 0x90) lseek(r3, 0x0, 0x2) io_setup(0x20, &(0x7f0000002000-0x8)=0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000005000-0x11)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_submit(r8, 0x5, &(0x7f0000005000-0x28)=[&(0x7f0000001000-0x40)={0x0, 0x0, 0x0, 0x0, 0x150, r3, &(0x7f0000001000)="", 0x0, 0x10001, 0x0, 0x0, r1}, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x2, 0x8001, r1, &(0x7f0000002000-0xad)="74f117ee9ff7502d5b43517be80956edd820795c564132d254ea2bf397039c2d91e822151fe2808bb9fcdcaa5d1cd9a27796af83751291406ae71ba336c8a11fad554003057fe1a0bc835d804ff9263189bde74a82f233b1dee2481717e984fcd618dfaa767d02a24281360833abc1ca9e2e92baafe58516e5f264be96fd55862b5ac5f96858c2dcebd4369e3612c659c0ea07dedf6e7932bd5bba62ec6823d9e8987f67438df8fa76aa48ca4b", 0xad, 0xff, 0x0, 0x0, r1}, &(0x7f0000005000-0x40)={0x0, 0x0, 0x0, 0xa, 0x100000001, r1, &(0x7f0000004000)="64f97993ebc2ab265fe7ca8ff2a429e358bb5a9f2f2445ea7bb0fded179a199ead5f8f61f372ebc3215120878c67e388296a16f9113b9fd4e0c468a0b58ce8b27cc41b4bd01ddad412ac731e42d03061d509f76d7ebd8a12f3a9f870538b0144684c045a1ee057d02133328ab096f8610b3673ace9473fefdf", 0x79, 0x3, 0x0, 0x1, r1}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x1, 0x10000, r2, &(0x7f0000002000-0x81)="5da283cd5433db44952e3673f50882d87a7dbfa8576be45d34ab2094774b2222a7c0a1062bf82e1a7312aef8c4fe4c49b897f3ef280140f2e99b96f0e5b14d3fbc72485a49e59ececb9ac954bfb679c8b0f03958e329d6da5a97d4c810e25f4893c2dcd71f5b662942d39665efce8bd2b381511023f65443829d55a58f8ed19a8f", 0x81, 0x80000000, 0x0, 0x1, r1}, &(0x7f0000004000)={0x0, 0x0, 0x0, 0x79a246ffb13bd0e, 0x7ff, r3, &(0x7f0000004000)="593d1a385230e0b0c9b4bc54903d17af371aac2204914a20e57a82a6d5fd4e624ce1986c4b221fff507494e5830ff5d49032245e1c976c648607071a63ac05197afe0d36727e66605191b3e0c9dd9d04e0921fc2c88a9f708afc7d6342847777fb88637836011c29a7650a8fbd6807dffa3d56d385a2e91d43e2b217492b8ea23b7b4eecfa1829f75cac01bd87ca28aa9596d355a164ac18e0e3f354f6f58f4e280e3ba59bc470f6193c9d331a81dba6ef51d87a511d97390bc489032b6c", 0xbe, 0x2, 0x0, 0x0, r9}]) creat(&(0x7f0000004000)='./file0\x00', 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000004000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$VT_SETMODE(r9, 0x5602, &(0x7f0000002000)={0xfffffffffffffff8, 0x8, 0x7fff, 0x1, 0x800}) 2018/01/15 18:17:40 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/create\x00', 0x2, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000bb5000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000001000)=0x1) mlockall(0x2) r1 = accept$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000000000)=0x14) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/62) fadvise64(r0, 0x0, 0xa99, 0x7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000002000)={0x4, 0x4, [0x1]}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000002000)=0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000003000)=0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000004000)=0x0, &(0x7f0000005000-0x4)=0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000006000-0x18)={0x8000, 0x10, [0x8, 0xffffffff, 0x8, 0x9]}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={r1, 0x7, 0x1, 0x0, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x7, &(0x7f0000007000-0xd0)={0xbf8, 0x3, 0xf430, 0x0, 0x1, 0x100, 0x6, 0x6, 0xfffffffffffffff9, 0x0, 0x935, 0x5, 0x1f, 0xfffffffffffffff8, 0x10001, 0x80000000, 0xfff, 0x8, 0x0, 0x6, 0x6, 0x8, 0x1ff, 0x6, 0x4, 0x8001}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000008000-0x8c)={0x2, 0xbe60, 0x2, 'queue0\x00', 0xba, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000009000-0x90)={[0x200, 0x6, 0xffffffffffff0000, 0x7fffffff, 0x5, 0x10000, 0x3, 0x1fffc00000, 0xfffffffffffffffd, 0x1, 0x20, 0x287, 0x80000000, 0x7, 0x3, 0x9], 0x0, 0x20000}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000004000)={0x7e5b, 0xbef, &(0x7f0000009000)="4bb46dea95bccd14e9d60dc2b6d5a55111c058c857089ade0cd1abad15d11946394d227a8431c7aa19a07ca431ad79cf80731dfec9a7b755474804613dd1911dcdf58babb119018af1651c14c92624fa49cfd9594a1840578ddcd9c1d979ea8397e3828aeef551afd4bed7203d937f2f492a06596187c38a8d60b9a1b40f8f14abde04bab81f4f8d899bd3432a3a82aa868e019b406fb7c3cb855f957259357272740b744a70bdab9241dba0de6eafdf583e04e167cf3b8109", &(0x7f0000000000)="46033e7919ed5fbd81acb77ff4a543642e2f81ddd2dd17d9543c349afcf32ad3e3a51b55530e99a05befba46c58c1a3989088b63c5068588581bdc2c766afaec2f96e39a8027362ff3d02f3631157947d756c6eddc8d1efd7945e2ea856efd228b2b8cd008310451cf8a180a6a861cb2c858da1a2e475d48a14e3268e6936bcd11e86b44dd30634354502177f49b953eb42b72d453d1c88ffb33258fa8d186572f", 0xb9, 0xa1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/15 18:17:40 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000721000+0x2bf)='/dev/qat_adf_ctl\x00', 0x2200, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f00005f7000)=""/110, &(0x7f00004a7000-0x4)=0x6e) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000001000-0x8)={0xba1}, 0x8, 0x80800) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000000)={0x2, &(0x7f0000000000)=[{0x0, 0x0}, {0x0, 0x0}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000000)={r1, &(0x7f0000002000-0x2f)=""/47}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000002000-0xb0)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000001000)=""/53) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003000-0x28)={'vcan0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xfffffffffffff800, r2}) pause() ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000001000-0x28)={@generic="5622de041c1a89e97b50cc20d96c9500", @ifru_mtu=0x7}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000001000-0x2e)={0x1, 0x7, [@dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x10}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @random="23f1d2de0c8c", @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xf}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xc}]}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000003000)={0xfffffffffffff001, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = getpid() sched_setparam(r3, &(0x7f0000001000-0x4)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000003000-0x50)={0x10, @tick=0x9, 0x2, {0x101, 0x7fffffff}, 0x101, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_extract_tcp_res$synack(&(0x7f0000001000)={0x0, 0x0}, 0x1, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ax25(0x3, 0x5, 0xcf, &(0x7f0000005000-0x8)={0x0, 0x0}) r5 = socket$inet6(0xa, 0x3, 0xa1f) r6 = semget(0x3, 0x7, 0x21) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semctl$SETVAL(r6, 0x3, 0x10, &(0x7f0000005000)=0xa5) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000006000)=0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1d, &(0x7f0000006000-0x85)="221aeb1e18008991fbe83b26d47ec97da5106fe379f60b9e25c7e4e0f1b8251dc899d7fce41516ff8f9cefb2d1e386baaf2c31f8a3e630a6bba347919fa251c3d77010f5d79f65aba66bdc48ec2470e20ebdd8504c865dd47fb0558a0c114d96fd97c4df35fbbce0da788c1aaa7255f9b1a440b113bc50ded6780dac5ca7581d17c1f34d8e", 0x85) 2018/01/15 18:17:40 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) set_thread_area(&(0x7f0000001000-0x10)={0xfffffffffffffff8, 0x100000, 0x0, 0x3, 0x2, 0x5, 0x6, 0xfb05, 0xffffffffffffffe0, 0x21}) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0x58, &(0x7f0000000000)=[@in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4}, @in6={0xa, 0x0, 0xd3, @loopback={0x0, 0x1}, 0x2}, @in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000)=r1, 0x4) r2 = semget$private(0x0, 0x3, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semctl$GETPID(r2, 0x4, 0xb, &(0x7f0000002000)=""/34) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000004000-0x6)={0x0, 0x6, 0x1}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f0000005000-0x9)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000005000-0x4)=0x9) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000005000)={r1, 0x7fff, 0x5}, 0x8) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000005000-0x8)=0x6) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000006000)={0x0, 0x0}) r3 = accept$inet(r0, &(0x7f0000006000-0x10)={0x0, 0xffffffffffffffff, @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002000)=0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000008000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, r4}, {0xf8, 0x6, 0x100000001, 0xff, 0xd1e6, 0x6, 0x5, 0x52}, {0x20, 0x3, 0xff, 0x7}, 0x1f, 0x8, 0x0, 0x0, 0x2, 0x0}, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0, 0x7f}, 0xa, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x3, 0x0, 0x3, 0x6, 0xdca9, 0x7b2f, 0x1}}, 0xe8) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000008000+0x6a6)='./file0\x00', &(0x7f0000001000-0x8d)=""/141, 0x8d) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000002000-0x8)={r1, 0x2}, &(0x7f0000009000)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) [ 31.603873] audit: type=1400 audit(1516040260.882:9): avc: denied { map } for pid=3653 comm="syz-fuzzer" path="/root/syzkaller-shm096642747" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.812599] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 36.440768] audit: type=1400 audit(1516040265.719:10): avc: denied { sys_admin } for pid=3701 comm="syz-executor6" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/15 18:17:45 executing program 6: 2018/01/15 18:17:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00006d1000)={0x2, 0x78, 0xc31, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00002a0000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000beb000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000001001bf3ffff00000065000000010000007db0e6f10efbf9a219d8f6aa6bd58d1c43473100e85026e7ff40f9b55bd1b3335d5bffff0001f3", "cfa40005000000f7ffffffff00000000000000ffb833220182ab867d00", [0x0, 0x0], 0x0}) [ 36.590504] audit: type=1400 audit(1516040265.869:11): avc: denied { sys_chroot } for pid=4786 comm="syz-executor6" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 36.619225] ================================================================== [ 36.626632] BUG: KASAN: double-free or invalid-free in relay_open+0x6a1/0xa40 [ 36.633899] [ 36.635511] CPU: 1 PID: 4805 Comm: syz-executor6 Not tainted 4.15.0-rc8+ #263 [ 36.642761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.652131] Call Trace: [ 36.654712] dump_stack+0x194/0x257 [ 36.658335] ? arch_local_irq_restore+0x53/0x53 [ 36.662995] ? show_regs_print_info+0x18/0x18 [ 36.667470] ? retint_kernel+0x10/0x10 [ 36.671349] ? relay_open+0x6a1/0xa40 [ 36.675128] print_address_description+0x73/0x250 [ 36.679947] ? relay_open+0x6a1/0xa40 [ 36.683737] ? relay_open+0x6a1/0xa40 [ 36.687519] kasan_report_double_free+0x55/0x80 [ 36.692167] kasan_slab_free+0xa3/0xc0 [ 36.696037] kfree+0xd6/0x260 [ 36.699126] relay_open+0x6a1/0xa40 [ 36.702736] ? relay_open_buf.part.10+0x9b0/0x9b0 [ 36.707564] ? __debugfs_create_file+0x2cf/0x3d0 [ 36.712316] ? debugfs_create_file+0x57/0x70 [ 36.716709] do_blk_trace_setup+0x4a4/0xcd0 [ 36.721020] ? blk_tracer_print_line+0x40/0x40 [ 36.725586] ? __might_sleep+0x95/0x190 [ 36.729547] ? kasan_check_write+0x14/0x20 [ 36.733761] ? _copy_from_user+0x99/0x110 [ 36.737898] __blk_trace_setup+0xbe/0x150 [ 36.742030] ? do_blk_trace_setup+0xcd0/0xcd0 [ 36.746516] ? disk_name+0x98/0x100 [ 36.750179] blk_trace_ioctl+0x206/0x2e0 [ 36.754222] ? blk_add_trace_rq_remap+0x680/0x680 [ 36.759054] ? avc_has_extended_perms+0x7fa/0x12c0 [ 36.763979] blkdev_ioctl+0x1845/0x1e00 [ 36.767934] ? blkpg_ioctl+0xb40/0xb40 [ 36.771803] ? avc_ss_reset+0x110/0x110 [ 36.775758] ? lock_downgrade+0x980/0x980 [ 36.779888] ? lock_release+0xa40/0xa40 [ 36.783871] ? __lock_is_held+0xb6/0x140 [ 36.787943] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 36.793806] ? get_unused_fd_flags+0x190/0x190 [ 36.798369] ? rcu_note_context_switch+0x710/0x710 [ 36.803286] block_ioctl+0xde/0x120 [ 36.806897] ? blkdev_fallocate+0x3b0/0x3b0 [ 36.811197] do_vfs_ioctl+0x1b1/0x1520 [ 36.815064] ? _cond_resched+0x14/0x30 [ 36.818938] ? ioctl_preallocate+0x2b0/0x2b0 [ 36.823328] ? selinux_capable+0x40/0x40 [ 36.827386] ? SyS_futex+0x269/0x390 [ 36.831093] ? security_file_ioctl+0x89/0xb0 [ 36.835487] SyS_ioctl+0x8f/0xc0 [ 36.838847] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 36.843582] RIP: 0033:0x452cf9 [ 36.846747] RSP: 002b:00007fe59a4f7c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 36.854433] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452cf9 [ 36.861681] RDX: 0000000020beaf68 RSI: 00000000c0481273 RDI: 0000000000000013 [ 36.868940] RBP: 0000000000000406 R08: 0000000000000000 R09: 0000000000000000 [ 36.876188] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4130 [ 36.883437] R13: 00000000ffffffff R14: 00007fe59a4f86d4 R15: 0000000000000000 [ 36.890704] [ 36.892308] Allocated by task 4805: [ 36.895917] save_stack+0x43/0xd0 [ 36.899370] kasan_kmalloc+0xad/0xe0 [ 36.903061] kmem_cache_alloc_trace+0x136/0x750 [ 36.907706] relay_open+0xf2/0xa40 [ 36.911230] do_blk_trace_setup+0x4a4/0xcd0 [ 36.915530] __blk_trace_setup+0xbe/0x150 [ 36.919661] blk_trace_ioctl+0x206/0x2e0 [ 36.923702] blkdev_ioctl+0x1845/0x1e00 [ 36.927653] block_ioctl+0xde/0x120 [ 36.931258] do_vfs_ioctl+0x1b1/0x1520 [ 36.935125] SyS_ioctl+0x8f/0xc0 [ 36.938469] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 36.943195] [ 36.944799] Freed by task 4805: [ 36.948064] save_stack+0x43/0xd0 [ 36.951499] kasan_slab_free+0x71/0xc0 [ 36.955364] kfree+0xd6/0x260 [ 36.958445] relay_open+0x84a/0xa40 [ 36.962047] do_blk_trace_setup+0x4a4/0xcd0 [ 36.966352] __blk_trace_setup+0xbe/0x150 [ 36.970473] blk_trace_ioctl+0x206/0x2e0 [ 36.974514] blkdev_ioctl+0x1845/0x1e00 [ 36.978465] block_ioctl+0xde/0x120 [ 36.982068] do_vfs_ioctl+0x1b1/0x1520 [ 36.985942] SyS_ioctl+0x8f/0xc0 [ 36.989284] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 36.994024] [ 36.995627] The buggy address belongs to the object at ffff8801bc18e540 [ 36.995627] which belongs to the cache kmalloc-512 of size 512 [ 37.008271] The buggy address is located 0 bytes inside of [ 37.008271] 512-byte region [ffff8801bc18e540, ffff8801bc18e740) [ 37.020823] The buggy address belongs to the page: [ 37.025732] page:ffffea0006f06380 count:1 mapcount:0 mapping:ffff8801bc18e040 index:0x0 [ 37.033860] flags: 0x2fffc0000000100(slab) [ 37.038082] raw: 02fffc0000000100 ffff8801bc18e040 0000000000000000 0000000100000006 [ 37.045939] raw: ffffea00070bf120 ffff8801dac01748 ffff8801dac00940 0000000000000000 [ 37.053794] page dumped because: kasan: bad access detected [ 37.059496] [ 37.061098] Memory state around the buggy address: [ 37.066004] ffff8801bc18e400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.073346] ffff8801bc18e480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.080679] >ffff8801bc18e500: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 37.088027] ^ [ 37.093453] ffff8801bc18e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.100790] ffff8801bc18e600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.108120] ================================================================== [ 37.115452] Disabling lock debugging due to kernel taint [ 37.120875] Kernel panic - not syncing: panic_on_warn set ... [ 37.120875] [ 37.129267] CPU: 1 PID: 4805 Comm: syz-executor6 Tainted: G B 4.15.0-rc8+ #263 [ 37.137814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.147140] Call Trace: [ 37.149713] dump_stack+0x194/0x257 [ 37.153316] ? arch_local_irq_restore+0x53/0x53 [ 37.157969] ? kasan_end_report+0x32/0x50 [ 37.162094] ? lock_downgrade+0x980/0x980 [ 37.166220] ? vsnprintf+0x1ed/0x1900 [ 37.169996] panic+0x1e4/0x41c [ 37.173168] ? refcount_error_report+0x214/0x214 [ 37.177902] ? add_taint+0x40/0x50 [ 37.181416] ? add_taint+0x1c/0x50 [ 37.184933] ? relay_open+0x6a1/0xa40 [ 37.188707] ? relay_open+0x6a1/0xa40 [ 37.192485] kasan_end_report+0x50/0x50 [ 37.196436] kasan_report_double_free+0x72/0x80 [ 37.201080] kasan_slab_free+0xa3/0xc0 [ 37.204943] kfree+0xd6/0x260 [ 37.208026] relay_open+0x6a1/0xa40 [ 37.211804] ? relay_open_buf.part.10+0x9b0/0x9b0 [ 37.216621] ? __debugfs_create_file+0x2cf/0x3d0 [ 37.221357] ? debugfs_create_file+0x57/0x70 [ 37.225745] do_blk_trace_setup+0x4a4/0xcd0 [ 37.230054] ? blk_tracer_print_line+0x40/0x40 [ 37.234613] ? __might_sleep+0x95/0x190 [ 37.238566] ? kasan_check_write+0x14/0x20 [ 37.242778] ? _copy_from_user+0x99/0x110 [ 37.246904] __blk_trace_setup+0xbe/0x150 [ 37.251030] ? do_blk_trace_setup+0xcd0/0xcd0 [ 37.255504] ? disk_name+0x98/0x100 [ 37.259112] blk_trace_ioctl+0x206/0x2e0 [ 37.263149] ? blk_add_trace_rq_remap+0x680/0x680 [ 37.267974] ? avc_has_extended_perms+0x7fa/0x12c0 [ 37.272881] blkdev_ioctl+0x1845/0x1e00 [ 37.276836] ? blkpg_ioctl+0xb40/0xb40 [ 37.280699] ? avc_ss_reset+0x110/0x110 [ 37.284646] ? lock_downgrade+0x980/0x980 [ 37.288770] ? lock_release+0xa40/0xa40 [ 37.292732] ? __lock_is_held+0xb6/0x140 [ 37.296790] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 37.302651] ? get_unused_fd_flags+0x190/0x190 [ 37.307220] ? rcu_note_context_switch+0x710/0x710 [ 37.312128] block_ioctl+0xde/0x120 [ 37.315734] ? blkdev_fallocate+0x3b0/0x3b0 [ 37.320034] do_vfs_ioctl+0x1b1/0x1520 [ 37.323898] ? _cond_resched+0x14/0x30 [ 37.327762] ? ioctl_preallocate+0x2b0/0x2b0 [ 37.332147] ? selinux_capable+0x40/0x40 [ 37.336185] ? SyS_futex+0x269/0x390 [ 37.339880] ? security_file_ioctl+0x89/0xb0 [ 37.344267] SyS_ioctl+0x8f/0xc0 [ 37.347611] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 37.352338] RIP: 0033:0x452cf9 [ 37.355501] RSP: 002b:00007fe59a4f7c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 37.363182] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452cf9 [ 37.370426] RDX: 0000000020beaf68 RSI: 00000000c0481273 RDI: 0000000000000013 [ 37.377668] RBP: 0000000000000406 R08: 0000000000000000 R09: 0000000000000000 [ 37.384912] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4130 [ 37.392156] R13: 00000000ffffffff R14: 00007fe59a4f86d4 R15: 0000000000000000 [ 37.399842] Dumping ftrace buffer: [ 37.403357] (ftrace buffer empty) [ 37.407036] Kernel Offset: disabled [ 37.410635] Rebooting in 86400 seconds..