[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 17.906655] audit: type=1400 audit(1518824834.798:6): avc: denied { map } for pid=4154 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.193' (ECDSA) to the list of known hosts. 2018/02/16 23:47:21 fuzzer started syzkaller login: [ 24.158838] audit: type=1400 audit(1518824841.050:7): avc: denied { map } for pid=4165 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/16 23:47:21 dialing manager at 10.128.0.26:39095 [ 27.726187] can: request_module (can-proto-0) failed. [ 27.735143] can: request_module (can-proto-0) failed. 2018/02/16 23:47:25 kcov=true, comps=false 2018/02/16 23:47:26 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000126000)='/dev/adsp#\x00', 0x0, 0x40) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000329000-0x93)=""/147) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001000-0x13)='/dev/snd/controlC#\x00', 0x7, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000002000-0x3a)=""/58) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000001000)={{0x2, 0x2, 0x100000001, 0x1, "dcb2a862d5b9c20759c94b790b724dc69ce80920eb336cd1c566577c84fc6d2a80516c657d60f01bb045cde8", 0xff}, 0xc6ac, [0x2, 0x0, 0x3, 0x8000, 0x100, 0xdd, 0x5, 0xb1, 0x7fff, 0x35b397ff, 0x4, 0x9, 0x2, 0x8, 0x3, 0x2, 0x2, 0xfbf, 0x270, 0x5, 0x40000000000000, 0xffffffff, 0x0, 0xfff, 0x8, 0x7, 0xbb5, 0xda3e, 0x10000000000, 0xfffffffffffffffc, 0x1000, 0x6, 0x100000000, 0x9, 0x5, 0x0, 0x81, 0xfff, 0x80, 0x5, 0x80, 0x7, 0x0, 0x0, 0x9, 0x8000, 0x7, 0x4, 0x6, 0x40, 0x80000001, 0x401, 0x510, 0x10000, 0x9, 0x6, 0x20, 0x10000, 0x5, 0x2, 0x7, 0x1f, 0x0, 0x22, 0x101, 0x1f, 0x4, 0x8, 0x101, 0x5, 0x7, 0x5, 0x9, 0x7f, 0xd96, 0x7fff, 0xfffffffffffffffb, 0x84, 0x1, 0x401, 0x0, 0x4c, 0x101, 0x80000001, 0x2, 0x1, 0x1, 0x2, 0x4000000000000, 0x0, 0x101, 0x3, 0x2, 0x0, 0x1ff, 0x9, 0xfff, 0x5, 0x8, 0x8, 0xfffffffffffffff8, 0x3, 0x2, 0x177, 0x5, 0x2, 0x115b0c36, 0x3, 0x2, 0x8, 0x3, 0x6d4c, 0xf08, 0x1cc, 0xcea3, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x68ec800, 0x9, 0x3, 0x9f4, 0x894b, 0x7, 0x1, 0x62d], {0x0, 0x1c9c380}}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000001000)={0x40, 0x2, 0x8, 0x6, "1b83a9e02169e575165ee0ef9aa4dc5e026ce251a6a540b098e30012125910a7762039f0e58fa8d303df882c", 0x4}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000002000-0x2)=0x3f, &(0x7f0000003000-0x4)=0x2) pwrite64(r0, &(0x7f0000000000)="97b28753c5d4dc8c9bd3613cdbaf757b877e7d39a18bd946c26c0b83faca0f62db5135fc7768fff42c8f6f72157032071a18e6f58d14626275989ad468fa6b5b59980cf589cc8b745e94e1e02d96ee9c3792a70dec96dca75b39861f8b57a9146e9a38e62267dda42173db8bf527115a68401513f815289b7d83960801ad52e87421c0255a8788bb7226f438cbfe1513fb160384066ac32d963c3b6e522590", 0x9f, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000003000)={0x7ff, 0x8, 0x0, 0x7, 0x8, 0x2}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000003000)=@assoc_value={0x0, 0x8}, &(0x7f0000003000-0x4)=0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001000-0x8)=@assoc_value={r2, 0x400}, &(0x7f0000005000-0x4)=0x8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005000)={'vcan0\x00', 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000006000-0x18)={@mcast2={0xff, 0x2, [], 0x1}, 0x5, r3}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$inet(r0, &(0x7f0000001000-0x10)={0x0, 0xffffffffffffffff, @loopback}, &(0x7f0000007000-0x4)=0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000007000)={r1, 0x2, 0x0, 0x0, &(0x7f0000006000-0x20)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) sync_file_range(r1, 0x7, 0x0, 0x7) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000008000)) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$can_raw(r0, &(0x7f0000007000)={&(0x7f0000004000)={0x1d, r3}, 0x10, &(0x7f000000a000-0x8)={&(0x7f000000a000-0x10)=@can={{0x1, 0x4, 0x3, 0x1ff}, 0x7, 0x3, 0x0, 0x0, "6ffe8693ff0fc140"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x8880) 2018/02/16 23:47:27 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x1) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000b1f000-0x4)=0x9) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001000-0xa0)={0x0, @in6={{0xa, 0x1, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x17}}, 0x5, 0x3f, 0x6, 0x2, 0x80000000}, &(0x7f0000000000)=0xa0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000002000-0x8c)={r1, @in={{0x2, 0x0, @broadcast=0xffffffff}}}, 0x8c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0}, &(0x7f0000002000)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000001000-0x6)='sched\x00') mkdirat(r0, &(0x7f0000002000-0x8)='./file0\x00', 0x100) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0086426, &(0x7f0000001000-0x8)={0x3, &(0x7f0000002000-0x18)=[{}, {}, {}]}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000004000-0x2)=0x7, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000003000-0xa0)={r1, @in={{0x2, 0x1, @broadcast=0xffffffff}}, 0xe46, 0x1ff, 0x6, 0x5, 0x82}, &(0x7f0000001000-0x4)=0xa0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000005000-0x8)={r4, 0x9}, 0x8) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000003000-0xa)={0x80, "67395f9e7037"}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000004000)={r1, @in6={{0xa, 0x1, 0x800000000000000, @empty, 0x4}}}, 0x8c) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000003000)=0x8, 0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000006000-0x3)={r4, 0x8001}, &(0x7f0000004000)=0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001000-0x8)={r5, 0x4}, &(0x7f0000005000-0x4)=0x8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000005000)={&(0x7f0000001000)=@un=@abs, 0x8, &(0x7f0000002000-0x30)=[{&(0x7f0000003000-0x84)=""/132, 0x84}, {&(0x7f0000001000-0x88)=""/136, 0x88}, {&(0x7f0000003000)=""/92, 0x5c}, {&(0x7f0000005000-0x76)=""/118, 0x76}, {&(0x7f0000007000-0x80)=""/128, 0x80}, {&(0x7f0000006000)=""/18, 0x12}], 0x6, &(0x7f0000006000)=""/167, 0xa7, 0x40}, 0x2020) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xe) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000007000), 0x8) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000008000)={0x8000, 0x3ff, 0x7fffffff, 0x200}) 2018/02/16 23:47:27 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x200100) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() lchown(&(0x7f0000000000)='./file0\x00', r1, r2) exit_group(0x7fff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000002000-0x4)={0x9}, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000003000-0x8)={0x7, &(0x7f0000001000)=[{0x3075, 0x7, 0x9, 0x7}, {0xedb, 0x4, 0x8, 0x4}, {0x8, 0x8, 0x10000, 0x925}, {0x390, 0x5, 0xa2, 0xffffffffffffffc1}, {0x0, 0x8001, 0x7, 0x1ff}, {0x5, 0x2, 0xfffffffffffffbff, 0x6b}, {0xfffffffffffffffd, 0x6, 0x0, 0x8}]}, 0x8) r3 = inotify_init() ioctl$TCFLSH(r0, 0x540b, 0x2c7) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000004000-0x18)=@add_del={0x2, &(0x7f0000002000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x2}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000004000)=@generic="c787b2607ae486959685cf5bf44e2d99") mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000005000)=0x80) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000005000-0x14)={0x0, 0xfffffffffffffff8, 0x80, 0x9, 0xc4e, 0x1a}, &(0x7f0000003000-0x4)=0x14) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000004000-0x4)=r4, 0x4) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000006000)=[@in={0x2, 0x0, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x8001, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x81}, @in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, @in6={0xa, 0x3, 0x5, @dev={0xfe, 0x80, [], 0x0, 0xa}}], 0x58) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000003000-0x8)={r4, 0x37a}, 0x8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000008000-0x4)=0x7ff) getegid() getsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000006000)=""/141, &(0x7f0000006000-0x4)=0x8d) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000006000)=[{{&(0x7f0000008000)=@nl=@unspec, 0xc, &(0x7f0000009000-0x20)=[{&(0x7f0000001000)="2e3b396fead6d29bfc5cdfc5ebe80b0f795a71e9c5b1af88b45b71b7a33ff4007f9b24d8108bef1e1de8da21d43683aac18e5dc5a3c7f2ae1239dc35650df278ae06b1ce5837a4dcf3d0e60cd3c99b8dc6d32b5c124517d70811ddca6e0e0c889a6e00177a385cc099636ed38690d146b6395bf44b15f33fb94e3be40693e1e4df74370e89052c77ba53ea788547c618ff1c0214ece0a7155db58490d306d7046114c2f3", 0xa4}, {&(0x7f0000009000-0xa6)="b63c67b012b8c36cd59fbe591ce221d13e55fdbe84a66539e7dc2a45777f146eec2cb44c052a90d507a9f71657150bc3a7eb223995a2d55656bf56f92b715463ffcb2d99a7071e463e92fc3ef0436cf9b1235dc4b7df7a6fa6ab681b4aac27858ad376c85cdff9f10ed9f86c58ffe218fc16a5180c3a2f9fb27955b0bd9833320fcd8e9f69f514b95b773cd3ae241ebfb6b3e28e67988529c85fa5e24534d77e64fd11c00f64", 0xa6}, {&(0x7f0000009000-0xfb)="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", 0xfb}, {&(0x7f0000002000+0x383)="020d8b5a56b3ca1653d1b493719d8027d27a4e26e943d7b8b6e4b4e99d0277208f6c16dffade573bec1b63ddd6466ada56212babf71b8ab0f0bb392805ed8ecf1bffaf1d9f1847e2362a99dd22e610e253c2ae6bd9d18a73e4d3a746b83a5aca095f83a9f7b54727106515f262e553e0e1b85166a02e5a262717815ecff6d4e10f76caadda9917db2b3313a4fc74845919d3f0", 0x93}], 0x4, &(0x7f0000004000-0x46c)=[{0x108, 0x0, 0x8001, "03d59eed819e0bf08a10be4d8ade767135c5a1a7bf90f8186d19b746ba60052c6379f6031d92736ca12d55df6bb26b5f5fec45176c6b65b3ae670d27f7be8793cbab246499e1a90695abaf1fed88269fb2876805c5a5b3f15dcd04a4e686d0a7a762f433c9215addae3511e42a2a927233caa5a24a96ed80d15c662300e8f0c4f114549b165728de279f49eec76df6a5e1301d394d823d897a3feb62abfd1818884163f06593701450d72d819d2908f19b60fdee60e1b8957d4f127ca59f6318531638d41418165733fdf0488f626e8b6e9f37842caf84ed6fc792cf7ce993b58d8e1127fb4ae1e11adc06bf56c34ffc5a4f48e78590a22c91"}, {0xbc, 0x0, 0x6, "05723240400d4f0cdef616f70a5851f6bada532afb9cbdc6d045ed2124b119ca5f823eb913830cf877ea1b52b235f2eab76cd33139ecd8a0ee646ca6b449d5be672a8d3aea56cf55d82f1eeaea58d0a46ad0d3175e941e2df925e54c0528d584a73aa5c130abd7643267ec8e42e464c3a45c61be4373c4a2740f03845fefe3438d1af1a72e49ca51680271fe12c693ffeddf4bf17c7f2948c2a47bbf185ec6a863c7ae4e9c9e936d02136e9ac600"}, {0x7c, 0x13f, 0xffffffff, "88b433e3a43855535e5648cd3cb33a4c34a7836e12f7cf9fca4e89ee4b757dee0605a6191bbfad592cd94fefb694ffb6ca65e090377c1f0738f9799638722ff768e364dafcb5ac2e65ab92d44a673fccfc499f91f904943e3d08706d43589f2d340bb3ed2366ffa014493b33789955"}, {0x10, 0x88, 0x9, "f77d"}, {0x8c, 0x11b, 0x7, "404a39e424efe9115d49b2cde1e9e4ed2d6f91eb6fde08e8a4dd7b84045bbd3aed762c66cb9ed99dc48eabedc8f2bba55e5ac7c2eed42ae5a11a81dfc26fe4bfdc285bfa85575adcb1d8785fc1f892dd72b76386c0f5f8122bd867af2ca15ecae52eae286d623ff96c9811e89a3e416d63914a293e8ad543b4b18e580bdf"}, {0x9c, 0x107, 0xffffffff, "49c7393e4423475c22d8c9917512cf23b801bf3c966f30b90c84c3002c8f7fe5047d6aab7144629053a7fa9227deb5b8beb919490f2a94d99427d311b0fd61b4ed785b4b927efea80c1f7b57e3547c9d814193f6acc87610a4c8854fb2227b7b80f2e2e833cad6ca449f949f3901e366547a29d452f4d735917e6cbc9459dce9b7a2e561abab2d2c45bc6c2465fc381e"}, {0xf4, 0x10b, 0x26, "156a7bc5af752269a6280dd6054cf96a1fde22e6963c79c63f7a27ad8f15c79af328c002858f7fee8676b9b97d4353e83470ad2a328a07964aab516382dd88379e1e8a174024fe4dfc32c9334f8c6954ea9d0e175e9f00fe76dc23a53107eeabe781fe99e628c192dd6bce09f43266c2c360a6d3d6f84c3937500ab6464a0123bb0ef43c18e55c7c7e55f436d91dd333119dca23ede718ec047172e179f070d7f227a67e5fe69f05cdc7e9d1c3ab30965bc5e3e006ec43ccb9a2da4b3b5b476bafff66c38f9450e15e4536b7c28622b68b54583b963a2d4b0fc282ba8d5f43565f051a921b"}], 0x46c, 0x4001}, 0x1}, {{0x0, 0x0, &(0x7f0000005000-0x40)=[{&(0x7f0000009000-0x9f)="63d14a0d3d8078948488696d058d3123d07e06cd5bae793c887719211e68e81574c27eef64404e9fa2518ae86870a0694d7cbebc6070447641b8c83f359d00782a6b6db1f5f903b62877d71d820a74e458e8802e997fd213c8f716a7072ff4bca902a9b96db6aa7cf335f2c43bd3a6098cc8f0328282fff8c9dd7f11669fb468088301c22aab314f2cec191e3d57ab4f570d31ca2e7d6eaad1c219b4201f15", 0x9f}, {&(0x7f0000005000-0xdc)="20da6587464096519737bbffd0b22b45ded673c319ae61c76b5a2fee3eabe4f3788d1d94c762f3634b7329cd268110dde9366e1325d9e1c2cf897b90538d77ce75f0c3464922e21bd43e4014a5d8bd5325130e3459d57d3dbbd250d4fcbc918d62a61f377bd126d102ad2151fbaf63c80ce68d970fdc6bbdeaa20f73b7c62bcf436b5342c1d7293c9d9ae8dbf85df649c62e85ee34428a8bcccfc41a9321ceb3949601c2e2fe4d211b1f54a35d8c1619de223fbf234cddd356a047b5ac1dd4c1647d671cf8de61916cb6a417254f2bb68f7203a4e6131314aad20f1f", 0xdc}, {&(0x7f0000001000-0x12)="98c793bd054014ec2f33568ffaba7ba8ef85", 0x12}, {&(0x7f0000000000)="e1b3e6a1b9832db05af6e26fe1a3cb614413cd91bbe7106f67cedb30dea469f5d6bcfd478f4eeb10dd616e002f5f615183f0801c16b3fc6dc084578ac29a36226b76065dd21b9330817037e1e7d6fee76ed70cd2e26c044e0d967a5ac0ad3ec2265901a94a2f359e037e0c4cfd23bb", 0x6f}, {&(0x7f0000008000-0xc9)="847b5e26514fced69709b2089a641db5513d144742d402bfdcd28179376055150c618605f176f84d2c827834d4162607207803538ec8449347a41de7b1379cf6ef9a3ea53ec238b79e4655f4bfb874a899549956b6c4488cbae26188c41733b3ea3070debaef93120080f955cc19daa43f8ff6de12a6f571fc7c844b3c5c9c8f89a3872488da7f5bfc3add15645a9ec340efb47e5f17fd0f7eded2bd543a9c66d05302ffc423edf817e9d2bf1ded16764a299ebaeb5a03cef519780fff6384ed7911d1eb09a73eee12", 0xc9}, {&(0x7f0000008000)="82de415e2ebcec7071a800f1e271c3833827009901db5232509508f6136704602bae02466ad653d710ac57e4fac1f60c2cef2805a8611d2c6d14687eea09f79bbfbcfc097cba18b1c23ae27cdcd6c0e52e923b74835a68ade482ab5cfc0a8beecce382524a4c3b98db6801c1b84979efe35b45", 0x73}, {&(0x7f0000001000-0xe8)="9ec2d103776ebcadf42e8351405edcb9935e89a0f47645ba67d771a53b26eec6a0b44aa48571fb7bde5f822e9cc4207cc7bd4f9d1ae230c577d0ed05be7ccc46e87ffcc84b4966d07e6a421e3a89e66bd8cd7c185a32b8c2e6b5dc1f11f33e8264dae3d57f19720157702835d0691bbd014f89839f77d6433d412dda9ca25ed26d17e3a0ec872fd02fc705582369b29c64442f27822e48101a6d3d5ae94db3f54dcc38f16fd39558653dbb54b1f4f7bdc214f461693a2734951c12be72ad38b284b5b5154dbbb6be3e9b7bda39e30ad01d5ccd75ba01db8a14b272b969c90012a2745c7104e852dd", 0xe8}, {&(0x7f0000009000-0xf6)="f3914994ba8193cbd4175dd139e8d15fe1c7965889a7c3e7124a23391390e48f9094349be58c1d2f5e977778a9e17891aeab902a683ba98eda636fb91586ed7dfbf1867c87cb1ebcd15090eac108348e3a19caf340c7d1eff957cd9748f1594d4410da30241ab0fd8002c66d0481c3784b1f227713d20d19eb2d6b80097676c7b7870e1ebd455d4330a6b442a199138b59afcf01d083d96c91b0e77cd124b8ae485343699468eb28e4cb5fb86b8d7cac4332f8617f0d3ce788e7d35a5cf1d94865b104ccab0baec40d31be3590be547517e5b6d9fdc72086283dabe045b1795e083c8079cf2e254c1e3bacb7ad4cc6428a49be30f3cc", 0xf6}], 0x8, &(0x7f0000001000-0x170)=[{0x84, 0x10a, 0x4, "acd61646b8e327474825e2de9db095facf35420cd47f52a7b3b8d842b06ea284de1e771362193846acbd02480463772727fa563475b25d33a9606dca0ce5177f4ec09202f48a0947e5a8d50828e3c82948c01d746d135281c9d3f532f401801a69e83b28ddd403e235e3d3ab339b886cab75304abf"}, {0x14, 0x113, 0x5, "4853d35305dc26"}, {0x68, 0x10d, 0x101, "be0f0536703d5d3408206c1f9fea6609310881d58190a085f531d34032e0b151f86235a2d6a51663171bff757ad93ff5aa6f9cb0796ee517cac98be7a12a2421c565a2e76a6128703219353f5d9c3ff7c9657fd8bae154d830"}, {0xc, 0x0, 0x3}, {0x64, 0xff, 0x81, "75fbd384a7bc4a4cdd1f9b1b023dbc3ce421e9cd1113d19b6ad71f040b3ad74006ebbc2f645155cb462d8b59386d8e58fd2959431db9f3ee9bfd4316ca1ad0bebe6452b13badc9edde7b5e454cd5c93c11ce695c6c78dc"}], 0x170, 0x20000000}, 0xfffffffffffffffa}, {{&(0x7f0000005000-0x10)=@llc={0x1a, 0xf7, 0xffffffffffff0001, 0x3, 0x6, 0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000009000-0x10)=[{&(0x7f0000006000-0x37)="d68e4bc209e7e7c19623b6430c1b6214c2985514d5c323e2fe88a94ffac73fa5cc974dd214ace670d95f60ffa0cac6dadde495cf62f75b", 0x37}, {&(0x7f0000003000)="3a249a1e62833a92134787f22b2215f0a626ef369d9fd8e8492cfe6d55c879a743807eed811f021b05c33609d0a8b0e151fc73909d2c74dfe9cc05e39a1f7c066e3f8d7df9aad7500cfb945d84ba5801193c2526844c1fcee8c7eba82f1b8c47a490efdfef04bae5379f608c13fada45970744a435c8dab23cbc7d494794f0d46740b4de878cd5fb0d9d4932f1a1bd2da19ad50530cfc997491790867a3f72b331bf4fa7c922bc0edb401eb67ed183b265d6afe526ec20a2dced7d3cc7b0dca08468f108115079b2831caf78f1e15a", 0xcf}], 0x2, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000002000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @dev={0xac, 0x14, 0x0, 0xb}}, 0x4, 0x2, 0x3, 0x4}}, 0x2e, &(0x7f0000009000-0x8)=[{&(0x7f0000005000-0x1b)="90dac57e27f117ebc453c4f5db31ab8be3572c64cdb01881ddb2f5", 0x1b}], 0x1, &(0x7f0000001000-0x1108)=[{0x8c, 0x11f, 0x3f, "56dcfc541edd1456f19514aa4dcae53b8a07f357087b87213df14ed8077013ec0c6e95bd74b206b86012083afa42d4de5856787ab2ff795b1dd5ab1d3eccf772d1669597a2e538f62cbd761ac35383981cb6985e077a7fb97121330c85d32e3979548c53444e9c976eacd55c944ee12bdbe5e323d97dab043b3f5f59aefa"}, {0x100c, 0x105, 0x3, "65341fdb6a4a70428101292c8e23444108e8b0cdc482c9279a689d525d246d61266835d77fbaa6b955884cecd91e21a54dc66ef497c1dfc197f8f0cf6aeae040035d347d4721b3e85dca53ac965f34c6559385144beacd6bb1b390098b43542bad5ca9d8cb9e548d8a6b017c5e95f0bd4d7500c7b738082bc989a13a79f44c3ebf818e5531f70ff4a7b0ab9bcc8f427732b875d0a7bd9451d866ad1ce4fd2f6bbdbfddc93621336f8041d4e83c01f431f3397f15243fbd79ddaf01075acbaf7309f849498b060ad1db0cf1e29b05e173b6efd795c627bfe8e01cd70e9a7743a0a53dbe4002f54dbed66994e1d4f8d43d7b867366ba9333ae6e3ed6bf28bae0c25039031911966a78225d6a70b9d10f43feedc1f5d778e7ba7573a3e75a2fbd194739b779640e9959ae15a810058ee4bc08f08af2e55afac46fd359cf9f3ef5d18a74b28e9773ae5cfd5fa9cd6fef53d14914aeae30cb3e62604fabae03f9ecbe31d6823ea161b6ccac9697d94e8ce8c087569ed3f5c9444098d1b3c941c66f82e3e3e043ccc0e76eb70cd13d62f89317fbd249f7d0c789f344315830a45b0e47b184f978b652d8242b9ee5d50efbe8f3bf82b5b8fbe1ad16c7ada6a2985483d2e3e9dc0c36de2fe6b918882b8dbdad4b6b8ec749fd9dd08828b7084600791938644b0481e2910cfa72e8102e1716ff65de968b9648720839ca44fe525587fe8c9e8e8fae61fd681207c4b7507228343bdf25e52157dd8edc4a89f302139f09066fbc63dbb92afb7fd62c0c01efd5ae778b686cc3ff373cd3d303a1fb55532a7b2bb4c5e787333b26a055b67da81ceaf90cc9d30c3c914cc5337e43139cfe0fb90669f019f8a10dc0648a7c3ad1473bf4a6e1a347c06b89513549e8f4febbed0f28bd2e1d8e9b829ac8e5be8de7626bbd4951d77705ac817e67a7dc3c28423996742f50911983b0e7bd97ddef8fd92264da3798446284bd8ad8bca7701862279650685a80564f6f3782c82a05378811d047e3b093453e0af9705a53021fdafb6cccf9e3f8400d927839d352d5d543f04cf0d91bac3e77e2e5611f04f52c4781bd24bb60c2b87ce2897b9f2c3b534ab8f2c61da3b3ed1e7645c108cc111c219b3d34296e702761af69e93b6b8f08f512bff547512a027812dc9cae3aa679327654b549a96fb94cf6133c68e576f32991a6029f1b807bbae2aa657615df3889de3b3210e2e5a3a70a6f239deefde5ac410da6c85ec791df5b82330772d7698f61822e5e5a07555ac53866dd59ed83e278f600b3b013788860f26d22b45dccdd34f632fbdf6feab3087fdd11744c2b7b1483ab23dd805c57e511366945e0e87c98533a5d753aa6185169207096f6fc0022afecee3c50499b90080836926bcba70bf4b328277d532cadc1054297b5fbb2f1f63e16f0b4c0ca00d6a99204f731e38aa2d0e951d2fe179c0e8346f412f0143b403fd9735ba46593a9372242c58fd71c9bdba22ada921d05305e4a3359cfc96d06cbfb726c0ef8ead820f1816b08222d760bfac834bc0f7385c4addd52bc799855ea41e0f1e2c186c1583bba3bfdf2b62f35914e7c7de3ccea6f1dc687076cc4bd60173139c3318354f816a0019deeb2b1ca0aa418f28d5f32ae3f0961ac1806eceb9a22593f922e993c08d9af41ae5ea4abc69a3747b4af004824a05d79b7d640bf05081c0137793cfd2124114a3b341bec9b3dd52169184a9bb2a3172824713f35dea436a5306a86b3096594b2ea104b6c1a0ccaebcc3559edc7c379ce376454468b9f2c29d4aa1569e17ec0f8344866268ea7093870b1be6e878194d0534864da682eb356bba174cb2bb70c7518ab8ba99a59caab139d15716128794ea1a7647f8c366f199d16758ab24c5334ca353900aff4b37aa07023ac73c757aff96e1d5027a607ac9ef5d4a5c9a209993e36bd114b03986dc44a016085760e86b5e57d4dd8453c9bf4298ef33b2fe2a9a3a9f9e6cf88599b739a6c9063a5a8f6afaea8f81b35a6910569fbe1e9e68394236dbb35940adba635a56b01227fcdd8d2556044c74616f22a5e14775d03d8e657f20951a2ebabc30ba69cd9eb1e0abd8c49dbe34b63ceb57dec4c520d890da78aa69f9d90e6fa916b69d1630df7e8772be110ff1d2e84534bbfa37ca2249056022d965025fa8adf32538726dd2eaa3b0db7f389030f03611d82e728b367691068a783c250a3d5cca825c2e56221b30d98c7977ae5eaa3663c1ba64b03ccf32159955b8ca609899bc65e1cb72267470525c17450f164b57d7b771ab5b06af83b399c3f07a2f9a41e48ad781b99dc931ed47f769685a7a7fe006d8124a24b05e5a250c12077b3d759a02487d82795feac16aa75f4593c9652854bbb5e11cfadca2426baa2c050f1b6048b2ea9be3ca3fc2c7958fd1586ed9c2cf7fea6bc5e7cbf8f018af19244c4f9be14ce313de50b45ab15532183dcaedc47609fb27aedbbf9703d13e58763565b14af9b8c5b6f3626ad76923abfea268cbf05a6da3dbc3897d5cf8dd69a547638024c07c81cff9e472d42ed9c5842fbc1596e50a84bef78e57028a38fc6d9316d79681d9acccb908d81a7dd6166864905372ed9cc4af6d39e1de334b287afd66f9c95096d0f7d9b2b85aedce72bd2335e45dbc8fe36e2607c4e8be703f7fb9c262f3ae5a136443b4c839e76a835565060c0bd78a3d2a651abc9602811f04f52bb9b16dfe24c1c99a78d06d04e56e6cc747016af39257ac9c9e150aa25e90cb736c3a9f72f26697ea7394177e148c7fc90abd930f74bc8d5e133e98aa300aef4b1e62e57841ccae431a50d4e6337cfdfb8224d070961208eaeefa4fc22a9dd782177b4f0025822e46ba718362f1a2ef55bc510908472df035a9369ac26449a905b322a06c8590a950aed3614551db046a09717c364ccf5e6f53a3694908804050768f5483cc755ad052e4b0beff2958eae59c5ba2b23da721a3420446d486018b46f0892e6c4336efe802ee351e10c02212e3f11ab91a0d49d581cfe01e1b6b265b2cd02a62ce11e6d334115eb12fa5dbaa817629909a054a3f40660c74b0a23f88682a2dbc486b3e97261db0dfb93b68ed74262e3af3f3df33de8927658e08193d38cced2a16d7fee8a56a09c899f8a32aedd5ea7991ea4b843784819daece6443d24f5c9d3dee6aa61a9800f4aa7adf51f6852facf22b08682672dc5160f2880ddaa252e9f5fcda5586499555f3f2ffe6d321302d206ed089162baf67f0ce5fae6f3b94fc016dc30d3eb67c2ad3137bc5330d0c226d5c9250c7828a799e1a905b465490149d83a920b8d57176d36e04d6707a8c22a834e1d424230935348f1a35ef451169a59002091c65a04576eedd7b915e2cfa3fccb43ce0e047da65744046e35082eab2fe701e045b95644dd780bd403754d95a4c78e95d7d1dcc44368d622c6b12f649a2dd64bd168c74d94105a275f4fedd19725d1cda71462bdd1035224e0af71614a6bc3a119cfbe498b3fc76f9b8a05b502e9cd7a7159979726c5b96c937f95ecd46b2756ba217e6f2b4da602b6c8c7702589b00b8aba705f9d62490bff4b9e1768c93d8d53b584abe38398968ce44ba86828aef5038a83621676f2a76461396b51ad264a084303be7b9c91d416eb041896f80f195d8f6770a1e31eebaab4ed8d0a066f325adb5f76799acc52bc6faa22d8862a3607b000f5e5585702570a00e50eeef63678714bc148a4b7b3ef79c4f59eb3948a3ded9f9fe8ca1f02c0dd3bd93807b87ae363212decf7dc1c329ad5249225213874d6415a49e5e0011c3f3da242aaf6d9a1c6c47253f2c19cddf1d509d6b462f7903eb02766497f62b94613204096a500b0f8f56ec0f33292368c401235e8c3e09f1bb174fbf1f1947141b6e6d36f1d0f905d6c92f4e06ed1cf2c893641785f2eb7816c899223d329a5918c4e230efc11e698b604152c3a8b6de2fbde555c072620c90d642d765725655f85b82857b205959f1422ec4824d0060cfb580f09f19f92221ef0a5c0d9b5c9e0bee3fe4159b99a6dd90f1e9602863da584103d9189d6601ff26e9ff9787678ea0e09ef7ddf8ed05d0f4024e3c58a1559dd07d3177f58f06ff157a7428baa6d3e39dad1ce8780f1009bd1d6a51d50d2830410a35d1430a28afc03d7f2ac416534e4ad5f2430af8f8c43783b974ce8a9df6ac0f160ec380a35190c63f750b5eef38c2f0af746295294961f153d03944489e910eb8464b4042d9f4db3c462679a653770f937c8099af65f8fed07c5f409bed75bad6105f4e06c21b0facb033482fe91236417c330977ecf0199ec4a337892632473f5dca4264855880867501a3adf43454919fd20f5de1398a3f4e5f3af6a1487a1f5d2245e2d373ae7a6b5b8509cf8d0c43760abc11092493d4cc38f7d9150e36daf4ce3740bcd777267a201d1dbbdedda7b1fdc8be4cbd6f23890055ac39376319e73e21953bf26b7178a2aeb4fc52eb5f961889bf42e6df33816a1967257d0d2e1e8e50f58713cb5f490c805c0110f1712906e0b0101759ea34568b00f57bc33895b385f908128d19399a4f3aac579aee79665aa55f762b11bab3f2eb3e92ae39e818416f2347fe9343fc37280632117a3fe4717265b8b458fe194026f89ca951b6f3cdfdb51a974ce08e23447611905a33ba6bba4de75a2bc68e026580867d8c60f536f48a5354a194f04798bb2a3bb19f58c9c1cb7157b3af986a67bf1792e0cfa9d3ba7530f8a958857356650e7f7bf056281cbc02c1b557784e4d9d239492366172c2e9a246d117568210adf74f269c1327b2b0fe3a3acf210e4ccb91249e1a13fa69849f84c4a5df564e07bbbcee4a309822d75ac6fdce89136e7a8d438a699f4aabae4d42ecdede082545556112c9a8252e9678fd3b87bcd6e89d04fa1a1e9f08efe6fa16f161abd52bf18463a13182b956ed0a60b971daffed0b198902e3f87d59bad9ea53cc5187e688ebbf96a1e7384b1c30a24068512477791067f2cd4a0d2142a337ef1d146c9e61ce8eec6cbfec923548c40c1b6b2c29e075279f2db46dcd5b1426cf27257d3b287125f1fef61e80667bb724dae948d629c9e271fcdfaba3b696adadea294ecdeebebb1f61694939a364017508992160cc2fe49fcb3e5cea37bbbf81f8afa8375fd36510c54fd95fb2f3311b744eefa842f536acf0de77bd1b3184bf3c62df02812022c4701971eb931eced323d0d6078681db0a0090237ba685d522494392d2fb76c0b98515b053c032220f15c6b71d338c2055d0f0f8d2060daf676ba4da82b77aacac07e74d459d462d9ff1b7481e5364ae5adf6317f559588be96c109ffc3fe6692f2b7db7b0408a1d6bcde5c8bd539609ce14f2ecbf5ee78ffb4ce8bd35887a9190f9ae0a1d48ac8d7c359825520a350714aff2a8f4a4b2520da66a95c8717b53a0f58859bd337625d1732a10abddd6ab1e0a306531c8550f0b2112114f184b4422567e42116c7aefabb73a40475a981072032f670e443ab0f1f32bdd97826c8a185a36f8aad191d7860ffb0538cddd6fc6060c3453b307a4c61bcbd7aad28ea6c605baa0332e62f52457a6da8e1a1400f26e43d3f71c9bc82758a7374b1605fddb6028bcef7e683b3caa97913ff69008f71b07e899f61713395597e7651482b2cc6908b3a9d030386e9869e19623ec08c6cff240d1d5221ac37f57f54fda0042f89b6785ef5010464a727f8f0a798360d2be6629660d8366ec49c60b0e12b4a8d3764a2173385c2307b813d15a3a7284a020028de11"}, {0x70, 0x115, 0x0, "8976949960f157bc3d8a65790e1fa8e47a972e214971dc9f2330b00a9978d7d5d05328b81727a95775c55998a5f704e016c639f84b49469fcc023c8a205e9848d21ffb19c571846dc5d1f45ce1caa0ba7dcb7f443cf0860feab8d362da9f3cf5ecc249"}], 0x1108}, 0xffffffffffffffff}, {{&(0x7f0000008000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x2, @loopback=0x7f000001}, 0x0, 0x2}}, 0x2e, &(0x7f0000007000)=[{&(0x7f0000009000-0xba)="0de46f4579b8d2732877845403a6a4b2fa3aad0b5cedb54ef74d1676c62c656a078e041dde3f0a3f54e94555f8bc1b51a4388cee32c6535428f9e05528a814a4cf5f87eb9e9a82f828cb2f0d34e9a430a89d46f1c2770d7c38eac82a688c4e72e9c877d482b3734ff9fa65029278b94c8b59bbf5e92ee8b0ee7e4689297875b19a9b56123229ea47987d7fbb8543f914b825fe1f1ea790275e260098b11f4e11137af6670d82142009f94e585c2d71cfe247fcae4664ea915ed3", 0xba}, {&(0x7f0000004000-0xb)="05b0130367537c9f4e9e418bc2904045501d99f3166650fde656d91c0a3ba4ca8d75711e7c2dae1b977c8099dddcf615d573691b2b5d1b21c1003ec9e218a6ff512fffff267f48662c3fa2ed19b9cde7321b6ea8b481aa321fd5e535fe012b90111256e5b13d431d089471bbbf58686d7591eccb438fa8fb8cb5de5cba06581cf807a7c35ae6194a061fd273f35591a8a4167fdd108a", 0x96}], 0x2, &(0x7f0000004000)=[{0x9c, 0x10d, 0x3f92, "a64cdbdee9ed85f2d4d41f87ee79baff327ce9d642d219eaea324d5716773731c1af82dd80fdec720a60580c35de309db18e874c1cc71553a369c1a3e063163c5948991313a3d579837cf3128aa590c6c30bd45958db960e38bca7cfe938e93c9b1c7b7f474124b1c4593e72cef2955b09171b2171c1ac2e8efa545c1b33b4b033a8aaa33baa17c876f4ba637f"}], 0x9c, 0x801}, 0x7f}, {{&(0x7f0000004000)=@pppoe={0x18, 0x0, {0x4, @random="ce7616f77650", @common='sit0\x00'}}, 0x1e, &(0x7f0000008000)=[{&(0x7f0000009000-0x72)="61784efa1aca2f55144c7b9b4b6d6dcc1dda042afd6dd8075325bba39a4c64a3b942880798be7edcf1b5027889a379f2a399f7ed43e5ff62048a4bb68885c557c85d74342d12d54c4c032f100ba544856f441572e17c35500ef2115469e206cbc4fc142909cd4371761a842121623004e03d", 0x72}, {&(0x7f0000009000-0x6b)="9fdf45657ee1646c9c86f40388243b43121a41e23624930e8a8d601fa1ac6b0bcba28bcb31628be82588ecd275ed778c37088010962e154dc5c4f7e8aa2615726161b14cb617d559734e9b0cf2bbf28a78d9551ed0401f91df53beb6587a5db4e5d4fe44bc259aa3b89adc", 0x6b}, {&(0x7f0000001000-0xd7)="19526f0a70a4a441ac99db60fe62f600af995ae8f7cdd262d2c002be6cb8a2b9079139aa277513f31ec25e5fa4d437d46bfadedaf00c6aea9a7b387181aa964bb4fd68fa2f0db678c1beda04884662a09783f007327789caf83a0ac5368f31feb92febbd6624303a4601fb7d49196311d777dd144266f15681c88c4da9e49c3b8db97b67a24134259673c089c90766874aca93138cc8e5bd161e2a445e2dba2bc03088ea7cfdbe74f79d91aa920a6de2a28e2f11d96f4c149d5009f48460354d9872ef66aa1a4f10dafa5d0c5a6367318c6a8469e7d800", 0xd7}, {&(0x7f0000009000-0x40)="c09d4da4231034293714c2cc7eaff418279922272967dd6aed0835e482bc805939de73f03e1c9858d0c86f1c3b17d0a98859429edd5d4463c8803a50e555832f", 0x40}, {&(0x7f0000006000-0x4a)="b5d5683e0ef713971940303aaa381510a855cb9937bf22adbcb3bbc007eb849ea3897e2cb782b2116ff3d40067ba4aee8cc6a2c273eb69905e698b5a7a88637acaaad62ef7cd2d680981", 0x4a}, {&(0x7f0000009000-0x12)="39c8dd44dca29bbe50f6981449b92523f378", 0x12}, {&(0x7f0000002000)="5bccb64a17bca48eb3741f02efa5d8ded9fcc8228786437900cd0b9c3041d861b0151888432d1d2f4b7c3e7202c3163d5411c5d8a4e0ba2ea6be401d7fb3d184e2667bd60195855c8b8444d08c211bd5d70e861527a7d8a8a7efa68b4a09050f76ef518b772c3c2cea898e168da4b148c1823718", 0x74}, {&(0x7f0000009000-0x68)="0c9e01fdfc92c345a25e2cc544a9167c0a4efae3b9eef8090e8cbd2115904a1eeef472791645ff47cd00a9455afc41ee966cec3d988246afa30bfb22c523116b2e7995eb2a1612e063152d1975ecc083e260ae18d06f1c8fa96da786d7800cb9f8fc6a4703208544", 0x68}, {&(0x7f0000009000-0x5a)="2921be63c177a990ca8e302775397ee70d122bbc613ef038fb65fa1df5cacfe9b4b404fee485ca9a6e38adcd4d61e16271a1f7aea32db9686797b9dd840f84281dc66907008325fb3a126b754ca8b942e74d1a09e263a23c0917", 0x5a}], 0x9, &(0x7f0000006000-0xa8)=[{0xa8, 0x3a, 0x6, "102f0f60723c233ed7f3278505b2b88f9661d88d7caff1a33bba7b6f71071f2339bb4e7f46a3ec6db4d4058cd4019b4eda6b144186360d3a6d7ae60e4e1299e3cc3a26be6213dd1c05e3b4684af494e8561668f02453a2facf88d5cc72a74ff5f58b0dc04692ff205123c0a401ff6501f5a3bc339545ed4c784898679d210f99cf60bd4e0b8d652bdc1c3a317688edab345f53f600c9755e6afd"}], 0xa8}, 0x8}, {{&(0x7f0000009000-0x1c)=@in6={0xa, 0x0, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffff48b4}, 0x1c, &(0x7f0000007000-0x20)=[{&(0x7f0000008000)="b05aa822add9b5d2bb6d52578e7c103c4c4c80a8a0a24dc99bac5f2ebd5166a0a5d1f8f52269df890c8b989014de2e7af229a31ced527aae3b34f987e2e7264045d8c8682f6a6f28f5dbdb25841ab07bcb4a9066c779261c16cbd6b3f6f6162add91918b5e836014bf28f1704756acb14969cf3952", 0x75}, {&(0x7f0000007000)="d238e9f2470750eb3ff0609f44b9214064b3f8ad9865c120967c4948102853e76f69a049b3418965ca6bf7dc2c9097fdfc49e9761420d577b6c6e5471785ed83bfe9a9e0394d48b34826832cbc109d41825559174a966330e4543b2d8d8293b5a3e235", 0x63}, {&(0x7f0000001000)="80f7b9c01c740b9013944c5e6fd5dc31819ad2db7167a063a3860b4480099908e75405b36c7a7507c8694b351673268bc33a0b38dbf22abf7bf135b83c94e1ac69dc29154828254aa866582a289869c02a16e953edeb3ab32e4afb528b87bf448159ca91", 0x64}, {&(0x7f0000008000)="60b6e821d75e3babd2e65dfa3958dca9e0d90909e44ae904f85eb4285a898eb8c2855723af7f92744a6e106d0788318592f970ca7ca7eb5cd54585fafdd393b0ed41cc56e944590378c2bb7f806f", 0x4e}], 0x4, 0x0, 0x0, 0x80}, 0x100}], 0x7, 0x40000) 2018/02/16 23:47:27 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000001000-0x9d)=""/157, 0x9d, 0x1) r0 = syz_open_dev$amidi(&(0x7f0000001000-0xc)='/dev/amidi#\x00', 0xc1, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x118a0000000000, 0x9, 0x3f, 0x8, 0x0, 0x8000, 0x5, 0x400, 0x81, 0x4, 0xffff, 0x7fffffff}) r1 = fcntl$getown(r0, 0x9) ptrace$cont(0x1f, r1, 0x400, 0x1b) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000001000-0x8), &(0x7f0000002000-0x4)=0x8) timer_create(0x4, &(0x7f0000001000-0x58)={0x0, 0x18, 0x5, @tid=r1}, &(0x7f0000000000)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc00c6419, &(0x7f0000002000)={0x4, &(0x7f0000000000)=""/14, &(0x7f0000002000)=[{0x627, 0x45, 0xfffffffffffffff9, &(0x7f0000001000)=""/69}, {0x9, 0x82, 0x7, &(0x7f0000003000-0x82)=""/130}, {0x9, 0xda, 0x100000000, &(0x7f0000002000)=""/218}, {0x80000000, 0xeb, 0x8, &(0x7f0000002000)=""/235}]}) fcntl$setsig(r0, 0xa, 0x2d) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000003000)=0x2, 0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000005000-0x8)={0x0}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000005000-0x8)={r2, 0x5}, 0x8) ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = accept4(r0, &(0x7f0000006000-0x9)=@rc, &(0x7f0000002000-0x4)=0x9, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000005000)={r2, 0x19}, 0x8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$ax25(r3, &(0x7f0000007000-0x10), &(0x7f0000006000)=0x10) 2018/02/16 23:47:27 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000036000-0x4)=0x0) tkill(r0, 0x21) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) move_pages(r0, 0x1, &(0x7f0000164000)=[&(0x7f0000bc7000/0x2000)=nil], &(0x7f0000000000)=[0x7, 0x5, 0x1], &(0x7f000034d000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000001000-0x8), &(0x7f0000002000-0x4)=0x8) mknod$loop(&(0x7f0000002000-0x8)='./file0\x00', 0x600c, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001000-0xc)='/dev/audio#\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000003000-0x8)={0x0, 0x2}, &(0x7f0000003000-0x4)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000002000)={r3, 0x4}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000001000-0x8)={r3, 0x2}, 0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000003000)) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000001000-0x8)=0x3) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0186415, &(0x7f0000002000)={&(0x7f0000000000/0x1000)=nil, 0x90600000000000, 0x0, 0x80, &(0x7f0000001000/0x2000)=nil, 0x3f}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001000)={r2, 0x28, &(0x7f0000003000)}, 0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$unix(r2, &(0x7f0000004000)=@file={0x0, ""/108}, &(0x7f0000005000-0x4)=0x6e) fanotify_mark(r2, 0xc9, 0x10, r2, &(0x7f0000004000-0x8)='./file0\x00') ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000002000-0x44)={{0x2, 0x1, @empty}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x16}}, 0x0, {0x2, 0x0, @loopback=0x7f000001}, @generic="ad20c7b96e3803fd33efcb4cb17d46ee"}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$llc(0x1a, 0x2, 0x0, &(0x7f0000005000)) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000001000)) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000006000)='./file0\x00', &(0x7f0000006000+0xad8)) 2018/02/16 23:47:27 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f000042a000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000709000/0x1000)=nil, 0x1000, 0x2, 0x4030, 0xffffffffffffff9c, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000785000)={0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = mmap$binder(&(0x7f0000e2e000/0x4000)=nil, 0x4000, 0x1000001, 0x40013, 0xffffffffffffff9c, 0x0) r5 = mmap$binder(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x52) r6 = mmap$binder(&(0x7f00002e0000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000085a000)={0x114, 0x0, &(0x7f0000000000)=[@reply={0x40406301, {0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x50, 0x28, &(0x7f0000001000-0x50)=[@flat={0x736a2a85, 0x1, r1, 0x2}, @fda={0x66646185, 0x4, 0x2, 0xa}, @fd={0x66642a85, 0x0, r2, 0x0, 0x4}], &(0x7f0000001000-0x28)=[0x30, 0x78, 0x0, 0x28, 0x20]}}, @request_death={0x400c630e, 0x4, 0x4}, @clear_death={0x400c630f}, @reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x10, &(0x7f0000000000)=[@fda={0x66646185, 0x4, 0x3, 0x14}, @flat={0x0, 0xb, r3, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000edb000-0x1), 0x1, 0x4, 0x33}], &(0x7f0000001000-0x10)=[0x40, 0x18]}, 0xfffffffffffffffb}}, @enter_looper={0x630c}, @acquire={0x40046305, 0x4}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x48, 0x10, &(0x7f0000f75000)=[@flat={0x73622a85, 0x100, r4, 0x1}, @flat={0x73622a85, 0x100, r5}, @flat={0x776a2a85, 0xa, r6, 0x1}], &(0x7f0000000000)=[0x0, 0x20]}}, @exit_looper={0x630d}, @exit_looper={0x630d}, @dead_binder_done={0x40086310}], 0x83, 0x0, &(0x7f000053c000)="2737b1cc80287120e290125645fdeb9f2834bf0106fb0b285c00f4c8974fd45a276f49ee10445c482267c9b38d31c81b3f6bf64801883e790c5924fb90ccb508b2ea353bd8964eef5441280eb6823a158e17a2aeb42a673a50ca89e72eb9fb10cf755f6814a8eba686aa594c6aa23c344c182cbb58901842875198dd14fd1ba5991c3d"}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000002000-0x2)={0x1, "e6"}, 0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = openat(r0, &(0x7f0000003000-0x8)='./file0\x00', 0x20400, 0x4) fchmod(r0, 0x20) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004000-0xa)='/dev/cuse\x00', 0x202, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000004000)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x0, 0xd}}}, 0x57, 0x2, 0x7, 0x4, 0x5}, &(0x7f0000004000-0x4)=0xa0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000001000)={r9, 0x8d, "fee5a8be159bddfea4d90a8385002fe37bc383dade032e053fa7c6cb26602c67816a4bf280ca5e7d46491797271c10bdfeb18dac9b266a68b7b8fa5a2e631640b27b4b3feb2de973d03017cd6c547b0e21469ff6e33ee00ef99cfccca67e013eb821aefe504b65dd3088fef3414317d9c18d4f3ba66653f4cd6ea6e41725c477833a8e363ceacf4f4384b37f85"}, &(0x7f0000000000)=0x95) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000006000-0x60)={&(0x7f0000005000)=[0x8, 0x8, 0x3, 0x1, 0x6, 0x2, 0x4, 0x4], 0x8, 0x7, 0x80, 0x624e, 0x3, 0xabe6, {0x9, 0x800, 0x100, 0x2, 0x6, 0x10000, 0x68d, 0x7, 0x3, 0x0, 0x1, 0xff, 0x5, 0x7ff, "a773028c609986c0a833835c96f9794df19be93ce6e4942e66a94cdcc0fcaa8c"}}) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000004000-0x4d)="94a9ba386df64c0c6ca553574f7e39d4a47f422930093a83ddf998c5318ca885fc49e07eaef218e2b4b28aaf6d3d2f535b3609afb70459f484bce9ad12da5f264db5fd46e85a387a9c054b379d") mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000006000), &(0x7f0000006000), &(0x7f0000007000-0x4)=0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000007000-0x8)='./file1\x00', &(0x7f0000002000+0xdba)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r7, &(0x7f0000007000-0x8)='./file0\x00', r10, r11, 0x1400) 2018/02/16 23:47:27 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x800) signalfd4(r0, &(0x7f0000747000-0x8)={0x3f}, 0x8, 0x80000) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x80000000, 0x8, 0x5, 0x3, 0x7, 0x5}, 0x7f}, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000002000-0xcc)=""/204, &(0x7f0000001000)=0xcc) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000002000)) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = accept4$inet6(r1, &(0x7f0000001000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @local}, &(0x7f0000003000-0x4)=0x1c, 0x800) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000003000)=r1) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000002000-0x48)={0x80000, 0x0, [0x5, 0x9, 0x3, 0x1, 0x3, 0x4, 0xfffffffffffffffa, 0x60]}) r4 = memfd_create(&(0x7f0000001000)='Iwlan0[*a@em1proc\x00', 0xe6798fdb1518c2bb) fadvise64(r4, 0x0, 0x8, 0x1) alarm(0xffff) fstatfs(r4, &(0x7f0000003000-0x61)=""/97) read(r3, &(0x7f0000004000-0x18)=""/24, 0x18) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000003000-0x8)={0x3ff, 0x25}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000003000-0x8)={0x0, 0x10000}, &(0x7f0000004000)=0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000004000)={r5, 0x8a, "193ac47694fbd52199900ad0e6db1b97aca29ce22768fe6f1dfc36faa48072d0a449603752a43cd4146a006e3cd008f8594feb3477a1711fd1956392979d77fcc18bf53e0fcbaffd19f925bd8930a85937289c2bbdff3c52685d97462250561884205db51b129692305140a6be221433a28e74a455475343ff4faa52c77e7b153ba6810bdaa550a80510"}, &(0x7f0000000000)=0x92) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001000)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000001000)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000001000)={r6, r7}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0xf, &(0x7f0000005000+0xdf4)=""/70, 0x46) [ 30.094360] audit: type=1400 audit(1518824846.984:8): avc: denied { map } for pid=4165 comm="syz-fuzzer" path="/root/syzkaller-shm777561040" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2018/02/16 23:47:27 executing program 6: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00003e7000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000001000-0x198)={0xa, 0x0, [{0x80000007, 0x5, 0x1, 0x6, 0x7ff, 0x8, 0x8}, {0x80000007, 0x3, 0x7, 0x6, 0x7, 0xffffffff, 0x7}, {0x0, 0x0, 0x2, 0x7b, 0xbda, 0x4, 0x8}, {0x80000008, 0x2, 0x5, 0x9, 0x100, 0x3, 0x2}, {0xc0000000, 0x95, 0x1, 0x80000001, 0x7, 0x24c, 0x100}, {0xd, 0x1f, 0x4, 0xfffffffffffffffc, 0x401, 0x800, 0x3}, {0x1, 0x153b, 0x7, 0x5, 0x0, 0xffffffffc5c843e4, 0x100000000}, {0x2, 0x0, 0x3, 0x0, 0x3, 0x8, 0x4}, {0x40000000, 0x3f, 0x1, 0x4, 0x7, 0x9, 0x2}, {0x40000005, 0x3, 0x7, 0x9, 0x100, 0x5b, 0x8001}]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0x2, 0x8001}, {0x3, 0x44c1}, {0x3, 0x1f}, {0x0, 0x42d}, {0x3, 0x3}, {0x4, 0x4}, {0x7, 0x100000000}, {0xefa5d890ff0e10e5, 0x6212}, {0xb, 0x3}], 0x9) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000000)={"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"}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4$packet(r0, 0x0, &(0x7f0000002000-0x4), 0x800) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000002000-0x4), &(0x7f0000003000-0x4)=0x4) ioctl$TIOCCBRK(r0, 0x5428) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000004000-0x1c)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, [], 0x0, 0x12}, 0xffffffffffffffff}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003000)={{{@in=@rand_addr, @in=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000004000-0x4)=0xe8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000004000)={@mcast2={0xff, 0x2, [], 0x1}, r2}, 0x14) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000005000)={0x80000000, 0x5, 0xffff}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000007000-0x8)={0x3, 0x8}) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000006000-0x4)=0xfffffffffffffff8, 0x4) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000008000-0x4)) r3 = syz_open_procfs(0x0, &(0x7f0000002000)='autogroup\x00') mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000008000)={0x1, r3, 0x1}) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x6, 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)=""/4096) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000009000)={0x0, 0x0}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000009000)=0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r1, &(0x7f000000a000-0xc)={r4, r3, 0x3}) [ 30.132061] audit: type=1400 audit(1518824847.023:9): avc: denied { map } for pid=4210 comm="syz-executor4" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9089 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 30.157317] audit: type=1400 audit(1518824847.036:10): avc: denied { sys_admin } for pid=4210 comm="syz-executor4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 30.159707] IPVS: ftp: loaded support on port[0] = 21 [ 30.261189] IPVS: ftp: loaded support on port[0] = 21 [ 30.266893] audit: type=1400 audit(1518824847.158:11): avc: denied { net_admin } for pid=4213 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 30.323777] IPVS: ftp: loaded support on port[0] = 21 [ 30.371257] IPVS: ftp: loaded support on port[0] = 21 [ 30.420442] IPVS: ftp: loaded support on port[0] = 21 [ 30.505042] IPVS: ftp: loaded support on port[0] = 21 [ 30.606982] IPVS: ftp: loaded support on port[0] = 21 [ 30.693867] IPVS: ftp: loaded support on port[0] = 21 [ 31.418881] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.610465] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.746950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.827998] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.894401] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.030362] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.158499] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.274805] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.852326] audit: type=1400 audit(1518824850.743:12): avc: denied { sys_chroot } for pid=4213 comm="syz-executor4" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 23:47:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000231000)='ramfs\x00', 0x4) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000f67000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00002a1000)=0x1) fsetxattr(r0, &(0x7f000049a000-0x8)=@random={'btrfs.', '%\x00'}, &(0x7f0000b86000-0x6)='ramfs\x00', 0x6, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000211000-0x20)={r0, 0x1a9587f01a04d9c, 0x1, 0x3, &(0x7f0000feb000-0xc)=[0x0, 0x0, 0x0], 0x3}, 0x20) 2018/02/16 23:47:30 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000a9e000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000f68000-0x2)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000ac1000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000711000)="6d670628", 0x4) 2018/02/16 23:47:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000cc1000)={@common='ip6gre0\x00', &(0x7f000072a000-0xc)=@ethtool_regs={0x4}}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000084e000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) listen$netrom(r1, 0x3f) fcntl$setsig(r1, 0xa, 0x18) [ 34.099388] audit: type=1400 audit(1518824850.990:13): avc: denied { net_raw } for pid=5163 comm="syz-executor4" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 23:47:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000dfe000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = epoll_create(0x10003) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f9e000-0xc)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000ecb000-0xf)='/dev/sequencer\x00', 0x400, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f000063c000-0x60)={0x0, 0x58, "4781871c3bcb972004f3f37902faab5095a2d162b56afd911ec489858686a344a0973d1bb86d4493d8c1e0a61bd6e4d736224999c50cda81315ce4470064e7bc8bf9c95d4ceab23b9009afb66b24372a15f0283fbf10c3c1"}, &(0x7f00005d4000-0x4)=0x60) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00001fa000)=r3, 0x4) [ 34.224353] ================================================================== [ 34.231875] BUG: KASAN: use-after-free in do_raw_spin_lock+0x1e0/0x220 [ 34.238542] Read of size 4 at addr ffff8801cb302364 by task syz-executor4/5195 [ 34.245893] [ 34.247523] CPU: 0 PID: 5195 Comm: syz-executor4 Not tainted 4.16.0-rc1+ #225 [ 34.255419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.264770] Call Trace: [ 34.267360] dump_stack+0x194/0x257 [ 34.270999] ? arch_local_irq_restore+0x53/0x53 [ 34.275668] ? show_regs_print_info+0x18/0x18 [ 34.280158] ? lock_acquire+0x1d5/0x580 [ 34.284141] ? do_raw_spin_lock+0x1e0/0x220 [ 34.288465] print_address_description+0x73/0x250 [ 34.293301] ? do_raw_spin_lock+0x1e0/0x220 [ 34.297617] kasan_report+0x23b/0x360 [ 34.301420] __asan_report_load4_noabort+0x14/0x20 [ 34.306341] do_raw_spin_lock+0x1e0/0x220 [ 34.310490] _raw_spin_lock_irqsave+0x9e/0xc0 [ 34.314979] ? remove_wait_queue+0x81/0x350 [ 34.319299] remove_wait_queue+0x81/0x350 [ 34.323449] ? add_wait_queue+0x290/0x290 [ 34.327590] ? rcutorture_record_progress+0x10/0x10 [ 34.332607] ? check_noncircular+0x20/0x20 [ 34.336848] ep_unregister_pollwait.isra.7+0x18c/0x590 [ 34.342131] ? clear_tfile_check_list+0x370/0x370 [ 34.346986] ? locks_remove_file+0x3fa/0x5a0 [ 34.351405] ep_free+0x13f/0x320 [ 34.354767] ? ep_remove+0x800/0x800 [ 34.358475] ? fsnotify_first_mark+0x2b0/0x2b0 [ 34.363062] ? ep_free+0x320/0x320 [ 34.366596] ep_eventpoll_release+0x44/0x60 [ 34.370920] __fput+0x327/0x7e0 [ 34.374204] ? fput+0x140/0x140 [ 34.377480] ? _raw_spin_unlock_irq+0x27/0x70 [ 34.381979] ____fput+0x15/0x20 [ 34.385253] task_work_run+0x199/0x270 [ 34.389142] ? task_work_cancel+0x210/0x210 [ 34.393466] ? exit_to_usermode_loop+0x8c/0x2f0 [ 34.398145] exit_to_usermode_loop+0x275/0x2f0 [ 34.402727] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 34.408263] ? do_fast_syscall_32+0x156/0xf9f [ 34.412767] do_fast_syscall_32+0xbe6/0xf9f [ 34.417091] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.422105] ? do_int80_syscall_32+0x9c0/0x9c0 [ 34.426682] ? finish_task_switch+0x1c0/0x860 [ 34.431171] ? finish_task_switch+0x181/0x860 [ 34.435671] ? syscall_return_slowpath+0x2ac/0x550 [ 34.440604] ? prepare_exit_to_usermode+0x350/0x350 [ 34.445625] ? sysret32_from_system_call+0x5/0x3c [ 34.450476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.455333] entry_SYSENTER_compat+0x70/0x7f [ 34.460077] RIP: 0023:0xf7f04c79 [ 34.463430] RSP: 002b:00000000f76df09c EFLAGS: 00000286 ORIG_RAX: 000000000000014a [ 34.471131] RAX: 0000000000000017 RBX: 0000000000000016 RCX: 0000000000000017 [ 34.478393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.485655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 34.492922] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 34.500188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 34.507484] [ 34.509105] Allocated by task 5187: [ 34.512734] save_stack+0x43/0xd0 [ 34.516187] kasan_kmalloc+0xad/0xe0 [ 34.519903] kmem_cache_alloc_trace+0x136/0x740 [ 34.524568] binder_get_thread+0x1cf/0x870 [ 34.528797] binder_poll+0x8c/0x390 [ 34.532421] ep_item_poll.isra.10+0xf2/0x320 [ 34.536830] ep_insert+0x6a2/0x1ac0 [ 34.540453] SyS_epoll_ctl+0x12bf/0x1a80 [ 34.544507] do_fast_syscall_32+0x3ec/0xf9f [ 34.548830] entry_SYSENTER_compat+0x70/0x7f [ 34.553227] [ 34.554844] Freed by task 5187: [ 34.558119] save_stack+0x43/0xd0 [ 34.561566] __kasan_slab_free+0x11a/0x170 [ 34.565795] kasan_slab_free+0xe/0x10 [ 34.569594] kfree+0xd9/0x260 [ 34.572693] binder_thread_dec_tmpref+0x27f/0x310 [ 34.577536] binder_thread_release+0x4a1/0x6b0 [ 34.582112] binder_ioctl+0xc02/0x1417 [ 34.585996] compat_SyS_ioctl+0x151/0x2a30 [ 34.590227] do_fast_syscall_32+0x3ec/0xf9f [ 34.594544] entry_SYSENTER_compat+0x70/0x7f [ 34.598935] [ 34.600555] The buggy address belongs to the object at ffff8801cb3022c0 [ 34.600555] which belongs to the cache kmalloc-512 of size 512 [ 34.613194] The buggy address is located 164 bytes inside of [ 34.613194] 512-byte region [ffff8801cb3022c0, ffff8801cb3024c0) [ 34.625040] The buggy address belongs to the page: [ 34.629943] page:ffffea00072cc080 count:1 mapcount:0 mapping:ffff8801cb302040 index:0x0 [ 34.638063] flags: 0x2fffc0000000100(slab) [ 34.642271] raw: 02fffc0000000100 ffff8801cb302040 0000000000000000 0000000100000006 [ 34.650124] raw: ffffea0006c80620 ffffea0006c887a0 ffff8801db000940 0000000000000000 [ 34.657984] page dumped because: kasan: bad access detected [ 34.663662] [ 34.665262] Memory state around the buggy address: [ 34.670162] ffff8801cb302200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 34.677493] ffff8801cb302280: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 34.684821] >ffff8801cb302300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.692151] ^ [ 34.698615] ffff8801cb302380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.705951] ffff8801cb302400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.713287] ================================================================== [ 34.720618] Disabling lock debugging due to kernel taint [ 34.726037] Kernel panic - not syncing: panic_on_warn set ... [ 34.726037] [ 34.733371] CPU: 0 PID: 5195 Comm: syz-executor4 Tainted: G B 4.16.0-rc1+ #225 [ 34.741919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.751243] Call Trace: [ 34.753810] dump_stack+0x194/0x257 [ 34.757407] ? arch_local_irq_restore+0x53/0x53 [ 34.762048] ? kasan_end_report+0x32/0x50 [ 34.766168] ? lock_downgrade+0x980/0x980 [ 34.770285] ? vsnprintf+0x1ed/0x1900 [ 34.774053] ? do_raw_spin_lock+0x140/0x220 [ 34.778343] panic+0x1e4/0x41c [ 34.781505] ? refcount_error_report+0x214/0x214 [ 34.786239] ? add_taint+0x40/0x50 [ 34.789746] ? add_taint+0x1c/0x50 [ 34.793254] ? do_raw_spin_lock+0x1e0/0x220 [ 34.797545] kasan_end_report+0x50/0x50 [ 34.801488] kasan_report+0x148/0x360 [ 34.805258] __asan_report_load4_noabort+0x14/0x20 [ 34.810158] do_raw_spin_lock+0x1e0/0x220 [ 34.814279] _raw_spin_lock_irqsave+0x9e/0xc0 [ 34.818745] ? remove_wait_queue+0x81/0x350 [ 34.823037] remove_wait_queue+0x81/0x350 [ 34.827158] ? add_wait_queue+0x290/0x290 [ 34.831277] ? rcutorture_record_progress+0x10/0x10 [ 34.836264] ? check_noncircular+0x20/0x20 [ 34.840471] ep_unregister_pollwait.isra.7+0x18c/0x590 [ 34.845721] ? clear_tfile_check_list+0x370/0x370 [ 34.850543] ? locks_remove_file+0x3fa/0x5a0 [ 34.854926] ep_free+0x13f/0x320 [ 34.858261] ? ep_remove+0x800/0x800 [ 34.861944] ? fsnotify_first_mark+0x2b0/0x2b0 [ 34.866497] ? ep_free+0x320/0x320 [ 34.870008] ep_eventpoll_release+0x44/0x60 [ 34.874306] __fput+0x327/0x7e0 [ 34.877558] ? fput+0x140/0x140 [ 34.880806] ? _raw_spin_unlock_irq+0x27/0x70 [ 34.885280] ____fput+0x15/0x20 [ 34.888530] task_work_run+0x199/0x270 [ 34.892386] ? task_work_cancel+0x210/0x210 [ 34.896678] ? exit_to_usermode_loop+0x8c/0x2f0 [ 34.901318] exit_to_usermode_loop+0x275/0x2f0 [ 34.905872] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 34.911379] ? do_fast_syscall_32+0x156/0xf9f [ 34.915847] do_fast_syscall_32+0xbe6/0xf9f [ 34.920139] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.925129] ? do_int80_syscall_32+0x9c0/0x9c0 [ 34.929680] ? finish_task_switch+0x1c0/0x860 [ 34.934150] ? finish_task_switch+0x181/0x860 [ 34.938616] ? syscall_return_slowpath+0x2ac/0x550 [ 34.943516] ? prepare_exit_to_usermode+0x350/0x350 [ 34.948503] ? sysret32_from_system_call+0x5/0x3c [ 34.953316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.958130] entry_SYSENTER_compat+0x70/0x7f [ 34.962512] RIP: 0023:0xf7f04c79 [ 34.965847] RSP: 002b:00000000f76df09c EFLAGS: 00000286 ORIG_RAX: 000000000000014a [ 34.973529] RAX: 0000000000000017 RBX: 0000000000000016 RCX: 0000000000000017 [ 34.980768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.988020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 34.995268] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 35.002508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 35.010162] Dumping ftrace buffer: [ 35.013672] (ftrace buffer empty) [ 35.017350] Kernel Offset: disabled [ 35.020945] Rebooting in 86400 seconds..