[....] Starting enhanced syslogd: rsyslogd[ 16.983211] audit: type=1400 audit(1518802712.141:5): avc: denied { syslog } for pid=4025 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.357041] audit: type=1400 audit(1518802716.514:6): avc: denied { map } for pid=4164 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. 2018/02/16 17:38:42 fuzzer started [ 27.659041] audit: type=1400 audit(1518802722.816:7): avc: denied { map } for pid=4175 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/16 17:38:43 dialing manager at 10.128.0.26:42897 [ 31.223083] can: request_module (can-proto-0) failed. [ 31.232083] can: request_module (can-proto-0) failed. 2018/02/16 17:38:46 kcov=true, comps=true [ 31.784975] audit: type=1400 audit(1518802726.942:8): avc: denied { map } for pid=4175 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=60 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/16 17:38:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='K', 0x1) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000781000)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="00000000000002000003ffffff15e30000000000000005000449faf5238f7e23"}) 2018/02/16 17:38:48 executing program 3: mmap(&(0x7f0000000000/0x23000)=nil, 0x23000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f000001d000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f000000e000-0x38)={&(0x7f0000014000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000)=[], 0x0, &(0x7f0000022000)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000019000)=""/46, 0x2e}, &(0x7f000001f000-0x1)}}, @cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000002000-0x8), &(0x7f0000017000)}}], 0x88}, 0x0) 2018/02/16 17:38:48 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000fcf000-0x4)=0x0) getpriority(0x1, r0) 2018/02/16 17:38:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000deb000)={0x2, 0x400000000000003, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}]}, 0x38}, 0x1}, 0x0) 2018/02/16 17:38:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f000068e000-0xb)='/dev/audio\x00', 0x10000, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000c08000-0x18)=""/24) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f0000404000)) 2018/02/16 17:38:48 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013000+0xe95), 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000005000-0x4), &(0x7f0000004000)=0x4) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/16 17:38:48 executing program 4: mmap(&(0x7f0000000000/0xb07000)=nil, 0xb07000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000af1000)={@common='bridge0\x00', &(0x7f0000a05000-0x2c)=@ethtool_cmd={0x3b}}) 2018/02/16 17:38:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000064000)="1f0000004a00070600001b0a000008ff0a3f80164c00000204000003441951", 0x1f) [ 33.715492] audit: type=1400 audit(1518802728.873:9): avc: denied { map } for pid=4175 comm="syz-fuzzer" path="/root/syzkaller-shm878455695" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.761458] audit: type=1400 audit(1518802728.919:10): avc: denied { sys_admin } for pid=4219 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.786141] IPVS: ftp: loaded support on port[0] = 21 [ 33.848310] IPVS: ftp: loaded support on port[0] = 21 [ 33.854437] audit: type=1400 audit(1518802729.012:11): avc: denied { net_admin } for pid=4223 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.888616] IPVS: ftp: loaded support on port[0] = 21 [ 33.934278] IPVS: ftp: loaded support on port[0] = 21 [ 33.987304] IPVS: ftp: loaded support on port[0] = 21 [ 34.062831] IPVS: ftp: loaded support on port[0] = 21 [ 34.148490] IPVS: ftp: loaded support on port[0] = 21 [ 34.243507] IPVS: ftp: loaded support on port[0] = 21 [ 35.206391] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.288392] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.327666] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.394788] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.601289] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.633736] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.742997] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.859853] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.824091] audit: type=1400 audit(1518802732.980:12): avc: denied { sys_chroot } for pid=4224 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:38:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00003bd000)="2400000024007f000000000180007701000000ff010000000000000000000000bb00ff10", 0x24) 2018/02/16 17:38:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f000051a000), 0x593, 0x0, &(0x7f0000764000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) 2018/02/16 17:38:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8000+0xcfd)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000848000-0x1)='X', 0x1, 0x0, &(0x7f0000060000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r1, 0x1) dup3(r1, r0, 0x0) 2018/02/16 17:38:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x4) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000935000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000a9a000)) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000fb0000-0x4)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f000034e000-0x20)={0x27ff, 0x2, 0x1000, 0x2000, &(0x7f0000e1c000/0x2000)=nil}) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000169000-0x70)={[{0x7, 0x92a, 0x8, 0xb6fe, 0x0, 0xfffffffffffff801, 0xfffffffffffffbff, 0x6, 0x5, 0x1, 0x7, 0x0, 0x6}, {0x1000, 0xfff, 0x64, 0x80, 0x81, 0x5, 0x0, 0x9, 0x7fff, 0xfffffffffffffffd, 0x7fffffff, 0xbb23, 0x800000000000000}, {0x6, 0x80000001, 0x0, 0x5, 0xe65, 0x3, 0x2, 0xa00, 0x80000000, 0x0, 0x2, 0x7fffffff, 0x1}], 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00009f5000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r6 = getuid() fchown(r3, r6, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/02/16 17:38:53 executing program 3: mmap(&(0x7f0000000000/0xf8d000)=nil, 0xf8d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000346000), &(0x7f0000056000-0x4)=0xc) r1 = syz_open_dev$vcsa(&(0x7f00008d4000-0xb)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000f8b000-0x40)={0x0, 0x0, 0x6, 0x9}) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f76000-0x10)={&(0x7f0000f84000-0x50)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) 2018/02/16 17:38:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000036000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000826000-0x16), 0x0) 2018/02/16 17:38:53 executing program 0: mmap(&(0x7f0000000000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f000001b000+0x4e8)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000004000-0x124)=@ipv4_delroute={0xb8, 0x19, 0xf11, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@RTA_ENCAP={0x9c, 0x16, @typed={0x98, 0x0, @binary="478d1845b6bb55b3dbc044398db091ad9da3d91477f260cc7c5477733e002eb3cc62761047b478faaac4e079f0cf26a858f557487f3a3c42db2906a18632350d7bfdb1e11703cfd851dd7dcef837fc41bd01ac9d427641620eefd370c923592404f5b7b527b49749844bdcc4198eb171b35faea2762fa9cd8d6889f3e25e65a55d7bdf192a195331a2cac92cc2"}}]}, 0xb8}, 0x1}, 0x0) [ 38.076585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 38.148860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/02/16 17:38:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000011000-0x24)="2300000024009115460000000000001201000000000000270180ffff00000011007352", 0x23}], 0x1}, 0x0) 2018/02/16 17:38:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6e000-0x30)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000009000-0xc9)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000ea000)={0x8, 0x0, &(0x7f0000007000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/16 17:38:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x4) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000935000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000a9a000)) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000fb0000-0x4)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f000034e000-0x20)={0x27ff, 0x2, 0x1000, 0x2000, &(0x7f0000e1c000/0x2000)=nil}) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000169000-0x70)={[{0x7, 0x92a, 0x8, 0xb6fe, 0x0, 0xfffffffffffff801, 0xfffffffffffffbff, 0x6, 0x5, 0x1, 0x7, 0x0, 0x6}, {0x1000, 0xfff, 0x64, 0x80, 0x81, 0x5, 0x0, 0x9, 0x7fff, 0xfffffffffffffffd, 0x7fffffff, 0xbb23, 0x800000000000000}, {0x6, 0x80000001, 0x0, 0x5, 0xe65, 0x3, 0x2, 0xa00, 0x80000000, 0x0, 0x2, 0x7fffffff, 0x1}], 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00009f5000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r6 = getuid() fchown(r3, r6, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/02/16 17:38:53 executing program 3: mmap(&(0x7f0000000000/0xf8d000)=nil, 0xf8d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000346000), &(0x7f0000056000-0x4)=0xc) r1 = syz_open_dev$vcsa(&(0x7f00008d4000-0xb)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000f8b000-0x40)={0x0, 0x0, 0x6, 0x9}) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f76000-0x10)={&(0x7f0000f84000-0x50)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) 2018/02/16 17:38:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000080000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000fc4000-0x68)={0x1, 0x0, [{0x9, 0x2, 0x0, 0x0, @adapter}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f000010e000)={0x400000009}) 2018/02/16 17:38:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000015000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1c0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000c000-0x40), {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast=0xffffffff, @syzn={0x73, 0x79, 0x7a}}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @generic="742d7dff42a7bb6e84d061f6c226eab1", @syzn={0x73, 0x79, 0x7a}, {}, {}, 0xbf, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x71}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) connect$inet6(r0, &(0x7f000000c000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/16 17:38:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='K', 0x1) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000781000)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="00000000000002000003ffffff15e30000000000000005000449faf5238f7e23"}) 2018/02/16 17:38:53 executing program 6: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000005000-0x13)='/dev/snd/controlC#\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000008000-0x8), &(0x7f0000004000)=0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000004000-0x4)) 2018/02/16 17:38:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f000023f000-0x2)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000033000-0x4)=0x7, 0x4) write(r0, &(0x7f0000b35000)='y', 0x1) writev(r0, &(0x7f0000f08000)=[{&(0x7f00002ce000)="bc", 0x1}], 0x1) 2018/02/16 17:38:53 executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000003000-0x398)=@raw={'raw\x00', 0x9, 0x4, 0x3ce, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x7fffffe, 0xffffffff, 0x0, 0xffffffff, 0x4, &(0x7f0000002000), {[{{@ip={@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="10ad22fa72be7d01dd9c88e65e811834", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd8, 0x0, {}, []}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x70}}}}, 0x370) 2018/02/16 17:38:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='K', 0x1) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000781000)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="00000000000002000003ffffff15e30000000000000005000449faf5238f7e23"}) 2018/02/16 17:38:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000)='proclo}\x00', 0x5) lseek(r0, 0x0, 0x4) [ 38.403930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 38.437324] binder: 5305:5313 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/16 17:38:53 executing program 3: mmap(&(0x7f0000000000/0xf8d000)=nil, 0xf8d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000346000), &(0x7f0000056000-0x4)=0xc) r1 = syz_open_dev$vcsa(&(0x7f00008d4000-0xb)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000f8b000-0x40)={0x0, 0x0, 0x6, 0x9}) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f76000-0x10)={&(0x7f0000f84000-0x50)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) 2018/02/16 17:38:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000917000-0x10)={0x0, 0x0}) pselect6(0xfffffffffffffe27, &(0x7f00006d2000-0x40), &(0x7f0000829000), &(0x7f0000b11000-0x40), &(0x7f0000fc1000-0x10)={0x77359400, r0}, &(0x7f0000c02000)={&(0x7f0000104000-0x8), 0x8}) 2018/02/16 17:38:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='K', 0x1) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000781000)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="00000000000002000003ffffff15e30000000000000005000449faf5238f7e23"}) [ 38.465350] binder: 5305:5313 Release 1 refcount change on invalid ref 0 ret -22 [ 38.473899] audit: type=1400 audit(1518802733.631:13): avc: denied { net_raw } for pid=5319 comm="syz-executor0" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 38.495838] binder: 5305:5330 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/16 17:38:53 executing program 0: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mlock2(&(0x7f00002ae000/0x4000)=nil, 0x4000, 0x0) 2018/02/16 17:38:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) clock_nanosleep(0x0, 0x0, &(0x7f0000a6f000), &(0x7f0000406000)) [ 38.519323] binder: 5305:5316 Acquire 1 refcount change on invalid ref 0 ret -22 [ 38.534224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 38.539428] binder: 5305:5335 Release 1 refcount change on invalid ref 0 ret -22 [ 38.569116] audit: type=1400 audit(1518802733.725:14): avc: denied { map } for pid=5337 comm="syz-executor0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15373 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 38.604277] binder: 5343:5348 transaction failed 29189/-22, size 0-0 line 2842 2018/02/16 17:38:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6e000-0x30)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000009000-0xc9)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000ea000)={0x8, 0x0, &(0x7f0000007000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/16 17:38:53 executing program 0: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mlock2(&(0x7f00002ae000/0x4000)=nil, 0x4000, 0x0) 2018/02/16 17:38:53 executing program 2: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mlock2(&(0x7f00002ae000/0x4000)=nil, 0x4000, 0x0) 2018/02/16 17:38:53 executing program 3: mmap(&(0x7f0000000000/0xf8d000)=nil, 0xf8d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000346000), &(0x7f0000056000-0x4)=0xc) r1 = syz_open_dev$vcsa(&(0x7f00008d4000-0xb)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000f8b000-0x40)={0x0, 0x0, 0x6, 0x9}) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f76000-0x10)={&(0x7f0000f84000-0x50)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) 2018/02/16 17:38:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000ca000-0x258)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f00003ad000-0x30), {[{{@ip={@loopback=0x7f000001, @loopback=0x7f000001, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x0, @empty}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031b000-0x8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000647000)={0xffffffffffffffff}) sendto$inet(r4, &(0x7f00009d4000-0x297)='R', 0x1, 0xc880, &(0x7f0000657000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/02/16 17:38:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) clock_nanosleep(0x0, 0x0, &(0x7f0000a6f000), &(0x7f0000406000)) 2018/02/16 17:38:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f00002dc000)=[{&(0x7f0000fe1000)=""/33, 0x21}], 0x1, &(0x7f000070f000-0x8)=[{&(0x7f0000d56000-0x93)=""/147, 0x93}], 0x1, 0x0) 2018/02/16 17:38:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x4) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000935000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000a9a000)) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000fb0000-0x4)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f000034e000-0x20)={0x27ff, 0x2, 0x1000, 0x2000, &(0x7f0000e1c000/0x2000)=nil}) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000169000-0x70)={[{0x7, 0x92a, 0x8, 0xb6fe, 0x0, 0xfffffffffffff801, 0xfffffffffffffbff, 0x6, 0x5, 0x1, 0x7, 0x0, 0x6}, {0x1000, 0xfff, 0x64, 0x80, 0x81, 0x5, 0x0, 0x9, 0x7fff, 0xfffffffffffffffd, 0x7fffffff, 0xbb23, 0x800000000000000}, {0x6, 0x80000001, 0x0, 0x5, 0xe65, 0x3, 0x2, 0xa00, 0x80000000, 0x0, 0x2, 0x7fffffff, 0x1}], 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00009f5000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r6 = getuid() fchown(r3, r6, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 38.644937] binder: 5343:5345 transaction failed 29189/-22, size 0-0 line 2842 [ 38.655999] binder: undelivered TRANSACTION_ERROR: 29189 [ 38.661576] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/16 17:38:53 executing program 2: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mlock2(&(0x7f00002ae000/0x4000)=nil, 0x4000, 0x0) [ 38.685096] audit: type=1400 audit(1518802733.842:15): avc: denied { set_context_mgr } for pid=5353 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 38.722824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 38.740198] binder: 5360:5365 transaction failed 29189/-22, size 0-0 line 2842 [ 38.786761] audit: type=1400 audit(1518802733.872:16): avc: denied { prog_load } for pid=5358 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 38.809253] audit: type=1400 audit(1518802733.916:17): avc: denied { write } for pid=5358 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 2018/02/16 17:38:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6e000-0x30)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000009000-0xc9)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000ea000)={0x8, 0x0, &(0x7f0000007000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/16 17:38:54 executing program 0: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mlock2(&(0x7f00002ae000/0x4000)=nil, 0x4000, 0x0) 2018/02/16 17:38:54 executing program 2: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mlock2(&(0x7f00002ae000/0x4000)=nil, 0x4000, 0x0) 2018/02/16 17:38:54 executing program 6: mmap(&(0x7f0000000000/0x3b1000)=nil, 0x3b1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x0, 0x158, 0x158, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000237000-0x40), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x0, 0x0, 'kmp\x00', "225eecb6d70b7bdaceb36a2658d861a1eff3b029ef504a339970d947ba2ad36d4e0d6b5328cf197cd30f1138e28b60250775d0d48bdc49c5f07871c41c895cbb30dc1065e1ca049ab6e5f35e9c7f37a29fa0753a992aa626d200a9ee7fd68edf88d2e57359942a0ff1fef7a3b917dc483d93f9d782b3ce3da3eb8965fbf6dca4"}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) 2018/02/16 17:38:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000d1e000)={0x0, 0x1c9c380}, &(0x7f0000183000-0x10)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shmdt(0x0) socket$llc(0x1a, 0x0, 0x0) 2018/02/16 17:38:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x4) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000935000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000a9a000)) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000fb0000-0x4)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f000034e000-0x20)={0x27ff, 0x2, 0x1000, 0x2000, &(0x7f0000e1c000/0x2000)=nil}) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000169000-0x70)={[{0x7, 0x92a, 0x8, 0xb6fe, 0x0, 0xfffffffffffff801, 0xfffffffffffffbff, 0x6, 0x5, 0x1, 0x7, 0x0, 0x6}, {0x1000, 0xfff, 0x64, 0x80, 0x81, 0x5, 0x0, 0x9, 0x7fff, 0xfffffffffffffffd, 0x7fffffff, 0xbb23, 0x800000000000000}, {0x6, 0x80000001, 0x0, 0x5, 0xe65, 0x3, 0x2, 0xa00, 0x80000000, 0x0, 0x2, 0x7fffffff, 0x1}], 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00009f5000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r6 = getuid() fchown(r3, r6, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/02/16 17:38:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) clock_nanosleep(0x0, 0x0, &(0x7f0000a6f000), &(0x7f0000406000)) 2018/02/16 17:38:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c47000-0xb)='/dev/hwrng\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000e36000-0x8), 0x8) 2018/02/16 17:38:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af20, &(0x7f00002cc000-0x8)={0x0, r0}) 2018/02/16 17:38:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6e000-0x30)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000009000-0xc9)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000ea000)={0x8, 0x0, &(0x7f0000007000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/16 17:38:54 executing program 0: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mlock2(&(0x7f00002ae000/0x4000)=nil, 0x4000, 0x0) [ 38.836315] audit: type=1400 audit(1518802733.993:18): avc: denied { prog_run } for pid=5358 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 38.837186] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/16 17:38:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000ae5000-0x660)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x1e0, 0x1e0, 0x408, 0x408, 0x310, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f00001dd000-0x60), {[{{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="b4b1ecc7609cf32ed30f15b2d430a1d7"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x7}}}, {{@ipv6={@dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @common='ip6_vti0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback=0x7f000001, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @common='irlan0\x00', @common='yam0\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={0x48, 'dst\x00'}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev={0xfe, 0x80}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @common=@srh={0x30, 'srh\x00'}]}, @HL={0x28, 'HL\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x660) [ 38.912775] binder: 5388:5391 transaction failed 29189/-22, size 0-0 line 2842 [ 38.964392] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/16 17:38:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @random="8618e9d6c6f0", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @rand_addr=0xffffffffffffffff, {[]}}, @icmp=@echo_reply={0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, "df7ac2ee1421076c888b2eb4"}}}}}, 0x0) 2018/02/16 17:38:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000537000-0xb1)="130000001000ffdde23cf49ff60f050000230a009d0000000f00d2c43022e5f900000001697ae1a3490096000601e7b93c18c214e30100e9ffef49a1b4b88ed4b9000602c2d3105df1f2aa09bd267c3d5f625e77e150da8fd7d56ca4576d7bd87da5cd03b27dd26746ea5000000000000000083d3f8612f026723affa620db0f7e7bf12930d837b9cb3452b6c400007d886959e4ebd309613a00fa0d1ad5b5a42a777a6f575b8b76199346c8f325b8fcd1", 0xb1) 2018/02/16 17:38:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001a7000-0xf)='net/icmp6\x00') preadv(r0, &(0x7f000030f000-0x40)=[{&(0x7f000043c000-0xb4)=""/68, 0x44}], 0x1, 0x0) 2018/02/16 17:38:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000bbc000)=0x400000000000001, 0xeb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000a92000), 0x0, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x0, 0x852b, 0xffff, 0x1}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000cef000)=0x80000000, 0x4) writev(r0, &(0x7f00000ae000)=[{&(0x7f000059b000-0x1000)="1b535ea19371228fb35cd6affe75fd508703a6520c0c3bcedded24701762dcc7bd2249cb28f40bca747076580104c7a930147cc14fa98c7da7b4cb5d0268cb4a2a3629923bccfc95f3f7e1016b77eec330ccf3264824dc1c2826635d6a37badd2fabc8477acd6797c2201ea3aa10c1bcf72a92d3a2333701e8a4effd28eecfa504af9e19c8e3ef6aa3e7ac50c17b032f86ef3a0c87345f5fe88fc592e2d1ac32864512bbfd1b1326a3b5e1f5ed1e72246769050f193ad8659973ed8dd9123f155eea421d8149f28ab27abfbde3f963652160d6ea89e836c86a7277606813e3a9e42f9e40f321721b306e1a75ed6c45577bff2accf6fc33963f410eff6d15a7382a872f528f85adf2d14cf962028c5285229a189a2b445743940460e50a9b4925259a215b00f2d982fc859b28376fce505edf8fd5a281481731f70c66d6728aac1269a29a909a9ec1da8408725491215a574c1b24a3da493c8795cf6b29033e866b264c096952c275c0b6a284c450e2c1bd8df370d54245af1471b63be7b523a91787ac0f976b341161e39782ce739591217ab409831a7946ad8591a7eb45f22cdd034ace3cb2c072d9c39c908cef10d98ff7e9dd7a5bf7fbe4da21006a0d68a81a4bc1bb03a12952665db6d5689c6ffbb3b059b2b63dfcac390441afb9e0f936fbeebbf3b6e07de0e52b48622b8e99a2d620ed7f8ecfb67c51c474a8a3910f6a6c3bd197db07f93b8fd27bd9478020296dc1d5ed3c07778123dcbe0bd9d35ea9881da5ec96395c9d3aab77d72da347a09f185f9f7afeeb6b42c491dbaf2195d8748d7904748d32f1350b98b49db77e8ad5f58ffc4729d0e11d25ff93e073913daeb5edae95c56afd995d44cde12754c58a12795815a420a063e426bae6a017a0e307581b65e00cba1f8bc9b740ae5f53bd9348fbb823e9dbc62c409aea9abebfc74a0cefd57faf6c3d8e86fc1ed90822f8d12a92f318cee9983d2007c747cc3f84573f64abe2f3b91c027ecc102bca60d3ac1f63ee3ba212f7565adec4384274ab51ca2295a5a7a094e554032abd0f7f2636fb42281540666faabd2a34d7c11fe7e8dbea9aa2f65a3232ba61c616b577d3724bebd2b36c92af7d6054ec86967e13afdf57362f9229fce299a2053c397f0a5f082ed5cc01c60fb10ce0ea104c2cd03d5852c0ed1a1cd95c3a7e47f57910d89e597000a7237133440b06c944efa91104471e82f51ba12e1788012033f9b4d7c75019f2ed08fe02fa434f692a4c7960ab6d7a4bef261c26fe0d5e29b4f1767f72dcfa9daef83eb12cf19f2aca5a71bc602ed99557e5c45fce9f942c0bf4150ce36fb0ca1fbb37010df9af005c60744945da94e5b68e8e9f3bc1e457aa088acd78c814a6f091072ad23e658233d4e2e77fbcb6cf224c04f58ed929525ac963ef5f5b4d3c0feb5425258d40481ce9ed83710437f5e88819290c3b4a1a45b05017d1c65646929dda355332246f2fbfcfc3952d4e8cfb06d3ef6552c9f15c82492f6c61959433dbcc2d3e915382fe73356ec552bf0e53ace6f25814376e83b2224dbdbde721766a6be04e05dd10575fe54ca9363577fae3b243ae1e5286e96e5c6be7f18426f9773f7ded2361d57edc82d27cb4e6524e8b43aa79d170f2b1cbeb91bf4ae879365a68e1b7dabc7fbf8d6503f8775088cf9f2d4a4ae08e57a9542f664c5c7602663903ea5f627f08be49a3cbfa910476341c549446dbdad75422eb86c39ef0380656f173c5f5a8856f4aec9125942ef5b3abb192f48a7e13e2879276307b74dab9fe13303529c3c3101a91aefb4f31ccec7b28e3ab22ab1a513fe2beae04f850c3d121564a130391e68535a757357239394bbaddb32043503a8f937ce2f91c892f0dfd2a4a44170134d02d9bf98ff73a3bd370b18141bc11927e9a6b69087bd44fb91c91b083490e30a39a0b28a8588918d19c9e9aafcbf4c5ce3357979408e9e48c922fa4030ad91d67820b4a3e28b3b82274211790289e0efee6e1dbab89b354159bf4b659bc813edd9b29ea110bd6935334c51b3621b2f8d065045d6978f8ac41d3715550a9d346526634ae6bde6c1e07671b726182b30172206a1c1384f27e331e4ed795440524ce8297f43de9df5f237cf081231f5d77e5ca5f6e2032dcedf15ddd8494b5496e5343f3a40911ccbf7d5ee2cfc955cfb82626751dac1a5087237d36dd5b23087ac689289942e9aedf52715c182e6bad997152ae706cdc62ca40768c1b18a377241c77133998c83fd633028c03739672cb98bf8df646cb062690f8953fc28ad9fb80020c70a1fd635c69e328cdfa9d8ebf80bb6bd27feeea26f306f0d0bf1ffbb49591c885e62003efb87cf7826df5665b6796ef6ddfd35b8f844fb3b36b132612446cac349ab9dd603b08f309edc83f34602a58e6d1338240ff3482caf9467911dd1c0e3b92e072db5f858190a8d79241a2bd4d263291d8e35d85553ed437019083449d1e0365d37dc2dd981f4887f5d0106042e2ddb72039c80433ca3ea3deeadde9c2d6bfa9027c1b3ba7bd13eb5e9d9eba90501a0b7705c368be444fd213185bf1200722224f6cdbb8c311b832782a664d4cc6897bf004d0c63652c1b4dbf8860378439e618f0d7bd36b17992c85feb792a78ead72823eea6438b6c737a78c5d46bbdc2712b8824f74a3b8eadcdc19dd3fb01168f2c1357dc02d3cd08c8413f52812a144b82736e0d0ba11140f598b471273c2a1704f11ede2c63c9a6f293789028f7e641a0e2eff36d1f4707ca5a5adafd6b5af6e08967cccb97652fcf8e3ce6c53013f5a4c53dd9dce3296ed0c474435b4a2447cc5fe6d8e29859a81f5fac4ae078c4ee54afa577f9de56673460077652048a8b6bae918b694f1dccac6d36b394a54edb34a736e8d206aecf09bae4fe1472c4eb755434f8d91f866e631b004d368fb2e862a7f6cdeda20c703d38639c50e348b14a1828b2a905855bd5746acfd418ab068da1381c1475a711e2bc0c2e57199767b4f816b595700cde29bd942ab37b0a07932009ccc34020b96efcdb2d26367f77899dbff8551fedbf257a2a306d8f2fb16d113a6dad85ba87e26f566a3987e7da78368ad6debd2b48b3476035a4b0c8be04783137ae63ad20c3ac1f616f9d6496b409f269575947f4a7725a7ba1f78b213ca7279a599b414e0bb799e3a3ed3ef2a813f5ace6e8e5192a2a2d90dba9bc3486b7d7b6511977a01dd5c91b31be75faa74cf4a0a3308f88d868a6c2399ba028516f5f20cc082ba1cfe26fec4201c876ff44aa7f05819b0650179cb5e1dda0cc093b4c9d11d3ad0f928d46e52f99b8c076a8704c11caf57c89357cbd7e411995f926360234ad8e04b8e67a7eedf1e41d0a2a218b58b85fd4f0808aa85bb314278f76abd12166beb2b803a93d2fb51bc177ef5685b1083d41faf4abfd3d9858a46e57594c2960931541cbdeff0cd616eeb1ba2d9dd2c990f8376acf8dee737df0db5ff3c188585ff3a8aeb09aae9f97e0d1e31e74b30ad7179989807b2f321e802ed9013ca4d60705b63556457cb876a74484832a6e2694098f4b1a1b0db828c1760620f15df829dab1de9b44dcf5b0b1259596042a2ac06a338665f21317f016ed974051cffa3859e32333943d848280b1c93c1ab83127eb3ffcd9351c55f76d4c3d1e77623ee07bdad46ae80006156d2bf0143f356b7bcc5f3ec8275de4881d701c207a2a783239dc80abceb208dc75449ab1af41526a2a61ef9a1f142cdd28c441030381f777598fe58eaf1b209e997bc47f74f0b", 0xa79}], 0x1) 2018/02/16 17:38:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) clock_nanosleep(0x0, 0x0, &(0x7f0000a6f000), &(0x7f0000406000)) 2018/02/16 17:38:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x100000002, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000391000-0x160)={{{{0x2, 0xffffffffffffffff, @empty}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x0, 0x0, 0x0, "c4894c5ffdc2e5fdaf848a8c727e37faa506dd8e46692db30d14cfd35b211d9d4985da36dc5bcf975798e517c053ab025e94035a15e1710d5e472e33853c90a65787abecaf51e10effb0ceb5e7263017"}, 0x160) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000019e000)={{{{0x2, 0xffffffffffffffff, @rand_addr}}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}}, 0x0, 0x0, 0x0, "7642e75f09fffffffffffffffee79fb4842ffebf4b163569ee94fc35134090c3d15c3fa96cc942aea07c4f108b869ba2f2f691aa02ec4db0ee1e055caacb00cae4df0944217f5c59a5fee9da1743a249"}, 0x160) 2018/02/16 17:38:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000007f000-0xb)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000760000-0x48)={0x1, 0x0, [{0x0, 0x48, &(0x7f0000ace000)=""/72}]}) 2018/02/16 17:38:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000052d000-0x38)={&(0x7f0000db7000)={0x10}, 0xc, &(0x7f000097d000-0x10)={&(0x7f0000f71000-0x14)={0x14, 0x1, 0xa, 0x2000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 39.124920] audit: type=1400 audit(1518802734.282:19): avc: denied { dac_override } for pid=5415 comm="syz-executor6" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 39.150751] audit: type=1400 audit(1518802734.282:20): avc: denied { create } for pid=5419 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/16 17:38:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002000-0x2)={0x5, 0x6}, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000136000)=[@text16={0x10, &(0x7f0000b2a000-0x2c)="0f23600f011f0f7f6000660f28f73e67670fc76700ea87000501b83a018ec8f6967a00660f2910c006bf00b7", 0x2c}], 0x1, 0x0, &(0x7f0000b8d000-0x20)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/16 17:38:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) link(&(0x7f0000f3c000-0x8)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') rename(&(0x7f0000d88000)='./control/file0\x00', &(0x7f000035e000)='./control\x00') 2018/02/16 17:38:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x21) setsockopt(r0, 0x1, 0x6, &(0x7f000074d000-0x33)="90a83f0d", 0x4) sendto$inet(r0, &(0x7f000067b000), 0x0, 0x0, &(0x7f00007ed000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) 2018/02/16 17:38:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000459000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @broadcast=0xffffffff}}}, 0x98) 2018/02/16 17:38:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001a7000-0xf)='net/icmp6\x00') preadv(r0, &(0x7f000030f000-0x40)=[{&(0x7f000043c000-0xb4)=""/68, 0x44}], 0x1, 0x0) [ 39.174771] audit: type=1400 audit(1518802734.282:21): avc: denied { write } for pid=5419 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/16 17:38:54 executing program 5: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000a4d000-0x4)) 2018/02/16 17:38:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000e9d000-0x38)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000f7a000-0x10)={&(0x7f00008c5000)={0x14, 0x1, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 39.227894] binder: 5417:5425 transaction failed 29189/-22, size 0-0 line 2842 [ 39.263551] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/16 17:38:54 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001000)=@assoc_value, &(0x7f0000001000)=0x8) 2018/02/16 17:38:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000459000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @broadcast=0xffffffff}}}, 0x98) 2018/02/16 17:38:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001a7000-0xf)='net/icmp6\x00') preadv(r0, &(0x7f000030f000-0x40)=[{&(0x7f000043c000-0xb4)=""/68, 0x44}], 0x1, 0x0) 2018/02/16 17:38:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000547000-0x510)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x4, [{{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}]}, 0x290) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000087000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x110) 2018/02/16 17:38:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/02/16 17:38:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00001c3000-0xf)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000383000)={0x0, 0xffffffffffffffff}) 2018/02/16 17:38:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000e9d000-0x38)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000f7a000-0x10)={&(0x7f00008c5000)={0x14, 0x1, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:38:54 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001000)=@assoc_value, &(0x7f0000001000)=0x8) 2018/02/16 17:38:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000014000)='/dev/dmmidi#\x00', 0x2, 0x902) readv(r0, &(0x7f00008a2000-0x20)=[{&(0x7f0000e2f000)=""/130, 0x82}], 0x1) [ 39.274489] audit: type=1400 audit(1518802734.432:22): avc: denied { dac_read_search } for pid=5438 comm="syz-executor2" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:38:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000e9d000-0x38)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000f7a000-0x10)={&(0x7f00008c5000)={0x14, 0x1, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 39.350056] [ 39.351729] ====================================================== [ 39.358040] WARNING: possible circular locking dependency detected [ 39.364343] 4.16.0-rc1+ #315 Not tainted [ 39.368384] ------------------------------------------------------ [ 39.374684] syz-executor1/5466 is trying to acquire lock: [ 39.380202] (sk_lock-AF_INET6){+.+.}, at: [<0000000015c52398>] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 39.389644] [ 39.389644] but task is already holding lock: [ 39.395588] (rtnl_mutex){+.+.}, at: [<00000000f7bfa9e3>] rtnl_lock+0x17/0x20 [ 39.402849] [ 39.402849] which lock already depends on the new lock. [ 39.402849] [ 39.411132] [ 39.411132] the existing dependency chain (in reverse order) is: [ 39.418718] [ 39.418718] -> #2 (rtnl_mutex){+.+.}: [ 39.423972] __mutex_lock+0x16f/0x1a80 [ 39.428347] mutex_lock_nested+0x16/0x20 [ 39.432896] rtnl_lock+0x17/0x20 [ 39.436753] unregister_netdevice_notifier+0x91/0x4e0 [ 39.442442] tee_tg_destroy+0x61/0xc0 [ 39.446731] cleanup_entry+0x242/0x380 [ 39.451107] __do_replace+0x7ac/0xa70 [ 39.455395] do_ip6t_set_ctl+0x40f/0x5f0 [ 39.459947] nf_setsockopt+0x67/0xc0 [ 39.464149] ipv6_setsockopt+0x10b/0x130 [ 39.468703] tcp_setsockopt+0x82/0xd0 [ 39.472992] sock_common_setsockopt+0x95/0xd0 [ 39.477977] SyS_setsockopt+0x189/0x360 [ 39.482439] do_syscall_64+0x280/0x940 [ 39.486819] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 39.492492] [ 39.492492] -> #1 (&xt[i].mutex){+.+.}: [ 39.497916] __mutex_lock+0x16f/0x1a80 [ 39.502292] mutex_lock_nested+0x16/0x20 [ 39.506843] xt_find_table_lock+0x3e/0x3e0 [ 39.511575] xt_request_find_table_lock+0x28/0xc0 [ 39.516920] get_info+0x154/0x690 [ 39.520870] do_ip6t_get_ctl+0x159/0xaf0 [ 39.525423] nf_getsockopt+0x6a/0xc0 [ 39.529627] ipv6_getsockopt+0x1df/0x2e0 [ 39.534182] tcp_getsockopt+0x82/0xd0 [ 39.538469] sock_common_getsockopt+0x95/0xd0 [ 39.543455] SyS_getsockopt+0x178/0x340 [ 39.547917] do_syscall_64+0x280/0x940 [ 39.552297] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 39.557970] [ 39.557970] -> #0 (sk_lock-AF_INET6){+.+.}: [ 39.563744] lock_acquire+0x1d5/0x580 [ 39.568037] lock_sock_nested+0xc2/0x110 [ 39.572593] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 39.578099] ipv6_setsockopt+0xd7/0x130 [ 39.582568] sctp_setsockopt+0x2b6/0x61d0 [ 39.587208] sock_common_setsockopt+0x95/0xd0 [ 39.592193] SyS_setsockopt+0x189/0x360 [ 39.596658] do_syscall_64+0x280/0x940 [ 39.601040] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 39.606717] [ 39.606717] other info that might help us debug this: [ 39.606717] [ 39.614828] Chain exists of: [ 39.614828] sk_lock-AF_INET6 --> &xt[i].mutex --> rtnl_mutex [ 39.614828] [ 39.625112] Possible unsafe locking scenario: [ 39.625112] [ 39.631135] CPU0 CPU1 [ 39.635772] ---- ---- [ 39.640407] lock(rtnl_mutex); [ 39.643665] lock(&xt[i].mutex); [ 39.649611] lock(rtnl_mutex); [ 39.655375] lock(sk_lock-AF_INET6); [ 39.659146] [ 39.659146] *** DEADLOCK *** [ 39.659146] [ 39.665175] 1 lock held by syz-executor1/5466: [ 39.669730] #0: (rtnl_mutex){+.+.}, at: [<00000000f7bfa9e3>] rtnl_lock+0x17/0x20 [ 39.677413] [ 39.677413] stack backtrace: [ 39.681878] CPU: 1 PID: 5466 Comm: syz-executor1 Not tainted 4.16.0-rc1+ #315 [ 39.689115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.698435] Call Trace: [ 39.700993] dump_stack+0x194/0x257 [ 39.704592] ? arch_local_irq_restore+0x53/0x53 [ 39.709235] print_circular_bug.isra.38+0x2cd/0x2dc [ 39.714218] ? save_trace+0xe0/0x2b0 [ 39.717900] __lock_acquire+0x30a8/0x3e00 [ 39.722029] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 39.727187] ? rtnl_lock+0x17/0x20 [ 39.730698] ? __mutex_lock+0x16f/0x1a80 [ 39.734727] ? rtnl_lock+0x17/0x20 [ 39.738234] ? rtnl_lock+0x17/0x20 [ 39.741755] ? mutex_lock_io_nested+0x1900/0x1900 [ 39.746570] ? perf_trace_lock+0xd6/0x900 [ 39.750696] ? perf_trace_lock+0xd6/0x900 [ 39.754814] ? retint_kernel+0x10/0x10 [ 39.758672] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 39.763658] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 39.768384] ? retint_kernel+0x10/0x10 [ 39.772240] ? find_held_lock+0x35/0x1d0 [ 39.776271] lock_acquire+0x1d5/0x580 [ 39.780041] ? lock_sock_nested+0xa3/0x110 [ 39.784242] ? lock_acquire+0x1d5/0x580 [ 39.788183] ? do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 39.793344] ? lock_release+0xa40/0xa40 [ 39.797288] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 39.803149] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 39.809002] ? do_raw_spin_trylock+0x190/0x190 [ 39.813559] ? lock_sock_nested+0x44/0x110 [ 39.817764] lock_sock_nested+0xc2/0x110 [ 39.821794] ? do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 39.826952] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 39.831940] ? ipv6_update_options+0x330/0x330 [ 39.836499] ? trace_event_raw_event_lock+0x340/0x340 [ 39.841669] ? __lock_is_held+0xb6/0x140 [ 39.845701] ? __lock_is_held+0xb6/0x140 [ 39.849734] ? update_load_avg+0x249/0x2d80 [ 39.854036] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 39.859548] ? update_load_avg+0x249/0x2d80 [ 39.863839] ? check_noncircular+0x20/0x20 [ 39.868043] ? resched_curr+0x13e/0x1a0 [ 39.871987] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 39.877493] ? put_prev_task_fair+0x80/0x80 [ 39.881785] ? print_irqtrace_events+0x270/0x270 [ 39.886510] ? rb_insert_color+0x1580/0x1580 [ 39.890886] ? find_held_lock+0x35/0x1d0 [ 39.894919] ? print_irqtrace_events+0x270/0x270 [ 39.899644] ? lock_downgrade+0x980/0x980 [ 39.903761] ? lock_downgrade+0x980/0x980 [ 39.907877] ? print_irqtrace_events+0x270/0x270 [ 39.912601] ? __lock_acquire+0x664/0x3e00 [ 39.916806] ? do_raw_spin_trylock+0x190/0x190 [ 39.921356] ? do_raw_spin_trylock+0x190/0x190 [ 39.925908] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 39.930979] ipv6_setsockopt+0xd7/0x130 [ 39.934919] ? ipv6_setsockopt+0xd7/0x130 [ 39.939037] sctp_setsockopt+0x2b6/0x61d0 [ 39.943154] ? sctp_setsockopt_paddr_thresholds+0x550/0x550 [ 39.948834] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 39.953992] ? perf_trace_lock+0xd6/0x900 [ 39.958118] ? trace_event_raw_event_lock+0x340/0x340 [ 39.963276] ? perf_trace_lock+0xd6/0x900 [ 39.967397] ? check_noncircular+0x20/0x20 [ 39.971599] ? __unqueue_futex+0x290/0x290 [ 39.975801] ? trace_event_raw_event_lock+0x340/0x340 [ 39.980955] ? perf_trace_lock+0xd6/0x900 [ 39.985071] ? trace_event_raw_event_lock+0x340/0x340 [ 39.990228] ? check_noncircular+0x20/0x20 [ 39.994431] ? check_noncircular+0x20/0x20 [ 39.998632] ? finish_task_switch+0x1c0/0x860 [ 40.003094] ? lock_downgrade+0x980/0x980 [ 40.007215] ? find_held_lock+0x35/0x1d0 [ 40.011246] ? avc_has_perm+0x35e/0x680 [ 40.015187] ? lock_downgrade+0x980/0x980 [ 40.019303] ? lock_release+0xa40/0xa40 [ 40.023244] ? lock_downgrade+0x980/0x980 [ 40.027360] ? lock_release+0xa40/0xa40 [ 40.031301] ? __lock_is_held+0xb6/0x140 [ 40.035332] ? avc_has_perm+0x43e/0x680 [ 40.039281] ? avc_has_perm_noaudit+0x520/0x520 [ 40.043918] ? iterate_fd+0x3f0/0x3f0 [ 40.047685] ? __sched_text_start+0x8/0x8 [ 40.051802] ? __lock_is_held+0xb6/0x140 [ 40.055832] ? sock_has_perm+0x2a4/0x420 [ 40.059860] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 40.065196] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 40.070873] ? selinux_netlbl_sock_rcv_skb+0x730/0x730 [ 40.076122] ? __schedule+0x2070/0x2070 [ 40.080069] sock_common_setsockopt+0x95/0xd0 [ 40.084533] SyS_setsockopt+0x189/0x360 [ 40.088476] ? SyS_recv+0x40/0x40 [ 40.091903] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 40.097406] ? do_syscall_64+0xb6/0x940 [ 40.101346] ? SyS_recv+0x40/0x40 [ 40.104768] do_syscall_64+0x280/0x940 [ 40.108623] ? __do_page_fault+0xc90/0xc90 [ 40.112824] ? finish_task_switch+0x1c0/0x860 [ 40.117284] ? finish_task_switch+0x181/0x860 [ 40.122166] ? syscall_return_slowpath+0x550/0x550 [ 40.127068] ? syscall_return_slowpath+0x2ac/0x550 [ 40.131969] ? prepare_exit_to_usermode+0x350/0x350 [ 40.136959] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 40.142291] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.147106] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/02/16 17:38:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000459000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @broadcast=0xffffffff}}}, 0x98) 2018/02/16 17:38:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001a7000-0xf)='net/icmp6\x00') preadv(r0, &(0x7f000030f000-0x40)=[{&(0x7f000043c000-0xb4)=""/68, 0x44}], 0x1, 0x0) 2018/02/16 17:38:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000023f000)={0x44, 0x0, &(0x7f0000faa000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00003dc000-0x58)=[@flat={0x77622a85}], &(0x7f000083b000-0x40)=[0x0]}}], 0x0, 0x0, &(0x7f00009f9000-0x1)}) 2018/02/16 17:38:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000014000)='/dev/dmmidi#\x00', 0x2, 0x902) readv(r0, &(0x7f00008a2000-0x20)=[{&(0x7f0000e2f000)=""/130, 0x82}], 0x1) 2018/02/16 17:38:55 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001000)=@assoc_value, &(0x7f0000001000)=0x8) 2018/02/16 17:38:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000e9d000-0x38)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000f7a000-0x10)={&(0x7f00008c5000)={0x14, 0x1, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:38:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000ef1000-0x38)={&(0x7f000000f000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000424000-0x10)={&(0x7f0000962000-0xb4)={0x14, 0x23, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0xf}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:38:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000459000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @broadcast=0xffffffff}}}, 0x98) 2018/02/16 17:38:55 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001000)=@assoc_value, &(0x7f0000001000)=0x8) [ 40.152278] RIP: 0033:0x453a59 [ 40.155438] RSP: 002b:00007fddba07cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 40.163113] RAX: ffffffffffffffda RBX: 00007fddba07d6d4 RCX: 0000000000453a59 [ 40.170354] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000013 [ 40.177591] RBP: 000000000071bea0 R08: 0000000000000088 R09: 0000000000000000 [ 40.184831] R10: 0000000020058000 R11: 0000000000000246 R12: 00000000ffffffff [ 40.192067] R13: 00000000000004fb R14: 00000000006f7828 R15: 0000000000000000 2018/02/16 17:38:55 executing program 1: fanotify_mark(0xffffffffffffffff, 0xaf23d4d3f9d36350, 0x0, 0xffffffffffffffff, &(0x7f000047e000-0x8)='./file0\x00') 2018/02/16 17:38:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000b53000-0xe8)={{{@in=@loopback, @in6=@mcast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f00002a4000-0x4)=0xe8) msgctl$IPC_SET(r0, 0x1, &(0x7f00007ae000+0xc1)={{0x0, r1}}) 2018/02/16 17:38:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa9000-0x1c)={0xa, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000ec0000-0xc)=@sack_info={0x0, 0x0, 0x1}, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000a3b000-0xc)=@sack_info, &(0x7f0000e9d000-0x4)=0xc) 2018/02/16 17:38:55 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000003000-0xc5)=""/197, &(0x7f0000002000-0x4)=0xc5) [ 40.231623] audit: type=1400 audit(1518802735.389:23): avc: denied { map } for pid=5477 comm="syz-executor4" path="/dev/binder0" dev="devtmpfs" ino=129 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 2018/02/16 17:38:55 executing program 1: mmap(&(0x7f0000000000/0xfef000)=nil, 0xfef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000e25000)={&(0x7f0000fd8000)='./file0\x00', r0}, 0xc) 2018/02/16 17:38:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000014000)='/dev/dmmidi#\x00', 0x2, 0x902) readv(r0, &(0x7f00008a2000-0x20)=[{&(0x7f0000e2f000)=""/130, 0x82}], 0x1) 2018/02/16 17:38:55 executing program 3: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f000000a000)={'filter\x00', 0x7, 0x4, 0x3c0, 0x0, 0x108, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, &(0x7f0000018000), {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1ff, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@arp={@empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, {}, @empty, {[0x0, 0x0, 0xff]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x410) 2018/02/16 17:38:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000561000)={{{@in=@rand_addr, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x80}}, {{@in6=@empty, 0xffffffffffffffff, 0x6c}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000673000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "010060", 0x14, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0xffffffffffffffff, 0x2, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}}}, 0x0) 2018/02/16 17:38:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000028000-0x9)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) [ 40.278115] binder: BINDER_SET_CONTEXT_MGR already set [ 40.288278] binder: 5477:5501 ioctl 40046207 0 returned -16 [ 40.299667] binder_alloc: 5477: binder_alloc_buf, no vma [ 40.303063] NFQUEUE: number of total queues is 0 [ 40.305182] binder: 5477:5508 transaction failed 29189/-3, size 24-8 line 2957 [ 40.326213] audit: type=1400 audit(1518802735.415:24): avc: denied { call } for pid=5477 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 40.348512] audit: type=1400 audit(1518802735.415:25): avc: denied { transfer } for pid=5477 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/02/16 17:38:55 executing program 7: mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x11) connect$inet6(r0, &(0x7f000000a000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) 2018/02/16 17:38:55 executing program 5: mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/16 17:38:55 executing program 6: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00007f4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f00007e7000/0x1000)=nil, 0x1000, 0x4003, &(0x7f000095a000)=0x101, 0x3ff, 0x0) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8003, &(0x7f000082e000-0x8)=0x40000000003, 0x7, 0x0) 2018/02/16 17:38:55 executing program 4: pipe2(&(0x7f0000496000-0x8), 0x8327bb6919476a8b) 2018/02/16 17:38:55 executing program 3: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000001000-0x1e)={0x18, 0x0, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @syzn={0x73, 0x79, 0x7a, 0x0}}}, 0x1e) connect$pppoe(r0, &(0x7f0000002000-0x1e)={0x18, 0x0, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @syzn={0x73, 0x79, 0x7a, 0x0}}}, 0x1e) connect$pppoe(r0, &(0x7f0000001000-0x1e)={0x18, 0x0, {0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, @common='tunl0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000004000-0x1e)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, @generic="4915abd386d32a380df84f52ae268157"}}, 0x1e) 2018/02/16 17:38:55 executing program 1: mmap(&(0x7f0000000000/0xfef000)=nil, 0xfef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000e25000)={&(0x7f0000fd8000)='./file0\x00', r0}, 0xc) 2018/02/16 17:38:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000014000)='/dev/dmmidi#\x00', 0x2, 0x902) readv(r0, &(0x7f00008a2000-0x20)=[{&(0x7f0000e2f000)=""/130, 0x82}], 0x1) 2018/02/16 17:38:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000b53000-0xe8)={{{@in=@loopback, @in6=@mcast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f00002a4000-0x4)=0xe8) msgctl$IPC_SET(r0, 0x1, &(0x7f00007ae000+0xc1)={{0x0, r1}}) [ 40.376835] NFQUEUE: number of total queues is 0 [ 40.379553] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.390980] binder: release 5477:5486 transaction 16 out, still active [ 40.397690] binder: undelivered TRANSACTION_COMPLETE [ 40.402832] binder: send failed reply for transaction 16, target dead 2018/02/16 17:38:55 executing program 1: mmap(&(0x7f0000000000/0xfef000)=nil, 0xfef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000e25000)={&(0x7f0000fd8000)='./file0\x00', r0}, 0xc) 2018/02/16 17:38:55 executing program 4: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000006000-0x14)={0x0, 0x0, 0x22e5}) pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000006000-0x20)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/02/16 17:38:55 executing program 5: keyctl$update(0x2, 0x0, 0x0, 0xffffffffffffff5a) 2018/02/16 17:38:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fa2000)=@nat={'nat\x00', 0x1b, 0x5, 0x4d8, 0xf0, 0x318, 0xffffffff, 0x0, 0x318, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, &(0x7f00001b0000-0x50), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @common='ip6gretap0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00'}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4=@dev={0xac, 0x14}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback={0x0, 0x1}, @ipv4=@empty, @icmp_id, @port}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@broadcast=0xffffffff, @ipv4=@rand_addr, @port, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x538) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000096a000-0x1c)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000695000-0x2)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "011f20", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0x8}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0x0]}) 2018/02/16 17:38:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) bind(r0, &(0x7f0000f70000)=@un=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f000026d000-0xa)=@file={0x1000000000001, './file0\x00'}, 0xa) close(r0) 2018/02/16 17:38:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe2000-0x1c)={0x6, 0x4, 0x84, 0xf, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000c68000)={r0, &(0x7f0000105000-0xd5), &(0x7f00006ce000), 0x1}, 0x20) 2018/02/16 17:38:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b89000)=""/246) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) 2018/02/16 17:38:55 executing program 1: mmap(&(0x7f0000000000/0xfef000)=nil, 0xfef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000e25000)={&(0x7f0000fd8000)='./file0\x00', r0}, 0xc) 2018/02/16 17:38:55 executing program 4: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000006000-0x14)={0x0, 0x0, 0x22e5}) pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000006000-0x20)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/02/16 17:38:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000b53000-0xe8)={{{@in=@loopback, @in6=@mcast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f00002a4000-0x4)=0xe8) msgctl$IPC_SET(r0, 0x1, &(0x7f00007ae000+0xc1)={{0x0, r1}}) 2018/02/16 17:38:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012b000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eba000-0x1), 0x0, 0x20000003, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000252000)={0x9, 0x7fffffff}, 0x8) close(r0) [ 40.440397] mmap: syz-executor6 (5543) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/02/16 17:38:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000009000-0x318)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003b4000-0x308)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f00000a5000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x0, 0x0, 'kmp\x00', "ecfd0037dcd340e5a6177a6797bea2127443e46369bd74862729ee034a86420544c724a452db12a4c2045000244db87c098ff4f41d4bbb35f945f28a0306be536177778b121649cf151f11f7ba76d04ee6c2ca95efdf7802c10816bff1763bac0973ae3a2008b0f9a4ed3b3294f0687f31c8b1cf4fde5acc3a190ffc19a93587", 0x69}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) sendto$inet(r0, &(0x7f00003b5000-0xa)="f9ee", 0x2, 0x0, &(0x7f00003b5000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/16 17:38:55 executing program 3: ioprio_set$pid(0x0, 0x0, 0x2002) 2018/02/16 17:38:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00005b7000)='environ\x00') dup2(r0, r1) 2018/02/16 17:38:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$void(r0, 0xc0045878) [ 40.521575] TCP: request_sock_TCPv6: Possible SYN flooding on port 20010. Sending cookies. Check SNMP counters. 2018/02/16 17:38:55 executing program 4: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000006000-0x14)={0x0, 0x0, 0x22e5}) pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000006000-0x20)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/02/16 17:38:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ca1000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000174000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) accept4$vsock_stream(r0, &(0x7f0000cbc000)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, 0x0) 2018/02/16 17:38:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000b53000-0xe8)={{{@in=@loopback, @in6=@mcast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f00002a4000-0x4)=0xe8) msgctl$IPC_SET(r0, 0x1, &(0x7f00007ae000+0xc1)={{0x0, r1}}) 2018/02/16 17:38:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000fb000-0xb)='/dev/loop#\x00', 0x0, 0x4000000006) sendfile(r0, r0, 0x0, 0x3662c257) 2018/02/16 17:38:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000576000)={&(0x7f0000c86000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00006ca000)={0x14, 0x1, 0x5, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:38:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000891000-0x4), 0x4) 2018/02/16 17:38:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b89000)=""/246) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) 2018/02/16 17:38:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @common='bpq0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f000002e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000fa2000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @common='dummy0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="c57b190a20e16c02ec8243b89a6a42ca"}, 0x0, 0xa8, 0xe8, 0x0, {}, []}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d91c982bef04a133a9cd72ef62e15d6dae66add5762ab43dca2a6522a4c8"}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/16 17:38:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000023000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/02/16 17:38:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000986000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e3e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000c1000)='/dev/dmmidi#\x00', 0x0, 0x0) 2018/02/16 17:38:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000f21000-0x380)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x0, 0xea, 'bm\x00', "225eecb600000007ceb36a2658d861a1eff32000000000000000d947ff2ad36d4e0d6b5328cf197cd30f110002000000000000d48bdc49c5f07871c41c895cbb30dc1065e1ca049ab6e5f300000000000000023a992aa626d200a9ee7fd68edf88000099b1942a0ff1fef7a3b917dc483d93f9d782b3ce2da3eb8965fbf6dca4", 0x400000000002f}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@broadcast=0xffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @generic="9cd7d6f066821358576485a73127bf63", @generic="ad8e0879982acd22a5e0eba0ca671522"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14}, @multicast1=0xe0000001, 0x0, 0x0, @generic="e39e66367d4140ac40e41e1e04d2404a", @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00009ac000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f000077a000), 0xfeee, 0x0, &(0x7f0000d5a000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/02/16 17:38:55 executing program 4: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000006000-0x14)={0x0, 0x0, 0x22e5}) pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000006000-0x20)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/02/16 17:38:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000996000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000939000-0x8)={0x0, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) 2018/02/16 17:38:55 executing program 2: mmap(&(0x7f0000000000/0x2a000)=nil, 0x2a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000009000-0x38)={&(0x7f0000001000-0xc)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000028000-0x10)={&(0x7f0000013000-0x3a8)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x400454dc, &(0x7f0000001000-0x4)=0x0) wait4(r2, &(0x7f0000019000), 0x0, 0x0) 2018/02/16 17:38:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001000-0x12)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x27ff) 2018/02/16 17:38:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000023000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/02/16 17:38:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b89000)=""/246) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) 2018/02/16 17:38:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000b8d000-0x18)={@loopback={0x0, 0x1}, 0x8b4}) 2018/02/16 17:38:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000639000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00005af000-0xa)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000302000-0x8), 0xffffffff) 2018/02/16 17:38:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000023000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/02/16 17:38:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00008b2000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000713000-0x8)='./file0\x00', &(0x7f0000fb0000-0x19)=@known='security.capability\x00', &(0x7f00002b3000-0x14)="0000000201000000000000010400000000000000", 0x14, 0x0) open$dir(&(0x7f0000c59000)='./file0\x00', 0x200, 0x0) 2018/02/16 17:38:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/16 17:38:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005a1000-0x1)='8', 0x1, 0x0, &(0x7f00007bd000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd7000-0xc)={0x0, 0x4, 0x4000020030}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000b2b000)={0x0, 0x1}, 0x8) write(r0, &(0x7f0000cbe000-0x48)='v', 0x1) writev(r0, &(0x7f0000f80000-0x20)=[{&(0x7f0000514000-0xa7)="c5", 0x1}], 0x1) sendmsg(r0, &(0x7f0000ece000)={0x0, 0x0, &(0x7f00004a1000-0x60)=[{&(0x7f00007ac000-0x82)="dd", 0x1}], 0x1, &(0x7f00009e9000)=[]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000010000-0xc), 0xc) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0d000-0x4), 0x4) sendto$inet6(r0, &(0x7f0000db6000)="84b49a40a76c78f0769e4a395a78bbd1d97ece9e374f34257497eb3acfec4b7040bb4344183700596e81834a3af617296e8db16358ec9fb6f4c3c7f0e7947609533883b5d83e276617b5683f97a326e3f9315b6ef401c7f71e34055cd5a9fa8f2550c4d0b1901b79363cddd081b572b7ef2c178dc0d994a321ec103685fdb92bb2e74d37fd3e61116de31b6dd04377a7dd14711a5a3a981379e205277ac3aef4bf09b066d73729cede4dd4096d2f688428", 0xb1, 0x0, &(0x7f0000623000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r0, &(0x7f00003c0000-0x10)=[{&(0x7f00006dd000)="ef", 0x1}], 0x1) sendto$inet6(r0, &(0x7f0000b11000-0x5e)='>', 0x1, 0x0, &(0x7f0000477000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/16 17:38:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb4a90dc0d4bbdd330f3aa50c6a17a4cbe46f9a27f671d171c4a2c50f288493929c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f28b16e1198d", &(0x7f0000b0c000-0x4e)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e, [], [0x2]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000)=[], 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/02/16 17:38:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000023000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/02/16 17:38:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f00008c7000-0x23)="220000005e000721004f10f7e2ff0500020003000100000500000000e700ff02f155", 0x22) 2018/02/16 17:38:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b89000)=""/246) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) 2018/02/16 17:38:55 executing program 4: getrandom(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) 2018/02/16 17:38:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000b67000-0x4), 0x4) 2018/02/16 17:38:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001000-0x8)='./file0\x00', 0x0) creat(&(0x7f0000b59000-0x8)='./file1\x00', 0x0) rename(&(0x7f000017a000-0x8)='./file1\x00', &(0x7f000044b000-0x8)='./file0\x00') 2018/02/16 17:38:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x33, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff89, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/16 17:38:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x20) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006ec000)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000890000), 0x0, 0x0, &(0x7f0000654000-0x10)={0x2, 0xffffffffffffffff, @rand_addr=0x4}, 0x10) 2018/02/16 17:38:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005a1000-0x1)='8', 0x1, 0x0, &(0x7f00007bd000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd7000-0xc)={0x0, 0x4, 0x4000020030}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000b2b000)={0x0, 0x1}, 0x8) write(r0, &(0x7f0000cbe000-0x48)='v', 0x1) writev(r0, &(0x7f0000f80000-0x20)=[{&(0x7f0000514000-0xa7)="c5", 0x1}], 0x1) sendmsg(r0, &(0x7f0000ece000)={0x0, 0x0, &(0x7f00004a1000-0x60)=[{&(0x7f00007ac000-0x82)="dd", 0x1}], 0x1, &(0x7f00009e9000)=[]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000010000-0xc), 0xc) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0d000-0x4), 0x4) sendto$inet6(r0, &(0x7f0000db6000)="84b49a40a76c78f0769e4a395a78bbd1d97ece9e374f34257497eb3acfec4b7040bb4344183700596e81834a3af617296e8db16358ec9fb6f4c3c7f0e7947609533883b5d83e276617b5683f97a326e3f9315b6ef401c7f71e34055cd5a9fa8f2550c4d0b1901b79363cddd081b572b7ef2c178dc0d994a321ec103685fdb92bb2e74d37fd3e61116de31b6dd04377a7dd14711a5a3a981379e205277ac3aef4bf09b066d73729cede4dd4096d2f688428", 0xb1, 0x0, &(0x7f0000623000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r0, &(0x7f00003c0000-0x10)=[{&(0x7f00006dd000)="ef", 0x1}], 0x1) sendto$inet6(r0, &(0x7f0000b11000-0x5e)='>', 0x1, 0x0, &(0x7f0000477000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/16 17:38:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2717, &(0x7f0000028000)=""/1, &(0x7f00006ad000-0x4)=0x1) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000ef000-0xc)={0x0, 0x0}, &(0x7f00000bf000)=0xc) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00007d7000)={{0x0, r1}}) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000333000-0xe)='./file0/file0\x00', 0x0) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f56000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000d0b000)=0x6) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) close(r0) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000014c000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000993000)={0x0, 0x0, &(0x7f0000885000), &(0x7f0000a7b000-0xed)}) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cc8000)={0x0, 0x0, &(0x7f000080f000-0x10)={&(0x7f0000f98000-0xb0)={0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000ed1000)='/dev/dsp\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000500000-0x8)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000097000)={{0xa, 0x2, 0x1, @dev={0xfe, 0x80, [], 0x0, 0xe}, 0x2}, {0xa, 0x3, 0x20, @dev={0xfe, 0x80, [], 0x0}}}, 0x5c) r2 = socket$inet6(0xa, 0x3, 0x80000000000087) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@empty, 0xffffffffffffffff, 0x6c}, 0x0, @in=@loopback=0x7f000001}}, 0xe8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) llistxattr(&(0x7f000080d000)='./file0\x00', &(0x7f0000a33000-0x10)=""/16, 0x10) connect$inet6(r2, &(0x7f000088c000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000011000-0x50)=[{&(0x7f0000010000)="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", 0xfc0}], 0x1, 0x0) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000f8b000)={&(0x7f0000422000-0xe)=@l2, 0xe, &(0x7f0000ea7000-0x70)=[], 0x0, &(0x7f0000fc1000)=""/86, 0x56}, 0x0) recvfrom(r0, &(0x7f0000f00000-0x1000)=""/4096, 0x1000, 0x0, &(0x7f00003b9000)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) write(r0, &(0x7f0000b94000)="1f000000520007f2200094fef5060043fffffffe0047131ab4a500ffffb92b", 0x1f) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000912000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000aa8000)="010001a000000000b1", 0x9) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000c96000-0x3), 0x0, 0x8000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000e77000-0x1000)="18631ccc129cfe6da87b432660521bda2cfa08561e1daa4de85af3298223e83f37926ae556dd4a7a25f1a7b54208b3c12ae701b74daf6c7e9ec726930f1893953fc43d7c63050e359e8ada93a455fa265b578a5f92b7fc5698f55d554653f0ced1f85c3735bd21bca77d7d9ba3458472926ed49515628bd9c3b940a33cc1bc77ea3a584afc89539a7417791023ff8ca33799b374e760179e5b39b74997e096128c12a6dda762f27df4b0f2b39eb1736b5ae773592489f2f5fd86c1910d414735c23f2aa2053c06fd076b126a9e3318158fb971e3a179206e0cfa842510d062585f2ed0433bd6f6c826706e26b1a1c7ab8aba4278978279bef2a074af9240ad01beb0b7d6d24c06ca3b93a11ec2dde0cd556f7f661fda8d4b52095312c1ad6e538d10ae71ce64181ca2ac7ebff633c940fceb8191e431014cc1ad60cbaedb15832025573e0d44dd1132df1a4e4094be90f9d743074178b4e239470e82745feaa4577ff19c9295d4366509a8118d9c2d7f407974af1818796aecfb780aae793f4f16dad688abad30ca0965ddc9764321505d6ef60bc519dc03a465534b66af52e4e70669ae4506107dc830ef124521097e9fcdadcc39a8eb7b41fb60b74583c5abdf384467d20a97dba87da9ece6628fdc4a2f781ab0780df2e2cffb318bff3013fe4a5b7ba50c0ce804e8102d41a6856364ef62ca72b815672074595b734d76fab41e26af3ccf2d39f4d49d2d3d1b117881792f068a7cac9782f2c8cbcf11023685ac781ff70f96b16d7eb956fe31aea3af7974f8385cf2fe9152baa7c2556e8bb7030b0dd1f0d21503af85de38a85532a75dfa0ce136703def956ade894ff2d7f415a355a33fe65c5e7c6e6fd58f39169e60d50fba3ce3bc9058322a3575dc6412aa5ecb8d62939e5c94b0ba12613a6a3618912437182bce9130f8ece10ad861159bea5911d44f7a8d7ef8f7a160d6ae3b7165fb66425ca9732686356636efdb77fc05e28a5a6493f9bf9703fcc9f5571ab3ce59ca5ee35a94e821e6ada2da7916a37a74a30313820a5cdf1f3017a268acb2bf42dcbcaa6722bb31a70dd8b812760bcd092c65360a171227f80de6b8d1e127774b392fc52bc0b565ab6f8450d3b7ab1c3543917ab303955d66fee82791eff78f1a98177ea3acf2a4c926618a0dd180bcafce2f24196fff796c498900f945f97ba2904aafc4b5775e171ee5aa13e35f34cd58e700abd191b42dbb6a1d4847747bc330318b3865b18e301d44e3c6274dd2a374d25885680f18295efeb6d94f943b43fc8fae544cbc5f5e9528e45b8f8e579f6815295eaeab7f3980a09bd13858a22cd2c5b788c29c016d578b052e2d2c0ef7913a78c2b21b3713d293b62f54ecab1efb03c4518e71c9457c3c190c31f13b7a06fa28ecc071b29829cef338e80dae408d7f06b8e75da745cf83fb8a6e16600549ed3a729811cd77c8165758e023d706b218e0780678ca6d7bd291980a268f4a55d00a6ea969a14c0efe619b032fc6ccae50845c82fec6e8662ffb25dc4a733426a500828bbc1fe570acc5eefd334a2f68e497448dc85becb9c084b5186ca9b872be84a39853a59c32305d2c8d1365bf4a047e829e995c843fbda0a3f4bf9373d2c6e2f9b71f088d61cbe793409b450aff67d0ead723b7da7ecd896ddc5ba10d34cfa4b203d19b9707eb5a8cb98a9a38d5d95219f41989088973778fe7dcad466cb8221504300bd6fd90a2a48e033cc93474f6091be4466c89aff8c8dab3b838808ea220e63e2cdba7b7a65025c315739232c9b91db85e93a2022f08d3d367c014dcfa9437df5548a6a53237fbd312c747a696ad991e4734adb8f1ce54e505616117abda379d7cc636712aab4cd88059a8382a9f57ca4f4eefe878773f7ea46ad0c2d28eb8621ef7000997a8d89c8d4ff1d00c223dbd642cbe29bf3bfaca3c77949eeeaf57b5c068d3729266dc8fb7e2e737e94458fefe1420830415d7a948a850c4b88218fc005b6c664f909a84d92c8a50698feb5be92feeebd8b813fd4a143a248040e9518f00637fc7cf6757fd3157", 0x5b5, 0x0, &(0x7f0000bc9000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000163000)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1f) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005a1000-0x1)='8', 0x1, 0x0, &(0x7f00007bd000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd7000-0xc)={0x0, 0x4, 0x4000020030}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000b2b000)={0x0, 0x1}, 0x8) write(r0, &(0x7f0000cbe000-0x48)='v', 0x1) writev(r0, &(0x7f0000f80000-0x20)=[{&(0x7f0000514000-0xa7)="c5", 0x1}], 0x1) sendmsg(r0, &(0x7f0000ece000)={0x0, 0x0, &(0x7f00004a1000-0x60)=[{&(0x7f00007ac000-0x82)="dd", 0x1}], 0x1, &(0x7f00009e9000)=[]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000010000-0xc), 0xc) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0d000-0x4), 0x4) sendto$inet6(r0, &(0x7f0000db6000)="84b49a40a76c78f0769e4a395a78bbd1d97ece9e374f34257497eb3acfec4b7040bb4344183700596e81834a3af617296e8db16358ec9fb6f4c3c7f0e7947609533883b5d83e276617b5683f97a326e3f9315b6ef401c7f71e34055cd5a9fa8f2550c4d0b1901b79363cddd081b572b7ef2c178dc0d994a321ec103685fdb92bb2e74d37fd3e61116de31b6dd04377a7dd14711a5a3a981379e205277ac3aef4bf09b066d73729cede4dd4096d2f688428", 0xb1, 0x0, &(0x7f0000623000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r0, &(0x7f00003c0000-0x10)=[{&(0x7f00006dd000)="ef", 0x1}], 0x1) sendto$inet6(r0, &(0x7f0000b11000-0x5e)='>', 0x1, 0x0, &(0x7f0000477000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x8c) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), 0x10) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000c2e000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000390000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000001000-0x83), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000ff0000)='./file0\x00', 0x10000000007fe, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f000017a000-0x8)=[], &(0x7f000077a000)=[]) open(&(0x7f0000635000-0x8)='./file0\x00', 0x200, 0x0) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000-0x38)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000001000-0x58)={0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000014c000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000993000)={0x0, 0x0, &(0x7f0000885000), &(0x7f0000a7b000-0xed)}) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005a1000-0x1)='8', 0x1, 0x0, &(0x7f00007bd000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd7000-0xc)={0x0, 0x4, 0x4000020030}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000b2b000)={0x0, 0x1}, 0x8) write(r0, &(0x7f0000cbe000-0x48)='v', 0x1) writev(r0, &(0x7f0000f80000-0x20)=[{&(0x7f0000514000-0xa7)="c5", 0x1}], 0x1) sendmsg(r0, &(0x7f0000ece000)={0x0, 0x0, &(0x7f00004a1000-0x60)=[{&(0x7f00007ac000-0x82)="dd", 0x1}], 0x1, &(0x7f00009e9000)=[]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000010000-0xc), 0xc) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0d000-0x4), 0x4) sendto$inet6(r0, &(0x7f0000db6000)="84b49a40a76c78f0769e4a395a78bbd1d97ece9e374f34257497eb3acfec4b7040bb4344183700596e81834a3af617296e8db16358ec9fb6f4c3c7f0e7947609533883b5d83e276617b5683f97a326e3f9315b6ef401c7f71e34055cd5a9fa8f2550c4d0b1901b79363cddd081b572b7ef2c178dc0d994a321ec103685fdb92bb2e74d37fd3e61116de31b6dd04377a7dd14711a5a3a981379e205277ac3aef4bf09b066d73729cede4dd4096d2f688428", 0xb1, 0x0, &(0x7f0000623000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r0, &(0x7f00003c0000-0x10)=[{&(0x7f00006dd000)="ef", 0x1}], 0x1) sendto$inet6(r0, &(0x7f0000b11000-0x5e)='>', 0x1, 0x0, &(0x7f0000477000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f56000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000d0b000)=0x6) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) close(r0) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000-0x38)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000001000-0x58)={0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000f8b000)={&(0x7f0000422000-0xe)=@l2, 0xe, &(0x7f0000ea7000-0x70)=[], 0x0, &(0x7f0000fc1000)=""/86, 0x56}, 0x0) recvfrom(r0, &(0x7f0000f00000-0x1000)=""/4096, 0x1000, 0x0, &(0x7f00003b9000)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) write(r0, &(0x7f0000b94000)="1f000000520007f2200094fef5060043fffffffe0047131ab4a500ffffb92b", 0x1f) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00001a2000-0x8)=0xc000000) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000385000-0x9)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082f000-0xf6)=""/246) pwritev(r0, &(0x7f000056f000)=[{&(0x7f0000b20000)="80fdb100196f", 0x6}], 0x1, 0x0) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000-0x38)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000001000-0x58)={0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/16 17:38:56 executing program 3: pkey_mprotect(&(0x7f0000671000/0x4000)=nil, 0xffffffffffffff6a, 0x0, 0xffffffffffffffff) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000002a000)=[], 0x0, 0x0, &(0x7f0000005000)}) bpf$MAP_CREATE(0x0, &(0x7f0000004000-0x14), 0x1000001af) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000-0x38)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000001000-0x58)={0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000014c000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000993000)={0x0, 0x0, &(0x7f0000885000), &(0x7f0000a7b000-0xed)}) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f56000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000d0b000)=0x6) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) close(r0) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup3(r0, r1, 0x0) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000014c000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000993000)={0x0, 0x0, &(0x7f0000885000), &(0x7f0000a7b000-0xed)}) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000532000)=0x19) ioctl$TCFLSH(r1, 0x40085500, 0x0) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x1f12, 0x6896f02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/16 17:38:56 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0x3d000)=nil, 0x3d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000030000)=@security={'security\x00', 0xe, 0x4, 0x460, 0xffffffff, 0x1c0, 0xf0, 0x0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, &(0x7f0000030000), {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @common='vlan0\x00', @generic="2836b8905af3306736097eda14980488"}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @empty, [], [], @generic="f983497b1a6896682a00ad175f795b1a", @common='ip6gretap0\x00'}, 0x0, 0xa8, 0x1d0, 0x0, {}, []}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:udev_var_run_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c0) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f56000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000d0b000)=0x6) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) close(r0) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000f8b000)={&(0x7f0000422000-0xe)=@l2, 0xe, &(0x7f0000ea7000-0x70)=[], 0x0, &(0x7f0000fc1000)=""/86, 0x56}, 0x0) recvfrom(r0, &(0x7f0000f00000-0x1000)=""/4096, 0x1000, 0x0, &(0x7f00003b9000)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) write(r0, &(0x7f0000b94000)="1f000000520007f2200094fef5060043fffffffe0047131ab4a500ffffb92b", 0x1f) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f00007e1000)={@random="cd390b081bf2", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ff06ff", 0x30, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "5567ef", 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, []}}}}}}}, 0x0) [ 41.178658] xt_SECMARK: invalid mode: 0 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001d5000-0x8)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000d36000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x0) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000571000-0xb), &(0x7f0000000000)=0xb) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$netrom(r0, &(0x7f000098c000)=@ax25={0x3, {"1e1b275a10c172"}}, 0x10) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x1f12, 0x6896f02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001d5000-0x8)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000d36000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x0) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000016000)=@security={'security\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f0000023000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@broadcast=0xffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @common='bpq0\x00', @common='dummy0\x00'}, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x0, 0x0, 'fsm\x00', "09000400000000000000550000f16b122d13cba47a9a0da863016dbdede79f4e9d00000000000000202cae35d82398feecd401f75ce081e5c5d30692a6af144364cec15edde6914d70c90ab3a3cfe07373af9386c484e6edcb0194ee17bee036e3571f660c34548502a4b8f3c59861ec63a0daf2b70698fb3907a2b7a4999364", 0xffffff80}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="c6b6bc295dc0"}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x70}}}}, 0x3f0) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00005d7000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f000099a000-0x50)=@newlink={0x24, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0x1a, []}]}, 0x24}, 0x1}, 0x0) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001d5000-0x8)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000d36000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x0) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000f68000-0x4), &(0x7f0000001000-0x4)=0x4) [ 41.208816] xt_SECMARK: invalid mode: 0 2018/02/16 17:38:56 executing program 3: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000649000)={0xfc, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) openat$hwrng(0xffffffffffffff9c, &(0x7f0000b3b000)='/dev/hwrng\x00', 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000a6a000-0x18)=[], 0x0, 0x38a) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001d5000-0x8)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000d36000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x0) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x1f12, 0x6896f02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0x61, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x40, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0xc, 0x16, []}]}, 0x40}, 0x1}, 0x0) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000f8b000)={&(0x7f0000422000-0xe)=@l2, 0xe, &(0x7f0000ea7000-0x70)=[], 0x0, &(0x7f0000fc1000)=""/86, 0x56}, 0x0) recvfrom(r0, &(0x7f0000f00000-0x1000)=""/4096, 0x1000, 0x0, &(0x7f00003b9000)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) write(r0, &(0x7f0000b94000)="1f000000520007f2200094fef5060043fffffffe0047131ab4a500ffffb92b", 0x1f) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000afe000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binder(&(0x7f0000785000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f00006ed000), 0xed1c}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f0000cf6000)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000c8a000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000011c000-0x1c)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0xa0}, 0x1}, 0x0) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x1f12, 0x6896f02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000911000)='./file0\x00', 0x0) socketpair(0x1d, 0x7, 0x3, &(0x7f0000b5c000-0x8)) recvmsg(0xffffffffffffff9c, &(0x7f0000f88000)={&(0x7f0000257000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0xffffffffffffffe9, &(0x7f0000e18000-0x20)=[{&(0x7f000036c000)=""/133, 0x85}, {&(0x7f0000beb000)=""/4096, 0x1000}], 0x2, &(0x7f0000ad1000)=""/74, 0x204, 0x1}, 0x12000) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000875000)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000283000-0x10)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d10000-0xb)='/dev/audio\x00', 0x802, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000e66000)=[{&(0x7f0000095000)=""/245, 0xf5}], 0x1) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f17000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080045430, &(0x7f0000000000)) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ae000)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000162000-0x30), {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback={0x0, 0x1}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) syz_emit_ethernet(0x32, &(0x7f0000e5e000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f000000b000-0x10)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f000000a000-0x10)={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) r1 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00003ad000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0x190, 0x98, 0x190, 0x190, 0x98, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, &(0x7f00000b0000-0x60), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x450) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000012000)="f2", 0x1}], 0x1, &(0x7f000001e000-0x178)=[]}, 0x0) sendmsg(r0, &(0x7f000000c000)={&(0x7f0000013000)=@nfc={0x27}, 0x10, &(0x7f0000003000-0x20)=[{&(0x7f0000010000-0x1000)="a8", 0x1}], 0x1, &(0x7f0000013000)=[]}, 0x481) [ 41.358427] can: request_module (can-proto-3) failed. 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1, {0x20}}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) syz_emit_ethernet(0x66, &(0x7f000090f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x30, 0x400000000036, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, '`9%', 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ae000)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000162000-0x30), {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback={0x0, 0x1}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) syz_emit_ethernet(0x32, &(0x7f0000e5e000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000675000)=&(0x7f000098a000-0x1)) ioctl$KVM_CHECK_EXTENSION(r0, 0x4008af04, 0x0) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000403000-0x8d)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c9000-0xa8), 0xfffffffffffffeee, 0x0, &(0x7f0000352000-0x10)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) recvmsg(r1, &(0x7f000028e000-0x38)={&(0x7f00008af000-0x9)=@rc, 0x9, &(0x7f0000b8e000-0x70)=[{&(0x7f0000ac7000-0x1000)=""/4096, 0x1000}], 0x1, &(0x7f0000370000)=""/200, 0xc8}, 0x0) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000009000)=""/170, 0xaa, 0x0, &(0x7f0000004000-0xe)=@l2={0x1f}, 0x0) recvmsg(r0, &(0x7f0000015000)={&(0x7f0000015000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @local}}}, 0x32, &(0x7f0000016000-0x10)=[], 0x0, &(0x7f0000016000-0x13)=""/19, 0x13}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0x268, &(0x7f000000d000+0x379)={&(0x7f000000a000-0x41)={0x14, 0x1a, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000692000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffffffff914a, 0x0, [], 0xffffffffffffffff}]}) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d10000-0xb)='/dev/audio\x00', 0x802, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000e66000)=[{&(0x7f0000095000)=""/245, 0xf5}], 0x1) [ 41.390402] can: request_module (can-proto-3) failed. 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1, {0x20}}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) syz_emit_ethernet(0x66, &(0x7f000090f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x30, 0x400000000036, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, '`9%', 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f000055a000-0x8), 0x8) unshare(0x20000400) getdents64(r0, &(0x7f000067f000-0x6c)=""/108, 0x6c) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ae000)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000162000-0x30), {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback={0x0, 0x1}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) syz_emit_ethernet(0x32, &(0x7f0000e5e000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d10000-0xb)='/dev/audio\x00', 0x802, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000e66000)=[{&(0x7f0000095000)=""/245, 0xf5}], 0x1) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1, {0x20}}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) syz_emit_ethernet(0x66, &(0x7f000090f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x30, 0x400000000036, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, '`9%', 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) [ 41.432408] xt_connbytes: Forcing CT accounting to be enabled 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00003ae000)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000162000-0x30), {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback={0x0, 0x1}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) syz_emit_ethernet(0x32, &(0x7f0000e5e000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1, {0x20}}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) syz_emit_ethernet(0x66, &(0x7f000090f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x30, 0x400000000036, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, '`9%', 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000461000/0x4000)=nil, 0x4000, 0x0, 0x974, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ed000-0x8), 0x2, 0x3) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000002000-0x28)={@common='lo\x00', @ifru_map}) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0x72, &(0x7f000000d000+0x379)={&(0x7f0000013000-0x14)={0x14, 0x12, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) r1 = syz_open_dev$tun(&(0x7f00004d2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f000065e000)={@syzn={0x73, 0x79, 0x7a}, @ifru_addrs=@rc={0x1f}}) recvmsg(r0, &(0x7f000001a000)={0x0, 0x0, &(0x7f0000012000-0x90)=[], 0x0, &(0x7f0000003000-0x13)=""/87, 0x57}, 0x0) 2018/02/16 17:38:56 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000373000), 0x2d7) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000692000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffffffff914a, 0x0, [], 0xffffffffffffffff}]}) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d10000-0xb)='/dev/audio\x00', 0x802, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000e66000)=[{&(0x7f0000095000)=""/245, 0xf5}], 0x1) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af7000-0xa)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000b61000)=[{&(0x7f0000e7b000-0xc2)=""/194, 0xc2}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000004000-0x8)) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000ef2000)={@empty, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0xfffffffffffffffd}, 0xc) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4e000-0xf)='/dev/sequencer\x00', 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f000074c000-0x10)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getcwd(&(0x7f000046a000-0x69)=""/105, 0x69) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000001a000-0xc)) ioctl$TCSETA(r0, 0x5402, &(0x7f000032d000-0x14)) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000003, 0x0, 0x0, @tick, {}, {}, @time=@tick}], 0x30) 2018/02/16 17:38:56 executing program 0: prctl$void(0x24) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000e26000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af20, &(0x7f0000cb5000-0x8)={0x0, r1}) close(r0) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000bfc000-0xa)='blacklist\x00', &(0x7f0000e0e000)={0x73, 0x79, 0x7a}, &(0x7f0000308000-0x82), 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xa5}]}, &(0x7f00005fd000)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000701000-0x48)={0x1, 0x3, &(0x7f000051a000-0x58)=@framed={{0x18}, [], {0x95}}, &(0x7f0000c43000)='GPL\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0xf7e000)=nil, 0xf7e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000347000-0x2c)={0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000347000-0x38)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x44}], {0x95}}, &(0x7f0000f6c000-0x5)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a8000-0xfb)=""/251}, 0x48) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b2b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001000-0x38)={&(0x7f0000721000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000008000)=[], 0x0, &(0x7f00000a2000)=[@cred={0x20, 0x1, 0x2}], 0x20}, 0x0) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000692000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffffffff914a, 0x0, [], 0xffffffffffffffff}]}) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000310000)={0x1, 0x3, 0xeff, 0x7, 0x0, 0x0, 0x0, [0xa]}, 0x2c) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmsg(r0, &(0x7f0000940000)={&(0x7f00000c9000-0xe)=@l2, 0xe, &(0x7f0000620000)=[], 0x0, &(0x7f00000cb000)=""/190, 0xbe}, 0x2102) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000e26000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af20, &(0x7f0000cb5000-0x8)={0x0, r1}) close(r0) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xa5}]}, &(0x7f00005fd000)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000701000-0x48)={0x1, 0x3, &(0x7f000051a000-0x58)=@framed={{0x18}, [], {0x95}}, &(0x7f0000c43000)='GPL\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f0000cb9000-0x84)=""/132, 0x84, 0x0, &(0x7f0000f7b000)={0x0, 0x989680}) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00006c4000-0x4)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00007d3000)={0xffffffffffffffff, 0xffffffffffffffff}) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f73000-0x4)=0xb6d, 0x4) sendto$inet6(r0, &(0x7f0000f73000-0x31), 0xffffffffffffff9f, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000692000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffffffff914a, 0x0, [], 0xffffffffffffffff}]}) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xa5}]}, &(0x7f00005fd000)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000701000-0x48)={0x1, 0x3, &(0x7f000051a000-0x58)=@framed={{0x18}, [], {0x95}}, &(0x7f0000c43000)='GPL\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000e26000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af20, &(0x7f0000cb5000-0x8)={0x0, r1}) close(r0) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000ff7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x26, &(0x7f0000004000-0x20)={0x0, 0x0, 0x0, 0x0, r1}) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000aac000/0x1000)=nil, 0x1000, 0x8002, &(0x7f0000001000-0x8), 0x3, 0x0) 2018/02/16 17:38:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000dac000-0x50)=[{r0}], 0x1, &(0x7f0000ae8000-0x10)={0x0, 0x989680}, &(0x7f00009f7000), 0x8) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f73000-0x4)=0xb6d, 0x4) sendto$inet6(r0, &(0x7f0000f73000-0x31), 0xffffffffffffff9f, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000006000)="74e5bccaed3245ca989da4395c9305ff1e7c22ab849ad2ff1dd9f2ad698d32cab746f2ea25768e6b", 0x28, 0x800, &(0x7f00006b0000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000005000)) 2018/02/16 17:38:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000e26000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af20, &(0x7f0000cb5000-0x8)={0x0, r1}) close(r0) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f73000-0x4)=0xb6d, 0x4) sendto$inet6(r0, &(0x7f0000f73000-0x31), 0xffffffffffffff9f, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/16 17:38:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000006000)="74e5bccaed3245ca989da4395c9305ff1e7c22ab849ad2ff1dd9f2ad698d32cab746f2ea25768e6b", 0x28, 0x800, &(0x7f00006b0000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/16 17:38:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000b9e000-0x60)={0x0, 0x1a, 0x0, @tid}, &(0x7f0000a7e000)) timer_settime(0x0, 0x0, &(0x7f0000052000)={{0x0, 0x3}, {0x7ff, 0x4}}, &(0x7f00002a4000-0x10)) timer_settime(0x0, 0x0, &(0x7f000005c000-0x20), &(0x7f0000046000)) 2018/02/16 17:38:56 executing program 2: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000013000)={&(0x7f0000012000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x14, &(0x7f0000002000)=[{&(0x7f0000008000)=""/4096, 0x109c}, {&(0x7f0000013000)=""/92, 0x2d}], 0x2, &(0x7f0000013000)=""/161, 0xfffffffffffffee6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x7, 0x0, 0x5, 0x1}], {0x95}}, &(0x7f0000019000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000023000-0xc3)=""/195}, 0x14) 2018/02/16 17:38:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00006ad000)) 2018/02/16 17:38:56 executing program 6: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt(r0, 0x84, 0x8000000000001e, &(0x7f0000000000), 0x0) 2018/02/16 17:38:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xa5}]}, &(0x7f00005fd000)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000701000-0x48)={0x1, 0x3, &(0x7f000051a000-0x58)=@framed={{0x18}, [], {0x95}}, &(0x7f0000c43000)='GPL\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) 2018/02/16 17:38:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f73000-0x4)=0xb6d, 0x4) sendto$inet6(r0, &(0x7f0000f73000-0x31), 0xffffffffffffff9f, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/16 17:38:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000089f000), 0x0) 2018/02/16 17:38:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000aa8000-0x8)='keyring\x00', &(0x7f00006c8000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000181000)='asymmetric\x00', &(0x7f0000ac1000)="29024076626f786e6574305b73656c662a292c6d643573756d5c5e00") 2018/02/16 17:38:57 executing program 2: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x81204101, &(0x7f0000006000-0x1f5)) 2018/02/16 17:38:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000c34000), 0x4) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000f68000), &(0x7f0000b53000-0x4)=0x4) 2018/02/16 17:38:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') pread64(r0, &(0x7f00008c2000-0x89), 0x0, 0x80040) 2018/02/16 17:38:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000006000)="74e5bccaed3245ca989da4395c9305ff1e7c22ab849ad2ff1dd9f2ad698d32cab746f2ea25768e6b", 0x28, 0x800, &(0x7f00006b0000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/16 17:38:57 executing program 5: mmap(&(0x7f0000000000/0x44e000)=nil, 0x44e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000044c000)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2c) 2018/02/16 17:38:57 executing program 2: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x81204101, &(0x7f0000006000-0x1f5)) 2018/02/16 17:38:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c37000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000e4b000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utimes(&(0x7f00007f0000-0x8)='./file0\x00', &(0x7f0000594000)={{0x77359400}, {0x0, 0x2710}}) chmod(&(0x7f0000c2b000-0x8)='./file0\x00', 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000c2a000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/16 17:38:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00006ad000)) 2018/02/16 17:38:57 executing program 5: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000011000)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x148, 0x148, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000012000-0x40), {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={0x48, 'dst\x00'}, @common=@srh={0x30, 'srh\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @loopback={0x0, 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="6b90eab30fde57af8487f11ae5a24467"}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {},