[....] Starting enhanced syslogd: rsyslogd[   16.732736] audit: type=1400 audit(1519721855.295:5): avc:  denied  { syslog } for  pid=4078 comm="rsyslogd" capability=34  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
Starting mcstransd: 
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   22.365223] audit: type=1400 audit(1519721860.928:6): avc:  denied  { map } for  pid=4218 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts.
2018/02/27 08:57:47 fuzzer started
[   28.625862] audit: type=1400 audit(1519721867.188:7): avc:  denied  { map } for  pid=4229 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
2018/02/27 08:57:47 dialing manager at 10.128.0.26:35219
[   31.191064] can: request_module (can-proto-0) failed.
[   31.200904] can: request_module (can-proto-0) failed.
2018/02/27 08:57:50 kcov=true, comps=true
[   31.699306] audit: type=1400 audit(1519721870.262:8): avc:  denied  { map } for  pid=4229 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9416 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
2018/02/27 08:57:50 executing program 0:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:50 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4, 0x0, 0x9})
sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000189ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000140)={0x20, 0x2a, 0x701, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@typed={0xc, 0x0, @uid}]}, 0x20}, 0x1}, 0x0)

2018/02/27 08:57:50 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000004fb1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, 0x0)

2018/02/27 08:57:50 executing program 2:
r0 = socket$inet6_icmp_raw(0x11, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000001fc8)={&(0x7f0000004fe4)=@in6={0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c, &(0x7f0000005000)=[], 0x0, &(0x7f0000000040)=[{0xc}], 0xc}, 0x0)

2018/02/27 08:57:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000077bfe0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20)

2018/02/27 08:57:50 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="ab1f90307bdd49c180479677c657ea79c7a3049ce6853632ffd5146ba792f62476b82b59fbd31d6a8e439b7ad3f1de3ffb691fb6580fe9567b15dfd47f321b006c5506b098e634411ee02b428e2d09000000b235dcd2b8e1837257ea94b80283ab86711717a90cdf9de2116b81f38886be915af22e556d3a8d26d1bb503ccf88ed804342857547f390441cecaaac8de4720f409fd28b21bfd244a6b8a268e33eb135fcde77fe9b2bd8c93d00", 0xac, r0)

2018/02/27 08:57:50 executing program 5:
perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2018/02/27 08:57:50 executing program 6:
r0 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000))

[   31.908625] audit: type=1400 audit(1519721870.471:9): avc:  denied  { map } for  pid=4229 comm="syz-fuzzer" path="/root/syzkaller-shm636391667" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
[   31.950998] audit: type=1400 audit(1519721870.513:10): avc:  denied  { sys_admin } for  pid=4271 comm="syz-executor0" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[   31.967753] IPVS: ftp: loaded support on port[0] = 21
[   32.055091] audit: type=1400 audit(1519721870.615:11): avc:  denied  { net_admin } for  pid=4274 comm="syz-executor7" capability=12  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[   32.057754] IPVS: ftp: loaded support on port[0] = 21
[   32.119200] IPVS: ftp: loaded support on port[0] = 21
[   32.163871] IPVS: ftp: loaded support on port[0] = 21
[   32.236176] IPVS: ftp: loaded support on port[0] = 21
[   32.338370] IPVS: ftp: loaded support on port[0] = 21
[   32.467761] IPVS: ftp: loaded support on port[0] = 21
[   32.607450] IPVS: ftp: loaded support on port[0] = 21
[   33.344770] ip (4541) used greatest stack depth: 16120 bytes left
[   33.598906] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   33.665560] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   33.891405] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   33.966220] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   34.075319] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   34.303746] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   34.323583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   34.620332] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   36.534373] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[   36.540502] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.635935] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[   36.642089] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.740784] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[   36.746938] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.833383] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   36.910580] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   36.935703] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[   36.941968] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.060956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   37.099631] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[   37.105897] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.131132] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   37.140064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.149941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.173913] audit: type=1400 audit(1519721875.736:12): avc:  denied  { sys_chroot } for  pid=4274 comm="syz-executor7" capability=18  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[   37.200915] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   37.208819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.216444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.231724] audit: type=1400 audit(1519721875.793:13): avc:  denied  { create } for  pid=5454 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[   37.245653] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   37.273331] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
2018/02/27 08:57:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4, 0x0, 0x9})
sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000189ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000140)={0x20, 0x2a, 0x701, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@typed={0xc, 0x0, @uid}]}, 0x20}, 0x1}, 0x0)

2018/02/27 08:57:55 executing program 2:
r0 = socket$inet6_icmp_raw(0x11, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000001fc8)={&(0x7f0000004fe4)=@in6={0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c, &(0x7f0000005000)=[], 0x0, &(0x7f0000000040)=[{0xc}], 0xc}, 0x0)

[   37.279434] 8021q: adding VLAN 0 to HW filter on device bond0
2018/02/27 08:57:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4, 0x0, 0x9})
sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000189ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000140)={0x20, 0x2a, 0x701, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@typed={0xc, 0x0, @uid}]}, 0x20}, 0x1}, 0x0)

[   37.331798] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[   37.338052] 8021q: adding VLAN 0 to HW filter on device bond0
2018/02/27 08:57:55 executing program 2:
r0 = socket$inet6_icmp_raw(0x11, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000001fc8)={&(0x7f0000004fe4)=@in6={0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c, &(0x7f0000005000)=[], 0x0, &(0x7f0000000040)=[{0xc}], 0xc}, 0x0)

2018/02/27 08:57:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4, 0x0, 0x9})
sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000189ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000140)={0x20, 0x2a, 0x701, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@typed={0xc, 0x0, @uid}]}, 0x20}, 0x1}, 0x0)

2018/02/27 08:57:56 executing program 2:
r0 = socket$inet6_icmp_raw(0x11, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000001fc8)={&(0x7f0000004fe4)=@in6={0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c, &(0x7f0000005000)=[], 0x0, &(0x7f0000000040)=[{0xc}], 0xc}, 0x0)

[   37.359383] audit: type=1400 audit(1519721875.829:14): avc:  denied  { write } for  pid=5454 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[   37.383383] audit: type=1400 audit(1519721875.854:15): avc:  denied  { net_raw } for  pid=5463 comm="syz-executor2" capability=13  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[   37.414818] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   37.423084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
2018/02/27 08:57:56 executing program 7:
r0 = socket$inet6_icmp_raw(0x11, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000001fc8)={&(0x7f0000004fe4)=@in6={0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c, &(0x7f0000005000)=[], 0x0, &(0x7f0000000040)=[{0xc}], 0xc}, 0x0)

2018/02/27 08:57:56 executing program 2:
prctl$intptr(0x1c, 0x64)
prctl$intptr(0x1c, 0x7f)

[   37.447450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.524869] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   37.586533] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   37.593813] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   37.609150] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   37.615423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.626389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.688904] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[   37.695047] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.741739] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   37.748099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.755171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.764480] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   37.772147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.780811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.826818] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   37.833919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   37.840147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.847974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.900508] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   37.906656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.913686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
2018/02/27 08:57:56 executing program 0:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000004fb1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, 0x0)

2018/02/27 08:57:56 executing program 5:
perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2018/02/27 08:57:56 executing program 6:
r0 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000))

2018/02/27 08:57:56 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000077bfe0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20)

2018/02/27 08:57:56 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="ab1f90307bdd49c180479677c657ea79c7a3049ce6853632ffd5146ba792f62476b82b59fbd31d6a8e439b7ad3f1de3ffb691fb6580fe9567b15dfd47f321b006c5506b098e634411ee02b428e2d09000000b235dcd2b8e1837257ea94b80283ab86711717a90cdf9de2116b81f38886be915af22e556d3a8d26d1bb503ccf88ed804342857547f390441cecaaac8de4720f409fd28b21bfd244a6b8a268e33eb135fcde77fe9b2bd8c93d00", 0xac, r0)

2018/02/27 08:57:56 executing program 2:
prctl$intptr(0x1c, 0x64)
prctl$intptr(0x1c, 0x7f)

2018/02/27 08:57:56 executing program 7:
r0 = socket$inet6_icmp_raw(0x11, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000001fc8)={&(0x7f0000004fe4)=@in6={0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c, &(0x7f0000005000)=[], 0x0, &(0x7f0000000040)=[{0xc}], 0xc}, 0x0)

2018/02/27 08:57:56 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000077bfe0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20)

2018/02/27 08:57:56 executing program 2:
prctl$intptr(0x1c, 0x64)
prctl$intptr(0x1c, 0x7f)

2018/02/27 08:57:56 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000004fb1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, 0x0)

2018/02/27 08:57:56 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="ab1f90307bdd49c180479677c657ea79c7a3049ce6853632ffd5146ba792f62476b82b59fbd31d6a8e439b7ad3f1de3ffb691fb6580fe9567b15dfd47f321b006c5506b098e634411ee02b428e2d09000000b235dcd2b8e1837257ea94b80283ab86711717a90cdf9de2116b81f38886be915af22e556d3a8d26d1bb503ccf88ed804342857547f390441cecaaac8de4720f409fd28b21bfd244a6b8a268e33eb135fcde77fe9b2bd8c93d00", 0xac, r0)

2018/02/27 08:57:56 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000004fb1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, 0x0)

2018/02/27 08:57:56 executing program 7:
r0 = socket$inet6_icmp_raw(0x11, 0x3, 0x3a)
sendmsg(r0, &(0x7f0000001fc8)={&(0x7f0000004fe4)=@in6={0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c, &(0x7f0000005000)=[], 0x0, &(0x7f0000000040)=[{0xc}], 0xc}, 0x0)

2018/02/27 08:57:56 executing program 6:
r0 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000))

2018/02/27 08:57:56 executing program 5:
perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2018/02/27 08:57:56 executing program 0:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 1:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 2:
prctl$intptr(0x1c, 0x64)
prctl$intptr(0x1c, 0x7f)

2018/02/27 08:57:56 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000077bfe0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20)

2018/02/27 08:57:56 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="ab1f90307bdd49c180479677c657ea79c7a3049ce6853632ffd5146ba792f62476b82b59fbd31d6a8e439b7ad3f1de3ffb691fb6580fe9567b15dfd47f321b006c5506b098e634411ee02b428e2d09000000b235dcd2b8e1837257ea94b80283ab86711717a90cdf9de2116b81f38886be915af22e556d3a8d26d1bb503ccf88ed804342857547f390441cecaaac8de4720f409fd28b21bfd244a6b8a268e33eb135fcde77fe9b2bd8c93d00", 0xac, r0)

2018/02/27 08:57:56 executing program 5:
perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2018/02/27 08:57:56 executing program 6:
r0 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000))

2018/02/27 08:57:56 executing program 7:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 2:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="ab1f90307bdd49c180479677c657ea79c7a3049ce6853632ffd5146ba792f62476b82b59fbd31d6a8e439b7ad3f1de3ffb691fb6580fe9567b15dfd47f321b006c5506b098e634411ee02b428e2d09000000b235dcd2b8e1837257ea94b80283ab86711717a90cdf9de2116b81f38886be915af22e556d3a8d26d1bb503ccf88ed804342857547f390441cecaaac8de4720f409fd28b21bfd244a6b8a268e33eb135fcde77fe9b2bd8c93d00", 0xac, r0)

2018/02/27 08:57:56 executing program 6:
r0 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000))

2018/02/27 08:57:56 executing program 5:
prctl$intptr(0x1c, 0x64)
prctl$intptr(0x1c, 0x7f)

2018/02/27 08:57:56 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg(r0, &(0x7f0000f12fd8)={&(0x7f0000218000)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f000047f000)=[], 0x0, &(0x7f0000f13000)=[{0x10, 0x0, 0x7}], 0x10}, 0x810)

2018/02/27 08:57:56 executing program 0:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 1:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 7:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="ab1f90307bdd49c180479677c657ea79c7a3049ce6853632ffd5146ba792f62476b82b59fbd31d6a8e439b7ad3f1de3ffb691fb6580fe9567b15dfd47f321b006c5506b098e634411ee02b428e2d09000000b235dcd2b8e1837257ea94b80283ab86711717a90cdf9de2116b81f38886be915af22e556d3a8d26d1bb503ccf88ed804342857547f390441cecaaac8de4720f409fd28b21bfd244a6b8a268e33eb135fcde77fe9b2bd8c93d00", 0xac, r0)

2018/02/27 08:57:56 executing program 5:
prctl$intptr(0x1c, 0x64)
prctl$intptr(0x1c, 0x7f)

2018/02/27 08:57:56 executing program 6:
r0 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000))

2018/02/27 08:57:56 executing program 2:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg(r0, &(0x7f0000f12fd8)={&(0x7f0000218000)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f000047f000)=[], 0x0, &(0x7f0000f13000)=[{0x10, 0x0, 0x7}], 0x10}, 0x810)

2018/02/27 08:57:56 executing program 5:
prctl$intptr(0x1c, 0x64)
prctl$intptr(0x1c, 0x7f)

2018/02/27 08:57:56 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg(r0, &(0x7f0000f12fd8)={&(0x7f0000218000)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f000047f000)=[], 0x0, &(0x7f0000f13000)=[{0x10, 0x0, 0x7}], 0x10}, 0x810)

2018/02/27 08:57:56 executing program 6:
r0 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000))

2018/02/27 08:57:56 executing program 5:
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x10002, 0x1a, 0x0, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0)

2018/02/27 08:57:56 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="ab1f90307bdd49c180479677c657ea79c7a3049ce6853632ffd5146ba792f62476b82b59fbd31d6a8e439b7ad3f1de3ffb691fb6580fe9567b15dfd47f321b006c5506b098e634411ee02b428e2d09000000b235dcd2b8e1837257ea94b80283ab86711717a90cdf9de2116b81f38886be915af22e556d3a8d26d1bb503ccf88ed804342857547f390441cecaaac8de4720f409fd28b21bfd244a6b8a268e33eb135fcde77fe9b2bd8c93d00", 0xac, r0)

2018/02/27 08:57:56 executing program 1:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 2:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 7:
unshare(0x8000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd)
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9})
mq_timedreceive(r0, &(0x7f0000003f40)=""/114, 0x72, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0)

2018/02/27 08:57:56 executing program 0:
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10)
r0 = socket(0x11, 0x4000000000080003, 0x0)
setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f000061bffc), 0x4)

2018/02/27 08:57:56 executing program 6:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00')
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000f81800)=""/2048, 0x800, 0x0)

2018/02/27 08:57:56 executing program 5:
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x10002, 0x1a, 0x0, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0)

2018/02/27 08:57:56 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg(r0, &(0x7f0000f12fd8)={&(0x7f0000218000)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f000047f000)=[], 0x0, &(0x7f0000f13000)=[{0x10, 0x0, 0x7}], 0x10}, 0x810)

[   38.271098] x86/PAT: syz-executor5:5672 map pfn RAM range req write-combining for [mem 0x1b0f40000-0x1b0f43fff], got write-back
[   38.285456] x86/PAT: syz-executor5:5673 map pfn RAM range req write-combining for [mem 0x1b0f40000-0x1b0f43fff], got write-back
[   38.330685] audit: type=1400 audit(1519721876.893:16): avc:  denied  { dac_override } for  pid=5678 comm="syz-executor6" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[   38.361372] x86/PAT: syz-executor5:5689 map pfn RAM range req write-combining for [mem 0x1b0260000-0x1b0263fff], got write-back
2018/02/27 08:57:56 executing program 5:
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x10002, 0x1a, 0x0, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0)

2018/02/27 08:57:56 executing program 3:
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x10002, 0x1a, 0x0, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0)

2018/02/27 08:57:56 executing program 7:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = syz_open_dev$mouse(&(0x7f000072b000)='/dev/input/mouse#\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af20, &(0x7f0000cb4ff8)={0x0, r1})

2018/02/27 08:57:56 executing program 6:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00')
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000f81800)=""/2048, 0x800, 0x0)

2018/02/27 08:57:56 executing program 0:
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10)
r0 = socket(0x11, 0x4000000000080003, 0x0)
setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f000061bffc), 0x4)

2018/02/27 08:57:56 executing program 2:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00')
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000f81800)=""/2048, 0x800, 0x0)

2018/02/27 08:57:56 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000080), 0x8)
pipe2(&(0x7f0000e3eff8)={0x0, <r2=>0x0}, 0x0)
flock(r0, 0x2)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = dup3(r3, r2, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@textreal={0x8, &(0x7f00000000c0)="ba200066b80000000066ef0f0f6a07bf3e0f060f20e06635000200000f22e0660f6dc666b9800000c00f326635001000000f3066b9800000c00f326635010000000f300f01c866b93208000066b80100000066ba000000000f300f01ca", 0x5d}], 0x1, 0x0, &(0x7f0000000140)=[], 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2018/02/27 08:57:56 executing program 4:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r0, 0x0)

2018/02/27 08:57:57 executing program 6:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00')
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000f81800)=""/2048, 0x800, 0x0)

[   38.435463] x86/PAT: syz-executor3:5706 map pfn RAM range req write-combining for [mem 0x1b0f40000-0x1b0f43fff], got write-back
2018/02/27 08:57:57 executing program 2:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00')
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000f81800)=""/2048, 0x800, 0x0)

[   38.474526] x86/PAT: syz-executor5:5712 map pfn RAM range req write-combining for [mem 0x1b0260000-0x1b0263fff], got write-back
[   38.477815] kasan: CONFIG_KASAN_INLINE enabled
[   38.490916] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   38.498341] general protection fault: 0000 [#1] SMP KASAN
[   38.503866] Dumping ftrace buffer:
[   38.507388]    (ftrace buffer empty)
[   38.511084] Modules linked in:
[   38.514269] CPU: 0 PID: 5707 Comm: syz-executor1 Not tainted 4.16.0-rc3+ #331
[   38.521521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   38.530856] RIP: 0010:hrtimer_active+0x1da/0x3c0
[   38.535582] RSP: 0018:ffff8801b12d73c0 EFLAGS: 00010202
[   38.540916] RAX: 0000000000000008 RBX: 1ffff1003625aea5 RCX: ffffffff81610225
[   38.548156] RDX: 0000000000010000 RSI: ffffc90002931000 RDI: 0000000000000010
[   38.555396] RBP: ffff8801b12d7500 R08: 0000000000002c02 R09: 0000000000000000
[   38.562639] R10: 0000000000000011 R11: ffffed00361a5078 R12: 0000000000000010
[   38.569883] R13: 0000000000000000 R14: ffffed003625ae83 R15: dffffc0000000000
[   38.577127] FS:  00007f446cd21700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
[   38.585324] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   38.591176] CR2: 00007f446cd00000 CR3: 00000001bbad2002 CR4: 00000000001626f0
[   38.598419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   38.605661] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   38.612900] Call Trace:
[   38.615473]  ? hrtimer_forward+0x2d0/0x2d0
[   38.619684]  ? vmx_update_msr_bitmap+0x13a/0x430
[   38.624420]  ? setup_msrs+0x926/0x1d80
[   38.628279]  ? vmx_set_cr4+0x353/0x610
[   38.632146]  hrtimer_try_to_cancel+0x91/0x5b0
[   38.636616]  ? update_exception_bitmap+0x19a/0x200
[   38.641519]  ? __hrtimer_get_remaining+0x1c0/0x1c0
[   38.646419]  ? vmx_vcpu_reset+0x55f/0xc70
[   38.650540]  ? load_vmcs12_host_state+0x1fa0/0x1fa0
[   38.655533]  ? __mutex_unlock_slowpath+0xe9/0xac0
[   38.660348]  ? trace_hardirqs_off+0x10/0x10
[   38.664644]  ? __lock_is_held+0xb6/0x140
[   38.668682]  ? kvm_arch_vcpu_load+0x1c1/0x8d0
[   38.673155]  hrtimer_cancel+0x22/0x40
[   38.676929]  kvm_lapic_reset+0x93/0xf40
[   38.680885]  ? kvm_lapic_set_base+0x750/0x750
[   38.685352]  ? kvm_arch_vcpu_free+0x80/0x80
[   38.689653]  kvm_arch_vcpu_setup+0x31/0x50
[   38.693862]  kvm_vm_ioctl+0x52d/0x1cf0
[   38.697722]  ? perf_trace_lock+0xd6/0x900
[   38.701845]  ? perf_event_sync_stat+0x5b0/0x5b0
[   38.706499]  ? kvm_set_memory_region+0x50/0x50
[   38.711056]  ? find_held_lock+0x35/0x1d0
[   38.715095]  ? perf_trace_lock+0xd6/0x900
[   38.719216]  ? perf_trace_lock_acquire+0xe3/0x980
[   38.724033]  ? lock_downgrade+0x980/0x980
[   38.728160]  ? trace_event_raw_event_lock+0x340/0x340
[   38.733326]  ? perf_trace_lock+0x900/0x900
[   38.737531]  ? lock_release+0xa40/0xa40
[   38.741479]  ? do_raw_spin_trylock+0x190/0x190
[   38.746037]  ? compat_start_thread+0x80/0x80
[   38.750420]  ? trace_hardirqs_off+0x10/0x10
[   38.754717]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   38.759708]  ? trace_hardirqs_on+0xd/0x10
[   38.763831]  ? finish_task_switch+0x1c1/0x7e0
[   38.768305]  ? find_held_lock+0x35/0x1d0
[   38.772347]  ? __fget+0x342/0x5b0
[   38.775776]  ? lock_downgrade+0x980/0x980
[   38.779904]  ? lock_release+0xa40/0xa40
[   38.783853]  ? __lock_is_held+0xb6/0x140
[   38.787899]  ? __fget+0x36b/0x5b0
[   38.791327]  ? free_obj_work+0x690/0x690
[   38.795366]  ? iterate_fd+0x3f0/0x3f0
[   38.799141]  ? trace_event_raw_event_filelock_lease+0x630/0x630
[   38.805179]  ? rcu_pm_notify+0xc0/0xc0
[   38.809045]  ? kvm_set_memory_region+0x50/0x50
[   38.813599]  do_vfs_ioctl+0x1b1/0x1520
[   38.817457]  ? locks_free_lock+0x1fd/0x320
[   38.821666]  ? debug_lockdep_rcu_enabled+0x77/0x90
[   38.826567]  ? ioctl_preallocate+0x2b0/0x2b0
[   38.831350]  ? selinux_capable+0x40/0x40
[   38.835393]  ? exit_to_usermode_loop+0x8b/0x2f0
[   38.840047]  ? security_file_ioctl+0x7d/0xb0
[   38.844429]  ? security_file_ioctl+0x89/0xb0
[   38.848818]  SyS_ioctl+0x8f/0xc0
[   38.852168]  ? do_vfs_ioctl+0x1520/0x1520
[   38.856292]  do_syscall_64+0x281/0x940
[   38.860158]  ? __do_page_fault+0xc90/0xc90
[   38.864367]  ? _raw_spin_unlock_irq+0x27/0x70
[   38.868836]  ? finish_task_switch+0x1c1/0x7e0
[   38.873307]  ? syscall_return_slowpath+0x550/0x550
[   38.878210]  ? syscall_return_slowpath+0x2ac/0x550
[   38.883113]  ? prepare_exit_to_usermode+0x350/0x350
[   38.888104]  ? entry_SYSCALL_64_after_hwframe+0x52/0xb7
[   38.893446]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   38.898266]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[   38.903426] RIP: 0033:0x453d69
[   38.906587] RSP: 002b:00007f446cd20c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   38.914267] RAX: ffffffffffffffda RBX: 00007f446cd216d4 RCX: 0000000000453d69
[   38.921555] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000014
[   38.928798] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[   38.936041] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[   38.943282] R13: 000000000000020e R14: 00000000006f31f0 R15: 0000000000000000
[   38.950535] Code: ff ff 48 8d 85 18 ff ff ff 48 c1 e8 03 4e 8d 34 38 e8 1b f2 0f 00 48 8b 85 f0 fe ff ff c6 00 00 48 8b 85 d8 fe ff ff 48 c1 e8 03 <42> 80 3c 38 00 0f 85 c2 01 00 00 48 8b 85 e8 fe ff ff 48 8b 58 
[   38.969667] RIP: hrtimer_active+0x1da/0x3c0 RSP: ffff8801b12d73c0
[   38.977191] ---[ end trace f639e72e2904ce27 ]---
[   38.981973] Kernel panic - not syncing: Fatal exception
[   38.987753] Dumping ftrace buffer:
[   38.991270]    (ftrace buffer empty)
[   38.994951] Kernel Offset: disabled
[   38.998548] Rebooting in 86400 seconds..