[....] Starting enhanced syslogd: rsyslogd[ 16.095858] audit: type=1400 audit(1518264008.418:5): avc: denied { syslog } for pid=4008 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.187752] audit: type=1400 audit(1518264010.510:6): avc: denied { map } for pid=4147 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. 2018/02/10 12:00:16 fuzzer started [ 24.481443] audit: type=1400 audit(1518264016.804:7): avc: denied { map } for pid=4158 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/10 12:00:17 dialing manager at 10.128.0.26:35853 [ 27.636538] can: request_module (can-proto-0) failed. [ 27.645586] can: request_module (can-proto-0) failed. 2018/02/10 12:00:20 kcov=true, comps=true [ 28.160877] audit: type=1400 audit(1518264020.483:8): avc: denied { map } for pid=4158 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=8312 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/10 12:00:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000a09000)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) chroot(&(0x7f0000b57000)='./file0\x00') 2018/02/10 12:00:21 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) 2018/02/10 12:00:21 executing program 0: fstatfs(0xffffffffffffffff, &(0x7f0000871000-0xad)=""/173) 2018/02/10 12:00:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000167000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/10 12:00:21 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0001]}, &(0x7f0000007000-0x4)=0x108) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f000000a000-0x84)=""/132, 0x84}, {&(0x7f000000a000-0xfc)=""/252, 0xfc}, {&(0x7f0000009000)=""/155, 0x9b}, {&(0x7f0000009000)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0x66}], 0x5, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 2018/02/10 12:00:21 executing program 4: mmap(&(0x7f0000000000/0xfdf000)=nil, 0xfdf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000834000)='I', 0x0) pwrite64(r0, &(0x7f00000a9000)="da1ed4c6dded1b78fc32304d94d0495eb57495f26bd5e020039135e969d62de70774035020e85d75ca98aa392bd9112c8139f55a2a9aee87aa62b0c9a368a1866279463154ba1d39b42c188aa87a1db69f69fbfd67731bfaf62b639f911c4fe5aa163574d70d3127cad9d17ea2b888dfd9b4338d606825114f0aec9522b8eb85", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000005, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000734000)='./file0\x00') creat(&(0x7f00007d4000-0x8)='./file0\x00', 0x0) open(&(0x7f000010a000)='./file0\x00', 0x0, 0x0) 2018/02/10 12:00:21 executing program 5: mmap(&(0x7f0000000000/0x2eb000)=nil, 0x2eb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002e9000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001000)="a23364fd", 0x4) sendmsg$alg(r1, &(0x7f0000166000)={0x0, 0x0, &(0x7f000019f000)=[], 0x0, &(0x7f0000283000-0x48)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write(r1, &(0x7f00001eb000-0x84)="d33e3ac1792bbce4d7f62d063a492bc83d59408649b981c2d0e252ec8e311c2c", 0x20) recvmsg(r1, &(0x7f0000015000-0x38)={0x0, 0x0, &(0x7f0000095000)=[{&(0x7f00002e9000-0xe)=""/14, 0xe}, {&(0x7f00000bf000)=""/212, 0xd4}], 0x2, &(0x7f00002e8000)=""/79, 0x4f}, 0x0) 2018/02/10 12:00:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000004000)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x0, 0x130, 0xffffffff, 0xffffffff, 0x1d0, 0x1d0, 0x1d0, 0xffffffff, 0x4, &(0x7f0000003000-0x40), {[{{@ip={@multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="2e0100000000000000fe83249a9d803c", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@broadcast=0xffffffff, @broadcast=0xffffffff, 0x0, 0x0, @generic="df0144a2dc33d2fb025a4b45d100034b", @common='ip6tnl0\x00'}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c8) connect$inet(r0, &(0x7f0000004000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) [ 29.534191] audit: type=1400 audit(1518264021.856:9): avc: denied { map } for pid=4158 comm="syz-fuzzer" path="/root/syzkaller-shm095786324" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 29.577184] audit: type=1400 audit(1518264021.899:10): avc: denied { sys_admin } for pid=4201 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 29.617581] IPVS: ftp: loaded support on port[0] = 21 [ 29.676098] audit: type=1400 audit(1518264021.997:11): avc: denied { net_admin } for pid=4206 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 29.680356] IPVS: ftp: loaded support on port[0] = 21 [ 29.738856] IPVS: ftp: loaded support on port[0] = 21 [ 29.783668] IPVS: ftp: loaded support on port[0] = 21 [ 29.850918] IPVS: ftp: loaded support on port[0] = 21 [ 29.921512] IPVS: ftp: loaded support on port[0] = 21 [ 30.044294] IPVS: ftp: loaded support on port[0] = 21 [ 30.167907] IPVS: ftp: loaded support on port[0] = 21 [ 30.881578] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.010728] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.025879] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.266280] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.336132] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.407802] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.639410] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.692758] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.401792] audit: type=1400 audit(1518264025.724:12): avc: denied { sys_chroot } for pid=4206 comm="syz-executor2" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/10 12:00:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00003f5000-0x2f8)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f000059e000), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x80000001}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2f8) sendmsg(r0, &(0x7f00009f2000-0x38)={&(0x7f0000db5000)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00007de000-0x70)=[]}, 0x0) 2018/02/10 12:00:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f0000044000)='ns/mnt\x00') setns(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, &(0x7f0000e69000), &(0x7f00009c5000-0x4), &(0x7f00001cc000), &(0x7f00004fc000)) 2018/02/10 12:00:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = dup(r0) munmap(&(0x7f0000011000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000001000), 0x8, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x1000, 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000004000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/10 12:00:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f0000044000)='ns/mnt\x00') setns(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, &(0x7f0000e69000), &(0x7f00009c5000-0x4), &(0x7f00001cc000), &(0x7f00004fc000)) 2018/02/10 12:00:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00007b1000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x24, 0xd, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x10, 0x1, [@typed={0x6, 0x0, @fd=0xffffffffffffffff}]}]}, 0x24}, 0x1}, 0x0) 2018/02/10 12:00:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, {0x26, 0x0, 0x2, 0x3, 0x0, 0x3fff, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0xa0}, 0x1}, 0x0) [ 33.659239] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) [ 33.701542] audit: type=1400 audit(1518264026.024:13): avc: denied { create } for pid=5193 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 33.725864] audit: type=1400 audit(1518264026.043:14): avc: denied { dac_read_search } for pid=4207 comm="syz-executor7" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.759113] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 33.808699] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 33.865967] audit: type=1400 audit(1518264026.081:15): avc: denied { write } for pid=5193 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 33.997232] device eql entered promiscuous mode [ 33.999149] audit: type=1400 audit(1518264026.321:16): avc: denied { map } for pid=5255 comm="syz-executor4" path=2F6D656D66643A49202864656C6574656429 dev="tmpfs" ino=13925 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 2018/02/10 12:00:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000e9f000-0x70)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ff3000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000c92000-0x38)={&(0x7f00008a7000-0xc)={0x10}, 0xc, &(0x7f00007be000-0x10)={&(0x7f0000c13000)=@newlink={0x24, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_IFALIASn={0x4, 0x14}]}, 0x24}, 0x1}, 0x0) 2018/02/10 12:00:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, {0x26, 0x0, 0x2, 0x3, 0x0, 0x3fff, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0xa0}, 0x1}, 0x0) 2018/02/10 12:00:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000abd000)={0x0, 0x0, 0x2}) bind$inet(r0, &(0x7f0000847000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @rand_addr=0x2}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000dbe000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000540000-0x8)=0x3f) fcntl$setown(r2, 0x8, r1) readv(r2, &(0x7f0000cf8000)=[{&(0x7f0000fb7000-0x64)=""/1, 0x1}], 0x1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) tkill(r1, 0x16) 2018/02/10 12:00:26 executing program 0: mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f000000e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f000002c000)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x100, 0x100, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f000001f000-0x40), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={0x28, 'hl\x00'}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f000001a000-0x60)=[], 0x1f2, &(0x7f000001f000-0xf8)=[]}, 0x0) 2018/02/10 12:00:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000ef1000-0x38)={&(0x7f000000f000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000008000-0x10)={&(0x7f0000ab8000)={0x18, 0x23, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x100000014}, [@nested={0x4, 0x7, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 12:00:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f09000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) 2018/02/10 12:00:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00008d6000), 0x4) 2018/02/10 12:00:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000fdf000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000fbb000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000245000)={{}, {0xe}}) [ 34.044630] audit: type=1400 audit(1518264026.366:17): avc: denied { dac_override } for pid=5255 comm="syz-executor4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.111701] audit: type=1400 audit(1518264026.434:18): avc: denied { create } for pid=5271 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/10 12:00:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) [ 34.154842] [ 34.156624] ============================= [ 34.160836] WARNING: suspicious RCU usage [ 34.165057] 4.15.0+ #307 Not tainted [ 34.168832] ----------------------------- [ 34.173060] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! [ 34.182395] [ 34.182395] other info that might help us debug this: [ 34.182395] [ 34.190589] [ 34.190589] rcu_scheduler_active = 2, debug_locks = 1 [ 34.197309] 1 lock held by syz-executor2/5276: 2018/02/10 12:00:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a74000-0x10)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f0000fa5000)=[{0x5b93, 0x0, 0xffffffffffffffa0, 0x0, @time, {}, {}, @connect}], 0x30) 2018/02/10 12:00:26 executing program 3: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000003000-0x398)=@raw={'raw\x00', 0x9, 0x4, 0x3ce, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x7fffffe, 0xffffffff, 0x0, 0xffffffff, 0x4, &(0x7f0000002000), {[{{@ip={@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="10ad22fa72be7d01dd9c88e65e811834", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd8, 0x0, {}, []}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x70}}}}, 0x370) 2018/02/10 12:00:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 12:00:26 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000009000-0x1)}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f000000b000)=[]}}}], 0x0, 0x0, &(0x7f0000450000)}) [ 34.201924] #0: (rcu_read_lock){....}, at: [<00000000ab88f78b>] __rds_conn_create+0xe46/0x1b50 [ 34.210991] [ 34.210991] stack backtrace: [ 34.215542] CPU: 0 PID: 5276 Comm: syz-executor2 Not tainted 4.15.0+ #307 [ 34.222462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.231814] Call Trace: [ 34.234414] dump_stack+0x194/0x257 [ 34.238058] ? arch_local_irq_restore+0x53/0x53 [ 34.242783] lockdep_rcu_suspicious+0x123/0x170 [ 34.247468] ___might_sleep+0x385/0x470 2018/02/10 12:00:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) 2018/02/10 12:00:26 executing program 6: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000041000)="6500000005", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000-0xd)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000042000-0x8c)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001000-0x1b0)=[{0x0, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x32, @time}) [ 34.251449] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 34.257331] ? debug_mutex_init+0x1c/0x60 [ 34.261491] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.266529] __might_sleep+0x95/0x190 [ 34.270352] kmem_cache_alloc+0x2a2/0x760 [ 34.274511] ? lock_acquire+0x1d5/0x580 [ 34.277083] binder: 5299:5300 ERROR: BC_REGISTER_LOOPER called without request [ 34.278485] ? __rds_conn_create+0xe46/0x1b50 [ 34.278535] rds_tcp_conn_alloc+0xa7/0x4e0 [ 34.278567] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 34.285969] binder: 5300 RLIMIT_NICE not set 2018/02/10 12:00:26 executing program 0: mmap(&(0x7f0000000000/0xf6a000)=nil, 0xf6a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x38, &(0x7f0000966000), &(0x7f000079b000-0x4)) [ 34.290429] ? rds_cmsg_atomic+0xff0/0xff0 [ 34.290452] ? __lockdep_init_map+0xe4/0x650 [ 34.307754] binder: 5300 RLIMIT_NICE not set [ 34.312039] ? rds_cmsg_atomic+0xff0/0xff0 [ 34.312067] __rds_conn_create+0x112f/0x1b50 [ 34.312155] ? rds_conn_drop+0xb0/0xb0 [ 34.322223] binder: 5299:5305 got reply transaction with bad transaction stack, transaction 2 has target 5299:5300 [ 34.325183] ? __raw_spin_lock_init+0x1c/0x100 [ 34.325208] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.325246] ? __lockdep_init_map+0xe4/0x650 [ 34.329148] binder: 5299:5305 transaction failed 29201/-71, size 0-0 line 2772 [ 34.339608] ? lockdep_init_map+0x9/0x10 [ 34.339622] ? __init_waitqueue_head+0x97/0x140 [ 34.339641] ? init_wait_entry+0x1b0/0x1b0 [ 34.373326] binder: release 5299:5300 transaction 2 in, still active [ 34.373850] ? lockdep_init_map+0x9/0x10 [ 34.373879] ? rds_message_alloc+0x28c/0x330 [ 34.380475] binder: send failed reply for transaction 2 to 5299:5305 [ 34.384437] ? rds_message_next_extension+0x210/0x210 [ 34.384447] ? trace_hardirqs_on+0xd/0x10 [ 34.384477] ? _raw_spin_unlock_bh+0x30/0x40 [ 34.388904] binder: undelivered TRANSACTION_COMPLETE [ 34.395356] ? __release_sock+0x360/0x360 [ 34.395364] ? lock_sock_nested+0x91/0x110 [ 34.395398] rds_conn_create_outgoing+0x3f/0x50 [ 34.400583] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.404713] rds_sendmsg+0xda3/0x2390 [ 34.409101] binder: undelivered TRANSACTION_ERROR: 29189 [ 34.414165] ? avc_has_perm+0x43e/0x680 [ 34.414235] ? rds_send_drop_to+0x19d0/0x19d0 [ 34.450172] ? iterate_fd+0x3f0/0x3f0 [ 34.453963] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.458973] ? find_held_lock+0x35/0x1d0 [ 34.463050] ? sock_has_perm+0x2a4/0x420 [ 34.467098] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 34.472440] ? lock_release+0xa02/0xa40 [ 34.476407] ? __check_object_size+0x8b/0x530 [ 34.480902] ? __might_sleep+0x95/0x190 [ 34.484870] ? selinux_socket_sendmsg+0x36/0x40 [ 34.489523] ? security_socket_sendmsg+0x89/0xb0 [ 34.494262] ? rds_send_drop_to+0x19d0/0x19d0 [ 34.498746] sock_sendmsg+0xca/0x110 [ 34.502449] SYSC_sendto+0x361/0x5c0 [ 34.506156] ? SYSC_connect+0x4a0/0x4a0 [ 34.510146] ? schedule+0xf5/0x430 [ 34.513665] ? SYSC_bind+0x290/0x410 [ 34.517411] ? exit_to_usermode_loop+0x8c/0x2f0 [ 34.522073] ? trace_hardirqs_off+0xd/0x10 [ 34.526288] ? exit_to_usermode_loop+0x198/0x2f0 [ 34.531037] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 34.536564] SyS_sendto+0x40/0x50 [ 34.539997] ? SyS_getpeername+0x30/0x30 [ 34.544050] do_syscall_64+0x282/0x940 [ 34.547913] ? __do_page_fault+0xc90/0xc90 [ 34.552131] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 34.557653] ? syscall_return_slowpath+0x550/0x550 [ 34.562567] ? syscall_return_slowpath+0x2ac/0x550 [ 34.567490] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 34.572845] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.577684] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 34.582850] RIP: 0033:0x453a59 [ 34.586022] RSP: 002b:00007fc49b6c1c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 34.593711] RAX: ffffffffffffffda RBX: 00007fc49b6c26d4 RCX: 0000000000453a59 [ 34.600960] RDX: 0000000000000000 RSI: 0000000020fc2000 RDI: 0000000000000014 [ 34.608207] RBP: 000000000071bea0 R08: 000000002069affb R09: 0000000000000010 [ 34.615454] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 34.622700] R13: 00000000000004b9 R14: 00000000006f71f8 R15: 0000000000000000 [ 34.631642] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 34.639151] in_atomic(): 1, irqs_disabled(): 0, pid: 5276, name: syz-executor2 [ 34.646573] 1 lock held by syz-executor2/5276: [ 34.647100] binder: 5299:5300 ERROR: BC_REGISTER_LOOPER called without request [ 34.651182] #0: (rcu_read_lock){....}, at: [<00000000ab88f78b>] __rds_conn_create+0xe46/0x1b50 [ 34.658787] binder: 5300 RLIMIT_NICE not set [ 34.667509] CPU: 0 PID: 5276 Comm: syz-executor2 Not tainted 4.15.0+ #307 [ 34.672715] binder: 5300 RLIMIT_NICE not set [ 34.678788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.678794] Call Trace: [ 34.678813] dump_stack+0x194/0x257 [ 34.678842] ? arch_local_irq_restore+0x53/0x53 [ 34.678861] ? print_lock+0x9f/0xa2 [ 34.678875] ? lockdep_print_held_locks+0xc4/0x130 [ 34.696908] binder: release 5299:5305 transaction 5 out, still active [ 34.698815] ___might_sleep+0x2b2/0x470 [ 34.698832] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 34.698844] ? debug_mutex_init+0x1c/0x60 [ 34.703501] binder: undelivered TRANSACTION_COMPLETE [ 34.707099] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.707133] __might_sleep+0x95/0x190 [ 34.716112] binder: release 5299:5300 transaction 5 in, still active [ 34.718603] kmem_cache_alloc+0x2a2/0x760 [ 34.718618] ? lock_acquire+0x1d5/0x580 [ 34.718631] ? __rds_conn_create+0xe46/0x1b50 [ 34.718673] rds_tcp_conn_alloc+0xa7/0x4e0 [ 34.722611] binder: send failed reply for transaction 5, target dead [ 34.728480] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 34.780463] ? rds_cmsg_atomic+0xff0/0xff0 [ 34.784684] ? __lockdep_init_map+0xe4/0x650 [ 34.789074] ? rds_cmsg_atomic+0xff0/0xff0 [ 34.793298] __rds_conn_create+0x112f/0x1b50 [ 34.797737] ? rds_conn_drop+0xb0/0xb0 [ 34.801632] ? __raw_spin_lock_init+0x1c/0x100 [ 34.806200] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.811214] ? __lockdep_init_map+0xe4/0x650 [ 34.815612] ? lockdep_init_map+0x9/0x10 [ 34.819656] ? __init_waitqueue_head+0x97/0x140 [ 34.824307] ? init_wait_entry+0x1b0/0x1b0 [ 34.828532] ? lockdep_init_map+0x9/0x10 [ 34.832584] ? rds_message_alloc+0x28c/0x330 [ 34.836973] ? rds_message_next_extension+0x210/0x210 [ 34.842138] ? trace_hardirqs_on+0xd/0x10 [ 34.846277] ? _raw_spin_unlock_bh+0x30/0x40 [ 34.850684] ? __release_sock+0x360/0x360 [ 34.854806] ? lock_sock_nested+0x91/0x110 [ 34.859036] rds_conn_create_outgoing+0x3f/0x50 [ 34.863695] rds_sendmsg+0xda3/0x2390 [ 34.867476] ? avc_has_perm+0x43e/0x680 [ 34.871557] ? rds_send_drop_to+0x19d0/0x19d0 [ 34.876039] ? iterate_fd+0x3f0/0x3f0 [ 34.879825] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.884831] ? find_held_lock+0x35/0x1d0 [ 34.888900] ? sock_has_perm+0x2a4/0x420 [ 34.892947] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 34.898287] ? lock_release+0xa02/0xa40 [ 34.902247] ? __check_object_size+0x8b/0x530 [ 34.906741] ? __might_sleep+0x95/0x190 [ 34.910707] ? selinux_socket_sendmsg+0x36/0x40 [ 34.915361] ? security_socket_sendmsg+0x89/0xb0 [ 34.920100] ? rds_send_drop_to+0x19d0/0x19d0 [ 34.924581] sock_sendmsg+0xca/0x110 [ 34.928281] SYSC_sendto+0x361/0x5c0 [ 34.931985] ? SYSC_connect+0x4a0/0x4a0 [ 34.935977] ? schedule+0xf5/0x430 [ 34.939495] ? SYSC_bind+0x290/0x410 [ 34.943237] ? exit_to_usermode_loop+0x8c/0x2f0 [ 34.947901] ? trace_hardirqs_off+0xd/0x10 [ 34.952114] ? exit_to_usermode_loop+0x198/0x2f0 [ 34.956859] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 34.962387] SyS_sendto+0x40/0x50 [ 34.965823] ? SyS_getpeername+0x30/0x30 [ 34.969871] do_syscall_64+0x282/0x940 [ 34.973738] ? __do_page_fault+0xc90/0xc90 [ 34.977956] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 34.983475] ? syscall_return_slowpath+0x550/0x550 [ 34.988387] ? syscall_return_slowpath+0x2ac/0x550 [ 34.993336] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 34.998696] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.003536] entry_SYSCALL_64_after_hwframe+0x26/0x9b 2018/02/10 12:00:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000e98000+0x1c2)) bpf$PROG_LOAD(0x5, &(0x7f000095f000)={0x8, 0x3, &(0x7f00007b8000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000434000)='GPL\x00', 0x0, 0xbc, &(0x7f000008f000-0xbc)=""/188}, 0x48) 2018/02/10 12:00:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000945000-0x22)="220000005e000721004f10f7e2ffd90000000000000000edff000000e700ff02f157", 0x22) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000724000-0xdb)=""/219, 0xdb, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000001000-0xf6)=""/246) recvfrom(r0, &(0x7f0000363000-0x8c)=""/140, 0x8c, 0x0, 0x0, 0x0) [ 35.008703] RIP: 0033:0x453a59 [ 35.011869] RSP: 002b:00007fc49b6c1c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 35.019555] RAX: ffffffffffffffda RBX: 00007fc49b6c26d4 RCX: 0000000000453a59 [ 35.026802] RDX: 0000000000000000 RSI: 0000000020fc2000 RDI: 0000000000000014 [ 35.034047] RBP: 000000000071bea0 R08: 000000002069affb R09: 0000000000000010 [ 35.041295] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 35.048541] R13: 00000000000004b9 R14: 00000000006f71f8 R15: 0000000000000000 [ 35.077870] kauditd_printk_skb: 5 callbacks suppressed [ 35.077878] audit: type=1400 audit(1518264027.399:24): avc: denied { prog_load } for pid=5319 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/10 12:00:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000abd000)={0x0, 0x0, 0x2}) bind$inet(r0, &(0x7f0000847000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @rand_addr=0x2}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000dbe000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000540000-0x8)=0x3f) fcntl$setown(r2, 0x8, r1) readv(r2, &(0x7f0000cf8000)=[{&(0x7f0000fb7000-0x64)=""/1, 0x1}], 0x1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) tkill(r1, 0x16) 2018/02/10 12:00:27 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000009000-0x1)}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f000000b000)=[]}}}], 0x0, 0x0, &(0x7f0000450000)}) 2018/02/10 12:00:27 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000009000-0x1)}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f000000b000)=[]}}}], 0x0, 0x0, &(0x7f0000450000)}) 2018/02/10 12:00:27 executing program 4: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000007000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000004000-0x8)) 2018/02/10 12:00:27 executing program 7: mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000010000-0x28)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000011000-0x10)={0x1d}, 0x10) recvmmsg(r2, &(0x7f0000015000)=[{{&(0x7f000000e000)=@rc, 0x9, &(0x7f000000d000-0x50)=[], 0x0, &(0x7f0000015000)=""/90, 0x5a}}, {{&(0x7f0000015000)=@can, 0x10, &(0x7f0000015000)=[{&(0x7f0000013000)=""/49, 0x31}, {&(0x7f000000e000)=""/34, 0x22}, {&(0x7f0000014000-0x19)=""/25, 0x19}, {&(0x7f0000015000)=""/158, 0x9e}, {&(0x7f000000e000)=""/110, 0x6e}, {&(0x7f0000015000)=""/160, 0xa0}], 0x6, &(0x7f0000016000-0xb8)=""/184, 0xb8}}], 0x2, 0x10120, &(0x7f0000013000)={0x77359400}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000008000-0x10)={0x1d, r1}, 0x10, &(0x7f0000003000-0x10)={&(0x7f000000b000-0x48)={0x1, 0x3, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000013000-0xe6)=""/230, 0xe6, 0x0, &(0x7f000000e000)=@nfc={0x27}, 0x10) 2018/02/10 12:00:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000270000-0x46)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @empty, {[]}}}}}}}, &(0x7f0000490000-0xc)={0x0, 0x1, [0x0]}) 2018/02/10 12:00:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000652000)={0xffffffffffffffff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) write(0xffffffffffffffff, &(0x7f0000569000), 0x0) ustat(0x457, &(0x7f00007cf000)) 2018/02/10 12:00:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000aef000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000e7000-0x4)=0x2000000000007, 0x9c88be9f5a8c7c99) write(r0, &(0x7f0000bdf000), 0x0) dup3(r0, r1, 0x0) write(r1, &(0x7f0000e87000-0x1), 0x0) 2018/02/10 12:00:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r0) ioctl$sock_ipx_SIOCIPXCFGDATA(r1, 0x89e2, &(0x7f0000b66000)) [ 35.606752] binder: 5330:5332 ERROR: BC_REGISTER_LOOPER called without request [ 35.614191] binder: 5332 RLIMIT_NICE not set [ 35.614843] binder: 5328:5339 ERROR: BC_REGISTER_LOOPER called without request [ 35.626062] binder: 5339 RLIMIT_NICE not set [ 35.642251] binder: 5330:5342 got reply transaction with bad transaction stack, transaction 8 has target 5330:0 2018/02/10 12:00:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2287, &(0x7f0000ed6000-0x1)) [ 35.652839] binder: 5330:5342 transaction failed 29201/-71, size 0-0 line 2772 [ 35.655139] binder: 5328:5344 got reply transaction with bad transaction stack, transaction 10 has target 5328:0 [ 35.670631] binder: 5328:5344 transaction failed 29201/-71, size 0-0 line 2772 [ 35.672194] binder: 5332 RLIMIT_NICE not set 2018/02/10 12:00:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000c0f000-0x4)=0xa, 0x4) recvmsg(r0, &(0x7f00002e6000)={&(0x7f0000949000-0xe)=@l2, 0xe, &(0x7f0000356000)=[], 0x0, &(0x7f000079e000-0x99)=""/153, 0x99}, 0x10001) 2018/02/10 12:00:28 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000009000-0x1)}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f000000b000)=[]}}}], 0x0, 0x0, &(0x7f0000450000)}) [ 35.684818] audit: type=1400 audit(1518264028.007:25): avc: denied { ioctl } for pid=5345 comm="syz-executor3" path="socket:[14042]" dev="sockfs" ino=14042 ioctlcmd=0x89e2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=sock_file permissive=1 [ 35.696899] binder: release 5330:5332 transaction 8 in, still active [ 35.719479] binder: send failed reply for transaction 8 to 5330:5342 [ 35.726056] binder: undelivered TRANSACTION_COMPLETE [ 35.731196] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.736682] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 12:00:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000023000)="6e65742f7274365f73746174730073d9fda7ffa4ace8489bd4294df96b3b083d6441844434adfad4980c5a746de2f76d89c690") splice(r0, &(0x7f0000000000), r0, &(0x7f0000712000-0x8), 0x55b, 0x0) 2018/02/10 12:00:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000014c000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9c000-0x138)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c0}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000}) 2018/02/10 12:00:28 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000009000-0x1)}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f000000b000)=[]}}}], 0x0, 0x0, &(0x7f0000450000)}) 2018/02/10 12:00:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000652000)={0xffffffffffffffff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) write(0xffffffffffffffff, &(0x7f0000569000), 0x0) ustat(0x457, &(0x7f00007cf000)) [ 35.754851] binder: send failed reply for transaction 10 to 5328:5344 [ 35.761588] binder: undelivered TRANSACTION_COMPLETE [ 35.766732] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.772205] binder: undelivered TRANSACTION_ERROR: 29189 [ 35.826603] binder: 5371:5373 ERROR: BC_REGISTER_LOOPER called without request [ 35.834083] binder: 5373 RLIMIT_NICE not set [ 35.851099] binder: 5373 RLIMIT_NICE not set [ 35.859583] binder: 5373 RLIMIT_NICE not set [ 35.864138] binder_alloc: 5371: binder_alloc_buf, no vma [ 35.869720] binder: 5371:5373 transaction failed 29189/-3, size 0-0 line 2957 [ 35.877048] binder: send failed reply for transaction 13 to 5371:5375 [ 35.893871] binder: undelivered TRANSACTION_ERROR: 29190 [ 35.899358] binder: undelivered TRANSACTION_COMPLETE [ 35.904476] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 12:00:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000abd000)={0x0, 0x0, 0x2}) bind$inet(r0, &(0x7f0000847000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @rand_addr=0x2}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000dbe000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000540000-0x8)=0x3f) fcntl$setown(r2, 0x8, r1) readv(r2, &(0x7f0000cf8000)=[{&(0x7f0000fb7000-0x64)=""/1, 0x1}], 0x1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) tkill(r1, 0x16) 2018/02/10 12:00:28 executing program 3: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000016000-0x1eb)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x8, 0x0, 0x0, [0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, []}}}}}}}, 0x0) 2018/02/10 12:00:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000639000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000ace000-0x38)={&(0x7f0000444000-0xc)={0x10}, 0xc, &(0x7f0000d00000-0x10)={&(0x7f0000f4f000)=@allocspi={0xf8, 0x16, 0x7, 0x3, 0xffffffffffffffff, {{{@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x6c}, @in6=@mcast1={0xff, 0x1, [], 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, 0x0, 0x100}, []}, 0xf8}, 0x1}, 0x0) 2018/02/10 12:00:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x11, 0x5, 0xc) removexattr(&(0x7f0000a65000)='./file0\x00', &(0x7f000004a000-0xb)=@random={'trusted.', '\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000204000-0x10)={0xd000}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000072a000-0x11)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000f94000)={0x0, 0x118000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000292000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) get_mempolicy(&(0x7f0000e29000-0x4), &(0x7f0000863000), 0x0, &(0x7f000028b000/0x2000)=nil, 0x0) modify_ldt$read(0x0, &(0x7f000006e000)=""/144, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000501000-0x2c)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}}, &(0x7f0000ffa000)=0x8c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000424000-0x14), &(0x7f0000c1f000)=0x14) prctl$setmm(0x23, 0x0, &(0x7f0000c3a000/0x3000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000418000-0x90)={[0x6, 0x0, 0x100000001, 0x8d26, 0x8, 0x200, 0x8, 0x1ff, 0x80000007, 0x5, 0x1, 0x2, 0x5740, 0x5, 0x53]}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x15, 0x80005, 0x0) fstatfs(r4, &(0x7f0000c15000)=""/93) getsockopt(r4, 0x200000000114, 0x2714, &(0x7f0000a44000)=""/1, &(0x7f0000940000)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1200000010002) getsockname(r4, &(0x7f0000822000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @loopback}}}, &(0x7f0000167000-0x4)=0x2e) 2018/02/10 12:00:28 executing program 5: mmap(&(0x7f0000000000/0x918000)=nil, 0x918000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa}) r1 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069a000)) 2018/02/10 12:00:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000652000)={0xffffffffffffffff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) write(0xffffffffffffffff, &(0x7f0000569000), 0x0) ustat(0x457, &(0x7f00007cf000)) 2018/02/10 12:00:28 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000006000-0x4)) 2018/02/10 12:00:28 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000009000-0x1)}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f000000b000)=[]}}}], 0x0, 0x0, &(0x7f0000450000)}) 2018/02/10 12:00:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000002000-0x8)='./file0\x00', 0x0) mount(&(0x7f000029d000)='./file0\x00', &(0x7f0000996000-0x8)='./file0\x00', &(0x7f0000fc7000-0x5)='ext3\x00', 0x802000, &(0x7f0000759000-0x6)) 2018/02/10 12:00:28 executing program 3: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000005000-0x368)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x1d8, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000024000-0x40), {[{{@ip={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x0, 0x0, @generic="086cd2e96ee8c8f8b82b4500beff6e2d", @common='bridge0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8, 0x0, {}, []}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3}}, {{@ip={@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='bcsf0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@socket0={0x20, 'socket\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) 2018/02/10 12:00:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x24, 0x0, 0x0) [ 36.367617] binder: 5380:5387 ERROR: BC_REGISTER_LOOPER called without request [ 36.375172] binder: 5387 RLIMIT_NICE not set 2018/02/10 12:00:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000652000)={0xffffffffffffffff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) write(0xffffffffffffffff, &(0x7f0000569000), 0x0) ustat(0x457, &(0x7f00007cf000)) 2018/02/10 12:00:28 executing program 7: mmap(&(0x7f0000000000/0xba000)=nil, 0xba000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000009000-0xd)='/dev/urandom\x00', 0x0, 0x0) read(r0, &(0x7f0000001000)=""/175, 0xaf) 2018/02/10 12:00:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00007c3000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00001dd000)={0x1, 0x0, [{0x40000021, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 36.416773] binder: 5380:5395 got reply transaction with bad transaction stack, transaction 16 has target 5380:0 [ 36.427282] binder: 5380:5395 transaction failed 29201/-71, size 0-0 line 2772 [ 36.439149] binder: 5387 RLIMIT_NICE not set 2018/02/10 12:00:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000652000)={0xffffffffffffffff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) write(0xffffffffffffffff, &(0x7f0000569000), 0x0) ustat(0x457, &(0x7f00007cf000)) 2018/02/10 12:00:28 executing program 3: r0 = socket$inet(0x2, 0x20000000000003, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xca, &(0x7f0000001000-0x2f8)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f0000d31000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@loopback=0x7f000001, @rand_addr, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@multicast1=0xe0000001, @empty, 0x0, 0x0, @generic="0c3bd6895df9faacfb3abae1b6926af3", @generic="4bc90ca780807d9bc6a0fa31752151f0"}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x70}}}}, 0x2f8) [ 36.469145] binder: release 5380:5387 transaction 16 in, still active [ 36.475919] binder: send failed reply for transaction 16 to 5380:5395 [ 36.482578] binder: undelivered TRANSACTION_COMPLETE [ 36.487724] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.493209] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 12:00:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000abd000)={0x0, 0x0, 0x2}) bind$inet(r0, &(0x7f0000847000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @rand_addr=0x2}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000dbe000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000540000-0x8)=0x3f) fcntl$setown(r2, 0x8, r1) readv(r2, &(0x7f0000cf8000)=[{&(0x7f0000fb7000-0x64)=""/1, 0x1}], 0x1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) tkill(r1, 0x16) 2018/02/10 12:00:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000652000)={0xffffffffffffffff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) write(0xffffffffffffffff, &(0x7f0000569000), 0x0) 2018/02/10 12:00:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000216000)='/dev/hwrng\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d11000-0x4)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x3, @rand_addr=0xd5}, @in={0x2, 0x3, @multicast1=0xe0000001}], 0x3c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000e64000-0x8)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000f08000)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, @in6={0xa, 0x0, 0x0, @empty}], 0x38) 2018/02/10 12:00:28 executing program 6: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013000+0xe95), 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000005000-0x4), &(0x7f0000004000)=0x4) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/10 12:00:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005a1000-0x1)='8', 0x1, 0x0, &(0x7f00007bd000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd7000-0xc)={0x0, 0x4, 0x4000020030}, 0xc) writev(r0, &(0x7f00006d6000)=[{&(0x7f0000bc7000)="e9", 0x1}], 0x1) writev(r0, &(0x7f0000f80000-0x20)=[{&(0x7f0000514000-0xa7)="c5", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000db0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) sendmsg(r0, &(0x7f0000ece000)={0x0, 0x0, &(0x7f00004a1000-0x60)=[{&(0x7f00007ac000-0x82)="dd", 0x1}], 0x1, &(0x7f00009e9000)=[]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000674000), 0xc) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0d000-0x4), 0x4) sendto$inet6(r0, &(0x7f0000db6000)="84b49a40a76c78f0769e4a395a78bbd1d97ece9e374f34257497eb3acfec4b7040bb4344183700596e81834a3af617296e8db16358ec9fb6f4c3c7f0e7947609533883b5d83e276617b5683f97a326e3f9315b6ef401c7f71e34055cd5a9fa8f2550c4d0b1901b79363cddd081b572b7ef2c178dc0d994a321ec103685fdb92bb2e74d37fd3e61116de31b6dd04377a7dd14711a5a3a981379e205277ac3aef4bf09b066d73729cede4dd4096d2f688428", 0xb1, 0x0, &(0x7f0000623000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000b11000-0x5e)='>', 0x1, 0x0, &(0x7f0000477000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000b17000)="bd", 0x1, 0x0, &(0x7f0000fec000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 12:00:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000206000)=@buf={0x0, &(0x7f000046e000)}) 2018/02/10 12:00:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000009000-0x1)}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f000000b000)=[]}}}], 0x0, 0x0, &(0x7f0000450000)}) 2018/02/10 12:00:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) 2018/02/10 12:00:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000a8d000)={&(0x7f000023b000)={0x10}, 0xc, &(0x7f0000fcf000-0x10)={&(0x7f00005d5000)=@updsa={0x104, 0x1a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@empty}, {@in6=@empty, 0x3, 0x2b}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}]}, 0x104}, 0x1}, 0x0) 2018/02/10 12:00:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000652000)={0xffffffffffffffff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:28 executing program 5: mmap(&(0x7f0000000000/0xaf7000)=nil, 0xaf7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000af6000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000216000)=@ethtool_pauseparam={0x12}}) [ 36.628759] binder: 5429:5434 ERROR: BC_REGISTER_LOOPER called without request [ 36.636275] binder: 5434 RLIMIT_NICE not set [ 36.666975] binder_alloc: 5429: binder_alloc_buf, no vma 2018/02/10 12:00:29 executing program 3: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000016000)=@security={'security\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f0000023000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@broadcast=0xffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @common='bpq0\x00', @common='dummy0\x00'}, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x0, 0x0, 'fsm\x00', "09000400000000000000550000f16b122d13cba47a9a0da863016dbdede79f4e9d00000000000000202cae35d82398feecd401f75ce081e5c5d30692a6af144364cec15edde6914d70c90ab3a3cfe07373af9386c484e6edcb0194ee17bee036e3571f660c34548502a4b8f3c59861ec63a0daf2b70698fb3907a2b7a4999364", 0xffffff80}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="c6b6bc295dc0"}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x70}}}}, 0x3f0) 2018/02/10 12:00:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000b2f000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f00005e2000-0x4), &(0x7f0000087000-0x4)=0xfffffffffffffcff) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000310000)={0x1, 0x3, 0xeff, 0x7, 0x0, 0x0, 0x0, [0xa]}, 0x2c) 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000009000-0x1)}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 36.672555] binder: 5429:5443 transaction failed 29189/-3, size 0-0 line 2957 [ 36.676456] mip6: mip6_rthdr_init_state: spi is not 0: 4043571200 [ 36.710797] mip6: mip6_rthdr_init_state: spi is not 0: 4043571200 [ 36.717555] binder: undelivered TRANSACTION_ERROR: 29189 [ 36.755963] binder: 5463:5464 ERROR: BC_REGISTER_LOOPER called without request [ 36.763465] binder: 5464 RLIMIT_NICE not set [ 36.763828] audit: type=1400 audit(1518264029.086:26): avc: denied { map_create } for pid=5461 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 36.791192] binder_alloc: 5463: binder_alloc_buf, no vma [ 36.796875] binder: 5463:5467 transaction failed 29189/-3, size 0-0 line 2957 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000e2e000-0xc)={0x0}, &(0x7f0000ed5000-0x4)=0xc) migrate_pages(r0, 0x6, &(0x7f0000c88000-0x8), &(0x7f00007ed000)) 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0x57000)=nil, 0x57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000029000)='\\\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000033000-0xd)='/dev/snd/seq\x00', 0x0, 0x6) r2 = dup2(r1, r0) vmsplice(0xffffffffffffffff, &(0x7f0000057000-0x80)=[{&(0x7f0000043000-0x49)='U', 0x1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000052000-0xb0)={{0x80}, 'port1\x00', 0x6b}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "ffffffff2b000006", "a6e7fdc21ca077ef1dae8000000000000000f6ff2ecd959baa11b5dda31cd901"}) write$sndseq(r0, &(0x7f0000043000-0x90)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x60) 2018/02/10 12:00:29 executing program 5: prctl$intptr(0x2f, 0x3) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 4: mkdir(&(0x7f0000493000)='./control\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000015000-0x78)={0x20000000001, 0x78, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000aed000), &(0x7f00006c4000-0x4), &(0x7f000049d000-0x4), &(0x7f0000c12000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00008e2000-0xd)=""/13) clone(0x0, &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000113000), &(0x7f000027e000-0x1)) socket$inet6_dccp(0xa, 0x6, 0x0) 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000009000-0x1)}) 2018/02/10 12:00:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000eec000-0xa)="a77365637569747900", 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x200fc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000b6e000-0x10)='/dev/input/mice\x00', 0x0, 0xa40) openat$hwrng(0xffffffffffffff9c, &(0x7f0000092000-0xb)='/dev/hwrng\x00', 0x658bbece7698e12a, 0x0) gettid() getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00002a0000-0x4)=0x93, &(0x7f0000c13000)=0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000d87000-0xa)='./file0\x00', 0x0) process_vm_writev(0x0, &(0x7f000024d000-0x90)=[], 0x0, &(0x7f0000949000)=[], 0x0, 0x0) mount(&(0x7f0000c32000-0xa)='./file1\x00', &(0x7f0000a24000)='./file0\x00', &(0x7f000005e000-0x6)='msdos\x00', 0x0, &(0x7f00003ca000-0x1000)) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 2018/02/10 12:00:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000724000-0x7)='cpuset\x00') readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) 2018/02/10 12:00:29 executing program 5: prctl$intptr(0x2f, 0x3) [ 36.819954] binder: undelivered TRANSACTION_ERROR: 29189 [ 36.877603] binder: 5479:5488 ERROR: BC_REGISTER_LOOPER called without request [ 36.885201] binder: 5488 RLIMIT_NICE not set [ 36.903553] binder_alloc: 5479: binder_alloc_buf, no vma [ 36.909149] binder: 5479:5497 transaction failed 29189/-3, size 0-0 line 2957 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000005000)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x160, 0x160, 0x160, 0xffffffff, 0xffffffff, 0x1f8, 0x1f8, 0x1f8, 0xffffffff, 0x4, &(0x7f0000002000-0x40), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @rand_addr, 0x0, 0x0, @common='vlan0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2f0) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 5: prctl$intptr(0x2f, 0x3) 2018/02/10 12:00:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000f7e000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r5 = dup3(r4, r3, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00002de000-0x58)={0x2, 0x0, [{}, {}]}) r6 = syz_open_dev$mouse(&(0x7f0000b42000-0x12)='/dev/input/mouse#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x13a, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[], 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000a40000-0x10)={0x13, 0x83, &(0x7f00006a9000)="19b3905d7de0d17644af27da9f956d5fd152e669afb2098b30e913940dff56aa6dd96d20e0ebb3694ff4d7a74919b5ec0c3da3b2a5bee58d59271115d94f54db4cd737ae251dfb30e905529651cdf2881a8eb0c80c4ef76e0bd9e0c099fecaef084b6fb3b93a1fb7987520677e5df759bac86d3ab9c7e44f4ca171eb407686f2194b3c"}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) symlink(&(0x7f0000bd5000-0x8)='./file0\x00', &(0x7f0000e9e000-0x8)='./file0\x00') umount2(&(0x7f0000117000)='./file0\x00', 0x0) clock_gettime(0x4, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000dba000)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x15}}}}, &(0x7f0000014000)=0x8c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000f70000)={r7, 0x3e, "3704b1268255ad45e92a69bf8287ef5e954e2501f59450ceab156ca58e534a7501c9e3194f103bf4304cea685ff5183f863cea117317bfdea39d5e42f442"}, &(0x7f000005c000)=0x46) ioctl$KVM_SMI(r4, 0xaeb7) futex(&(0x7f000061c000)=0x9, 0xd, 0x5, &(0x7f0000fa5000-0x10), &(0x7f000035d000)=0x10000, 0x6ad4) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000841000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000e78000)=0x0) ptrace(0x4208, r8) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = gettid() sched_setattr(r9, &(0x7f000087a000-0x30)={0x30, 0x7, 0x1, 0x2, 0x6, 0x6, 0x7, 0x57}, 0x0) connect$inet6(r3, &(0x7f0000232000)={0xa, 0x3, 0x8000, @dev={0xfe, 0x80, [], 0x0, 0x17}, 0xb2d1}, 0x1c) 2018/02/10 12:00:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) listen(r0, 0x2000000000103) r1 = accept$inet(r0, &(0x7f0000fa2000)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f0000f69000)=0x10) writev(r1, &(0x7f00005f6000)=[{&(0x7f0000bef000)="eb", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x7c, &(0x7f0000925000), &(0x7f0000bd2000-0x4)=0x8) 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00004f3000)='em1$\x00', 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000005000)={{0x0, 0x4}}, &(0x7f00002df000)) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/02/10 12:00:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000ead000-0x430)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x1e0, 0xe8, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000dee000-0x40), {[{{@ipv6={@empty, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @common='yam0\x00', @common='sit0\x00'}, 0x0, 0xa8, 0xe8, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@state={0x28, 'state\x00'}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @empty, [], [], @generic="b51d25b7f8f833f6df3b5d5e29d1162e", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback=0x7f000001, @generic="abc31c7ca3f81857c18e4fd09147b673"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 5: prctl$intptr(0x2f, 0x3) 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f000024d000)=[@in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000001}], 0x1c) 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000244000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023f000-0x58)={0x80, 0x0, 0x0, 0x20000000}) [ 36.930117] binder: undelivered TRANSACTION_ERROR: 29189 [ 36.968129] binder: 5507:5512 ERROR: BC_REGISTER_LOOPER called without request [ 36.975608] binder: 5512 RLIMIT_NICE not set 2018/02/10 12:00:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000ead000-0x430)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x1e0, 0xe8, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000dee000-0x40), {[{{@ipv6={@empty, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @common='yam0\x00', @common='sit0\x00'}, 0x0, 0xa8, 0xe8, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@state={0x28, 'state\x00'}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @empty, [], [], @generic="b51d25b7f8f833f6df3b5d5e29d1162e", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback=0x7f000001, @generic="abc31c7ca3f81857c18e4fd09147b673"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 5: prctl$intptr(0x0, 0x3) 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x6a8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f000092f000-0xf)=""/15, 0xfffffffffffffc7c, 0x3) 2018/02/10 12:00:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) readv(r0, &(0x7f0000e90000-0x20)=[{&(0x7f0000b32000)=""/172, 0xac}], 0x1) sendmsg$nl_route(r0, &(0x7f0000665000)={&(0x7f0000faf000-0xc)={0x10}, 0xc, &(0x7f0000f48000)={&(0x7f0000552000-0x44)=@ipv4_getaddr={0x18, 0x16, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x18}, 0x1}, 0x0) 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 2018/02/10 12:00:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000021000-0x8), &(0x7f000007d000-0x4)=0x8) 2018/02/10 12:00:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 5: prctl$intptr(0x0, 0x3) 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000973000-0x10)='/dev/input/mice\x00', 0x0, 0x4000) 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$random(&(0x7f00000ba000-0xc)='/dev/random\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000484000)={&(0x7f000053c000/0x1000)=nil, 0x1000}) 2018/02/10 12:00:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000f87000)="240000001a0025f0006b000420bbfc00020b00ff00090000001000eb08001900000000b7", 0x24) perf_event_open(&(0x7f0000e35000)={0x0, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 12:00:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000f87000)="240000001a0025f0006b000420bbfc00020b00ff00090000001000eb08001900000000b7", 0x24) 2018/02/10 12:00:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0x0, 0x0) 2018/02/10 12:00:29 executing program 5: prctl$intptr(0x0, 0x3) 2018/02/10 12:00:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000111000)='id_legacy\x00', &(0x7f000051a000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00002d7000-0x5)='eth0\x00', 0xfffffffffffffffe) r0 = add_key(&(0x7f0000a55000-0xa)='encrypted\x00', &(0x7f000058e000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000c7a000-0x5a)="de", 0x1, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000a3000)='keyring\x00', &(0x7f0000cac000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000ab7000-0xc)={0x20000010}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, &(0x7f000005b000-0x90)) 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000-0xe1)='\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x10001) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) fallocate(r0, 0x1, 0x0, 0x20000) sysfs$1(0x1, &(0x7f0000001000)='$\x00') 2018/02/10 12:00:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000501000)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f000011b000-0x208)={0x14, 0x0, 0x5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 12:00:29 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087c000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000b7000-0x10)={0x1, &(0x7f00004fb000-0x8)=[{}]}, 0x10) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) 2018/02/10 12:00:29 executing program 5: prctl$intptr(0x2f, 0x0) 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000015000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x4) 2018/02/10 12:00:29 executing program 5: prctl$intptr(0x2f, 0x0) 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000862000)='/dev/vcs\x00', 0x0, 0x0) 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf7000-0x1c)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 12:00:29 executing program 5: prctl$intptr(0x2f, 0x0) [ 37.225804] ALSA: seq fatal error: cannot create timer (-22) [ 37.251773] encrypted_key: insufficient parameters specified 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 3: mmap(&(0x7f0000000000/0xaef000)=nil, 0xaef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00006a4000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="6a47283c8678", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @igmp={0x14, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}, &(0x7f0000aed000)={0x0, 0x1, [0x0]}) 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000382000-0x408)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f000083c000-0x40), {[{{@ip={@empty, @loopback=0x7f000001, 0x0, 0xffffffff, @syzn={0x73, 0x79, 0x7a}, @generic="52abe6137e09fe7a7b7395db19882c66"}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x0, 0x10, [0x2d, 0xa]}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00'}}, @common=@set={0x40, 'set\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3e0) 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000001d000)={0x1, &(0x7f0000001000-0x10)=[{0x28, 0x0, 0x0, 0xfffffffffffff00a}]}, 0x10) 2018/02/10 12:00:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00001f5000)={@loopback}, &(0x7f0000733000-0x4)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:29 executing program 6: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000004000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @rand_addr, @loopback=0x7f000001, {[]}}, "c4e60974958cac44"}}}}}, 0x0) 2018/02/10 12:00:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000b28000)={0x1, {&(0x7f00005bc000)=""/207, 0xffffffd1, &(0x7f000072c000-0x32)=""/50, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000b83000)=""/24, 0x77929f8e202a4afa, &(0x7f0000502000-0x65)=""/101, 0x0, 0x2}}, 0x59) write$vnet(r0, &(0x7f000046e000-0x68)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9b000-0x49)=""/73, 0x0, 0x3}}, 0x68) [ 37.288861] ALSA: seq fatal error: cannot create timer (-22) [ 37.310213] encrypted_key: insufficient parameters specified 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 6: mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000007000-0x30)='/dev/urandom\x00', 0x0) r3 = getpgrp(0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000005000)=0x1) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fchown(r2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000001000)=[{&(0x7f0000006000)='T', 0x1}], 0x1, 0x0) close(r0) 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000034000-0xc)='./file0/bus\x00', &(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000033000-0x5)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open(&(0x7f0000033000)='./file0/bus\x00', 0x10b281, 0x0) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000f74000-0xb)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0x2e000)=nil, 0x2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000024000-0x10)={&(0x7f000002c000)={0x40, 0x23, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x2c, 0x1, [@typed={0x28, 0x1, @binary="6ddde63f3c2dbc5ddc46eb897e552715640fac471d705b9e02363c57dd"}]}]}, 0x40}, 0x1}, 0x0) 2018/02/10 12:00:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) [ 37.358230] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 37.395962] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) 2018/02/10 12:00:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00001f5000)={@loopback}, &(0x7f0000733000-0x4)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000639000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000d30000)={&(0x7f0000126000-0xc)={0x10}, 0xc, &(0x7f0000d00000-0x10)={&(0x7f0000f4f000)=@allocspi={0xf8, 0x16, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x6c}, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, {0x0, 0x3}, {}, {}, 0x6}}, []}, 0xf8}, 0x1}, 0x0) 2018/02/10 12:00:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000006000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000c43000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f000041b000-0x9)='/dev/vcs\x00', 0x30400, 0x0) 2018/02/10 12:00:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000c5f000-0xa)='net/route\x00') 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000b90000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr=0x2000000}}) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0x40000)=nil, 0x40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000010000-0xe)='./file0\x00', r0, &(0x7f0000020000-0x8)='./file0\x00') mmap(&(0x7f0000042000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) renameat2(r0, &(0x7f0000043000-0xb)='./file0/control\x00', r0, &(0x7f0000042000)='./file0\x00', 0x2) 2018/02/10 12:00:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00001f5000)={@loopback}, &(0x7f0000733000-0x4)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4f000-0x4)=0x1, 0x6) connect$inet(r0, &(0x7f0000607000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000eda000)='{', 0x1, 0x4008000, &(0x7f0000de6000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000496000)={0xffffffff}, 0x8) dup3(r1, r0, 0x0) 2018/02/10 12:00:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000639000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000e84000-0x390)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x3, [{{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x210) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000-0x28)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000006000-0x38)={&(0x7f0000001000-0xc)={0x10}, 0xc, &(0x7f0000005000)={&(0x7f0000000000)=@ipv6_getnetconf={0x1c, 0x52, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1}, 0x0) [ 37.527642] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) truncate(&(0x7f000024b000-0x8)='./file0\x00', 0x0) 2018/02/10 12:00:29 executing program 7: mbind(&(0x7f00007a7000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000c61000-0x8), 0x0, 0x0) 2018/02/10 12:00:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00001f5000)={@loopback}, &(0x7f0000733000-0x4)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 2018/02/10 12:00:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) [ 37.575110] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/02/10 12:00:29 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f000071c000/0x3000)=nil, 0x3000, 0x12) 2018/02/10 12:00:29 executing program 3: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00006ae000-0x4), 0x4) 2018/02/10 12:00:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f77000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f78000)="981a32de5eb4e123702746cc88041a683b667a6730c516d280a056d4b4aff29db83649d6c26eb5efe9657358306e09f8", 0x30) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000e48000)=""/128, 0x80) 2018/02/10 12:00:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x4000000002, 0x0) write(r0, &(0x7f0000805000)="260000001a0053eb910000f9ff090000000000000015e0f1ff609b000000ec5501000d8b017f", 0x26) recvfrom$ipx(r0, &(0x7f00007f0000-0x1000)=""/4096, 0x1000, 0x0, &(0x7f0000ff8000)={0x4, 0x0, 0x0, "933249611e5e"}, 0x10) 2018/02/10 12:00:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x15, &(0x7f000043b000)={@empty, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@generic={0x8864, "9e000000000000"}}}, 0x0) 2018/02/10 12:00:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0x4) 2018/02/10 12:00:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00001f5000)={@loopback}, &(0x7f0000733000-0x4)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000, 0x4000000804, &(0x7f0000c32000/0x1000)=nil) 2018/02/10 12:00:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) 2018/02/10 12:00:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) mincore(&(0x7f0000479000/0x3000)=nil, 0x3000, &(0x7f0000260000)=""/213) 2018/02/10 12:00:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dc000-0x4), 0x4) bind$inet(r0, &(0x7f00008a6000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f000056a000), 0x0, 0x0, &(0x7f0000ec8000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000)="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", 0x481, 0x0, &(0x7f000069b000-0x5)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet6(r0, &(0x7f00008d9000-0x7c)=""/124, 0x7c, 0x0, &(0x7f00008e9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet(r0, &(0x7f000020a000), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet6(r0, &(0x7f0000fc6000), 0x0, 0x0, &(0x7f0000fbf000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) [ 37.643532] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/02/10 12:00:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000926000), 0x0) [ 37.713703] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 37.724429] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 37.732415] in_atomic(): 1, irqs_disabled(): 0, pid: 5731, name: syz-executor7 [ 37.739828] 1 lock held by syz-executor7/5731: [ 37.744433] #0: (rcu_read_lock){....}, at: [<00000000ab88f78b>] __rds_conn_create+0xe46/0x1b50 [ 37.753434] CPU: 0 PID: 5731 Comm: syz-executor7 Tainted: G W 4.15.0+ #307 2018/02/10 12:00:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2000000005, 0x1, 0x1, 0x9}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004fa000-0x1c)={0x1, 0x1, 0x4, 0x7f, 0x0, 0xffffffffffffffff}, 0x1c) dup3(r1, r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r0, &(0x7f0000eed000), &(0x7f00006cf000-0x1)}, 0x20) 2018/02/10 12:00:30 executing program 6: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0xb) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000018000)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x210, 0x100, 0x320, 0x320, 0x320, 0x4, &(0x7f0000006000-0x40), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @empty, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) 2018/02/10 12:00:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) [ 37.757924] audit: type=1400 audit(1518264030.080:27): avc: denied { map_read map_write } for pid=5737 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 37.761649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.761655] Call Trace: [ 37.761672] dump_stack+0x194/0x257 [ 37.761694] ? arch_local_irq_restore+0x53/0x53 [ 37.761709] ? print_lock+0x9f/0xa2 [ 37.761726] ? lockdep_print_held_locks+0xc4/0x130 [ 37.813543] ___might_sleep+0x2b2/0x470 [ 37.817496] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 37.823353] ? __debug_object_init+0x235/0x1040 [ 37.828002] ? debug_mutex_init+0x1c/0x60 [ 37.832141] __might_sleep+0x95/0x190 [ 37.835924] kmem_cache_alloc_trace+0x299/0x740 [ 37.840569] ? lock_acquire+0x1d5/0x580 [ 37.844519] ? lock_acquire+0x1d5/0x580 [ 37.848469] ? __rds_conn_create+0xe46/0x1b50 [ 37.852949] rds_loop_conn_alloc+0xc8/0x380 [ 37.857255] ? rds_loop_conn_free+0x290/0x290 [ 37.861729] ? __init_waitqueue_head+0x97/0x140 [ 37.866379] ? rcutorture_record_progress+0x10/0x10 [ 37.871373] ? __lockdep_init_map+0xe4/0x650 [ 37.875766] __rds_conn_create+0x112f/0x1b50 [ 37.880188] ? rds_conn_drop+0xb0/0xb0 [ 37.884069] ? __raw_spin_lock_init+0x1c/0x100 [ 37.888634] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 37.893630] ? __lockdep_init_map+0xe4/0x650 [ 37.898021] ? __lockdep_init_map+0xe4/0x650 [ 37.902411] ? lockdep_init_map+0x9/0x10 [ 37.906445] ? __init_waitqueue_head+0x97/0x140 [ 37.911092] ? init_wait_entry+0x1b0/0x1b0 [ 37.915311] ? lockdep_init_map+0x9/0x10 [ 37.919354] ? rds_message_alloc+0x28c/0x330 [ 37.923741] ? rds_message_next_extension+0x210/0x210 [ 37.928903] ? trace_hardirqs_on+0xd/0x10 [ 37.933037] ? _raw_spin_unlock_bh+0x30/0x40 [ 37.937430] ? __release_sock+0x360/0x360 [ 37.941550] ? lock_sock_nested+0x91/0x110 [ 37.945767] rds_conn_create_outgoing+0x3f/0x50 [ 37.950415] rds_sendmsg+0xda3/0x2390 [ 37.954192] ? avc_has_perm+0x43e/0x680 [ 37.958164] ? rds_send_drop_to+0x19d0/0x19d0 [ 37.962635] ? iterate_fd+0x3f0/0x3f0 [ 37.966413] ? lock_downgrade+0x980/0x980 [ 37.970544] ? find_held_lock+0x35/0x1d0 [ 37.974594] ? sock_has_perm+0x2a4/0x420 [ 37.978635] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 37.983974] ? lock_release+0xa02/0xa40 [ 37.987926] ? __check_object_size+0x8b/0x530 [ 37.992395] ? __release_sock+0x360/0x360 [ 37.996531] ? __might_sleep+0x95/0x190 [ 38.000490] ? selinux_socket_sendmsg+0x36/0x40 [ 38.005137] ? security_socket_sendmsg+0x89/0xb0 [ 38.009871] ? rds_send_drop_to+0x19d0/0x19d0 [ 38.014344] sock_sendmsg+0xca/0x110 [ 38.018043] SYSC_sendto+0x361/0x5c0 [ 38.021741] ? SYSC_connect+0x4a0/0x4a0 [ 38.025702] ? security_socket_bind+0x89/0xb0 [ 38.030179] ? SYSC_bind+0x290/0x410 [ 38.033894] ? SyS_futex+0x269/0x390 [ 38.037584] ? SyS_setsockopt+0x215/0x360 [ 38.041711] ? do_futex+0x22a0/0x22a0 [ 38.046016] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 38.051539] SyS_sendto+0x40/0x50 [ 38.054970] ? SyS_getpeername+0x30/0x30 [ 38.059010] do_syscall_64+0x282/0x940 [ 38.062878] ? __do_page_fault+0xc90/0xc90 [ 38.067090] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 38.072605] ? syscall_return_slowpath+0x550/0x550 [ 38.077513] ? syscall_return_slowpath+0x2ac/0x550 [ 38.082427] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 38.087772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.092602] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 38.097767] RIP: 0033:0x453a59 [ 38.100932] RSP: 002b:00007fd4ea15bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 2018/02/10 12:00:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000001000-0x40), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000002000-0x10)) 2018/02/10 12:00:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) 2018/02/10 12:00:30 executing program 2: mmap(&(0x7f0000000000/0xd3a000)=nil, 0xd3a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00001e9000-0x8)={0x19980330}, &(0x7f0000031000)={0x0, 0x1fd, 0x3}) prctl$intptr(0x2f, 0x2) 2018/02/10 12:00:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000781000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_ivalue}) 2018/02/10 12:00:30 executing program 6: msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/10 12:00:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000054e000-0xb)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000083000-0xf8)={{0x0, 0x0, 0x6}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x400}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000fe6000-0x10)=[{0x4}], 0x1) [ 38.108614] RAX: ffffffffffffffda RBX: 00007fd4ea15c6d4 RCX: 0000000000453a59 [ 38.115858] RDX: 0000000000000000 RSI: 000000002056a000 RDI: 0000000000000013 [ 38.123105] RBP: 000000000071bea0 R08: 0000000020ec8000 R09: 0000000000000010 [ 38.130349] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 38.137592] R13: 00000000000004b9 R14: 00000000006f71f8 R15: 0000000000000000 [ 38.186637] syz-executor4 uses obsolete (PF_INET,SOCK_PACKET) 2018/02/10 12:00:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00001f5000)={@loopback}, &(0x7f0000733000-0x4)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00009c4000)="220000002100070700be000f090007010a0000c500008000002f0420050013801045", 0x22) 2018/02/10 12:00:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000e40000)={0x0, 0x0, 0xff, 0xc}, 0x338) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00002f2000)='/selinux/policy\x00', 0x0, 0x0) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000235000)=@common='sit0\x00', 0x10) sendfile(r0, r2, &(0x7f00008bf000), 0x200041c) 2018/02/10 12:00:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0xa, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000037e000-0x20)={@common='eql\x00', @ifru_flags=0x2ff}) write$tun(r1, &(0x7f00002d3000)=@hdr={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "b8f9eb", 0xf98, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @empty, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0xf98, 0x0, "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"}}}}, 0xfca) 2018/02/10 12:00:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) 2018/02/10 12:00:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dc000-0x4), 0x4) bind$inet(r0, &(0x7f00008a6000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f000056a000), 0x0, 0x0, &(0x7f0000ec8000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000)="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", 0x481, 0x0, &(0x7f000069b000-0x5)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet6(r0, &(0x7f00008d9000-0x7c)=""/124, 0x7c, 0x0, &(0x7f00008e9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet(r0, &(0x7f000020a000), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet6(r0, &(0x7f0000fc6000), 0x0, 0x0, &(0x7f0000fbf000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/10 12:00:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000cf1000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) 2018/02/10 12:00:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ppoll(&(0x7f0000581000)=[{r0}], 0x1, &(0x7f0000720000), &(0x7f0000000000), 0x8) 2018/02/10 12:00:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) 2018/02/10 12:00:30 executing program 1: mmap(&(0x7f0000000000/0x2ef000)=nil, 0x2ef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002e9000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001000)="a23364fd", 0x4) sendmsg$alg(r1, &(0x7f0000166000)={0x0, 0x0, &(0x7f000019f000)=[], 0x0, &(0x7f0000283000-0x48)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800, &(0x7f00002ef000-0x8)=0x0) io_submit(r2, 0x1, &(0x7f00001f6000-0x8)=[&(0x7f000011e000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00002ea000-0x9)="b2", 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) [ 38.284759] audit: type=1400 audit(1518264030.607:28): avc: denied { node_bind } for pid=5771 comm="syz-executor1" saddr=::ffff:172.20.0.187 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 38.287064] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/02/10 12:00:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f000061d000)=""/37) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000485000-0x28)={0x14, 0x7, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 38.353986] TCP: request_sock_TCPv6: Possible SYN flooding on port 20010. Sending cookies. Check SNMP counters. 2018/02/10 12:00:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af20, &(0x7f0000cb5000-0x8)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000bd5000)={0x0, r1}) 2018/02/10 12:00:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2018/02/10 12:00:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d81000-0x80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f00005d9000-0x80)=@generic={0x1e, "0103000000000000e1ffffffffffffff09a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2030077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r2 = socket(0x200000000000001e, 0x5, 0x0) sendmsg(r2, &(0x7f00007c3000-0x38)={&(0x7f0000373000)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f000033c000)=[], 0x0, &(0x7f0000e13000)=[]}, 0x0) 2018/02/10 12:00:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00001f5000)={@loopback}, &(0x7f0000733000-0x4)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:30 executing program 6: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000004000-0x10)={0x1d}, 0x10) 2018/02/10 12:00:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000768000)={0x10000000002, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f000000e000-0x8)=@file={0x1}, 0x2) add_key(&(0x7f0000bbb000-0x8)='trusted\x00', &(0x7f0000c34000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000d6000), 0x0, 0xffffffffffffffff) listen(r1, 0x0) add_key(&(0x7f0000eff000-0x6)='logon\x00', &(0x7f0000acd000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000bda000-0x56), 0x0, 0xfffffffffffffffe) listen(r0, 0x0) 2018/02/10 12:00:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) 2018/02/10 12:00:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2018/02/10 12:00:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000004000)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x0, 0x130, 0xffffffff, 0xffffffff, 0x1d0, 0x1d0, 0x1d0, 0xffffffff, 0x4, &(0x7f0000003000-0x40), {[{{@ip={@multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="2eab8f10a4e5cbb823fe83249a9d6f3c", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@broadcast=0xffffffff, @broadcast=0xffffffff, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='ip6tnl0\x00'}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c8) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) 2018/02/10 12:00:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f00000d4000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f00000f3000-0x8)='./file0\x00') chdir(&(0x7f00002d7000)='./file0\x00') umount2(&(0x7f0000a51000-0x1)='.', 0x4) 2018/02/10 12:00:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00001f5000)={@loopback}, &(0x7f0000733000-0x4)=0x14) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) writev(r0, &(0x7f000081f000)=[{&(0x7f0000c68000-0x2d)='u', 0x1}], 0x1) 2018/02/10 12:00:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000784000-0x9)='/dev/sg#\x00', 0x0, 0x3751102cd88a9a63) 2018/02/10 12:00:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2018/02/10 12:00:30 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) 2018/02/10 12:00:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x1b8, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000003000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2f8) [ 38.444880] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/02/10 12:00:30 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000c63000-0x10), 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001000-0x4)=@int=0x2, 0x4) accept4(r0, 0x0, &(0x7f0000000000), 0x80800) 2018/02/10 12:00:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f77000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000d46000-0x58)=@alg, 0x58, &(0x7f0000234000-0x30)=[{&(0x7f0000be5000-0x5)=""/1, 0x1}], 0x1, &(0x7f0000f77000)}, 0x0) 2018/02/10 12:00:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00002fc000-0x4)) 2018/02/10 12:00:30 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) shutdown(r1, 0x0) 2018/02/10 12:00:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r0) 2018/02/10 12:00:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00008a4000)="2400000058001f0014b2f407000904000200071008000100ffffffff08000200000000f1", 0x24) 2018/02/10 12:00:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00001f5000)={@loopback}, &(0x7f0000733000-0x4)=0x14) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00005a7000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f000034a000-0x81)={'system_u:object_r:hostname_exec_t:s0', 0x20, 'system_u:object_r:systemd_logger_exec_t:s0', 0x20, 0x38, 0x38, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x81) 2018/02/10 12:00:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000146000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_settings={0x0, 0x47, @cisco=&(0x7f000000a000)}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='timers\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000000e000-0x9)='/dev/rtc\x00', 0x0, 0x0) rt_sigaction(0x6, &(0x7f00009a0000), &(0x7f0000add000-0x20), 0x8, &(0x7f0000499000-0x8)) preadv(r1, &(0x7f000000f000)=[{&(0x7f000000e000)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000002000-0x4)) [ 38.562016] sctp: [Deprecated]: syz-executor0 (pid 5838) Use of int in max_burst socket option deprecated. [ 38.562016] Use struct sctp_assoc_value instead 2018/02/10 12:00:30 executing program 6: mmap(&(0x7f0000000000/0xfca000)=nil, 0xfca000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) timer_gettime(0x0, &(0x7f00003a8000)={{}, {0x0}}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000fc8000-0x10)={r1}, 0x10) recvmmsg(r0, &(0x7f0000fc6000-0x39)=[{{0x0, 0x0, &(0x7f000062d000-0x20)=[], 0x0, &(0x7f0000fc2000-0x92)=""/146, 0x92}}], 0x1, 0x0, 0x0) [ 38.605424] sctp: [Deprecated]: syz-executor0 (pid 5847) Use of int in max_burst socket option deprecated. [ 38.605424] Use struct sctp_assoc_value instead [ 38.632088] sock: sock_set_timeout: `syz-executor6' (pid 5860) tries to set negative timeout [ 38.641885] audit: type=1400 audit(1518264030.957:29): avc: denied { validate_trans } for pid=5854 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=security permissive=1 [ 38.681543] sock: sock_set_timeout: `syz-executor6' (pid 5860) tries to set negative timeout 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00001f5000)={@loopback}, &(0x7f0000733000-0x4)=0x14) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000e74000-0x2)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$tun(&(0x7f0000a9c000)='/dev/net/tun\x00', 0x0, 0x80) 2018/02/10 12:00:31 executing program 2: mmap(&(0x7f0000000000/0xf8b000)=nil, 0xf8b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004cd000-0xc)="0a7775b0d5dba5ec537907", 0xb) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$selinux_create(r2, &(0x7f000063c000-0x63)=@objname={'system_u:object_r:iptables_unit_file_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x0, 0x0, 0x20, './file0\x00'}, 0x63) read$eventfd(r2, &(0x7f00000ad000-0x8), 0x31) 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x425000)=nil, 0x425000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000003000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) 2018/02/10 12:00:31 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000c63000-0x10), 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001000-0x4)=@int=0x2, 0x4) accept4(r0, 0x0, &(0x7f0000000000), 0x80800) 2018/02/10 12:00:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/02/10 12:00:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000146000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_settings={0x0, 0x47, @cisco=&(0x7f000000a000)}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='timers\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000000e000-0x9)='/dev/rtc\x00', 0x0, 0x0) rt_sigaction(0x6, &(0x7f00009a0000), &(0x7f0000add000-0x20), 0x8, &(0x7f0000499000-0x8)) preadv(r1, &(0x7f000000f000)=[{&(0x7f000000e000)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000002000-0x4)) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000093c000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept(r0, 0x0, &(0x7f000060c000)) sendmsg$inet_sctp(r2, &(0x7f0000dc9000)={&(0x7f000029b000-0x1c)=@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f00001b2000-0x70)=[], 0x0, &(0x7f0000f3c000)=[]}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001c8000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r3]}], 0x1}, 0x0) recvmsg(r5, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f000072f000-0x40), &(0x7f0000cc9000-0x40)={0xfffffdfe}, &(0x7f000070b000-0x40), &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000077f000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f000047b000-0x50)={@mcast1={0xff, 0x1, [], 0x1}, @empty, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000020007, r1}) [ 38.778082] RDS: rds_bind could not find a transport for 172.20.0.0, load rds_tcp or rds_rdma? [ 38.781479] sctp: [Deprecated]: syz-executor0 (pid 5881) Use of int in max_burst socket option deprecated. [ 38.781479] Use struct sctp_assoc_value instead [ 38.805302] audit: type=1400 audit(1518264031.127:30): avc: denied { name_bind } for pid=5875 comm="syz-executor6" src=20024 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000340000-0x25)="24000000210025f0071c0165fffffc0e020000000010000002a9000c08000a0000400000", 0x24) 2018/02/10 12:00:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00002fc000-0x4)=0x7fff, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000893000)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000e76000)={0x0, 0x1, [0x0]}) 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) [ 38.844729] RDS: rds_bind could not find a transport for 172.20.0.0, load rds_tcp or rds_rdma? [ 38.861109] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000036a000)='./file0\x00', 0x0) mount(&(0x7f0000097000)='./file0\x00', &(0x7f000093a000-0x8)='./file0\x00', &(0x7f00006eb000)='ramfs\x00', 0x1, &(0x7f000002c000)) r0 = open(&(0x7f0000f05000-0x8)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000689000-0x8)='./file1\x00', 0x0) 2018/02/10 12:00:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f00006da000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x2}, 0x1c) listen(r0, 0x3) r1 = accept(r0, &(0x7f0000d0b000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000eff000)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00005a8000-0x10)={0x0, 0x2, 0x0, 0x29}, 0x10) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000782000-0x2)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$sg(&(0x7f00004d4000-0x9)='/dev/sg#\x00', 0x0, 0x0) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000092f000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000146000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_settings={0x0, 0x47, @cisco=&(0x7f000000a000)}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='timers\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000000e000-0x9)='/dev/rtc\x00', 0x0, 0x0) rt_sigaction(0x6, &(0x7f00009a0000), &(0x7f0000add000-0x20), 0x8, &(0x7f0000499000-0x8)) preadv(r1, &(0x7f000000f000)=[{&(0x7f000000e000)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000002000-0x4)) [ 38.915107] audit: type=1400 audit(1518264031.155:31): avc: denied { name_connect } for pid=5875 comm="syz-executor6" dest=20024 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 2018/02/10 12:00:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f0000f28000-0xe)='./file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) [ 38.975566] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000153000)='./file0\x00', &(0x7f0000318000-0x2)='..', &(0x7f0000647000-0x6)='ocfs2\x00', 0x84000, &(0x7f0000f68000-0x65)) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000004000-0x10)={0x2, 0x3, @empty}, 0x10) sendmsg(r0, &(0x7f0000003000-0x38)={&(0x7f0000004000)=@in={0x2, 0x3, @loopback=0x7f000001}, 0x10, &(0x7f000000a000+0x67c)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000005000-0x4f)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14, 0x0}, {[]}}, @udp={0xffffffffffffffff, 0x3, 0x8}}}}}, 0x0) 2018/02/10 12:00:31 executing program 7: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x510, 0xe8, 0x4c8, 0x1b8, 0xe8, 0x2d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000000), {[{{@ip={@broadcast=0xffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="f53ce8dc203a59d48e4e7aa21e96830e", @generic="b6524ee734b141b412d04b645416e07e"}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@dscp={0x28, 'dscp\x00'}]}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="e070c049877e7cd918b5aa0e6cd9bf2c", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@ip={@multicast2=0xe0000002, @broadcast=0xffffffff, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00'}, @common=@unspec=@connlimit={0x40, 'connlimit\x00'}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x570) 2018/02/10 12:00:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000a1000)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 2018/02/10 12:00:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00008df000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) write(r0, &(0x7f0000108000)="c0", 0x1) write(r0, &(0x7f00004ac000-0xe5)="ae", 0x1) 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000ae7000-0x8)=0x0) io_cancel(r0, &(0x7f00004b1000-0x40)={0x0, 0x8e2844b54643be17, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca7000), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000e18000-0x20)) 2018/02/10 12:00:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a9000-0x1), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 12:00:31 executing program 4: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000c000-0x6)='./control\x00', &(0x7f000000b000-0x6)='./bus\x00') mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f000000d000-0xa)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaf8000)=nil, 0xaf8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mmap(&(0x7f0000af8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000af8000)='./bus\x00', 0x10) inotify_add_watch(r0, &(0x7f000082a000)='./control\x00', 0x800) inotify_add_watch(r0, &(0x7f00002b0000-0x6)='./bus\x00', 0x22000800) r1 = openat(0xffffffffffffff9c, &(0x7f000000d000-0x6)='./bus\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000740000-0x6)='./bus\x00', r1, &(0x7f00007fa000)='./control\x00', 0x2) 2018/02/10 12:00:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b33000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) 2018/02/10 12:00:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) sendmmsg$unix(r0, &(0x7f0000f73000-0x150)=[{&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003ff000)=[], 0x0, &(0x7f0000f72000)=[@cred={0x20, 0x1, 0x2}], 0x20}, {&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f000031e000-0x10)=[], 0x0, &(0x7f0000adc000-0xb0)=[]}], 0x2, 0x0) [ 39.083009] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000ef2000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "7ec292", 0x8, 0x2b, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, 0x0) 2018/02/10 12:00:31 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x3}) 2018/02/10 12:00:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000b49000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000020e000-0x1162)=@hdr={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "c3e7e4", 0xf98, 0x11, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0xf98, 0x0, "e5d218a9da7ca5424b84492e9f631e3f4f0166ec62e1819541d36c83950ad297be7fd9f58187601d1c0c8b0ca13c650c3188c10acc1b9ba21cc319887e4f3ac3c20fa3a946d353c11405d41f76f8aabc504bacfbabd8200ae1858e731e6801e244391179cc2b1bd37721e30094526c217de0086d146bd77cf8f2b912a4629d11a50fb3ab73e7714a99aa358ffcfb5d6d54223b1fae4d9edd4ec1be11da98c5216a96664ca28ec2e2e09a831ac73ccee5422d6008acf85ee3b6cdb91b9f25fea06e9b5cfca59ad5368cd9c0f576b1bd2445a30c8dd7ed0d96d28ed329b18e412b8dc6aa61d1a630c20b77973d4fb68353a58615bc6d033241bfb7febacb67a96a0d600781b85fee7ecdc498e3c8e643f4909ad531738b509d9b027b6c57d1cd4181dbc88b7f40230a7d6f2eeae02a6a43a9a54843781715cd83b0c9fbb8a9e5cd6a8ea7e4b5f81d48a091e792d01b3d3a87aaf31b9d20793e10ab1ec40db0d378d2f77c51a2f46d620c240a10807d0b1140fdf9bb84657ff61e6f49b54b22ccca92b94d67a63855a32d3c56e6144502d91c00e94802a29569550eb3263c5193756309e42c5c13515389266f148e3d8536517f5377d778ea89c599acc418bbc2b9ff124da64e5ff35ee2057ba659d2e63d0476acb178aa79d61467b490a24af95049b89d73c67bb496338cbda9ed94c7aae4614887d9f1c07da401068e65e95bbe1ddc9288dd9550e873ee8e1381bf7c280db92db4df32b6a2e54e2a56f8b6bf971c9ffb3867405cd576cef3107753943090b5ba29503a9f625f96952e538c6967af8488211c4d6ab30c95750172a22ad050cc1afd55283e9aa182156711a6b9220da053ce974263c4c359dabd272cef237938e3df322489af3678a79f1a5315c9901af37a43e4829c02aa7ceaf1b02efe5353c3198342da726746c4d5354f09c5e8bfa92f1c5563aa6e292e2a1ee70de3c0100590047d1e32d917998e7d9020c96f63f820a2f34b61aaa999411685dc3f9a077f621225dbec519c171f09f7e48c4db7221f98eaf4128049f6b18c00b84e7284d74bc165580358f29e9841b3b532414aadeb169bd4a017271ccdca33cf9deb7ee53e813c7807b52d092e387f60eac469b6d34fb569437ba644a108b6da053a282cd32675d72e6449f7a59eb87e21f73a168cd080fcaadaf6d3e4e4d6e00feec540f5244f8f296b0a5040691c0c3730584dd25d44a70b5e3a66de4d559b4abde2d1c75ae8dfffc63ec6318ff56d71fe42c46220562e061f646288c98597bf6fd95d6b9259b2054ccca53494d77e988dfa377911a18b7a034fd994f073899170dbdb4650969474558dee3bdaf260e0da3d61a78472e02a57e4281a0c88a160c7691e7d8522ea6ad1f45ee563e2506ff9e76f269a68c90828a8822c650cd0008c360024c22e534a21347033031f751b5757b1345f12b9e229c8072cd6c6ea07b195c1856300249a39c3eb34898dedceaf3925339d759b5a0c30d463011ebd6461711a2f7dc88b7dab3036e6ec020623bed89cf34eda0b0bbb22f3e539656362823fc2f07d90fea0abe08539ce4095fdeb804d1e8a75370317f91dd100e5451af05e0c2d0514e68d5a89915e950decb7e9b91b3908b6bd56ceba4e3d842326fe26b86b149cbfb98e9db492b61433ed4643f7fa7ab9fc0cbf9bc2cd18d6bea8cf64a7f88da24f3b2dfd19b6ea3ba9969632c3aa7289b45a57ce2f4b1568ca15d918be1c93cc0e2116a2fe83426d2152317abae4626208bfec144ddf509691e1a3c2bd01f36875da314eed7db87b6fd1b8c035661d7926d9c2734f5e8f1b1002362c5ce7b5b27d4593f9c35685bdf690596aaab56478af62cf43d30402ba65cd87d62f9c37597861edf72450dd5ae5aa0b1c8391b31972db0cc6a1e2c2e6a45079a895245d59a7dd64fe59ba3498ee98a4ad302bd88b513015c8c8ad4f6d9ddd817cd0becf5b037cec312128565161d00984a7325ce36e5762339e2a99156f1326e0168c41aedfe4219fc660ecf602441d393d453b95996993857098778cf442db0b84ed1ec9482577c9eb033734e3f6d828b27a55d1495b9a6763f80440d6f35379038b045b69b421959461da0bd63b131cdd213deafb15407b05874dc804e0c10bd82677bb150e0cb8b9827328142a6e9efa371294f4f0de8027826e2b050041949b7cb7b30d9b2e4f618b39817bf0dd738d046b2892a79c7722dd630e5e5757c388283b87621934c3a2b868e50ad5c66f4555369f228189967950b5e92ae537411da754e26dbcfc4137d5e5e25cc0a8d059ca83701389072c068690fa82f64a3a6eb58fd9b0ec6ad9b3fd36dd5a6b8dbaa1045c44f75e891c058429750ec6317b9ed6b0246fec02926984169c1c92d1ff7c0adb1cbaeb9f4493ab99525965c75dfb2dc2cc933a15730aaa66b722f22e5b59a37893014c3d71e7bd041c7afde63735e08069b8d6b523f8c28d122c8ddd0c953d93ba18bf83dce3d2e5fd31d461cc87f2befca389b2f40dbb9b80b54b24b90552df73c7d4aace86d25932d0e48e159687d962d021edf83712bd18c19c32053e0e066c0e65695e9a77f3039654099c9021d07a49a8499bfa644b846090d112a7eb8a43464f2e82a3f34ff9c6ad97847039beab7a54d0771431cc24bbe3a56da83a217abb30304c9fc6f0f6e492ec04b70f7c00b5a683cb838b43878bdc60f4efd32d3e3b7f2f3edeb5b79caae142bc56d85dd5a5e455ae6de3de0e1f19e2b40c52ef23ff7bb2a4742c6bbbec953b6723da6383fa1ee9f9fec74488eafe12f788d4b814fca902de215a170495a36eff1a28ff7b10ed7d5e993e0e65ed83828e6991c3eec11a0a534d92d7fd25536df398d7eb739f3a5f493cd0c8e8414f0d9e11c3885766360e238d854890c29057a9a6241c28993f9e95d2bd073d28a90c4190eb5923be6a8950f03b53940c1516369142696f2130fafdc07483ca3faa71e7bdcd0bcc8f8a244f22482d5065229baa381ea6a0515208e804171b6424344b92bb83cdb39b58d5f8f9825dd125fd7741ea5fee2f15ea7f92d7d8486be7c2057a0923370ea7521da5a8e699a1dee2a0e91d2a5a90586f43d2f7469ac172705088128d7880562f7bceff22cc09f4575b005b60355de0fcbdea795a0ec77b94669532a64a770c024bef7f8fc2c77e343880ac18ad68016783b5db58377170225e0f03766df6da9a0a82e2c3b31c2b1eff21641ab532dbc3ac73d8642ff38ff752eafe74f3a55e3f7ef2f4d622214d08ac09ccd48f1b917caa18cdf33d6a83f1ebb04d1fb71d75d7b08552d6da813b0fe04121105511fa738d82137e4d7f21e921ab7324fd822ea40dded0a572b59ea076f8da7bcaaf55427e320abec8e29b8adba0fc18926e74fb218eba5e49eb48b24ae21a95e59ed489500c0ab79a1e6e5702b64ff0cbfd947f491a0acbdcdec0f15e969bda9d81b7f1ee180af46bf931b0f447d4a86ea1e086f1e6c54640606e0af5c0c1d138f2d426a68f00cb4788ec9ac4033b7ddbf18d10485cb06a50f35a67991ea4aea6001d90cdce7ac2164da4df292854da56e8e830a5616b92f5e153b2dfb4e8604b12db2f487766c0d2d3360ed30b73543db5ae8e6721a0441f1b89cb5e75c461f7edc447387db9385e0c1f5fff35dd84e98cc5935acc72e5f8d20ef2f005d94c9bc80af2354ac3613cc705bd9d4ad2e4ff162b04c6db15ea7b73d38fddba825f979dbc8ded4aae988eb304ac3f88bc62d230e664650cb7524f8b73f33482c418402cad1291f34cc19b729455f3dace73b8a3085ed941485d4ba734848d94f9b95fec2e8e7c098f8d951b8931d81b63a7a62d0bdc4011603744d11ccd5a2d667b48bff4e86ff6fde0aa6495ba9cb1448e84d44ba91ea0115d9d6c8564dcae6329acf1db0da32035f8d538b55fe1a242dcbd4e533b3676b51464f43044c84652ae6baf582c039da806546852a33af24160e1a24156fe489a32cac72a910f2e6ca9b11db16b78e17cae0c9ab0f060901c0fd904f00f37b70c7b00dd4157e0ac4d8bedeaf448493625aa5668f56c01f47c464375621575170e777e67e604de01648817dad9d8789f3f44de0b6a267adb2e7505f5dc3b80e120d0b9dbbcb0b60b5c4c7e64ac917d3300f4bdd37c5ea481a17c35b5035e98e4ca2742d681759715eb2385b21796e0edbf96dd6d90552f01b8f73b8e903b6d4daf014234bb002ab2972d57fc6f8a0e4ad0291adf5bf76d5645f9e9bcbb1577295447ccf217df9db6462a2d595d9cb62957ac7c0bc3881a2b9e2e2740702427adeb11d7962913f57d7de05e753f4154416a200e95a5258c9deec0504b364a13c9e3e967c2724764fbc37a53b5c9e8e5fe13e1bab661ee954aac489a3f2ef9c8284bcca166024a0f043fc20ff695bddeb17a23c9a4bc6a803486a374d61b9aaab5c81b8baa1ad420ea55c7591fa4ab8cdbd8e04ab476b9105256a23dc56841f918e35f5f68d6c89c3e3d2663c93d15b9391a7fddd93bbce5949046d843f8075df019f8c7cbc56d647dce3c4440a839a85c4506ee47931fbf69f9ea3ab0b7de71f5d73b09b1fc6e10b1605094f81c7e851be53db446e1fb88e6146a5e3d60d596c59d20b48dd29079326f862697cf4c09c3ebefb960480bb96b2affce35b737defe87a353b08f511c13e5fe1b55cfed2eb63b812c61c7012f5925230d6a517f53b579aef22a62ff52f31837804433a54011aa8d4dfc7d0ef9a98a484f9f5fe789f75cb14d401a3d9df8745839754cd119fd21200557c6e4ed51e1fc106332cb3394c6de18f9e885b1d2e3f152cc031e3752bb1c83dd4e54c6624b366a9b76a2f3270ea2a7744685e87cfb07bfef30e02375c6effa10593659b84e162a54d974cdc5b51b5c1e311b68331f7e30cd8c413d839a7060bc37c761e1c412b1a6561d50b7d3c36ed44c712124f210c514892f7db139b64673d776493f27654671349c60a6ec9f1871f79807e53293ce0acedd0996ba5af331ec77111baea53c2af56731d3eb2ec53bd6df20a48fafb2e5cc98249d946510e406bf53d40b208cac903c3addb77db6e861f1b4c6867c1f7df45fca23de938e4d21d05598ec01f33b5aabcf9559768065db1ac53fd3b7a1ad3b1511e0a3d9bd10c834693c279b99a99a737f050ef9b62e6abb626a313f7250a5860d9eb5d474bd1e7522a093333c881716e81a3b22dff525b3508add9feb33835ba10708c9590963dbd094c59546eee8f8096e426855fc5b683b987a5e0dbf11b82647e87ebf1989b14feed693544c6736f6069e251a7a9158b1b6a81e315652e3f929971d78e58e5cc377c730d62d5583476010991f1c3c73b587658b2f8387edd57a26c978532ddd2c982b0bd6c6122cce238f8126b89e51f4e058f2e6e4639ec376dada76595a96491a8fc96069c33d8dfcd99e160c521671b3259f18a82a16581f1a6cc498e4e9d8c930e4b97f538b256843932161dd9b02c51e1399c288646ebb8413d7c8719486f03fa1ed59e519149984f7894d62e4484e3a42f16897c82aba873a5a7e309a15878d3fa9c3d0f83c864da7fed7bc71683ad71478702e572892a7891e5d041e5cdad22d3e4b1b0d53feb85509734601d3"}}}}, 0xfca) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 2: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000008e000)={0x0}, &(0x7f000093d000)=0x499) fcntl$setown(r0, 0x8, r1) 2018/02/10 12:00:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000977000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/02/10 12:00:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 3: futex(&(0x7f0000001000), 0x7, 0x0, &(0x7f0000191000)={0x0, 0x989680}, &(0x7f0000000000), 0x0) [ 39.234888] device eql entered promiscuous mode 2018/02/10 12:00:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x200000001, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f00005cc000)="187460fa0482c99460075fb707c52897493aedb80ba323a68adbb715bc5d99ac80d56700a39a33ce498deb03898beb4cb66bad82f943621009e784eed078160bd4cb50634c490489e970db254bccfe5df4cba93a350e050033fb7a2891504a9f252d96174a0df993ba6bef9511e87bc581603af855bd8de3940a859eabf58ea6e6e5abff8831c493405167dc3c053619", 0x90) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 0: mmap(&(0x7f0000000000/0xf8f000)=nil, 0xf8f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000aa5000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00005d6000-0xe)=[{&(0x7f00005d6000-0x1)=';', 0x1}], 0x1, 0x0) vmsplice(r1, &(0x7f0000f83000)=[{&(0x7f0000f82000)="a4", 0x1}], 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000f8d000-0xc)) read(r0, &(0x7f0000ebd000-0xb8)=""/184, 0xfffffda6) 2018/02/10 12:00:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000b6a000)='ns/mnt\x00') syz_open_procfs(0x0, &(0x7f0000eba000)='ns/mnt\x00') 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f000084c000)='rxrpc\x00', &(0x7f0000c46000)={0x73, 0x79, 0x7a}, &(0x7f0000139000-0x3b)='selinux!/nodev.procvboxnet0proc%lo(]M*loppp1vmnet0vboxnet0\x00', 0xffffffffffffffff) add_key(&(0x7f00003a5000-0x6)='logon\x00', &(0x7f0000fad000)={0x73, 0x79, 0x7a}, &(0x7f00002d8000)="d3", 0x1, r0) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00005f9000-0x2)='#}\x00', 0x0) ftruncate(r2, 0x40001) sendmsg(r1, &(0x7f00003f6000)={0x0, 0x0, &(0x7f0000f3a000-0x40)=[{&(0x7f0000c44000)='2', 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4f000-0x4)=0x4, 0x4) sendfile(r1, r2, &(0x7f000000a000), 0x2) 2018/02/10 12:00:31 executing program 6: r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000004000-0x20)={@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000000)=0x20) 2018/02/10 12:00:31 executing program 6: r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b3e000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000b8c000)={0x9}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x40000072}]}) 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x10000000000001, 0x0) pipe(&(0x7f0000a18000)) r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00006f5000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000540000)={&(0x7f0000380000)=@in6={0x0, 0xffffffffffffffff, 0x0, @remote}, 0x1c, &(0x7f0000250000)=[], 0x0, &(0x7f00007ac000-0x1000)=""/428, 0x1ac}, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000020b000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r5, &(0x7f0000def000-0x38)={&(0x7f0000fa4000)=@in6={0x0, 0xffffffffffffffff, 0x0, @remote}, 0x1c, &(0x7f00007ba000-0x40)=[], 0x0, &(0x7f00006b7000)=""/512, 0x200}, 0x0) sendmsg$unix(r4, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r3]}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xa01000)=nil, 0xa01000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/10 12:00:31 executing program 4: mmap(&(0x7f0000000000/0xf84000)=nil, 0xf84000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f73000-0x4)=0x621c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f7f000-0x4)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000f73000-0x31), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/10 12:00:31 executing program 6: r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0xffffffffffffff80, 0x1}, 0x10) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000972000-0x1042)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [{[], {0x8100, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, "ff06ff", 0x8, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, 0x0) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000d0f000-0x12)="120000001200e7ff0a001c0000000000809b", 0x12, 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 1: getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000e6f000-0x10)={0x0, 0x0, &(0x7f00005cd000)}) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000b18000)="240000005a001f1d14f90507125a0000c113171308001000fff708ff080001ffee000000", 0x24) open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f000038d000-0x10)={&(0x7f00005c8000)='./file0\x00'}, 0x10) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000782000-0x2)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$sg(&(0x7f0000706000)='/dev/sg#\x00', 0x0, 0x0) 2018/02/10 12:00:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x0) accept$unix(r0, &(0x7f000087f000-0x57)=@file={0x0, ""/85}, &(0x7f00006a7000)=0x57) clock_gettime(0x0, &(0x7f0000e12000)={0x0, 0x0}) pselect6(0x40, &(0x7f0000131000), &(0x7f000010f000-0x40), &(0x7f0000810000-0x40), &(0x7f0000e1f000-0x10)={0x0, r2+10000000}, &(0x7f0000a84000-0x10)={&(0x7f0000dcf000-0x8), 0x8}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000455000-0x10)={r3}, 0x10) r4 = gettid() socketpair$unix(0x1, 0x80010000000005, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r5, 0x8, r4) fcntl$setsig(r5, 0xa, 0x12) readv(r6, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) r7 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r7]}], 0x1}, 0x0) recvmsg(r9, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f000070b000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={r1, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) dup2(r5, r6) tkill(r4, 0x16) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 3: shmget$private(0x0, 0x1000, 0x5400180c, &(0x7f0000a93000/0x1000)=nil) 2018/02/10 12:00:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000bec000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f0000ab8000)='./file0\x00', &(0x7f00000d3000-0x6)='ramfs\x00', 0x24000, &(0x7f0000509000-0x1)) 2018/02/10 12:00:31 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:31 executing program 1: getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000260000-0x10)='/dev/sequencer2\x00', 0x402, 0x0) pwrite64(r0, &(0x7f0000706000)="94000bfff3d40060", 0x8, 0x0) 2018/02/10 12:00:31 executing program 3: mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000159000)={@common='bridge0\x00', &(0x7f0000fe8000)=@ethtool_eeprom={0x43}}) 2018/02/10 12:00:31 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:31 executing program 1: getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) [ 39.658959] sock: sock_set_timeout: `syz-executor0' (pid 6118) tries to set negative timeout 2018/02/10 12:00:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001000)={r1, 0x1, 0x5, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000004000)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/10 12:00:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:32 executing program 4: mmap(&(0x7f0000000000/0xf23000)=nil, 0xf23000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4e, &(0x7f00000c6000)={{{@in=@broadcast=0xffffffff, @in=@rand_addr}}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, 0xe8) 2018/02/10 12:00:32 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f000086a000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000b94000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) syz_open_dev$dspn(&(0x7f0000798000-0xa)='/dev/dsp#\x00', 0x0, 0x0) 2018/02/10 12:00:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000140000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) [ 39.745344] sock: sock_set_timeout: `syz-executor0' (pid 6118) tries to set negative timeout 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) [ 39.807841] device syz7 entered promiscuous mode 2018/02/10 12:00:32 executing program 4: mmap(&(0x7f0000000000/0x4b8000)=nil, 0x4b8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f000032d000-0x28)={@common='ip6tnl0\x00', 0x200}) 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f000086a000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000b94000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) syz_open_dev$dspn(&(0x7f0000798000-0xa)='/dev/dsp#\x00', 0x0, 0x0) 2018/02/10 12:00:32 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001000)={r1, 0x1, 0x5, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000004000)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/10 12:00:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x4}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x6c}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r0, &(0x7f000088c000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) 2018/02/10 12:00:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00009f4000-0x8)='./file0\x00', &(0x7f0000c65000)='./file0\x00', &(0x7f0000b1f000-0x5)='bdev\x00', 0x0, 0x0) [ 39.857223] device syz7 left promiscuous mode 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f000086a000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000b94000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) syz_open_dev$dspn(&(0x7f0000798000-0xa)='/dev/dsp#\x00', 0x0, 0x0) 2018/02/10 12:00:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 12:00:32 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000005f000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f000005c000)={{0x80}, "55754b1d8d5053f16af6ea3fc35236f55cf1b51d515bf6f2beddb0658891107582435f79c807b4a55dd620119fa6888159c8c15446978f1696e8a41af565265c"}) 2018/02/10 12:00:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001000)={r1, 0x1, 0x5, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000004000)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/10 12:00:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)=@full={{0x3, {"9ae3503f6e5f4a"}}, [{"2ccb7ab49cf1fb"}, {"f1a6678f3eb244"}, {"52097520129d14"}, {"9b2cf4f1baddf4"}, {"84da6194c2aa1f"}, {"a340dc19b97498"}, {"aefbde77df4483"}, {"ca8137d9b00368"}]}, 0x48) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000259000-0x78)) msgsnd(r0, &(0x7f0000001000)={0x1}, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 2018/02/10 12:00:32 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) [ 39.930669] device syz7 entered promiscuous mode [ 39.939768] device syz7 left promiscuous mode 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:32 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) [ 39.979544] audit: type=1400 audit(1518264032.301:32): avc: denied { ipc_owner } for pid=6181 comm="syz-executor4" capability=15 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 39.980374] device syz7 entered promiscuous mode 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 3: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000003000)='\x00', 0x7) fcntl$dupfd(r0, 0x40a, 0xffffffffffffffff) 2018/02/10 12:00:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000a7e000-0x8)=0x8022) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f0000b7e000-0x10), &(0x7f0000048000), 0x0) 2018/02/10 12:00:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000176000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000644000)) 2018/02/10 12:00:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001000)={r1, 0x1, 0x5, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000004000)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) [ 40.041324] device syz7 left promiscuous mode [ 40.100599] device syz7 entered promiscuous mode [ 40.110225] device syz7 left promiscuous mode 2018/02/10 12:00:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) 2018/02/10 12:00:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f000039d000-0x10)="0100000002000100130800087cf55988", 0x10) 2018/02/10 12:00:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x141371}) bpf$PROG_LOAD(0x5, &(0x7f00006f5000-0x48)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f000000a000)=""/195}, 0x48) 2018/02/10 12:00:32 executing program 4: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x81) io_setup(0x5, &(0x7f0000006000-0x8)=0x0) io_submit(r1, 0x1, &(0x7f0000006000-0x10)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000005000), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/10 12:00:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001000)={r1, 0x1, 0x5, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000004000)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/10 12:00:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x141371}) bpf$PROG_LOAD(0x5, &(0x7f00006f5000-0x48)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f000000a000)=""/195}, 0x48) [ 40.175162] device syz7 entered promiscuous mode 2018/02/10 12:00:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000274000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f000035f000), 0x8, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000845000-0xb)='/dev/audio\x00', 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f01000-0x78)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(0x0, &(0x7f0000c41000-0x8)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000981000), 0x8, 0x0, 0x0) 2018/02/10 12:00:32 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mkdir(&(0x7f0000493000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00007cc000-0xa)='./control\x00', 0x4000014) 2018/02/10 12:00:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000004000)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/10 12:00:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000403000-0xe)={&(0x7f00009d0000)={0x30, 0x2, 0x6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x1c, 0x1, [@typed={0x18, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x141371}) bpf$PROG_LOAD(0x5, &(0x7f00006f5000-0x48)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f000000a000)=""/195}, 0x48) [ 40.234447] device syz7 left promiscuous mode 2018/02/10 12:00:32 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f000010d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f48}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, []}}}}}}}, 0x0) 2018/02/10 12:00:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000035a000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000004000)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/10 12:00:32 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}}, &(0x7f000052f000)=0xb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r0}, &(0x7f0000003000-0x4)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000c03000-0x80)=[], 0x0, 0x0, 0x0) 2018/02/10 12:00:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00007c4000)='keyring\x00', &(0x7f000070b000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000e40000)='user\x00', &(0x7f0000a88000)={0x73, 0x79, 0x7a}, &(0x7f000020b000)="da", 0x1, r0) r2 = add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000b0a000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000f29000-0x1000)="b33ab76079ebe0d900000000000000019ad7d97fe21769e7c4db44c249b544230ba287fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747ed