[....] Starting enhanced syslogd: rsyslogd[ 16.029994] audit: type=1400 audit(1519721860.938:5): avc: denied { syslog } for pid=4072 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.329729] audit: type=1400 audit(1519721863.238:6): avc: denied { map } for pid=4211 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.29' (ECDSA) to the list of known hosts. 2018/02/27 08:57:49 fuzzer started [ 24.627112] audit: type=1400 audit(1519721869.535:7): avc: denied { map } for pid=4222 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/27 08:57:49 dialing manager at 10.128.0.26:35219 [ 27.251142] can: request_module (can-proto-0) failed. [ 27.260511] can: request_module (can-proto-0) failed. 2018/02/27 08:57:52 kcov=true, comps=true [ 27.762888] audit: type=1400 audit(1519721872.671:8): avc: denied { map } for pid=4222 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9446 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/27 08:57:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000d10ffc)=0xfffffffffffffffb, 0x4) r1 = dup(r0) bind$inet6(r1, &(0x7f0000876000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2018/02/27 08:57:52 executing program 4: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ip6gre0\x00', @ifru_addrs={0x2, 0x4e20, @rand_addr}}) 2018/02/27 08:57:52 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@nat={'nat\x00', 0x19, 0x3, 0x248, [0x20001580, 0x0, 0x0, 0x200015b0, 0x200019d0], 0x0, &(0x7f0000000000), &(0x7f0000001580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x0, []}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bridge0\x00', 'ip6gretap0\x00', 'ip6_vti0\x00', 'ip6gretap0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0xb0, 0xb0, 0xe0, [@connbytes={'connbytes\x00', 0x18, {{0x0, 0x0, 0x0, 0x3}}}]}, []}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}, {{{0x9, 0x0, 0x0, 'bpq0\x00', 'bridge0\x00', 'ip6_vti0\x00', 'tunl0\x00', @random="4adcc8135716", [], @link_local={0x1, 0x80, 0xc2}, [], 0xa0, 0xa0, 0xd8, [@m802_3={'802_3\x00', 0x8}]}, []}, @snat={'snat\x00', 0x10, {{@random="68081f7f0498"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x0, []}]}, 0x2c0) 2018/02/27 08:57:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000dc01)={&(0x7f0000025ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000028fc4)=@mpls_newroute={0x1c, 0x18, 0x503, 0xffffffffffffffff, 0xffffffffffffffff, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, []}, 0x1c}, 0x1}, 0x0) 2018/02/27 08:57:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') fchown(r0, 0x0, 0x0) 2018/02/27 08:57:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000003, 0x0, 0x3}}) 2018/02/27 08:57:52 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x8}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @empty}, 0x10) [ 27.975919] audit: type=1400 audit(1519721872.884:9): avc: denied { map } for pid=4222 comm="syz-fuzzer" path="/root/syzkaller-shm095924418" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 28.019960] audit: type=1400 audit(1519721872.928:10): avc: denied { sys_admin } for pid=4265 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.037334] IPVS: ftp: loaded support on port[0] = 21 [ 28.103090] audit: type=1400 audit(1519721873.009:11): avc: denied { net_admin } for pid=4268 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.128316] IPVS: ftp: loaded support on port[0] = 21 [ 28.168290] IPVS: ftp: loaded support on port[0] = 21 [ 28.222093] IPVS: ftp: loaded support on port[0] = 21 [ 28.289220] IPVS: ftp: loaded support on port[0] = 21 [ 28.345964] IPVS: ftp: loaded support on port[0] = 21 [ 28.463281] IPVS: ftp: loaded support on port[0] = 21 [ 28.584920] IPVS: ftp: loaded support on port[0] = 21 [ 29.716819] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 29.746082] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.015657] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.076531] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.223600] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.238887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.573604] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.598422] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.846356] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 32.852680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.877410] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 32.883707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.021439] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.027660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.098833] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.104997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.123113] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.129220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.146713] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.152825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.183167] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.202980] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.306702] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.380162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.405672] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.457441] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.463842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.471525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.481734] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.490057] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.498555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.509812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.510725] audit: type=1400 audit(1519721878.418:12): avc: denied { sys_chroot } for pid=4268 comm="syz-executor5" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/27 08:57:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000dc01)={&(0x7f0000025ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000028fc4)=@mpls_newroute={0x1c, 0x18, 0x503, 0xffffffffffffffff, 0xffffffffffffffff, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, []}, 0x1c}, 0x1}, 0x0) [ 33.609589] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.616114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.626771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.691101] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.697525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.711434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.720495] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.726668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.735545] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.741640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.750481] audit: type=1400 audit(1519721878.658:13): avc: denied { net_raw } for pid=5513 comm="syz-executor1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.777161] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 33.796074] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.802484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.814577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.851784] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.858121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.865608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.895935] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.907314] audit: type=1400 audit(1519721878.815:14): avc: denied { setattr } for pid=5536 comm="syz-executor3" name="projid_map" dev="proc" ino=14522 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 33.921463] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.003886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.010245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.017697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.027522] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.034108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.043327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/27 08:57:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000d10ffc)=0xfffffffffffffffb, 0x4) r1 = dup(r0) bind$inet6(r1, &(0x7f0000876000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2018/02/27 08:57:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000dc01)={&(0x7f0000025ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000028fc4)=@mpls_newroute={0x1c, 0x18, 0x503, 0xffffffffffffffff, 0xffffffffffffffff, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, []}, 0x1c}, 0x1}, 0x0) 2018/02/27 08:57:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000003, 0x0, 0x3}}) 2018/02/27 08:57:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000003, 0x0, 0x3}}) 2018/02/27 08:57:59 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x8}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:57:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') fchown(r0, 0x0, 0x0) 2018/02/27 08:57:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 4: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ip6gre0\x00', @ifru_addrs={0x2, 0x4e20, @rand_addr}}) 2018/02/27 08:57:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000dc01)={&(0x7f0000025ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000028fc4)=@mpls_newroute={0x1c, 0x18, 0x503, 0xffffffffffffffff, 0xffffffffffffffff, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, []}, 0x1c}, 0x1}, 0x0) 2018/02/27 08:57:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000d10ffc)=0xfffffffffffffffb, 0x4) r1 = dup(r0) bind$inet6(r1, &(0x7f0000876000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2018/02/27 08:57:59 executing program 4: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ip6gre0\x00', @ifru_addrs={0x2, 0x4e20, @rand_addr}}) 2018/02/27 08:57:59 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x8}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:57:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') fchown(r0, 0x0, 0x0) 2018/02/27 08:57:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000d10ffc)=0xfffffffffffffffb, 0x4) r1 = dup(r0) bind$inet6(r1, &(0x7f0000876000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2018/02/27 08:57:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000003, 0x0, 0x3}}) 2018/02/27 08:57:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000003, 0x0, 0x3}}) 2018/02/27 08:57:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 4: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ip6gre0\x00', @ifru_addrs={0x2, 0x4e20, @rand_addr}}) 2018/02/27 08:57:59 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x8}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:57:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') fchown(r0, 0x0, 0x0) 2018/02/27 08:57:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000003, 0x0, 0x3}}) 2018/02/27 08:57:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000003, 0x0, 0x3}}) 2018/02/27 08:57:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') fchown(r0, 0x0, 0x0) 2018/02/27 08:57:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x8}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:57:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000003, 0x0, 0x3}}) 2018/02/27 08:57:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') fchown(r0, 0x0, 0x0) 2018/02/27 08:57:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x8}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:57:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000003, 0x0, 0x3}}) 2018/02/27 08:57:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x400000006, 0x0, &(0x7f0000000000), &(0x7f0000869000), 0x0) 2018/02/27 08:57:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) dup2(r0, r0) 2018/02/27 08:57:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') fchown(r0, 0x0, 0x0) 2018/02/27 08:57:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x8}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:57:59 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x400000006, 0x0, &(0x7f0000000000), &(0x7f0000869000), 0x0) 2018/02/27 08:57:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) dup2(r0, r0) 2018/02/27 08:57:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000003, 0x0, 0x3}}) 2018/02/27 08:57:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x400000006, 0x0, &(0x7f0000000000), &(0x7f0000869000), 0x0) 2018/02/27 08:57:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) dup2(r0, r0) 2018/02/27 08:57:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) dup2(r0, r0) 2018/02/27 08:57:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005ff000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000cdf000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000154ffc)=0x2, 0x4) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/02/27 08:57:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0xb, &(0x7f0000003fad)=@framed={{0x18}, [@jmp={0x5}, @alu, @jmp={0x5}, @map={0x18, 0x0, 0x1}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) 2018/02/27 08:57:59 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002aa000/0x400000)=nil, 0x400000, 0xc) 2018/02/27 08:57:59 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bpq0\x00\x00\x00\x00\x00\x00\x00 \x00', @ifru_map={0x2}}) 2018/02/27 08:57:59 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x400000006, 0x0, &(0x7f0000000000), &(0x7f0000869000), 0x0) 2018/02/27 08:57:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) dup2(r0, r0) 2018/02/27 08:57:59 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002aa000/0x400000)=nil, 0x400000, 0xc) 2018/02/27 08:57:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) dup2(r0, r0) 2018/02/27 08:57:59 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002aa000/0x400000)=nil, 0x400000, 0xc) [ 34.696255] audit: type=1400 audit(1519721879.604:15): avc: denied { map } for pid=5673 comm="syz-executor6" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14660 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 2018/02/27 08:57:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000cceff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070cd, &(0x7f0000000000)) 2018/02/27 08:57:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x4c03, 0x0) 2018/02/27 08:57:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 2018/02/27 08:57:59 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002aa000/0x400000)=nil, 0x400000, 0xc) 2018/02/27 08:57:59 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40042, 0x0) write$vnet(r2, &(0x7f0000001180)={0x1, {&(0x7f0000000080)=""/4096, 0x1000, &(0x7f0000001080)=""/240, 0x1, 0x4}}, 0x68) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 2018/02/27 08:57:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000cceff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070cd, &(0x7f0000000000)) 2018/02/27 08:57:59 executing program 0: munlockall() r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x0, 0x0, []}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000140)=0x8) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', @ifru_mtu=0x7}) 2018/02/27 08:57:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x4c03, 0x0) 2018/02/27 08:57:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x4c03, 0x0) 2018/02/27 08:57:59 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002aa000/0x400000)=nil, 0x400000, 0xc) 2018/02/27 08:57:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) dup2(r0, r0) 2018/02/27 08:57:59 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002aa000/0x400000)=nil, 0x400000, 0xc) [ 34.840552] audit: type=1400 audit(1519721879.643:16): avc: denied { prog_load } for pid=5670 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 34.863108] audit: type=1400 audit(1519721879.720:17): avc: denied { create } for pid=5695 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/27 08:57:59 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002aa000/0x400000)=nil, 0x400000, 0xc) 2018/02/27 08:57:59 executing program 7: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:57:59 executing program 6: pipe(&(0x7f0000160ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000058ff8)={0xffffffffffffffff}) tee(r1, r0, 0x86eb, 0xf) [ 34.887123] audit: type=1400 audit(1519721879.724:18): avc: denied { write } for pid=5695 comm="syz-executor1" path="socket:[15792]" dev="sockfs" ino=15792 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/27 08:57:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x4c03, 0x0) 2018/02/27 08:57:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x4c03, 0x0) 2018/02/27 08:57:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000cceff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070cd, &(0x7f0000000000)) 2018/02/27 08:57:59 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40042, 0x0) write$vnet(r2, &(0x7f0000001180)={0x1, {&(0x7f0000000080)=""/4096, 0x1000, &(0x7f0000001080)=""/240, 0x1, 0x4}}, 0x68) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 2018/02/27 08:57:59 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbb, &(0x7f000076dff0)=[], 0x1}, 0x0) 2018/02/27 08:57:59 executing program 6: pipe(&(0x7f0000160ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000058ff8)={0xffffffffffffffff}) tee(r1, r0, 0x86eb, 0xf) 2018/02/27 08:57:59 executing program 0: munlockall() r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x0, 0x0, []}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000140)=0x8) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', @ifru_mtu=0x7}) 2018/02/27 08:57:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x4c03, 0x0) 2018/02/27 08:58:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x4c03, 0x0) 2018/02/27 08:58:00 executing program 7: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40042, 0x0) write$vnet(r2, &(0x7f0000001180)={0x1, {&(0x7f0000000080)=""/4096, 0x1000, &(0x7f0000001080)=""/240, 0x1, 0x4}}, 0x68) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 2018/02/27 08:58:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000cceff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070cd, &(0x7f0000000000)) 2018/02/27 08:58:00 executing program 6: pipe(&(0x7f0000160ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000058ff8)={0xffffffffffffffff}) tee(r1, r0, 0x86eb, 0xf) 2018/02/27 08:58:00 executing program 0: munlockall() r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x0, 0x0, []}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000140)=0x8) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', @ifru_mtu=0x7}) 2018/02/27 08:58:00 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbb, &(0x7f000076dff0)=[], 0x1}, 0x0) 2018/02/27 08:58:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbb, &(0x7f000076dff0)=[], 0x1}, 0x0) 2018/02/27 08:58:00 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbb, &(0x7f000076dff0)=[], 0x1}, 0x0) 2018/02/27 08:58:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbb, &(0x7f000076dff0)=[], 0x1}, 0x0) 2018/02/27 08:58:00 executing program 6: pipe(&(0x7f0000160ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000058ff8)={0xffffffffffffffff}) tee(r1, r0, 0x86eb, 0xf) 2018/02/27 08:58:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40042, 0x0) write$vnet(r2, &(0x7f0000001180)={0x1, {&(0x7f0000000080)=""/4096, 0x1000, &(0x7f0000001080)=""/240, 0x1, 0x4}}, 0x68) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 2018/02/27 08:58:00 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 7: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbb, &(0x7f000076dff0)=[], 0x1}, 0x0) 2018/02/27 08:58:00 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbb, &(0x7f000076dff0)=[], 0x1}, 0x0) 2018/02/27 08:58:00 executing program 6: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 0: munlockall() r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x0, 0x0, []}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000140)=0x8) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', @ifru_mtu=0x7}) 2018/02/27 08:58:00 executing program 4: munlockall() r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x0, 0x0, []}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000140)=0x8) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', @ifru_mtu=0x7}) 2018/02/27 08:58:00 executing program 1: munlockall() r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x0, 0x0, []}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000140)=0x8) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', @ifru_mtu=0x7}) 2018/02/27 08:58:00 executing program 7: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 6: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 5: pipe(&(0x7f0000160ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000058ff8)={0xffffffffffffffff}) tee(r1, r0, 0x86eb, 0xf) 2018/02/27 08:58:00 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00008bcff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, 0x0) 2018/02/27 08:58:00 executing program 5: pipe(&(0x7f0000160ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000058ff8)={0xffffffffffffffff}) tee(r1, r0, 0x86eb, 0xf) 2018/02/27 08:58:00 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x17, 0x4) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000580)='bond0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') [ 35.473717] 9pnet_virtio: no channels available for device ./file0 [ 35.497197] audit: type=1400 audit(1519721880.405:19): avc: denied { create } for pid=5833 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/27 08:58:00 executing program 6: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x105902, 0x0) sync() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) mbind(&(0x7f00007c3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x2, 0x0) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x2000000}, 0xc) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 2018/02/27 08:58:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:00 executing program 4: munlockall() r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x0, 0x0, []}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000140)=0x8) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', @ifru_mtu=0x7}) 2018/02/27 08:58:00 executing program 1: munlockall() r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x0, 0x0, []}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000140)=0x8) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', @ifru_mtu=0x7}) 2018/02/27 08:58:00 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00008bcff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, 0x0) 2018/02/27 08:58:00 executing program 5: pipe(&(0x7f0000160ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000058ff8)={0xffffffffffffffff}) tee(r1, r0, 0x86eb, 0xf) 2018/02/27 08:58:00 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x17, 0x4) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000580)='bond0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2018/02/27 08:58:00 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"2e0000005a78b4f20b63282000000005", @ifru_map={0x2}}) [ 35.521217] audit: type=1400 audit(1519721880.418:20): avc: denied { dac_read_search } for pid=4279 comm="syz-executor7" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.546180] audit: type=1400 audit(1519721880.428:21): avc: denied { setopt } for pid=5833 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/27 08:58:00 executing program 5: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x17, 0x4) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000580)='bond0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2018/02/27 08:58:00 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"2e0000005a78b4f20b63282000000005", @ifru_map={0x2}}) 2018/02/27 08:58:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) keyctl$get_keyring_id(0x0, 0x0, 0x0) 2018/02/27 08:58:00 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x17, 0x4) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000580)='bond0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2018/02/27 08:58:00 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00008bcff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, 0x0) [ 35.603836] 9pnet_virtio: no channels available for device ./file0 2018/02/27 08:58:00 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"2e0000005a78b4f20b63282000000005", @ifru_map={0x2}}) 2018/02/27 08:58:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:00 executing program 1: munlockall() r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x0, 0x0, []}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000140)=0x8) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', @ifru_mtu=0x7}) 2018/02/27 08:58:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) keyctl$get_keyring_id(0x0, 0x0, 0x0) 2018/02/27 08:58:00 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x17, 0x4) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000580)='bond0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2018/02/27 08:58:00 executing program 5: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x17, 0x4) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000580)='bond0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2018/02/27 08:58:00 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00008bcff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, 0x0) 2018/02/27 08:58:00 executing program 4: munlockall() r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x0, 0x0, []}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000140)=0x8) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', @ifru_mtu=0x7}) [ 35.707837] 9pnet_virtio: no channels available for device ./file0 2018/02/27 08:58:00 executing program 5: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x17, 0x4) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000580)='bond0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2018/02/27 08:58:00 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"2e0000005a78b4f20b63282000000005", @ifru_map={0x2}}) 2018/02/27 08:58:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) keyctl$get_keyring_id(0x0, 0x0, 0x0) [ 35.788486] 9pnet_virtio: no channels available for device ./file0 2018/02/27 08:58:00 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) keyctl$get_keyring_id(0x0, 0x0, 0x0) 2018/02/27 08:58:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000004e50)={0x14, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x20}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 08:58:00 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) keyctl$get_keyring_id(0x0, 0x0, 0x0) 2018/02/27 08:58:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) keyctl$get_keyring_id(0x0, 0x0, 0x0) 2018/02/27 08:58:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:00 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) keyctl$get_keyring_id(0x0, 0x0, 0x0) 2018/02/27 08:58:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000004e50)={0x14, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x20}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 08:58:00 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000004e50)={0x14, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x20}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 08:58:01 executing program 6: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:01 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:01 executing program 3: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/02/27 08:58:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000004e50)={0x14, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x20}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 08:58:01 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x1ffffffffffffe3d, &(0x7f0000008000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000008000)='syzkaller\x00', 0x25, 0x7f, &(0x7f0000008000)=""/127}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{0x18, 0x6}, [@alu={0x0, 0x0, 0xffffff85}], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x47) 2018/02/27 08:58:01 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000a16fb8)=@ipmr_newroute={0x24, 0x18, 0xc21, 0xffffffffffffffff, 0xffffffffffffffff, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_PREFSRC={0x8, 0x7, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/02/27 08:58:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fbefee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000e94ffc)) r1 = dup(r0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r1, 0x40044591) 2018/02/27 08:58:01 executing program 6: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000a16fb8)=@ipmr_newroute={0x24, 0x18, 0xc21, 0xffffffffffffffff, 0xffffffffffffffff, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_PREFSRC={0x8, 0x7, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/02/27 08:58:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x1ffffffffffffe3d, &(0x7f0000008000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000008000)='syzkaller\x00', 0x25, 0x7f, &(0x7f0000008000)=""/127}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{0x18, 0x6}, [@alu={0x0, 0x0, 0xffffff85}], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x47) 2018/02/27 08:58:01 executing program 3: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fbefee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000e94ffc)) r1 = dup(r0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r1, 0x40044591) 2018/02/27 08:58:01 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000a16fb8)=@ipmr_newroute={0x24, 0x18, 0xc21, 0xffffffffffffffff, 0xffffffffffffffff, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_PREFSRC={0x8, 0x7, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/02/27 08:58:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x1ffffffffffffe3d, &(0x7f0000008000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000008000)='syzkaller\x00', 0x25, 0x7f, &(0x7f0000008000)=""/127}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{0x18, 0x6}, [@alu={0x0, 0x0, 0xffffff85}], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x47) 2018/02/27 08:58:01 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000a16fb8)=@ipmr_newroute={0x24, 0x18, 0xc21, 0xffffffffffffffff, 0xffffffffffffffff, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_PREFSRC={0x8, 0x7, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/02/27 08:58:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x1ffffffffffffe3d, &(0x7f0000008000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000008000)='syzkaller\x00', 0x25, 0x7f, &(0x7f0000008000)=""/127}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{0x18, 0x6}, [@alu={0x0, 0x0, 0xffffff85}], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x47) 2018/02/27 08:58:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fbefee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000e94ffc)) r1 = dup(r0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r1, 0x40044591) 2018/02/27 08:58:01 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000fbefee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000e94ffc)) r1 = dup(r0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r1, 0x40044591) 2018/02/27 08:58:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x1ffffffffffffe3d, &(0x7f0000008000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000008000)='syzkaller\x00', 0x25, 0x7f, &(0x7f0000008000)=""/127}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{0x18, 0x6}, [@alu={0x0, 0x0, 0xffffff85}], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x47) 2018/02/27 08:58:01 executing program 6: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x1ffffffffffffe3d, &(0x7f0000008000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000008000)='syzkaller\x00', 0x25, 0x7f, &(0x7f0000008000)=""/127}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{0x18, 0x6}, [@alu={0x0, 0x0, 0xffffff85}], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x47) 2018/02/27 08:58:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fbefee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000e94ffc)) r1 = dup(r0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r1, 0x40044591) 2018/02/27 08:58:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:01 executing program 3: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x1ffffffffffffe3d, &(0x7f0000008000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000008000)='syzkaller\x00', 0x25, 0x7f, &(0x7f0000008000)=""/127}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{0x18, 0x6}, [@alu={0x0, 0x0, 0xffffff85}], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x47) 2018/02/27 08:58:01 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000fbefee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000e94ffc)) r1 = dup(r0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r1, 0x40044591) 2018/02/27 08:58:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:01 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00002a7000)=0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000cd6ff8), 0x8, 0x0) readv(r0, &(0x7f000006eff0)=[{&(0x7f00007c1000)=""/128, 0x80}], 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000a9bff8), 0x8, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xb4) signalfd(r1, &(0x7f0000518ff8), 0x8) 2018/02/27 08:58:01 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037eff5)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/02/27 08:58:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000001ff4)={@multicast2=0xe0000002, @multicast1=0xe0000001, @empty}, 0xc) 2018/02/27 08:58:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000001ff4)={@multicast2=0xe0000002, @multicast1=0xe0000001, @empty}, 0xc) 2018/02/27 08:58:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:01 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000001ff4)={@multicast2=0xe0000002, @multicast1=0xe0000001, @empty}, 0xc) 2018/02/27 08:58:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000001ff4)={@multicast2=0xe0000002, @multicast1=0xe0000001, @empty}, 0xc) 2018/02/27 08:58:01 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000fbefee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000e94ffc)) r1 = dup(r0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r1, 0x40044591) 2018/02/27 08:58:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f000021fffc), &(0x7f00001c1ffc)=0x4) 2018/02/27 08:58:01 executing program 0: unshare(0x8000400) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r0 = open(&(0x7f0000267ff6)='./control\x00', 0x0, 0x0) splice(r0, &(0x7f0000c71000), r0, &(0x7f0000a1a000), 0x400, 0x0) 2018/02/27 08:58:01 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00002a7000)=0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000cd6ff8), 0x8, 0x0) readv(r0, &(0x7f000006eff0)=[{&(0x7f00007c1000)=""/128, 0x80}], 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000a9bff8), 0x8, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xb4) signalfd(r1, &(0x7f0000518ff8), 0x8) 2018/02/27 08:58:01 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) 2018/02/27 08:58:01 executing program 2: mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000f10fc8)={&(0x7f0000f10000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000d69f90)=[{&(0x7f00008d7f6a)=""/150, 0x96}], 0x1, &(0x7f00001bafb1)=""/79, 0x4f}, 0x0) sendto$inet(r0, &(0x7f0000f1a000)="dc", 0x1, 0x0, &(0x7f0000f1bff0)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:58:01 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000001ff4)={@multicast2=0xe0000002, @multicast1=0xe0000001, @empty}, 0xc) 2018/02/27 08:58:01 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @empty, "fa7969d0", @link_local={0x1, 0x80, 0xc2}, "96d4493be8d4557000191cfb4e9017d4"}}}}, 0x0) 2018/02/27 08:58:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000001ff4)={@multicast2=0xe0000002, @multicast1=0xe0000001, @empty}, 0xc) 2018/02/27 08:58:01 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @empty, "fa7969d0", @link_local={0x1, 0x80, 0xc2}, "96d4493be8d4557000191cfb4e9017d4"}}}}, 0x0) 2018/02/27 08:58:01 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x114, 0x1, &(0x7f0000000000)="2a8a33f9ffff8109002186b32cff6dac", 0x10) 2018/02/27 08:58:01 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @empty, "fa7969d0", @link_local={0x1, 0x80, 0xc2}, "96d4493be8d4557000191cfb4e9017d4"}}}}, 0x0) 2018/02/27 08:58:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f000021fffc), &(0x7f00001c1ffc)=0x4) 2018/02/27 08:58:01 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000001ff4)={@multicast2=0xe0000002, @multicast1=0xe0000001, @empty}, 0xc) 2018/02/27 08:58:01 executing program 0: unshare(0x8000400) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r0 = open(&(0x7f0000267ff6)='./control\x00', 0x0, 0x0) splice(r0, &(0x7f0000c71000), r0, &(0x7f0000a1a000), 0x400, 0x0) 2018/02/27 08:58:01 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @empty, "fa7969d0", @link_local={0x1, 0x80, 0xc2}, "96d4493be8d4557000191cfb4e9017d4"}}}}, 0x0) 2018/02/27 08:58:01 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) 2018/02/27 08:58:01 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00002a7000)=0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000cd6ff8), 0x8, 0x0) readv(r0, &(0x7f000006eff0)=[{&(0x7f00007c1000)=""/128, 0x80}], 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000a9bff8), 0x8, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xb4) signalfd(r1, &(0x7f0000518ff8), 0x8) 2018/02/27 08:58:01 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x114, 0x1, &(0x7f0000000000)="2a8a33f9ffff8109002186b32cff6dac", 0x10) 2018/02/27 08:58:01 executing program 2: mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000f10fc8)={&(0x7f0000f10000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000d69f90)=[{&(0x7f00008d7f6a)=""/150, 0x96}], 0x1, &(0x7f00001bafb1)=""/79, 0x4f}, 0x0) sendto$inet(r0, &(0x7f0000f1a000)="dc", 0x1, 0x0, &(0x7f0000f1bff0)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:58:01 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) 2018/02/27 08:58:01 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x114, 0x1, &(0x7f0000000000)="2a8a33f9ffff8109002186b32cff6dac", 0x10) 2018/02/27 08:58:01 executing program 4: mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000f10fc8)={&(0x7f0000f10000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000d69f90)=[{&(0x7f00008d7f6a)=""/150, 0x96}], 0x1, &(0x7f00001bafb1)=""/79, 0x4f}, 0x0) sendto$inet(r0, &(0x7f0000f1a000)="dc", 0x1, 0x0, &(0x7f0000f1bff0)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:58:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f000021fffc), &(0x7f00001c1ffc)=0x4) 2018/02/27 08:58:01 executing program 0: unshare(0x8000400) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r0 = open(&(0x7f0000267ff6)='./control\x00', 0x0, 0x0) splice(r0, &(0x7f0000c71000), r0, &(0x7f0000a1a000), 0x400, 0x0) 2018/02/27 08:58:01 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip_vti0\x00', @ifru_ivalue}) 2018/02/27 08:58:01 executing program 2: mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000f10fc8)={&(0x7f0000f10000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000d69f90)=[{&(0x7f00008d7f6a)=""/150, 0x96}], 0x1, &(0x7f00001bafb1)=""/79, 0x4f}, 0x0) sendto$inet(r0, &(0x7f0000f1a000)="dc", 0x1, 0x0, &(0x7f0000f1bff0)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:58:01 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) 2018/02/27 08:58:01 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip_vti0\x00', @ifru_ivalue}) 2018/02/27 08:58:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f000021fffc), &(0x7f00001c1ffc)=0x4) 2018/02/27 08:58:01 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x114, 0x1, &(0x7f0000000000)="2a8a33f9ffff8109002186b32cff6dac", 0x10) 2018/02/27 08:58:01 executing program 0: unshare(0x8000400) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r0 = open(&(0x7f0000267ff6)='./control\x00', 0x0, 0x0) splice(r0, &(0x7f0000c71000), r0, &(0x7f0000a1a000), 0x400, 0x0) 2018/02/27 08:58:01 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x2000004004031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f00000000c0)) 2018/02/27 08:58:01 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00002a7000)=0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000cd6ff8), 0x8, 0x0) readv(r0, &(0x7f000006eff0)=[{&(0x7f00007c1000)=""/128, 0x80}], 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000a9bff8), 0x8, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xb4) signalfd(r1, &(0x7f0000518ff8), 0x8) 2018/02/27 08:58:01 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x400, "032090a04d28401f6fc7366feec8efbca4a55045fe1ed2d44156b619b5e46cf3b6948ed5ec06daacc125e77c"}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="47a49290cc028aefb105d06796efc946dfe9bc", 0x13, 0xfffffffffffffffe) 2018/02/27 08:58:01 executing program 0: setitimer(0x1, &(0x7f0000000fe0)={{0x100000000000, 0x2710}, {0x77359400}}, &(0x7f0000000fe0)) 2018/02/27 08:58:01 executing program 4: mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000f10fc8)={&(0x7f0000f10000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000d69f90)=[{&(0x7f00008d7f6a)=""/150, 0x96}], 0x1, &(0x7f00001bafb1)=""/79, 0x4f}, 0x0) sendto$inet(r0, &(0x7f0000f1a000)="dc", 0x1, 0x0, &(0x7f0000f1bff0)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:58:01 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip_vti0\x00', @ifru_ivalue}) 2018/02/27 08:58:01 executing program 2: mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000f10fc8)={&(0x7f0000f10000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000d69f90)=[{&(0x7f00008d7f6a)=""/150, 0x96}], 0x1, &(0x7f00001bafb1)=""/79, 0x4f}, 0x0) sendto$inet(r0, &(0x7f0000f1a000)="dc", 0x1, 0x0, &(0x7f0000f1bff0)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:58:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000000b40)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @multicast2=0xe0000301}, 0x10, &(0x7f0000000500)=[], 0x0, &(0x7f0000000580)=[]}, 0x0) 2018/02/27 08:58:01 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x2000004004031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f00000000c0)) 2018/02/27 08:58:01 executing program 0: setitimer(0x1, &(0x7f0000000fe0)={{0x100000000000, 0x2710}, {0x77359400}}, &(0x7f0000000fe0)) 2018/02/27 08:58:01 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x2000004004031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f00000000c0)) 2018/02/27 08:58:01 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip_vti0\x00', @ifru_ivalue}) 2018/02/27 08:58:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000000b40)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @multicast2=0xe0000301}, 0x10, &(0x7f0000000500)=[], 0x0, &(0x7f0000000580)=[]}, 0x0) [ 37.021531] encrypted_key: insufficient parameters specified 2018/02/27 08:58:01 executing program 4: mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000f10fc8)={&(0x7f0000f10000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000d69f90)=[{&(0x7f00008d7f6a)=""/150, 0x96}], 0x1, &(0x7f00001bafb1)=""/79, 0x4f}, 0x0) sendto$inet(r0, &(0x7f0000f1a000)="dc", 0x1, 0x0, &(0x7f0000f1bff0)={0x2, 0x4e20, @empty}, 0x10) 2018/02/27 08:58:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1f8, 0x0, 0x1f8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x400) 2018/02/27 08:58:01 executing program 0: setitimer(0x1, &(0x7f0000000fe0)={{0x100000000000, 0x2710}, {0x77359400}}, &(0x7f0000000fe0)) 2018/02/27 08:58:01 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x2000004004031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f00000000c0)) [ 37.062395] encrypted_key: insufficient parameters specified 2018/02/27 08:58:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1f8, 0x0, 0x1f8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x400) 2018/02/27 08:58:02 executing program 0: setitimer(0x1, &(0x7f0000000fe0)={{0x100000000000, 0x2710}, {0x77359400}}, &(0x7f0000000fe0)) 2018/02/27 08:58:02 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x400, "032090a04d28401f6fc7366feec8efbca4a55045fe1ed2d44156b619b5e46cf3b6948ed5ec06daacc125e77c"}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="47a49290cc028aefb105d06796efc946dfe9bc", 0x13, 0xfffffffffffffffe) 2018/02/27 08:58:02 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\n']}) 2018/02/27 08:58:02 executing program 2: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000bc4000)='/selinux/access\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_access(r0, &(0x7f0000a53000)={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x30}, 0x4a) 2018/02/27 08:58:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000000b40)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @multicast2=0xe0000301}, 0x10, &(0x7f0000000500)=[], 0x0, &(0x7f0000000580)=[]}, 0x0) 2018/02/27 08:58:02 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/02/27 08:58:02 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'bpq0\x00', @ifru_addrs=@hci={0x1f}}) 2018/02/27 08:58:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000000b40)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @multicast2=0xe0000301}, 0x10, &(0x7f0000000500)=[], 0x0, &(0x7f0000000580)=[]}, 0x0) [ 37.152984] encrypted_key: insufficient parameters specified 2018/02/27 08:58:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1f8, 0x0, 0x1f8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x400) 2018/02/27 08:58:02 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'bpq0\x00', @ifru_addrs=@hci={0x1f}}) 2018/02/27 08:58:02 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\n']}) 2018/02/27 08:58:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000703000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x1000000000080fed, 0xf}) 2018/02/27 08:58:02 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x400, "032090a04d28401f6fc7366feec8efbca4a55045fe1ed2d44156b619b5e46cf3b6948ed5ec06daacc125e77c"}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="47a49290cc028aefb105d06796efc946dfe9bc", 0x13, 0xfffffffffffffffe) 2018/02/27 08:58:02 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/02/27 08:58:02 executing program 2: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000bc4000)='/selinux/access\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_access(r0, &(0x7f0000a53000)={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x30}, 0x4a) 2018/02/27 08:58:02 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'bpq0\x00', @ifru_addrs=@hci={0x1f}}) 2018/02/27 08:58:02 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\n']}) 2018/02/27 08:58:02 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/02/27 08:58:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1f8, 0x0, 0x1f8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x400) 2018/02/27 08:58:02 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'bpq0\x00', @ifru_addrs=@hci={0x1f}}) 2018/02/27 08:58:02 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x400, "032090a04d28401f6fc7366feec8efbca4a55045fe1ed2d44156b619b5e46cf3b6948ed5ec06daacc125e77c"}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="47a49290cc028aefb105d06796efc946dfe9bc", 0x13, 0xfffffffffffffffe) 2018/02/27 08:58:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000703000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x1000000000080fed, 0xf}) 2018/02/27 08:58:02 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\n']}) [ 37.234992] encrypted_key: insufficient parameters specified 2018/02/27 08:58:02 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'bpq0\x00', @ifru_addrs=@hci={0x1f}}) 2018/02/27 08:58:02 executing program 7: io_setup(0x9, &(0x7f000060e000)=0x0) io_destroy(r0) io_setup(0x8001, &(0x7f0000ef2000)) io_submit(r0, 0x0, &(0x7f0000758fe0)=[]) 2018/02/27 08:58:02 executing program 2: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000bc4000)='/selinux/access\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_access(r0, &(0x7f0000a53000)={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x30}, 0x4a) 2018/02/27 08:58:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x9, &(0x7f0000edd000)={0x0, 0x0, 0x1, @tid}, &(0x7f00007b3ffc)) 2018/02/27 08:58:02 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/02/27 08:58:02 executing program 1: keyctl$set_timeout(0x17, 0x0, 0x0) 2018/02/27 08:58:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000703000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x1000000000080fed, 0xf}) 2018/02/27 08:58:02 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'bpq0\x00', @ifru_addrs=@hci={0x1f}}) [ 37.296244] encrypted_key: insufficient parameters specified 2018/02/27 08:58:02 executing program 1: keyctl$set_timeout(0x17, 0x0, 0x0) 2018/02/27 08:58:02 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'bpq0\x00', @ifru_addrs=@hci={0x1f}}) 2018/02/27 08:58:02 executing program 2: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000bc4000)='/selinux/access\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_access(r0, &(0x7f0000a53000)={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x30}, 0x4a) 2018/02/27 08:58:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f000063bff8)={0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="080000008cf6"], &(0x7f0000000080)=0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000029b000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bfefbf)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000753ff0)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/27 08:58:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x9, &(0x7f0000edd000)={0x0, 0x0, 0x1, @tid}, &(0x7f00007b3ffc)) 2018/02/27 08:58:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xf) 2018/02/27 08:58:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f000024d000)={0x18, 0x23, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x16}, [@nested={0x4, 0x1, []}]}, 0x18}, 0x1}, 0x0) [ 37.476765] kasan: CONFIG_KASAN_INLINE enabled [ 37.481510] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 37.488931] general protection fault: 0000 [#1] SMP KASAN [ 37.494459] Dumping ftrace buffer: [ 37.497985] (ftrace buffer empty) [ 37.501680] Modules linked in: [ 37.504856] CPU: 0 PID: 6280 Comm: syz-executor6 Not tainted 4.16.0-rc3+ #331 [ 37.512103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.521443] RIP: 0010:hrtimer_active+0x1da/0x3c0 [ 37.526170] RSP: 0018:ffff8801d26ef3c0 EFLAGS: 00010202 [ 37.531506] RAX: 0000000000000008 RBX: 1ffff1003a4ddea5 RCX: ffffffff81610225 [ 37.538750] RDX: 0000000000010000 RSI: ffffc9000313b000 RDI: 0000000000000010 [ 37.545995] RBP: ffff8801d26ef500 R08: 0000000000002c02 R09: 0000000000000000 [ 37.553329] R10: 0000000000000011 R11: ffffed0035a2d078 R12: 0000000000000010 [ 37.560572] R13: 0000000000000000 R14: ffffed003a4dde83 R15: dffffc0000000000 [ 37.567820] FS: 00007f2bf8db6700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 37.576023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.581880] CR2: 00007f2bf8d95000 CR3: 00000001c2b3a004 CR4: 00000000001626f0 [ 37.589125] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.596369] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.603614] Call Trace: [ 37.606190] ? hrtimer_forward+0x2d0/0x2d0 [ 37.610401] ? vmx_update_msr_bitmap+0x13a/0x430 [ 37.615135] ? setup_msrs+0x926/0x1d80 [ 37.618997] ? vmx_set_cr4+0x353/0x610 [ 37.622866] hrtimer_try_to_cancel+0x91/0x5b0 [ 37.627337] ? update_exception_bitmap+0x19a/0x200 [ 37.632239] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 37.637143] ? vmx_vcpu_reset+0x55f/0xc70 [ 37.641263] ? load_vmcs12_host_state+0x1fa0/0x1fa0 [ 37.646258] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 37.651076] ? trace_hardirqs_off+0x10/0x10 [ 37.655370] ? __lock_is_held+0xb6/0x140 [ 37.659407] ? kvm_arch_vcpu_load+0x1c1/0x8d0 [ 37.663880] hrtimer_cancel+0x22/0x40 [ 37.667657] kvm_lapic_reset+0x93/0xf40 [ 37.671608] ? kvm_lapic_set_base+0x750/0x750 [ 37.676074] ? kvm_arch_vcpu_free+0x80/0x80 [ 37.680373] kvm_arch_vcpu_setup+0x31/0x50 [ 37.684583] kvm_vm_ioctl+0x52d/0x1cf0 [ 37.688452] ? perf_event_sync_stat+0x5b0/0x5b0 [ 37.693096] ? kvm_set_memory_region+0x50/0x50 [ 37.697653] ? find_held_lock+0x35/0x1d0 [ 37.701692] ? perf_trace_lock_acquire+0xe3/0x980 [ 37.706507] ? lock_downgrade+0x980/0x980 [ 37.710632] ? perf_trace_lock+0x900/0x900 [ 37.714840] ? lock_release+0xa40/0xa40 [ 37.718791] ? do_raw_spin_trylock+0x190/0x190 [ 37.723352] ? compat_start_thread+0x80/0x80 [ 37.727733] ? trace_hardirqs_off+0x10/0x10 [ 37.732027] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 37.737017] ? trace_hardirqs_on+0xd/0x10 [ 37.741140] ? _raw_spin_unlock_irq+0x27/0x70 [ 37.745612] ? finish_task_switch+0x1c1/0x7e0 [ 37.750087] ? find_held_lock+0x35/0x1d0 [ 37.754130] ? __fget+0x342/0x5b0 [ 37.757559] ? lock_downgrade+0x980/0x980 [ 37.761681] ? lock_release+0xa40/0xa40 [ 37.765632] ? __lock_is_held+0xb6/0x140 [ 37.769675] ? __fget+0x36b/0x5b0 [ 37.773109] ? iterate_fd+0x3f0/0x3f0 [ 37.776882] ? __fget_light+0x2b2/0x3c0 [ 37.780836] ? fget_raw+0x20/0x20 [ 37.784270] ? kvm_set_memory_region+0x50/0x50 [ 37.788831] do_vfs_ioctl+0x1b1/0x1520 [ 37.792699] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 37.797604] ? ioctl_preallocate+0x2b0/0x2b0 [ 37.801991] ? selinux_capable+0x40/0x40 [ 37.806031] ? __fdget+0x18/0x20 [ 37.809374] ? exit_to_usermode_loop+0x8b/0x2f0 [ 37.814025] ? security_file_ioctl+0x7d/0xb0 [ 37.818410] ? security_file_ioctl+0x89/0xb0 [ 37.822794] SyS_ioctl+0x8f/0xc0 [ 37.826135] ? do_vfs_ioctl+0x1520/0x1520 [ 37.830255] do_syscall_64+0x281/0x940 [ 37.834119] ? __do_page_fault+0xc90/0xc90 [ 37.838329] ? syscall_return_slowpath+0x550/0x550 [ 37.843236] ? syscall_return_slowpath+0x2ac/0x550 [ 37.848138] ? prepare_exit_to_usermode+0x350/0x350 [ 37.853216] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 37.858556] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.863376] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 37.868540] RIP: 0033:0x453d69 [ 37.871704] RSP: 002b:00007f2bf8db5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.879385] RAX: ffffffffffffffda RBX: 00007f2bf8db66d4 RCX: 0000000000453d69 [ 37.886629] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000014 [ 37.893872] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 37.901116] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 37.908360] R13: 000000000000020e R14: 00000000006f31f0 R15: 0000000000000000 [ 37.915614] Code: ff ff 48 8d 85 18 ff ff ff 48 c1 e8 03 4e 8d 34 38 e8 1b f2 0f 00 48 8b 85 f0 fe ff ff c6 00 00 48 8b 85 d8 fe ff ff 48 c1 e8 03 <42> 80 3c 38 00 0f 85 c2 01 00 00 48 8b 85 e8 fe ff ff 48 8b 58 [ 37.934720] RIP: hrtimer_active+0x1da/0x3c0 RSP: ffff8801d26ef3c0 [ 37.941228] ---[ end trace 071a93ff0080c7ab ]--- [ 37.945999] Kernel panic - not syncing: Fatal exception [ 37.951797] Dumping ftrace buffer: [ 37.955316] (ftrace buffer empty) [ 37.958995] Kernel Offset: disabled [ 37.962595] Rebooting in 86400 seconds..