[....] Starting enhanced syslogd: rsyslogd[ 16.688524] audit: type=1400 audit(1519721899.013:5): avc: denied { syslog } for pid=4082 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.644685] audit: type=1400 audit(1519721915.969:6): avc: denied { map } for pid=4225 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. 2018/02/27 08:58:42 fuzzer started [ 39.723960] audit: type=1400 audit(1519721922.048:7): avc: denied { map } for pid=4235 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/27 08:58:42 dialing manager at 10.128.0.26:35219 [ 42.260322] can: request_module (can-proto-0) failed. [ 42.269332] can: request_module (can-proto-0) failed. 2018/02/27 08:58:45 kcov=true, comps=true [ 42.743043] audit: type=1400 audit(1519721925.067:8): avc: denied { map } for pid=4235 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=62 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/27 08:58:45 executing program 7: syz_emit_ethernet(0x2e, &(0x7f0000009000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x40000000ffffff9e, 0x0, 0x0, @multicast1=0xe0000001, "89223dbc"}}}}}, &(0x7f0000004ff4)) 2018/02/27 08:58:45 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0xa, [], [@calipso={0x7, 0xfffffffffffffe23, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts={0x0, 0x0, [], []}, 0x8) 2018/02/27 08:58:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) 2018/02/27 08:58:45 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f00008aaff8)=0x8000000075) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fef000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f00006dc000)=""/210, 0xd2, 0x0, &(0x7f0000000080)=ANY=[], 0x0) close(r0) 2018/02/27 08:58:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000e57000)=[], 0x0, &(0x7f00006d2000)=[]}, 0x0) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/02/27 08:58:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0xb, 0x0, 0x0, {0x2, 0x8, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/02/27 08:58:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000db5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) close(r0) 2018/02/27 08:58:45 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000616000)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00009abffc)=0x8, 0x4) bind$inet(r1, &(0x7f0000afbff0)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) [ 42.986333] audit: type=1400 audit(1519721925.311:9): avc: denied { map } for pid=4235 comm="syz-fuzzer" path="/root/syzkaller-shm127988235" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 43.019340] audit: type=1400 audit(1519721925.344:10): avc: denied { sys_admin } for pid=4276 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 43.023367] IPVS: ftp: loaded support on port[0] = 21 [ 43.074611] audit: type=1400 audit(1519721925.399:11): avc: denied { net_admin } for pid=4277 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 43.100824] IPVS: ftp: loaded support on port[0] = 21 [ 43.130554] IPVS: ftp: loaded support on port[0] = 21 [ 43.167765] IPVS: ftp: loaded support on port[0] = 21 [ 43.210398] IPVS: ftp: loaded support on port[0] = 21 [ 43.252421] IPVS: ftp: loaded support on port[0] = 21 [ 43.303682] IPVS: ftp: loaded support on port[0] = 21 [ 43.379549] IPVS: ftp: loaded support on port[0] = 21 [ 44.267959] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.296664] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.326606] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.467611] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.571915] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.735639] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.794117] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.929102] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.058776] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.065075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.152751] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.158864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.316456] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.322764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.355765] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.361865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.397669] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.411146] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.472406] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.478538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.526432] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.532666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.589874] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.689155] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.695708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.711736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.726956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.734848] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.742604] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.749850] audit: type=1400 audit(1519721930.074:12): avc: denied { sys_chroot } for pid=4286 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 47.782397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.803694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.835968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.850507] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.856820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.892968] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.899262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.919967] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.927512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.937782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.020919] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.027247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.039431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.051880] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.058234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.065281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.097312] audit: type=1400 audit(1519721930.420:13): avc: denied { net_raw } for pid=5543 comm="syz-executor3" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 48.103452] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.138709] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.150430] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.156630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.164388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/27 08:58:50 executing program 7: syz_emit_ethernet(0x2e, &(0x7f0000009000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x40000000ffffff9e, 0x0, 0x0, @multicast1=0xe0000001, "89223dbc"}}}}}, &(0x7f0000004ff4)) 2018/02/27 08:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0xa, [], [@calipso={0x7, 0xfffffffffffffe23, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts={0x0, 0x0, [], []}, 0x8) 2018/02/27 08:58:50 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) dup2(r0, r2) 2018/02/27 08:58:50 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f00008aaff8)=0x8000000075) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fef000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f00006dc000)=""/210, 0xd2, 0x0, &(0x7f0000000080)=ANY=[], 0x0) close(r0) 2018/02/27 08:58:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000db5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) close(r0) 2018/02/27 08:58:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000e57000)=[], 0x0, &(0x7f00006d2000)=[]}, 0x0) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/02/27 08:58:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0xb, 0x0, 0x0, {0x2, 0x8, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/02/27 08:58:50 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000616000)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00009abffc)=0x8, 0x4) bind$inet(r1, &(0x7f0000afbff0)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) [ 48.238439] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.244657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.252697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.261496] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.267695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.277388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/27 08:58:50 executing program 7: syz_emit_ethernet(0x2e, &(0x7f0000009000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x40000000ffffff9e, 0x0, 0x0, @multicast1=0xe0000001, "89223dbc"}}}}}, &(0x7f0000004ff4)) 2018/02/27 08:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0xa, [], [@calipso={0x7, 0xfffffffffffffe23, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts={0x0, 0x0, [], []}, 0x8) 2018/02/27 08:58:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000e57000)=[], 0x0, &(0x7f00006d2000)=[]}, 0x0) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/02/27 08:58:50 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000616000)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00009abffc)=0x8, 0x4) bind$inet(r1, &(0x7f0000afbff0)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0xb, 0x0, 0x0, {0x2, 0x8, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/02/27 08:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0xa, [], [@calipso={0x7, 0xfffffffffffffe23, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts={0x0, 0x0, [], []}, 0x8) 2018/02/27 08:58:50 executing program 7: syz_emit_ethernet(0x2e, &(0x7f0000009000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x40000000ffffff9e, 0x0, 0x0, @multicast1=0xe0000001, "89223dbc"}}}}}, &(0x7f0000004ff4)) 2018/02/27 08:58:50 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000616000)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00009abffc)=0x8, 0x4) bind$inet(r1, &(0x7f0000afbff0)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:50 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) dup2(r0, r2) 2018/02/27 08:58:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000e57000)=[], 0x0, &(0x7f00006d2000)=[]}, 0x0) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/02/27 08:58:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000db5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) close(r0) 2018/02/27 08:58:50 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f00008aaff8)=0x8000000075) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fef000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f00006dc000)=""/210, 0xd2, 0x0, &(0x7f0000000080)=ANY=[], 0x0) close(r0) 2018/02/27 08:58:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0xb, 0x0, 0x0, {0x2, 0x8, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/02/27 08:58:50 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) dup2(r0, r2) 2018/02/27 08:58:50 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) dup2(r0, r2) 2018/02/27 08:58:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000db5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) close(r0) 2018/02/27 08:58:50 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) dup2(r0, r2) 2018/02/27 08:58:50 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) dup2(r0, r2) 2018/02/27 08:58:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000db5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) close(r0) 2018/02/27 08:58:50 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000e57000)=[], 0x0, &(0x7f00006d2000)=[]}, 0x0) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/02/27 08:58:50 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) dup2(r0, r2) 2018/02/27 08:58:50 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000e57000)=[], 0x0, &(0x7f00006d2000)=[]}, 0x0) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/02/27 08:58:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000db5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) close(r0) 2018/02/27 08:58:50 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) dup2(r0, r2) 2018/02/27 08:58:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000db5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) close(r0) 2018/02/27 08:58:50 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f00008aaff8)=0x8000000075) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fef000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f00006dc000)=""/210, 0xd2, 0x0, &(0x7f0000000080)=ANY=[], 0x0) close(r0) 2018/02/27 08:58:50 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) dup2(r0, r2) 2018/02/27 08:58:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000db5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) close(r0) 2018/02/27 08:58:50 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) dup2(r0, r2) 2018/02/27 08:58:50 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000e57000)=[], 0x0, &(0x7f00006d2000)=[]}, 0x0) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/02/27 08:58:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000e57000)=[], 0x0, &(0x7f00006d2000)=[]}, 0x0) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/02/27 08:58:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0xa, [], [@calipso={0x7, 0xfffffffffffffe23, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts={0x0, 0x0, [], []}, 0x8) 2018/02/27 08:58:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000db5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) close(r0) 2018/02/27 08:58:50 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f00008aaff8)=0x8000000075) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fef000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f00006dc000)=""/210, 0xd2, 0x0, &(0x7f0000000080)=ANY=[], 0x0) close(r0) 2018/02/27 08:58:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000e57000)=[], 0x0, &(0x7f00006d2000)=[]}, 0x0) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/02/27 08:58:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0xa, [], [@calipso={0x7, 0xfffffffffffffe23, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts={0x0, 0x0, [], []}, 0x8) 2018/02/27 08:58:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x0, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f00001a5fc0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00009f1fc8)={&(0x7f0000db5000)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00000001c0)=[]}, 0x0) 2018/02/27 08:58:50 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002bb000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000fd0000)="0a07759ab0f0e5b30000020054dbb736001400000000000000ff0100000aff6e", 0x20) 2018/02/27 08:58:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000c89000)=[{{0x77359400}, 0x1, 0x52, 0x400000002}], 0x198) 2018/02/27 08:58:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000e57000)=[], 0x0, &(0x7f00006d2000)=[]}, 0x0) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/02/27 08:58:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fb4fa0)=@hopopts={0x0, 0xa, [], [@calipso={0x7, 0xfffffffffffffe23, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x60) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016a000)=@dstopts={0x0, 0x0, [], []}, 0x8) 2018/02/27 08:58:51 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x0, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f00001a5fc0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00009f1fc8)={&(0x7f0000db5000)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00000001c0)=[]}, 0x0) 2018/02/27 08:58:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f000039e000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000802000)) 2018/02/27 08:58:51 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002bb000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000fd0000)="0a07759ab0f0e5b30000020054dbb736001400000000000000ff0100000aff6e", 0x20) 2018/02/27 08:58:51 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f00008aaff8)=0x8000000075) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fef000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f00006dc000)=""/210, 0xd2, 0x0, &(0x7f0000000080)=ANY=[], 0x0) close(r0) 2018/02/27 08:58:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000fa6000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000db5000)={0x3, 0x0, 0x1, 0x3}) 2018/02/27 08:58:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x40084504, &(0x7f0000000000)=""/157) 2018/02/27 08:58:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000c89000)=[{{0x77359400}, 0x1, 0x52, 0x400000002}], 0x198) 2018/02/27 08:58:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x0, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f00001a5fc0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00009f1fc8)={&(0x7f0000db5000)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00000001c0)=[]}, 0x0) 2018/02/27 08:58:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000fa6000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000db5000)={0x3, 0x0, 0x1, 0x3}) 2018/02/27 08:58:51 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x0, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f00001a5fc0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00009f1fc8)={&(0x7f0000db5000)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00000001c0)=[]}, 0x0) 2018/02/27 08:58:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x40084504, &(0x7f0000000000)=""/157) [ 48.715185] ion_ioctl: ioctl validate failed 2018/02/27 08:58:51 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002bb000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000fd0000)="0a07759ab0f0e5b30000020054dbb736001400000000000000ff0100000aff6e", 0x20) 2018/02/27 08:58:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f000039e000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000802000)) 2018/02/27 08:58:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000c89000)=[{{0x77359400}, 0x1, 0x52, 0x400000002}], 0x198) 2018/02/27 08:58:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x0, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f00001a5fc0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00009f1fc8)={&(0x7f0000db5000)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00000001c0)=[]}, 0x0) 2018/02/27 08:58:51 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002bb000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000fd0000)="0a07759ab0f0e5b30000020054dbb736001400000000000000ff0100000aff6e", 0x20) 2018/02/27 08:58:51 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f00008aaff8)=0x8000000075) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fef000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f00006dc000)=""/210, 0xd2, 0x0, &(0x7f0000000080)=ANY=[], 0x0) close(r0) 2018/02/27 08:58:51 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x0, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f00001a5fc0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00009f1fc8)={&(0x7f0000db5000)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00000001c0)=[]}, 0x0) 2018/02/27 08:58:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f000039e000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000802000)) 2018/02/27 08:58:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000fa6000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000db5000)={0x3, 0x0, 0x1, 0x3}) 2018/02/27 08:58:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000c89000)=[{{0x77359400}, 0x1, 0x52, 0x400000002}], 0x198) 2018/02/27 08:58:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x40084504, &(0x7f0000000000)=""/157) 2018/02/27 08:58:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f000039e000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000802000)) 2018/02/27 08:58:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x0, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f00001a5fc0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00009f1fc8)={&(0x7f0000db5000)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00000001c0)=[]}, 0x0) 2018/02/27 08:58:51 executing program 7: perf_event_open(&(0x7f0000925000)={0x2, 0x78, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)={0x0, 0x0}) tkill(r1, 0x1f) 2018/02/27 08:58:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x40084504, &(0x7f0000000000)=""/157) 2018/02/27 08:58:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000fa6000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000db5000)={0x3, 0x0, 0x1, 0x3}) 2018/02/27 08:58:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:51 executing program 4: r0 = socket$rds(0xa, 0x2, 0x88) sendmsg$rds(r0, &(0x7f0000017000)={&(0x7f0000015ff3)={0x2, 0x4e21, @empty}, 0x10, &(0x7f000000d000)=[], 0x0, &(0x7f000000ef03)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000005ff8), &(0x7f000001eff8)}}, @fadd={0x44, 0x114, 0x6, {{}, &(0x7f000001bff8), &(0x7f0000009ff8), 0x0, 0x0, 0x0, 0x0, 0x14, 0x100000000}}, @rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f000000f000)}, &(0x7f000001e000)=[{&(0x7f0000012000)=""/15, 0x301}], 0x1}}, @mask_cswp={0xb, 0x114, 0x9, {{}, &(0x7f0000012ff8), &(0x7f000001cff8)}}], 0xba}, 0x0) 2018/02/27 08:58:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000cb1000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000ef9000), 0x0, 0x0, &(0x7f000015a000)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f000050d000)={0x0, 0x0, &(0x7f000095dff0)=[], 0x0, &(0x7f0000765faf)}, 0x0) 2018/02/27 08:58:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eafd0)={0x87, 0x0, &(0x7f0000d88000)=ANY=[@ANYBLOB="04630440010000005eddcec838da362ecf6502926e0ceec990a6a4e4d0a71b37f85091813bff1ab9854ca4075b96f988f5af128aeb7f944dcee555f64fe7ceb3342cc09c9558eb223d33bbba8f5edac2a286d50a8edd17a5f0cb84b4168a7bbdc113cf076988bcef7e89ecbd6d5ce55b62f06ac1ec076b9425be00a35e0aa080aecad17cdd847b"], 0x0, 0x0, &(0x7f00004ec000)}) 2018/02/27 08:58:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x11, 0x2ff, 0x0, 0x0, {0x7}, [@typed={0xc, 0x0, @u32}, @nested={0x20, 0x1a, [@typed={0x18, 0x6e, @ipv6=@loopback={0x0, 0x1}}, @generic="03"]}]}, 0x40}, 0x1}, 0x0) [ 48.904415] audit: type=1400 audit(1519721931.229:14): avc: denied { dac_read_search } for pid=5738 comm="syz-executor7" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/27 08:58:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000858000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000a1fff4)={0x4}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000005000)={0x4}) 2018/02/27 08:58:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x11, 0x2ff, 0x0, 0x0, {0x7}, [@typed={0xc, 0x0, @u32}, @nested={0x20, 0x1a, [@typed={0x18, 0x6e, @ipv6=@loopback={0x0, 0x1}}, @generic="03"]}]}, 0x40}, 0x1}, 0x0) 2018/02/27 08:58:51 executing program 4: r0 = socket$rds(0xa, 0x2, 0x88) sendmsg$rds(r0, &(0x7f0000017000)={&(0x7f0000015ff3)={0x2, 0x4e21, @empty}, 0x10, &(0x7f000000d000)=[], 0x0, &(0x7f000000ef03)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000005ff8), &(0x7f000001eff8)}}, @fadd={0x44, 0x114, 0x6, {{}, &(0x7f000001bff8), &(0x7f0000009ff8), 0x0, 0x0, 0x0, 0x0, 0x14, 0x100000000}}, @rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f000000f000)}, &(0x7f000001e000)=[{&(0x7f0000012000)=""/15, 0x301}], 0x1}}, @mask_cswp={0xb, 0x114, 0x9, {{}, &(0x7f0000012ff8), &(0x7f000001cff8)}}], 0xba}, 0x0) [ 48.945140] audit: type=1400 audit(1519721931.256:15): avc: denied { map } for pid=5747 comm="syz-executor6" path="/dev/usbmon0" dev="devtmpfs" ino=9496 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usbmon_device_t:s0 tclass=chr_file permissive=1 [ 49.000938] binder: release 5757:5763 transaction 2 out, still active [ 49.007706] binder: unexpected work type, 4, not freed [ 49.011180] audit: type=1400 audit(1519721931.308:16): avc: denied { map } for pid=5757 comm="syz-executor5" path="/dev/binder0" dev="devtmpfs" ino=120 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 49.013031] binder: undelivered TRANSACTION_COMPLETE [ 49.037670] audit: type=1400 audit(1519721931.310:17): avc: denied { set_context_mgr } for pid=5757 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 49.057788] binder: invalid inc weak node for 3 [ 49.065972] audit: type=1400 audit(1519721931.314:18): avc: denied { call } for pid=5757 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 49.070686] binder: 5757:5763 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 49.092916] audit: type=1400 audit(1519721931.314:19): avc: denied { transfer } for pid=5757 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 49.100432] binder: 5757:5763 unknown command -925967010 [ 49.129831] binder: 5757:5763 ioctl c0306201 201eafd0 returned -22 [ 49.141665] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/27 08:58:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eafd0)={0x87, 0x0, &(0x7f0000d88000)=ANY=[@ANYBLOB="04630440010000005eddcec838da362ecf6502926e0ceec990a6a4e4d0a71b37f85091813bff1ab9854ca4075b96f988f5af128aeb7f944dcee555f64fe7ceb3342cc09c9558eb223d33bbba8f5edac2a286d50a8edd17a5f0cb84b4168a7bbdc113cf076988bcef7e89ecbd6d5ce55b62f06ac1ec076b9425be00a35e0aa080aecad17cdd847b"], 0x0, 0x0, &(0x7f00004ec000)}) 2018/02/27 08:58:51 executing program 4: r0 = socket$rds(0xa, 0x2, 0x88) sendmsg$rds(r0, &(0x7f0000017000)={&(0x7f0000015ff3)={0x2, 0x4e21, @empty}, 0x10, &(0x7f000000d000)=[], 0x0, &(0x7f000000ef03)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000005ff8), &(0x7f000001eff8)}}, @fadd={0x44, 0x114, 0x6, {{}, &(0x7f000001bff8), &(0x7f0000009ff8), 0x0, 0x0, 0x0, 0x0, 0x14, 0x100000000}}, @rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f000000f000)}, &(0x7f000001e000)=[{&(0x7f0000012000)=""/15, 0x301}], 0x1}}, @mask_cswp={0xb, 0x114, 0x9, {{}, &(0x7f0000012ff8), &(0x7f000001cff8)}}], 0xba}, 0x0) 2018/02/27 08:58:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x11, 0x2ff, 0x0, 0x0, {0x7}, [@typed={0xc, 0x0, @u32}, @nested={0x20, 0x1a, [@typed={0x18, 0x6e, @ipv6=@loopback={0x0, 0x1}}, @generic="03"]}]}, 0x40}, 0x1}, 0x0) 2018/02/27 08:58:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:51 executing program 7: perf_event_open(&(0x7f0000925000)={0x2, 0x78, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)={0x0, 0x0}) tkill(r1, 0x1f) 2018/02/27 08:58:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000cb1000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000ef9000), 0x0, 0x0, &(0x7f000015a000)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f000050d000)={0x0, 0x0, &(0x7f000095dff0)=[], 0x0, &(0x7f0000765faf)}, 0x0) 2018/02/27 08:58:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eafd0)={0x87, 0x0, &(0x7f0000d88000)=ANY=[@ANYBLOB="04630440010000005eddcec838da362ecf6502926e0ceec990a6a4e4d0a71b37f85091813bff1ab9854ca4075b96f988f5af128aeb7f944dcee555f64fe7ceb3342cc09c9558eb223d33bbba8f5edac2a286d50a8edd17a5f0cb84b4168a7bbdc113cf076988bcef7e89ecbd6d5ce55b62f06ac1ec076b9425be00a35e0aa080aecad17cdd847b"], 0x0, 0x0, &(0x7f00004ec000)}) 2018/02/27 08:58:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eafd0)={0x87, 0x0, &(0x7f0000d88000)=ANY=[@ANYBLOB="04630440010000005eddcec838da362ecf6502926e0ceec990a6a4e4d0a71b37f85091813bff1ab9854ca4075b96f988f5af128aeb7f944dcee555f64fe7ceb3342cc09c9558eb223d33bbba8f5edac2a286d50a8edd17a5f0cb84b4168a7bbdc113cf076988bcef7e89ecbd6d5ce55b62f06ac1ec076b9425be00a35e0aa080aecad17cdd847b"], 0x0, 0x0, &(0x7f00004ec000)}) 2018/02/27 08:58:51 executing program 4: r0 = socket$rds(0xa, 0x2, 0x88) sendmsg$rds(r0, &(0x7f0000017000)={&(0x7f0000015ff3)={0x2, 0x4e21, @empty}, 0x10, &(0x7f000000d000)=[], 0x0, &(0x7f000000ef03)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000005ff8), &(0x7f000001eff8)}}, @fadd={0x44, 0x114, 0x6, {{}, &(0x7f000001bff8), &(0x7f0000009ff8), 0x0, 0x0, 0x0, 0x0, 0x14, 0x100000000}}, @rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f000000f000)}, &(0x7f000001e000)=[{&(0x7f0000012000)=""/15, 0x301}], 0x1}}, @mask_cswp={0xb, 0x114, 0x9, {{}, &(0x7f0000012ff8), &(0x7f000001cff8)}}], 0xba}, 0x0) 2018/02/27 08:58:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 49.147092] binder: 5757:5771 ioctl 40046207 0 returned -16 [ 49.162288] binder: send failed reply for transaction 2, target dead 2018/02/27 08:58:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x11, 0x2ff, 0x0, 0x0, {0x7}, [@typed={0xc, 0x0, @u32}, @nested={0x20, 0x1a, [@typed={0x18, 0x6e, @ipv6=@loopback={0x0, 0x1}}, @generic="03"]}]}, 0x40}, 0x1}, 0x0) 2018/02/27 08:58:51 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000cb1000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000ef9000), 0x0, 0x0, &(0x7f000015a000)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f000050d000)={0x0, 0x0, &(0x7f000095dff0)=[], 0x0, &(0x7f0000765faf)}, 0x0) [ 49.216141] binder: release 5778:5784 transaction 6 out, still active [ 49.222886] binder: unexpected work type, 4, not freed [ 49.228189] binder: undelivered TRANSACTION_COMPLETE [ 49.240926] binder: invalid inc weak node for 7 [ 49.245682] binder: 5778:5795 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 49.248412] binder: release 5775:5786 transaction 9 out, still active [ 49.253519] binder: 5778:5795 unknown command -925967010 2018/02/27 08:58:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000cb1000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000ef9000), 0x0, 0x0, &(0x7f000015a000)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f000050d000)={0x0, 0x0, &(0x7f000095dff0)=[], 0x0, &(0x7f0000765faf)}, 0x0) 2018/02/27 08:58:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000cb1000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000ef9000), 0x0, 0x0, &(0x7f000015a000)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f000050d000)={0x0, 0x0, &(0x7f000095dff0)=[], 0x0, &(0x7f0000765faf)}, 0x0) 2018/02/27 08:58:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 49.259878] binder: unexpected work type, 4, not freed [ 49.270598] binder: undelivered TRANSACTION_COMPLETE [ 49.271854] binder: release 5779:5787 transaction 12 out, still active [ 49.279171] binder: 5775:5790 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 49.282432] binder: unexpected work type, 4, not freed [ 49.282436] binder: undelivered TRANSACTION_COMPLETE [ 49.292800] binder: 5778:5795 ioctl c0306201 201eafd0 returned -22 [ 49.295313] binder: 5775:5790 unknown command -925967010 [ 49.312702] binder: 5775:5790 ioctl c0306201 201eafd0 returned -22 [ 49.318153] binder: 5779:5787 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 49.326726] binder: 5779:5787 unknown command -925967010 [ 49.336818] binder: 5779:5787 ioctl c0306201 201eafd0 returned -22 [ 49.357441] binder: send failed reply for transaction 6, target dead 2018/02/27 08:58:51 executing program 7: perf_event_open(&(0x7f0000925000)={0x2, 0x78, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)={0x0, 0x0}) tkill(r1, 0x1f) 2018/02/27 08:58:51 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000cb1000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000ef9000), 0x0, 0x0, &(0x7f000015a000)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f000050d000)={0x0, 0x0, &(0x7f000095dff0)=[], 0x0, &(0x7f0000765faf)}, 0x0) 2018/02/27 08:58:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eafd0)={0x87, 0x0, &(0x7f0000d88000)=ANY=[@ANYBLOB="04630440010000005eddcec838da362ecf6502926e0ceec990a6a4e4d0a71b37f85091813bff1ab9854ca4075b96f988f5af128aeb7f944dcee555f64fe7ceb3342cc09c9558eb223d33bbba8f5edac2a286d50a8edd17a5f0cb84b4168a7bbdc113cf076988bcef7e89ecbd6d5ce55b62f06ac1ec076b9425be00a35e0aa080aecad17cdd847b"], 0x0, 0x0, &(0x7f00004ec000)}) 2018/02/27 08:58:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eafd0)={0x87, 0x0, &(0x7f0000d88000)=ANY=[@ANYBLOB="04630440010000005eddcec838da362ecf6502926e0ceec990a6a4e4d0a71b37f85091813bff1ab9854ca4075b96f988f5af128aeb7f944dcee555f64fe7ceb3342cc09c9558eb223d33bbba8f5edac2a286d50a8edd17a5f0cb84b4168a7bbdc113cf076988bcef7e89ecbd6d5ce55b62f06ac1ec076b9425be00a35e0aa080aecad17cdd847b"], 0x0, 0x0, &(0x7f00004ec000)}) 2018/02/27 08:58:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eafd0)={0x87, 0x0, &(0x7f0000d88000)=ANY=[@ANYBLOB="04630440010000005eddcec838da362ecf6502926e0ceec990a6a4e4d0a71b37f85091813bff1ab9854ca4075b96f988f5af128aeb7f944dcee555f64fe7ceb3342cc09c9558eb223d33bbba8f5edac2a286d50a8edd17a5f0cb84b4168a7bbdc113cf076988bcef7e89ecbd6d5ce55b62f06ac1ec076b9425be00a35e0aa080aecad17cdd847b"], 0x0, 0x0, &(0x7f00004ec000)}) 2018/02/27 08:58:51 executing program 3: perf_event_open(&(0x7f0000925000)={0x2, 0x78, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)={0x0, 0x0}) tkill(r1, 0x1f) 2018/02/27 08:58:51 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000cb1000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000ef9000), 0x0, 0x0, &(0x7f000015a000)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f000050d000)={0x0, 0x0, &(0x7f000095dff0)=[], 0x0, &(0x7f0000765faf)}, 0x0) [ 49.364209] binder: send failed reply for transaction 9, target dead [ 49.370743] binder: send failed reply for transaction 12, target dead [ 49.394684] binder: release 5810:5814 transaction 16 out, still active [ 49.401446] binder: unexpected work type, 4, not freed [ 49.406750] binder: undelivered TRANSACTION_COMPLETE 2018/02/27 08:58:51 executing program 4: perf_event_open(&(0x7f0000925000)={0x2, 0x78, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)={0x0, 0x0}) tkill(r1, 0x1f) 2018/02/27 08:58:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:51 executing program 3: perf_event_open(&(0x7f0000925000)={0x2, 0x78, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)={0x0, 0x0}) tkill(r1, 0x1f) [ 49.417472] binder: BINDER_SET_CONTEXT_MGR already set [ 49.424621] binder: BINDER_SET_CONTEXT_MGR already set [ 49.425052] binder: invalid inc weak node for 17 [ 49.434772] binder: 5810:5825 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 49.442353] binder: 5810:5825 unknown command -925967010 [ 49.442762] binder: 5813:5820 ioctl 40046207 0 returned -16 [ 49.457665] binder: release 5806:5828 transaction 19 out, still active 2018/02/27 08:58:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 49.464474] binder: 5806:5816 ioctl 40046207 0 returned -16 [ 49.470272] binder: unexpected work type, 4, not freed [ 49.470670] binder: release 5813:5829 transaction 22 out, still active [ 49.475555] binder: undelivered TRANSACTION_COMPLETE [ 49.480251] binder: 5806:5816 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 49.482284] binder: unexpected work type, 4, not freed [ 49.482289] binder: undelivered TRANSACTION_COMPLETE [ 49.495588] binder: 5813:5835 IncRefs 0 refcount change on invalid ref 1 ret -22 2018/02/27 08:58:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:51 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000)=[], 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/02/27 08:58:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:51 executing program 7: perf_event_open(&(0x7f0000925000)={0x2, 0x78, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)={0x0, 0x0}) tkill(r1, 0x1f) 2018/02/27 08:58:51 executing program 3: perf_event_open(&(0x7f0000925000)={0x2, 0x78, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)={0x0, 0x0}) tkill(r1, 0x1f) 2018/02/27 08:58:51 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)=ANY=[@ANYBLOB="020d000010000000000000000000000003000600000000000200000031ebf8c7000000000000000003000500000000000200000000000000000000000000000008001200020001000000000000000000100000000303000000000000000000001d00000100000000000000000000ffffe0000001000000000000000000000000"], 0x80}, 0x1}, 0x0) 2018/02/27 08:58:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eafd0)={0x87, 0x0, &(0x7f0000d88000)=ANY=[@ANYBLOB="04630440010000005eddcec838da362ecf6502926e0ceec990a6a4e4d0a71b37f85091813bff1ab9854ca4075b96f988f5af128aeb7f944dcee555f64fe7ceb3342cc09c9558eb223d33bbba8f5edac2a286d50a8edd17a5f0cb84b4168a7bbdc113cf076988bcef7e89ecbd6d5ce55b62f06ac1ec076b9425be00a35e0aa080aecad17cdd847b"], 0x0, 0x0, &(0x7f00004ec000)}) [ 49.500370] binder: 5806:5816 unknown command -925967010 [ 49.500926] binder: 5806:5816 ioctl c0306201 201eafd0 returned -22 [ 49.505519] binder: 5813:5835 unknown command -925967010 [ 49.511164] binder: 5813:5835 ioctl c0306201 201eafd0 returned -22 [ 49.535690] binder: 5810:5825 ioctl c0306201 201eafd0 returned -22 2018/02/27 08:58:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eafd0)={0x87, 0x0, &(0x7f0000d88000)=ANY=[@ANYBLOB="04630440010000005eddcec838da362ecf6502926e0ceec990a6a4e4d0a71b37f85091813bff1ab9854ca4075b96f988f5af128aeb7f944dcee555f64fe7ceb3342cc09c9558eb223d33bbba8f5edac2a286d50a8edd17a5f0cb84b4168a7bbdc113cf076988bcef7e89ecbd6d5ce55b62f06ac1ec076b9425be00a35e0aa080aecad17cdd847b"], 0x0, 0x0, &(0x7f00004ec000)}) [ 49.585129] binder: send failed reply for transaction 16, target dead [ 49.591818] binder: send failed reply for transaction 19, target dead [ 49.598434] binder: send failed reply for transaction 22, target dead [ 49.622966] binder: BINDER_SET_CONTEXT_MGR already set [ 49.628406] binder: 5855:5856 ioctl 40046207 0 returned -16 [ 49.630590] binder: release 5849:5853 transaction 26 out, still active [ 49.641006] binder: unexpected work type, 4, not freed [ 49.646309] binder: undelivered TRANSACTION_COMPLETE [ 49.652604] binder: release 5855:5856 transaction 29 out, still active [ 49.655229] binder: invalid inc weak node for 27 [ 49.659488] binder: unexpected work type, 4, not freed [ 49.664185] binder: 5849:5853 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 49.669430] binder: undelivered TRANSACTION_COMPLETE 2018/02/27 08:58:52 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xaab000)=nil, 0xaab000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x800000000000010d, 0x0, &(0x7f0000000000)=""/4, &(0x7f0000000080)) 2018/02/27 08:58:52 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000)=[], 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/02/27 08:58:52 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000)=[], 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/02/27 08:58:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000)=[], 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/02/27 08:58:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)=ANY=[@ANYBLOB="020d000010000000000000000000000003000600000000000200000031ebf8c7000000000000000003000500000000000200000000000000000000000000000008001200020001000000000000000000100000000303000000000000000000001d00000100000000000000000000ffffe0000001000000000000000000000000"], 0x80}, 0x1}, 0x0) 2018/02/27 08:58:52 executing program 4: perf_event_open(&(0x7f0000925000)={0x2, 0x78, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)={0x0, 0x0}) tkill(r1, 0x1f) 2018/02/27 08:58:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00008f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000686000)=@file={0x1, './file0\x00'}, 0xa) r1 = dup2(r0, r0) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000a84ffc)) 2018/02/27 08:58:52 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000973000)=""/241) [ 49.676960] binder: 5849:5853 unknown command -925967010 [ 49.688092] binder: 5849:5853 ioctl c0306201 201eafd0 returned -22 [ 49.691393] binder: 5855:5856 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 49.701218] binder: send failed reply for transaction 26, target dead [ 49.702162] binder: 5855:5856 unknown command -925967010 [ 49.709172] binder: send failed reply for transaction 29, target dead [ 49.715492] binder: 5855:5856 ioctl c0306201 201eafd0 returned -22 2018/02/27 08:58:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)=ANY=[@ANYBLOB="020d000010000000000000000000000003000600000000000200000031ebf8c7000000000000000003000500000000000200000000000000000000000000000008001200020001000000000000000000100000000303000000000000000000001d00000100000000000000000000ffffe0000001000000000000000000000000"], 0x80}, 0x1}, 0x0) 2018/02/27 08:58:52 executing program 4: perf_event_open(&(0x7f0000925000)={0x2, 0x78, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)={0x0, 0x0}) tkill(r1, 0x1f) 2018/02/27 08:58:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00008f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000686000)=@file={0x1, './file0\x00'}, 0xa) r1 = dup2(r0, r0) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000a84ffc)) 2018/02/27 08:58:52 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xaab000)=nil, 0xaab000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x800000000000010d, 0x0, &(0x7f0000000000)=""/4, &(0x7f0000000080)) 2018/02/27 08:58:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)=ANY=[@ANYBLOB="020d000010000000000000000000000003000600000000000200000031ebf8c7000000000000000003000500000000000200000000000000000000000000000008001200020001000000000000000000100000000303000000000000000000001d00000100000000000000000000ffffe0000001000000000000000000000000"], 0x80}, 0x1}, 0x0) 2018/02/27 08:58:52 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000)=[], 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/02/27 08:58:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000)=[], 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/02/27 08:58:52 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000)=[], 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/02/27 08:58:52 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000973000)=""/241) 2018/02/27 08:58:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00008f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000686000)=@file={0x1, './file0\x00'}, 0xa) r1 = dup2(r0, r0) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000a84ffc)) 2018/02/27 08:58:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000973000)=""/241) 2018/02/27 08:58:52 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xaab000)=nil, 0xaab000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x800000000000010d, 0x0, &(0x7f0000000000)=""/4, &(0x7f0000000080)) 2018/02/27 08:58:52 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000)=[], 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/02/27 08:58:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a}, &(0x7f0000ca4e82), 0x0, 0x0) request_key(&(0x7f000099b000)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:52 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000973000)=""/241) 2018/02/27 08:58:52 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000)=[], 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/02/27 08:58:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00008f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000686000)=@file={0x1, './file0\x00'}, 0xa) r1 = dup2(r0, r0) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000a84ffc)) 2018/02/27 08:58:52 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xaab000)=nil, 0xaab000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x800000000000010d, 0x0, &(0x7f0000000000)=""/4, &(0x7f0000000080)) 2018/02/27 08:58:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000973000)=""/241) 2018/02/27 08:58:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000)=[], 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/02/27 08:58:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a}, &(0x7f0000ca4e82), 0x0, 0x0) request_key(&(0x7f000099b000)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:52 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'%rlan0\x00', @ifru_mtu=0x7}) 2018/02/27 08:58:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a}, &(0x7f0000ca4e82), 0x0, 0x0) request_key(&(0x7f000099b000)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:52 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000973000)=""/241) 2018/02/27 08:58:52 executing program 3: getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff]) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='X', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, r0) 2018/02/27 08:58:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000973000)=""/241) 2018/02/27 08:58:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a}, &(0x7f0000ca4e82), 0x0, 0x0) request_key(&(0x7f000099b000)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:52 executing program 6: sched_setaffinity(0x0, 0x128f89f95b64e5ca, &(0x7f00004a5000)=0x2) msgrcv(0x0, &(0x7f0000e3b000)={0x0, ""/230}, 0xee, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/27 08:58:52 executing program 3: getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff]) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='X', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, r0) 2018/02/27 08:58:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x94, 0x8}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/02/27 08:58:52 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000003ff0)=@ipx={0x4, 0x0, 0x0, "3d177ba842df"}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e3133bfc10ad4f1e"}}, 0x48}, 0x1}, 0x0) 2018/02/27 08:58:52 executing program 7: capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000ed6ff6)='map_files\x00') fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000a7a000)="656d3073656c66a673656c696e757800", 0x10, 0x0) 2018/02/27 08:58:52 executing program 6: sched_setaffinity(0x0, 0x128f89f95b64e5ca, &(0x7f00004a5000)=0x2) msgrcv(0x0, &(0x7f0000e3b000)={0x0, ""/230}, 0xee, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/27 08:58:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a}, &(0x7f0000ca4e82), 0x0, 0x0) request_key(&(0x7f000099b000)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a}, &(0x7f0000ca4e82), 0x0, 0x0) request_key(&(0x7f000099b000)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:52 executing program 0: sched_setaffinity(0x0, 0x128f89f95b64e5ca, &(0x7f00004a5000)=0x2) msgrcv(0x0, &(0x7f0000e3b000)={0x0, ""/230}, 0xee, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/27 08:58:52 executing program 0: sched_setaffinity(0x0, 0x128f89f95b64e5ca, &(0x7f00004a5000)=0x2) msgrcv(0x0, &(0x7f0000e3b000)={0x0, ""/230}, 0xee, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/27 08:58:52 executing program 6: sched_setaffinity(0x0, 0x128f89f95b64e5ca, &(0x7f00004a5000)=0x2) msgrcv(0x0, &(0x7f0000e3b000)={0x0, ""/230}, 0xee, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/27 08:58:52 executing program 3: getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff]) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='X', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, r0) 2018/02/27 08:58:52 executing program 0: sched_setaffinity(0x0, 0x128f89f95b64e5ca, &(0x7f00004a5000)=0x2) msgrcv(0x0, &(0x7f0000e3b000)={0x0, ""/230}, 0xee, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) [ 50.095572] audit: type=1400 audit(1519721932.420:20): avc: denied { map_create } for pid=5936 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 50.096707] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) 2018/02/27 08:58:52 executing program 3: getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff]) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='X', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, r0) 2018/02/27 08:58:52 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000003ff0)=@ipx={0x4, 0x0, 0x0, "3d177ba842df"}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e3133bfc10ad4f1e"}}, 0x48}, 0x1}, 0x0) 2018/02/27 08:58:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a}, &(0x7f0000ca4e82), 0x0, 0x0) request_key(&(0x7f000099b000)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 50.144507] audit: type=1400 audit(1519721932.467:21): avc: denied { prog_load } for pid=5936 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/27 08:58:52 executing program 0: getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff]) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='X', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, r0) 2018/02/27 08:58:52 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) 2018/02/27 08:58:52 executing program 1: capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000ed6ff6)='map_files\x00') fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000a7a000)="656d3073656c66a673656c696e757800", 0x10, 0x0) 2018/02/27 08:58:52 executing program 7: capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000ed6ff6)='map_files\x00') fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000a7a000)="656d3073656c66a673656c696e757800", 0x10, 0x0) 2018/02/27 08:58:52 executing program 6: sched_setaffinity(0x0, 0x128f89f95b64e5ca, &(0x7f00004a5000)=0x2) msgrcv(0x0, &(0x7f0000e3b000)={0x0, ""/230}, 0xee, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/02/27 08:58:52 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000003ff0)=@ipx={0x4, 0x0, 0x0, "3d177ba842df"}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e3133bfc10ad4f1e"}}, 0x48}, 0x1}, 0x0) 2018/02/27 08:58:52 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) 2018/02/27 08:58:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x94, 0x8}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/02/27 08:58:52 executing program 0: getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff]) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='X', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, r0) 2018/02/27 08:58:52 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) 2018/02/27 08:58:52 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000003ff0)=@ipx={0x4, 0x0, 0x0, "3d177ba842df"}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e3133bfc10ad4f1e"}}, 0x48}, 0x1}, 0x0) 2018/02/27 08:58:52 executing program 0: getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff]) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='X', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, r0) 2018/02/27 08:58:52 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) 2018/02/27 08:58:52 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) bind$inet(r0, &(0x7f00002fa000)={0x2, 0xe21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x4e20, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 2018/02/27 08:58:52 executing program 7: capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000ed6ff6)='map_files\x00') fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000a7a000)="656d3073656c66a673656c696e757800", 0x10, 0x0) 2018/02/27 08:58:52 executing program 1: capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000ed6ff6)='map_files\x00') fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000a7a000)="656d3073656c66a673656c696e757800", 0x10, 0x0) 2018/02/27 08:58:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x94, 0x8}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/02/27 08:58:52 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) 2018/02/27 08:58:52 executing program 4: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000580), &(0x7f00000005c0), 0x7ffd, &(0x7f0000000000/0x2000)=nil, 0x4) 2018/02/27 08:58:52 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) 2018/02/27 08:58:52 executing program 1: capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000ed6ff6)='map_files\x00') fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000a7a000)="656d3073656c66a673656c696e757800", 0x10, 0x0) 2018/02/27 08:58:52 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) bind$inet(r0, &(0x7f00002fa000)={0x2, 0xe21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x4e20, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 2018/02/27 08:58:52 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) 2018/02/27 08:58:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000fe5ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x2, &(0x7f0000000ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff00c}, {0x80000006}]}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}}, &(0x7f0000005000)=0x98) write(r0, &(0x7f0000005000), 0x226) 2018/02/27 08:58:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x94, 0x8}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/02/27 08:58:52 executing program 4: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000580), &(0x7f00000005c0), 0x7ffd, &(0x7f0000000000/0x2000)=nil, 0x4) 2018/02/27 08:58:52 executing program 7: capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000ed6ff6)='map_files\x00') fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000a7a000)="656d3073656c66a673656c696e757800", 0x10, 0x0) 2018/02/27 08:58:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00005cf000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000b3c000)=""/174) 2018/02/27 08:58:52 executing program 3: quotactl(0x80000201, &(0x7f00000eeff8)='./file0\x00', 0x0, &(0x7f0000000000)) 2018/02/27 08:58:52 executing program 3: quotactl(0x80000201, &(0x7f00000eeff8)='./file0\x00', 0x0, &(0x7f0000000000)) 2018/02/27 08:58:52 executing program 4: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000580), &(0x7f00000005c0), 0x7ffd, &(0x7f0000000000/0x2000)=nil, 0x4) 2018/02/27 08:58:52 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x0, &(0x7f0000fe2f17), 0x0) 2018/02/27 08:58:52 executing program 3: quotactl(0x80000201, &(0x7f00000eeff8)='./file0\x00', 0x0, &(0x7f0000000000)) 2018/02/27 08:58:52 executing program 7: r0 = socket(0x40000000015, 0x805, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)) 2018/02/27 08:58:52 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x0, &(0x7f0000fe2f17), 0x0) 2018/02/27 08:58:52 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) bind$inet(r0, &(0x7f00002fa000)={0x2, 0xe21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x4e20, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 2018/02/27 08:58:52 executing program 4: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000580), &(0x7f00000005c0), 0x7ffd, &(0x7f0000000000/0x2000)=nil, 0x4) 2018/02/27 08:58:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00005cf000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000b3c000)=""/174) 2018/02/27 08:58:52 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r1) 2018/02/27 08:58:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='limits\x00') sendfile(r1, r1, &(0x7f0000af0000)=0x100000, 0x1000000800000008) 2018/02/27 08:58:52 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x0, &(0x7f0000fe2f17), 0x0) 2018/02/27 08:58:52 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) bind$inet(r0, &(0x7f00002fa000)={0x2, 0xe21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x4e20, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 2018/02/27 08:58:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00005cf000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000b3c000)=""/174) 2018/02/27 08:58:52 executing program 3: quotactl(0x80000201, &(0x7f00000eeff8)='./file0\x00', 0x0, &(0x7f0000000000)) 2018/02/27 08:58:52 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r1) 2018/02/27 08:58:52 executing program 7: r0 = socket(0x40000000015, 0x805, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)) 2018/02/27 08:58:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='limits\x00') sendfile(r1, r1, &(0x7f0000af0000)=0x100000, 0x1000000800000008) 2018/02/27 08:58:52 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x0, &(0x7f0000fe2f17), 0x0) 2018/02/27 08:58:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='limits\x00') sendfile(r1, r1, &(0x7f0000af0000)=0x100000, 0x1000000800000008) 2018/02/27 08:58:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00005cf000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000b3c000)=""/174) 2018/02/27 08:58:52 executing program 6: r0 = socket(0x40000000015, 0x805, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)) 2018/02/27 08:58:53 executing program 7: r0 = socket(0x40000000015, 0x805, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)) 2018/02/27 08:58:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='limits\x00') sendfile(r1, r1, &(0x7f0000af0000)=0x100000, 0x1000000800000008) 2018/02/27 08:58:53 executing program 2: r0 = socket(0x40000000015, 0x805, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)) 2018/02/27 08:58:53 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r1) 2018/02/27 08:58:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='limits\x00') sendfile(r1, r1, &(0x7f0000af0000)=0x100000, 0x1000000800000008) 2018/02/27 08:58:53 executing program 6: r0 = socket(0x40000000015, 0x805, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)) 2018/02/27 08:58:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00005cf000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000b3c000)=""/174) 2018/02/27 08:58:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00005cf000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000b3c000)=""/174) 2018/02/27 08:58:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='limits\x00') sendfile(r1, r1, &(0x7f0000af0000)=0x100000, 0x1000000800000008) 2018/02/27 08:58:53 executing program 6: r0 = socket(0x40000000015, 0x805, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)) 2018/02/27 08:58:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='limits\x00') sendfile(r1, r1, &(0x7f0000af0000)=0x100000, 0x1000000800000008) 2018/02/27 08:58:53 executing program 7: r0 = socket(0x40000000015, 0x805, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)) 2018/02/27 08:58:53 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r1) 2018/02/27 08:58:53 executing program 2: r0 = socket(0x40000000015, 0x805, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)) 2018/02/27 08:58:53 executing program 7: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r1) 2018/02/27 08:58:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000aa000)={0x0, 0x0, &(0x7f0000a3d000)={&(0x7f00000f3e08)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x4, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}]}, 0x38}, 0x1}, 0x0) 2018/02/27 08:58:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/02/27 08:58:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000416fd8)={0x0, 0x0, 0x0, 0x0, "27d8bcd80e976ed94b7d844a910f28e81f8f1d51f0c523aaf81c853b1f1edfe2"}) 2018/02/27 08:58:53 executing program 7: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r1) 2018/02/27 08:58:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00005cf000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000b3c000)=""/174) 2018/02/27 08:58:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:udev_rules_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20}, 0x4a) 2018/02/27 08:58:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 2: r0 = socket(0x40000000015, 0x805, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)) 2018/02/27 08:58:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000aa000)={0x0, 0x0, &(0x7f0000a3d000)={&(0x7f00000f3e08)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x4, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}]}, 0x38}, 0x1}, 0x0) 2018/02/27 08:58:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:udev_rules_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20}, 0x4a) 2018/02/27 08:58:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000416fd8)={0x0, 0x0, 0x0, 0x0, "27d8bcd80e976ed94b7d844a910f28e81f8f1d51f0c523aaf81c853b1f1edfe2"}) 2018/02/27 08:58:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000aa000)={0x0, 0x0, &(0x7f0000a3d000)={&(0x7f00000f3e08)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x4, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}]}, 0x38}, 0x1}, 0x0) 2018/02/27 08:58:53 executing program 7: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r1) 2018/02/27 08:58:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000b51ffb)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/02/27 08:58:53 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f000035ae3d)=ANY=[@ANYBLOB="59000000000000000100000000000000070000000046b23250f0e6065d86a61bf2b3b36e2708546d44a3bf7b3a8d3b874662bb74e794b2e847ed46cd5ed34882afb9950b00000332fdc82b8391907f080d8f00000000000000"], 0x59) 2018/02/27 08:58:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/02/27 08:58:53 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/02/27 08:58:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000416fd8)={0x0, 0x0, 0x0, 0x0, "27d8bcd80e976ed94b7d844a910f28e81f8f1d51f0c523aaf81c853b1f1edfe2"}) 2018/02/27 08:58:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:udev_rules_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20}, 0x4a) 2018/02/27 08:58:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000b51ffb)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) [ 51.031322] CUSE: DEVNAME unspecified [ 51.043129] CUSE: DEVNAME unspecified 2018/02/27 08:58:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000aa000)={0x0, 0x0, &(0x7f0000a3d000)={&(0x7f00000f3e08)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x4, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}]}, 0x38}, 0x1}, 0x0) 2018/02/27 08:58:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:udev_rules_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20}, 0x4a) 2018/02/27 08:58:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000416fd8)={0x0, 0x0, 0x0, 0x0, "27d8bcd80e976ed94b7d844a910f28e81f8f1d51f0c523aaf81c853b1f1edfe2"}) 2018/02/27 08:58:53 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f000035ae3d)=ANY=[@ANYBLOB="59000000000000000100000000000000070000000046b23250f0e6065d86a61bf2b3b36e2708546d44a3bf7b3a8d3b874662bb74e794b2e847ed46cd5ed34882afb9950b00000332fdc82b8391907f080d8f00000000000000"], 0x59) 2018/02/27 08:58:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000b51ffb)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/02/27 08:58:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/02/27 08:58:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/02/27 08:58:53 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f000035ae3d)=ANY=[@ANYBLOB="59000000000000000100000000000000070000000046b23250f0e6065d86a61bf2b3b36e2708546d44a3bf7b3a8d3b874662bb74e794b2e847ed46cd5ed34882afb9950b00000332fdc82b8391907f080d8f00000000000000"], 0x59) 2018/02/27 08:58:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000b51ffb)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/02/27 08:58:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f000035ae3d)=ANY=[@ANYBLOB="59000000000000000100000000000000070000000046b23250f0e6065d86a61bf2b3b36e2708546d44a3bf7b3a8d3b874662bb74e794b2e847ed46cd5ed34882afb9950b00000332fdc82b8391907f080d8f00000000000000"], 0x59) [ 51.129747] CUSE: DEVNAME unspecified 2018/02/27 08:58:53 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f000035ae3d)=ANY=[@ANYBLOB="59000000000000000100000000000000070000000046b23250f0e6065d86a61bf2b3b36e2708546d44a3bf7b3a8d3b874662bb74e794b2e847ed46cd5ed34882afb9950b00000332fdc82b8391907f080d8f00000000000000"], 0x59) 2018/02/27 08:58:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) [ 51.189859] CUSE: DEVNAME unspecified [ 51.211486] CUSE: DEVNAME unspecified 2018/02/27 08:58:53 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/02/27 08:58:53 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f000035ae3d)=ANY=[@ANYBLOB="59000000000000000100000000000000070000000046b23250f0e6065d86a61bf2b3b36e2708546d44a3bf7b3a8d3b874662bb74e794b2e847ed46cd5ed34882afb9950b00000332fdc82b8391907f080d8f00000000000000"], 0x59) 2018/02/27 08:58:53 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f000035ae3d)=ANY=[@ANYBLOB="59000000000000000100000000000000070000000046b23250f0e6065d86a61bf2b3b36e2708546d44a3bf7b3a8d3b874662bb74e794b2e847ed46cd5ed34882afb9950b00000332fdc82b8391907f080d8f00000000000000"], 0x59) 2018/02/27 08:58:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/02/27 08:58:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f000035ae3d)=ANY=[@ANYBLOB="59000000000000000100000000000000070000000046b23250f0e6065d86a61bf2b3b36e2708546d44a3bf7b3a8d3b874662bb74e794b2e847ed46cd5ed34882afb9950b00000332fdc82b8391907f080d8f00000000000000"], 0x59) 2018/02/27 08:58:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f000035ae3d)=ANY=[@ANYBLOB="59000000000000000100000000000000070000000046b23250f0e6065d86a61bf2b3b36e2708546d44a3bf7b3a8d3b874662bb74e794b2e847ed46cd5ed34882afb9950b00000332fdc82b8391907f080d8f00000000000000"], 0x59) 2018/02/27 08:58:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f000035ae3d)=ANY=[@ANYBLOB="59000000000000000100000000000000070000000046b23250f0e6065d86a61bf2b3b36e2708546d44a3bf7b3a8d3b874662bb74e794b2e847ed46cd5ed34882afb9950b00000332fdc82b8391907f080d8f00000000000000"], 0x59) [ 51.267839] CUSE: DEVNAME unspecified [ 51.279353] CUSE: DEVNAME unspecified [ 51.283609] CUSE: DEVNAME unspecified [ 51.315928] CUSE: DEVNAME unspecified 2018/02/27 08:58:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000beb000)=[{r0}], 0x1, 0x0) 2018/02/27 08:58:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/02/27 08:58:53 executing program 7: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x98, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000040)=[], 0x0, &(0x7f000001ef80)=ANY=[@ANYBLOB="200000000000000000000000070000004410051100ef00009700000000000000"], 0x20}, 0x0) 2018/02/27 08:58:53 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000076dff0)=[], 0x172}, 0x0) 2018/02/27 08:58:53 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000ba5000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000eb7ff8)='./file0\x00', &(0x7f00006e8f18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004befff)='.', &(0x7f00001a2fff)='.', &(0x7f0000ea5ffa)='mslos\x00', 0x200500e, &(0x7f0000ec2fff)) umount2(&(0x7f0000b73000)='.', 0x0) [ 51.358470] CUSE: DEVNAME unspecified 2018/02/27 08:58:53 executing program 2: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3}}, @common=@ttl={0x28, 'ttl\x00'}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={0x28, 'cpu\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xffffff89, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 08:58:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 7: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x98, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000040)=[], 0x0, &(0x7f000001ef80)=ANY=[@ANYBLOB="200000000000000000000000070000004410051100ef00009700000000000000"], 0x20}, 0x0) 2018/02/27 08:58:53 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000076dff0)=[], 0x172}, 0x0) 2018/02/27 08:58:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/02/27 08:58:53 executing program 2: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3}}, @common=@ttl={0x28, 'ttl\x00'}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={0x28, 'cpu\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xffffff89, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 08:58:53 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000ba5000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000eb7ff8)='./file0\x00', &(0x7f00006e8f18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004befff)='.', &(0x7f00001a2fff)='.', &(0x7f0000ea5ffa)='mslos\x00', 0x200500e, &(0x7f0000ec2fff)) umount2(&(0x7f0000b73000)='.', 0x0) 2018/02/27 08:58:53 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000076dff0)=[], 0x172}, 0x0) 2018/02/27 08:58:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000935ff8)) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/24) write(r0, &(0x7f0000000040)="3391522890e6490448733dfa01d8dc5f9f339b880d098b3c7d0bd48d400c12c45dc052989dc3e7478b47f9789070962e03fe71155bc5c18314323e3ab4bc8b35f250ef36e71ee2cb5626a8406f33a0c829abff931511fad09cb133b62d6a057b", 0x60) 2018/02/27 08:58:53 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000beb000)=[{r0}], 0x1, 0x0) 2018/02/27 08:58:53 executing program 7: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x98, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000040)=[], 0x0, &(0x7f000001ef80)=ANY=[@ANYBLOB="200000000000000000000000070000004410051100ef00009700000000000000"], 0x20}, 0x0) 2018/02/27 08:58:53 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000beb000)=[{r0}], 0x1, 0x0) 2018/02/27 08:58:53 executing program 7: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x98, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000040)=[], 0x0, &(0x7f000001ef80)=ANY=[@ANYBLOB="200000000000000000000000070000004410051100ef00009700000000000000"], 0x20}, 0x0) 2018/02/27 08:58:53 executing program 2: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3}}, @common=@ttl={0x28, 'ttl\x00'}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={0x28, 'cpu\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xffffff89, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 08:58:53 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="200000000104f500000000000000060020200af80900010001e8006007080000", 0x20}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000076dff0)=[], 0x172}, 0x0) 2018/02/27 08:58:53 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000beb000)=[{r0}], 0x1, 0x0) 2018/02/27 08:58:53 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000beb000)=[{r0}], 0x1, 0x0) 2018/02/27 08:58:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/02/27 08:58:53 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000ba5000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000eb7ff8)='./file0\x00', &(0x7f00006e8f18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004befff)='.', &(0x7f00001a2fff)='.', &(0x7f0000ea5ffa)='mslos\x00', 0x200500e, &(0x7f0000ec2fff)) umount2(&(0x7f0000b73000)='.', 0x0) 2018/02/27 08:58:53 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000ba5000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000eb7ff8)='./file0\x00', &(0x7f00006e8f18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004befff)='.', &(0x7f00001a2fff)='.', &(0x7f0000ea5ffa)='mslos\x00', 0x200500e, &(0x7f0000ec2fff)) umount2(&(0x7f0000b73000)='.', 0x0) 2018/02/27 08:58:53 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000beb000)=[{r0}], 0x1, 0x0) 2018/02/27 08:58:53 executing program 2: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3}}, @common=@ttl={0x28, 'ttl\x00'}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={0x28, 'cpu\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xffffff89, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 08:58:53 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000ba5000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000eb7ff8)='./file0\x00', &(0x7f00006e8f18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004befff)='.', &(0x7f00001a2fff)='.', &(0x7f0000ea5ffa)='mslos\x00', 0x200500e, &(0x7f0000ec2fff)) umount2(&(0x7f0000b73000)='.', 0x0) 2018/02/27 08:58:53 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000beb000)=[{r0}], 0x1, 0x0) 2018/02/27 08:58:53 executing program 2: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3}}, @common=@ttl={0x28, 'ttl\x00'}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={0x28, 'cpu\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xffffff89, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 08:58:53 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000beb000)=[{r0}], 0x1, 0x0) 2018/02/27 08:58:53 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000ba5000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000eb7ff8)='./file0\x00', &(0x7f00006e8f18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004befff)='.', &(0x7f00001a2fff)='.', &(0x7f0000ea5ffa)='mslos\x00', 0x200500e, &(0x7f0000ec2fff)) umount2(&(0x7f0000b73000)='.', 0x0) 2018/02/27 08:58:53 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000ba5000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000eb7ff8)='./file0\x00', &(0x7f00006e8f18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004befff)='.', &(0x7f00001a2fff)='.', &(0x7f0000ea5ffa)='mslos\x00', 0x200500e, &(0x7f0000ec2fff)) umount2(&(0x7f0000b73000)='.', 0x0) 2018/02/27 08:58:53 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000beb000)=[{r0}], 0x1, 0x0) 2018/02/27 08:58:54 executing program 2: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3}}, @common=@ttl={0x28, 'ttl\x00'}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={0x28, 'cpu\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xffffff89, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 08:58:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000028c2c)={0x20, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4015}, [@typed={0xc, 0x1f, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/27 08:58:54 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000ba5000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000eb7ff8)='./file0\x00', &(0x7f00006e8f18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004befff)='.', &(0x7f00001a2fff)='.', &(0x7f0000ea5ffa)='mslos\x00', 0x200500e, &(0x7f0000ec2fff)) umount2(&(0x7f0000b73000)='.', 0x0) 2018/02/27 08:58:54 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000beb000)=[{r0}], 0x1, 0x0) 2018/02/27 08:58:54 executing program 2: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3}}, @common=@ttl={0x28, 'ttl\x00'}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={0x28, 'cpu\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xffffff89, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 08:58:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f000000f000)='/dev/loop#\x00', 0x0, 0x801) ioctl(r0, 0x440000000000127d, &(0x7f000000e000)='9') 2018/02/27 08:58:54 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000ba5000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000eb7ff8)='./file0\x00', &(0x7f00006e8f18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004befff)='.', &(0x7f00001a2fff)='.', &(0x7f0000ea5ffa)='mslos\x00', 0x200500e, &(0x7f0000ec2fff)) umount2(&(0x7f0000b73000)='.', 0x0) 2018/02/27 08:58:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000028c2c)={0x20, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4015}, [@typed={0xc, 0x1f, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/27 08:58:54 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000ba5000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000eb7ff8)='./file0\x00', &(0x7f00006e8f18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004befff)='.', &(0x7f00001a2fff)='.', &(0x7f0000ea5ffa)='mslos\x00', 0x200500e, &(0x7f0000ec2fff)) umount2(&(0x7f0000b73000)='.', 0x0) 2018/02/27 08:58:54 executing program 5: clock_gettime(0xfffbefeffffffff0, &(0x7f0000030ff0)) 2018/02/27 08:58:54 executing program 1: pipe(&(0x7f0000bb9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000077000)={0x7fffffff}, &(0x7f0000481000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x6, 0x0) 2018/02/27 08:58:54 executing program 2: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ced5c2339cd456d4d4945501d598a4dcde3c50bb0d77cee70c0a2a40f382ef55cd1dfc5a6e86b2e990a0d0843f1feeff", 0x30) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000d45fa8)=@alg, 0x58, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1, &(0x7f0000f77000)}, 0x0) 2018/02/27 08:58:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f000000f000)='/dev/loop#\x00', 0x0, 0x801) ioctl(r0, 0x440000000000127d, &(0x7f000000e000)='9') 2018/02/27 08:58:54 executing program 1: pipe(&(0x7f0000bb9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000077000)={0x7fffffff}, &(0x7f0000481000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x6, 0x0) 2018/02/27 08:58:54 executing program 5: clock_gettime(0xfffbefeffffffff0, &(0x7f0000030ff0)) 2018/02/27 08:58:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000028c2c)={0x20, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4015}, [@typed={0xc, 0x1f, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/27 08:58:54 executing program 1: pipe(&(0x7f0000bb9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000077000)={0x7fffffff}, &(0x7f0000481000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x6, 0x0) 2018/02/27 08:58:54 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ced5c2339cd456d4d4945501d598a4dcde3c50bb0d77cee70c0a2a40f382ef55cd1dfc5a6e86b2e990a0d0843f1feeff", 0x30) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000d45fa8)=@alg, 0x58, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1, &(0x7f0000f77000)}, 0x0) 2018/02/27 08:58:54 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ced5c2339cd456d4d4945501d598a4dcde3c50bb0d77cee70c0a2a40f382ef55cd1dfc5a6e86b2e990a0d0843f1feeff", 0x30) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000d45fa8)=@alg, 0x58, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1, &(0x7f0000f77000)}, 0x0) 2018/02/27 08:58:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f000000f000)='/dev/loop#\x00', 0x0, 0x801) ioctl(r0, 0x440000000000127d, &(0x7f000000e000)='9') 2018/02/27 08:58:54 executing program 5: clock_gettime(0xfffbefeffffffff0, &(0x7f0000030ff0)) 2018/02/27 08:58:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000028c2c)={0x20, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4015}, [@typed={0xc, 0x1f, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/27 08:58:54 executing program 2: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 3: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 3: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 5: clock_gettime(0xfffbefeffffffff0, &(0x7f0000030ff0)) 2018/02/27 08:58:54 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ced5c2339cd456d4d4945501d598a4dcde3c50bb0d77cee70c0a2a40f382ef55cd1dfc5a6e86b2e990a0d0843f1feeff", 0x30) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000d45fa8)=@alg, 0x58, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1, &(0x7f0000f77000)}, 0x0) 2018/02/27 08:58:54 executing program 1: pipe(&(0x7f0000bb9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000077000)={0x7fffffff}, &(0x7f0000481000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x6, 0x0) 2018/02/27 08:58:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f000000f000)='/dev/loop#\x00', 0x0, 0x801) ioctl(r0, 0x440000000000127d, &(0x7f000000e000)='9') 2018/02/27 08:58:54 executing program 4: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ced5c2339cd456d4d4945501d598a4dcde3c50bb0d77cee70c0a2a40f382ef55cd1dfc5a6e86b2e990a0d0843f1feeff", 0x30) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000d45fa8)=@alg, 0x58, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1, &(0x7f0000f77000)}, 0x0) 2018/02/27 08:58:54 executing program 2: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 5: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ced5c2339cd456d4d4945501d598a4dcde3c50bb0d77cee70c0a2a40f382ef55cd1dfc5a6e86b2e990a0d0843f1feeff", 0x30) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000d45fa8)=@alg, 0x58, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1, &(0x7f0000f77000)}, 0x0) 2018/02/27 08:58:54 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ced5c2339cd456d4d4945501d598a4dcde3c50bb0d77cee70c0a2a40f382ef55cd1dfc5a6e86b2e990a0d0843f1feeff", 0x30) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000d45fa8)=@alg, 0x58, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1, &(0x7f0000f77000)}, 0x0) 2018/02/27 08:58:54 executing program 1: pipe(&(0x7f0000bb9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000077000)={0x7fffffff}, &(0x7f0000481000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x6, 0x0) 2018/02/27 08:58:54 executing program 0: pipe(&(0x7f0000bb9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000077000)={0x7fffffff}, &(0x7f0000481000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x6, 0x0) 2018/02/27 08:58:54 executing program 4: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 6: r0 = syz_open_dev$loop(&(0x7f000000f000)='/dev/loop#\x00', 0x0, 0x801) ioctl(r0, 0x440000000000127d, &(0x7f000000e000)='9') 2018/02/27 08:58:54 executing program 1: pipe(&(0x7f0000bb9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000077000)={0x7fffffff}, &(0x7f0000481000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x6, 0x0) 2018/02/27 08:58:54 executing program 3: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 0: pipe(&(0x7f0000bb9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000077000)={0x7fffffff}, &(0x7f0000481000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x6, 0x0) 2018/02/27 08:58:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000189ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000abee8)={0x18, 0x28, 0x701, 0x0, 0x0, {0x800000000003}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/27 08:58:54 executing program 2: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 5: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 0: pipe(&(0x7f0000bb9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000077000)={0x7fffffff}, &(0x7f0000481000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x6, 0x0) 2018/02/27 08:58:54 executing program 6: r0 = syz_open_dev$loop(&(0x7f000000f000)='/dev/loop#\x00', 0x0, 0x801) ioctl(r0, 0x440000000000127d, &(0x7f000000e000)='9') 2018/02/27 08:58:54 executing program 1: pipe(&(0x7f0000bb9ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000077000)={0x7fffffff}, &(0x7f0000481000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x6, 0x0) 2018/02/27 08:58:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000189ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000abee8)={0x18, 0x28, 0x701, 0x0, 0x0, {0x800000000003}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/27 08:58:54 executing program 4: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/02/27 08:58:54 executing program 0: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2018/02/27 08:58:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000189ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000abee8)={0x18, 0x28, 0x701, 0x0, 0x0, {0x800000000003}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/27 08:58:54 executing program 6: r0 = syz_open_dev$loop(&(0x7f000000f000)='/dev/loop#\x00', 0x0, 0x801) ioctl(r0, 0x440000000000127d, &(0x7f000000e000)='9') 2018/02/27 08:58:54 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001440)=[{&(0x7f0000001380)="e2", 0x1}], 0x1, 0x8) 2018/02/27 08:58:54 executing program 5: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x82d) accept4$inet(r0, 0x0, &(0x7f0000000000)=0xffffffffffffffe2, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/02/27 08:58:54 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000260fe0)={{&(0x7f00005bc000/0x800000)=nil, 0x800000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/02/27 08:58:54 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001440)=[{&(0x7f0000001380)="e2", 0x1}], 0x1, 0x8) 2018/02/27 08:58:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000189ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000abee8)={0x18, 0x28, 0x701, 0x0, 0x0, {0x800000000003}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/27 08:58:54 executing program 0: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2018/02/27 08:58:54 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000260fe0)={{&(0x7f00005bc000/0x800000)=nil, 0x800000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/02/27 08:58:54 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001440)=[{&(0x7f0000001380)="e2", 0x1}], 0x1, 0x8) 2018/02/27 08:58:54 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000260fe0)={{&(0x7f00005bc000/0x800000)=nil, 0x800000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:54 executing program 7: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2018/02/27 08:58:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/02/27 08:58:54 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000260fe0)={{&(0x7f00005bc000/0x800000)=nil, 0x800000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:54 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001440)=[{&(0x7f0000001380)="e2", 0x1}], 0x1, 0x8) 2018/02/27 08:58:54 executing program 0: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2018/02/27 08:58:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/02/27 08:58:54 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000260fe0)={{&(0x7f00005bc000/0x800000)=nil, 0x800000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:54 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000260fe0)={{&(0x7f00005bc000/0x800000)=nil, 0x800000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:54 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000260fe0)={{&(0x7f00005bc000/0x800000)=nil, 0x800000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/27 08:58:54 executing program 7: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2018/02/27 08:58:54 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/02/27 08:58:54 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 0: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2018/02/27 08:58:54 executing program 7: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2018/02/27 08:58:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x0) 2018/02/27 08:58:54 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x4, &(0x7f000058a000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 2018/02/27 08:58:54 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 2018/02/27 08:58:54 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000019ff4)) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000008, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@tick}], 0x30) 2018/02/27 08:58:54 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eec000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000ee0f7f)="c2", 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eed000)=0x201000002, 0x4) recvmsg(r0, &(0x7f0000579fc8)={0x0, 0x0, &(0x7f0000eeffd0)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x10040002106) 2018/02/27 08:58:54 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x4, &(0x7f000058a000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 2018/02/27 08:58:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) close(r0) 2018/02/27 08:58:54 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000019ff4)) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000008, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@tick}], 0x30) 2018/02/27 08:58:54 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 2018/02/27 08:58:54 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000019ff4)) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000008, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@tick}], 0x30) 2018/02/27 08:58:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) close(r0) 2018/02/27 08:58:54 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x4, &(0x7f000058a000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 2018/02/27 08:58:54 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) close(r0) 2018/02/27 08:58:54 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000019ff4)) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000008, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@tick}], 0x30) 2018/02/27 08:58:54 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000019ff4)) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000008, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@tick}], 0x30) 2018/02/27 08:58:54 executing program 2: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 2018/02/27 08:58:55 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x4, &(0x7f000058a000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 2018/02/27 08:58:55 executing program 1: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 2018/02/27 08:58:55 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000019ff4)) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000008, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@tick}], 0x30) 2018/02/27 08:58:55 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000019ff4)) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000008, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@tick}], 0x30) 2018/02/27 08:58:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) close(r0) 2018/02/27 08:58:55 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) close(r0) 2018/02/27 08:58:55 executing program 2: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 2018/02/27 08:58:55 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 2018/02/27 08:58:55 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) close(r0) 2018/02/27 08:58:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) close(r0) 2018/02/27 08:58:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/27 08:58:55 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000932000)={0x2, &(0x7f0000932000)=[{0x400000007}, {0x0, 0x0, 0x0, 0x20000000007fff}]}, 0x10) 2018/02/27 08:58:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8, &(0x7f0000000fff), 0x0) 2018/02/27 08:58:55 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000932000)={0x2, &(0x7f0000932000)=[{0x400000007}, {0x0, 0x0, 0x0, 0x20000000007fff}]}, 0x10) 2018/02/27 08:58:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8, &(0x7f0000000fff), 0x0) 2018/02/27 08:58:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}, []}}}}}}}, 0x0) 2018/02/27 08:58:55 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00009f9ce8)={0x14, 0x1, 0x8, 0xffffffffffffffff, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 08:58:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/27 08:58:55 executing program 2: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 2018/02/27 08:58:55 executing program 1: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 2018/02/27 08:58:55 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 2018/02/27 08:58:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/27 08:58:55 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000932000)={0x2, &(0x7f0000932000)=[{0x400000007}, {0x0, 0x0, 0x0, 0x20000000007fff}]}, 0x10) 2018/02/27 08:58:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8, &(0x7f0000000fff), 0x0) 2018/02/27 08:58:55 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000932000)={0x2, &(0x7f0000932000)=[{0x400000007}, {0x0, 0x0, 0x0, 0x20000000007fff}]}, 0x10) 2018/02/27 08:58:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/27 08:58:55 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00009f9ce8)={0x14, 0x1, 0x8, 0xffffffffffffffff, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 08:58:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8, &(0x7f0000000fff), 0x0) 2018/02/27 08:58:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}, []}}}}}}}, 0x0) 2018/02/27 08:58:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/27 08:58:55 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00009f9ce8)={0x14, 0x1, 0x8, 0xffffffffffffffff, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 08:58:55 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/27 08:58:55 executing program 1: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 2018/02/27 08:58:55 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/27 08:58:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x11, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000e630c400000000099"], 0x0, 0x0, &(0x7f0000002000)}) prctl$void(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/27 08:58:55 executing program 2: r0 = socket(0xa, 0x3, 0x1) sendmsg$inet_sctp(r0, &(0x7f00001b9fc8)={&(0x7f0000c81000)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000661fe0)=[]}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/209, 0xd1, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000220ffc)) 2018/02/27 08:58:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/27 08:58:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}, []}}}}}}}, 0x0) 2018/02/27 08:58:55 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00009f9ce8)={0x14, 0x1, 0x8, 0xffffffffffffffff, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 08:58:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000036000)='j', 0x1, 0xfffffffffffffffe, &(0x7f00006e4000)={0x2, 0x4e20, 0xfea9, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 08:58:55 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') 2018/02/27 08:58:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/27 08:58:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}, []}}}}}}}, 0x0) 2018/02/27 08:58:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000036000)='j', 0x1, 0xfffffffffffffffe, &(0x7f00006e4000)={0x2, 0x4e20, 0xfea9, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 08:58:55 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) [ 52.988501] binder: 6651:6664 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 [ 53.023411] binder: BINDER_SET_CONTEXT_MGR already set [ 53.030714] binder: 6651:6664 ioctl 40046207 0 returned -16 2018/02/27 08:58:55 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000038fc0), &(0x7f0000000fc0)={0x80200}, &(0x7f0000031fc0), &(0x7f000004c000)={0x77359400}) 2018/02/27 08:58:55 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x2}}, 0x2e) connect$l2tp(r0, &(0x7f00008adfd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr}, 0x2}}, 0x2e) 2018/02/27 08:58:55 executing program 2: r0 = socket(0xa, 0x3, 0x1) sendmsg$inet_sctp(r0, &(0x7f00001b9fc8)={&(0x7f0000c81000)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000661fe0)=[]}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/209, 0xd1, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000220ffc)) 2018/02/27 08:58:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000036000)='j', 0x1, 0xfffffffffffffffe, &(0x7f00006e4000)={0x2, 0x4e20, 0xfea9, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 08:58:55 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x2}}, 0x2e) connect$l2tp(r0, &(0x7f00008adfd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr}, 0x2}}, 0x2e) 2018/02/27 08:58:55 executing program 4: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000038fc0), &(0x7f0000000fc0)={0x80200}, &(0x7f0000031fc0), &(0x7f000004c000)={0x77359400}) 2018/02/27 08:58:55 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000038fc0), &(0x7f0000000fc0)={0x80200}, &(0x7f0000031fc0), &(0x7f000004c000)={0x77359400}) 2018/02/27 08:58:55 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000038fc0), &(0x7f0000000fc0)={0x80200}, &(0x7f0000031fc0), &(0x7f000004c000)={0x77359400}) 2018/02/27 08:58:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x11, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000e630c400000000099"], 0x0, 0x0, &(0x7f0000002000)}) prctl$void(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/27 08:58:55 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') 2018/02/27 08:58:55 executing program 2: r0 = socket(0xa, 0x3, 0x1) sendmsg$inet_sctp(r0, &(0x7f00001b9fc8)={&(0x7f0000c81000)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000661fe0)=[]}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/209, 0xd1, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000220ffc)) 2018/02/27 08:58:55 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000038fc0), &(0x7f0000000fc0)={0x80200}, &(0x7f0000031fc0), &(0x7f000004c000)={0x77359400}) 2018/02/27 08:58:55 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000038fc0), &(0x7f0000000fc0)={0x80200}, &(0x7f0000031fc0), &(0x7f000004c000)={0x77359400}) 2018/02/27 08:58:55 executing program 4: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000038fc0), &(0x7f0000000fc0)={0x80200}, &(0x7f0000031fc0), &(0x7f000004c000)={0x77359400}) 2018/02/27 08:58:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x11, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000e630c400000000099"], 0x0, 0x0, &(0x7f0000002000)}) prctl$void(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/27 08:58:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000036000)='j', 0x1, 0xfffffffffffffffe, &(0x7f00006e4000)={0x2, 0x4e20, 0xfea9, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 08:58:55 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000038fc0), &(0x7f0000000fc0)={0x80200}, &(0x7f0000031fc0), &(0x7f000004c000)={0x77359400}) 2018/02/27 08:58:55 executing program 2: r0 = socket(0xa, 0x3, 0x1) sendmsg$inet_sctp(r0, &(0x7f00001b9fc8)={&(0x7f0000c81000)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000661fe0)=[]}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/209, 0xd1, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000220ffc)) 2018/02/27 08:58:55 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') 2018/02/27 08:58:55 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x2}}, 0x2e) connect$l2tp(r0, &(0x7f00008adfd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr}, 0x2}}, 0x2e) 2018/02/27 08:58:55 executing program 4: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000038fc0), &(0x7f0000000fc0)={0x80200}, &(0x7f0000031fc0), &(0x7f000004c000)={0x77359400}) 2018/02/27 08:58:55 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000038fc0), &(0x7f0000000fc0)={0x80200}, &(0x7f0000031fc0), &(0x7f000004c000)={0x77359400}) 2018/02/27 08:58:55 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x2}}, 0x2e) connect$l2tp(r0, &(0x7f00008adfd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr}, 0x2}}, 0x2e) 2018/02/27 08:58:55 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') 2018/02/27 08:58:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x11, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000e630c400000000099"], 0x0, 0x0, &(0x7f0000002000)}) prctl$void(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/27 08:58:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x11, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000e630c400000000099"], 0x0, 0x0, &(0x7f0000002000)}) prctl$void(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/27 08:58:55 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') [ 53.045448] binder: 6651:6678 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 [ 53.175822] binder: 6702:6708 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 [ 53.235607] binder: 6716:6720 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 2018/02/27 08:58:55 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x2}}, 0x2e) connect$l2tp(r0, &(0x7f00008adfd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr}, 0x2}}, 0x2e) 2018/02/27 08:58:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x11, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000e630c400000000099"], 0x0, 0x0, &(0x7f0000002000)}) prctl$void(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/27 08:58:55 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') 2018/02/27 08:58:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x11, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000e630c400000000099"], 0x0, 0x0, &(0x7f0000002000)}) prctl$void(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/27 08:58:55 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x2}}, 0x2e) connect$l2tp(r0, &(0x7f00008adfd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr}, 0x2}}, 0x2e) 2018/02/27 08:58:55 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) 2018/02/27 08:58:55 executing program 6: openat$sequencer(0xffffffffffffff9c, &(0x7f00003f0ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) dup2(r0, r1) 2018/02/27 08:58:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x11, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000e630c400000000099"], 0x0, 0x0, &(0x7f0000002000)}) prctl$void(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/27 08:58:55 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl(0x1003, &(0x7f0000000000)) [ 53.315501] binder: BINDER_SET_CONTEXT_MGR already set [ 53.325391] binder: 6736:6740 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 [ 53.337443] binder: 6734:6738 ioctl 40046207 0 returned -16 [ 53.348724] binder: 6734:6738 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 2018/02/27 08:58:55 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) 2018/02/27 08:58:55 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') 2018/02/27 08:58:55 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl(0x1003, &(0x7f0000000000)) [ 53.401970] binder: 6746:6755 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 [ 53.415912] binder: BINDER_SET_CONTEXT_MGR already set [ 53.422001] binder: 6749:6756 ioctl 40046207 0 returned -16 [ 53.430246] binder: BINDER_SET_CONTEXT_MGR already set [ 53.444501] binder: 6754:6761 ioctl 40046207 0 returned -16 2018/02/27 08:58:55 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) 2018/02/27 08:58:55 executing program 6: openat$sequencer(0xffffffffffffff9c, &(0x7f00003f0ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) dup2(r0, r1) 2018/02/27 08:58:55 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl(0x1003, &(0x7f0000000000)) 2018/02/27 08:58:55 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x2}}, 0x2e) connect$l2tp(r0, &(0x7f00008adfd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr}, 0x2}}, 0x2e) [ 53.451131] binder: 6749:6764 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 [ 53.473938] binder: 6754:6761 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 2018/02/27 08:58:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x11, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000e630c400000000099"], 0x0, 0x0, &(0x7f0000002000)}) prctl$void(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/27 08:58:55 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) 2018/02/27 08:58:55 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00003f0ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) dup2(r0, r1) 2018/02/27 08:58:55 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) 2018/02/27 08:58:55 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl(0x1003, &(0x7f0000000000)) 2018/02/27 08:58:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x11, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000000e630c400000000099"], 0x0, 0x0, &(0x7f0000002000)}) prctl$void(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/27 08:58:55 executing program 6: openat$sequencer(0xffffffffffffff9c, &(0x7f00003f0ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) dup2(r0, r1) 2018/02/27 08:58:55 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) 2018/02/27 08:58:55 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) [ 53.558406] binder: 6780:6785 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 [ 53.569544] binder: BINDER_SET_CONTEXT_MGR already set [ 53.584743] binder: 6790:6792 ioctl 40046207 0 returned -16 2018/02/27 08:58:55 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) 2018/02/27 08:58:55 executing program 6: openat$sequencer(0xffffffffffffff9c, &(0x7f00003f0ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) dup2(r0, r1) 2018/02/27 08:58:55 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00003f0ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) dup2(r0, r1) 2018/02/27 08:58:55 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) 2018/02/27 08:58:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[{}, {0x0, 0x6}], 0x2) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040)=[], 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e20, @rand_addr}, 0x10, &(0x7f0000000040)=[], 0x217, &(0x7f0000000040)=[{0x10}], 0x10}}], 0x2, 0x0) 2018/02/27 08:58:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000040)=""/47, 0x2f) 2018/02/27 08:58:55 executing program 7: r0 = socket$inet(0x2, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000ff7000), 0x0, 0x0, &(0x7f000066354c)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/02/27 08:58:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x6, 0x4, 0x84, 0xf}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000ffafe0)={r0, &(0x7f0000104f2b)="b5", &(0x7f0000c3dfc6)}, 0x20) [ 53.600695] binder: 6790:6796 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000099 != 0000000000000000 2018/02/27 08:58:55 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x5b) 2018/02/27 08:58:55 executing program 3: socket$inet(0x2, 0xa, 0x300) r0 = socket$inet(0x2, 0x802, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)=[]}, 0x0) 2018/02/27 08:58:56 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) 2018/02/27 08:58:56 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00003f0ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) dup2(r0, r1) 2018/02/27 08:58:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[{}, {0x0, 0x6}], 0x2) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040)=[], 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e20, @rand_addr}, 0x10, &(0x7f0000000040)=[], 0x217, &(0x7f0000000040)=[{0x10}], 0x10}}], 0x2, 0x0) [ 53.667620] kauditd_printk_skb: 10 callbacks suppressed [ 53.667628] audit: type=1400 audit(1519721935.992:32): avc: denied { map_read map_write } for pid=6809 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/27 08:58:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x6, 0x4, 0x84, 0xf}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000ffafe0)={r0, &(0x7f0000104f2b)="b5", &(0x7f0000c3dfc6)}, 0x20) 2018/02/27 08:58:56 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x5b) 2018/02/27 08:58:56 executing program 4: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1b2, &(0x7f0000519fa8)=[@in6={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}]}, &(0x7f0000f91ffc)=0xfffffffffffffd67) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@call={0x85}], {0x95}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) 2018/02/27 08:58:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x6, 0x4, 0x84, 0xf}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000ffafe0)={r0, &(0x7f0000104f2b)="b5", &(0x7f0000c3dfc6)}, 0x20) 2018/02/27 08:58:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000040)=""/47, 0x2f) 2018/02/27 08:58:56 executing program 7: clone(0x200, &(0x7f0000c34000), &(0x7f0000ad8ffc), &(0x7f0000676000), &(0x7f00003ed000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000)=[], &(0x7f0000949fc8)=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r1, &(0x7f0000000080), 0x296, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f000074eff8)='./file0\x00', 0x0) 2018/02/27 08:58:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[{}, {0x0, 0x6}], 0x2) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040)=[], 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e20, @rand_addr}, 0x10, &(0x7f0000000040)=[], 0x217, &(0x7f0000000040)=[{0x10}], 0x10}}], 0x2, 0x0) 2018/02/27 08:58:56 executing program 3: socket$inet(0x2, 0xa, 0x300) r0 = socket$inet(0x2, 0x802, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)=[]}, 0x0) 2018/02/27 08:58:56 executing program 1: socket$inet(0x2, 0xa, 0x300) r0 = socket$inet(0x2, 0x802, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)=[]}, 0x0) [ 53.716156] syz-executor3 uses obsolete (PF_INET,SOCK_PACKET) [ 53.727951] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 2018/02/27 08:58:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x6, 0x4, 0x84, 0xf}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000ffafe0)={r0, &(0x7f0000104f2b)="b5", &(0x7f0000c3dfc6)}, 0x20) 2018/02/27 08:58:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[{}, {0x0, 0x6}], 0x2) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040)=[], 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e20, @rand_addr}, 0x10, &(0x7f0000000040)=[], 0x217, &(0x7f0000000040)=[{0x10}], 0x10}}], 0x2, 0x0) 2018/02/27 08:58:56 executing program 4: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1b2, &(0x7f0000519fa8)=[@in6={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}]}, &(0x7f0000f91ffc)=0xfffffffffffffd67) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@call={0x85}], {0x95}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) 2018/02/27 08:58:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000040)=""/47, 0x2f) [ 53.806263] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 2018/02/27 08:58:56 executing program 3: socket$inet(0x2, 0xa, 0x300) r0 = socket$inet(0x2, 0x802, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)=[]}, 0x0) 2018/02/27 08:58:56 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x5b) 2018/02/27 08:58:56 executing program 4: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1b2, &(0x7f0000519fa8)=[@in6={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}]}, &(0x7f0000f91ffc)=0xfffffffffffffd67) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@call={0x85}], {0x95}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) 2018/02/27 08:58:56 executing program 0: socket$inet(0x2, 0xa, 0x300) r0 = socket$inet(0x2, 0x802, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)=[]}, 0x0) 2018/02/27 08:58:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000040)=""/47, 0x2f) 2018/02/27 08:58:56 executing program 1: socket$inet(0x2, 0xa, 0x300) r0 = socket$inet(0x2, 0x802, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)=[]}, 0x0) 2018/02/27 08:58:56 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x5b) 2018/02/27 08:58:56 executing program 7: clone(0x200, &(0x7f0000c34000), &(0x7f0000ad8ffc), &(0x7f0000676000), &(0x7f00003ed000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000)=[], &(0x7f0000949fc8)=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r1, &(0x7f0000000080), 0x296, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f000074eff8)='./file0\x00', 0x0) 2018/02/27 08:58:56 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x5b) 2018/02/27 08:58:56 executing program 4: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1b2, &(0x7f0000519fa8)=[@in6={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}]}, &(0x7f0000f91ffc)=0xfffffffffffffd67) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@call={0x85}], {0x95}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) [ 53.908142] audit: type=1400 audit(1519721936.232:33): avc: denied { create } for pid=6834 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=key permissive=1 [ 53.961632] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 2018/02/27 08:58:56 executing program 3: socket$inet(0x2, 0xa, 0x300) r0 = socket$inet(0x2, 0x802, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)=[]}, 0x0) 2018/02/27 08:58:56 executing program 5: clone(0x200, &(0x7f0000c34000), &(0x7f0000ad8ffc), &(0x7f0000676000), &(0x7f00003ed000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000)=[], &(0x7f0000949fc8)=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r1, &(0x7f0000000080), 0x296, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f000074eff8)='./file0\x00', 0x0) 2018/02/27 08:58:56 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x5b) 2018/02/27 08:58:56 executing program 1: socket$inet(0x2, 0xa, 0x300) r0 = socket$inet(0x2, 0x802, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)=[]}, 0x0) 2018/02/27 08:58:56 executing program 4: clone(0x200, &(0x7f0000c34000), &(0x7f0000ad8ffc), &(0x7f0000676000), &(0x7f00003ed000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000)=[], &(0x7f0000949fc8)=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r1, &(0x7f0000000080), 0x296, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f000074eff8)='./file0\x00', 0x0) 2018/02/27 08:58:56 executing program 0: socket$inet(0x2, 0xa, 0x300) r0 = socket$inet(0x2, 0x802, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)=[]}, 0x0) 2018/02/27 08:58:56 executing program 7: clone(0x200, &(0x7f0000c34000), &(0x7f0000ad8ffc), &(0x7f0000676000), &(0x7f00003ed000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000)=[], &(0x7f0000949fc8)=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r1, &(0x7f0000000080), 0x296, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f000074eff8)='./file0\x00', 0x0) 2018/02/27 08:58:56 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000b2f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000065e000)=@newsa={0xf0, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in6=@loopback={0x0, 0x1}}, {@in6=@loopback={0x0, 0x1}}, @in6=@loopback={0x0, 0x1}}, []}, 0xf0}, 0x1}, 0x0) 2018/02/27 08:58:56 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x5b) 2018/02/27 08:58:56 executing program 0: socket$inet(0x2, 0xa, 0x300) r0 = socket$inet(0x2, 0x802, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010000)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x218, 0x218, 0xffffffff, 0xc8, 0x170, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f0000002fb0), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @icmp_id, @port}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @dev={0xac, 0x14}, @icmp_id, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b8) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)=[]}, 0x0) 2018/02/27 08:58:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='pagemap\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100000) 2018/02/27 08:58:56 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:56 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='pagemap\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100000) 2018/02/27 08:58:56 executing program 5: clone(0x200, &(0x7f0000c34000), &(0x7f0000ad8ffc), &(0x7f0000676000), &(0x7f00003ed000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000)=[], &(0x7f0000949fc8)=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r1, &(0x7f0000000080), 0x296, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f000074eff8)='./file0\x00', 0x0) 2018/02/27 08:58:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000b2f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000065e000)=@newsa={0xf0, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in6=@loopback={0x0, 0x1}}, {@in6=@loopback={0x0, 0x1}}, @in6=@loopback={0x0, 0x1}}, []}, 0xf0}, 0x1}, 0x0) 2018/02/27 08:58:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='pagemap\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100000) 2018/02/27 08:58:56 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:56 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:56 executing program 7: clone(0x200, &(0x7f0000c34000), &(0x7f0000ad8ffc), &(0x7f0000676000), &(0x7f00003ed000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000)=[], &(0x7f0000949fc8)=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r1, &(0x7f0000000080), 0x296, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f000074eff8)='./file0\x00', 0x0) 2018/02/27 08:58:56 executing program 4: clone(0x200, &(0x7f0000c34000), &(0x7f0000ad8ffc), &(0x7f0000676000), &(0x7f00003ed000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000)=[], &(0x7f0000949fc8)=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r1, &(0x7f0000000080), 0x296, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f000074eff8)='./file0\x00', 0x0) 2018/02/27 08:58:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='pagemap\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100000) 2018/02/27 08:58:56 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:56 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:56 executing program 5: clone(0x200, &(0x7f0000c34000), &(0x7f0000ad8ffc), &(0x7f0000676000), &(0x7f00003ed000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000)=[], &(0x7f0000949fc8)=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r1, &(0x7f0000000080), 0x296, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f000074eff8)='./file0\x00', 0x0) 2018/02/27 08:58:56 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000b2f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000065e000)=@newsa={0xf0, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in6=@loopback={0x0, 0x1}}, {@in6=@loopback={0x0, 0x1}}, @in6=@loopback={0x0, 0x1}}, []}, 0xf0}, 0x1}, 0x0) 2018/02/27 08:58:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000b2f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000065e000)=@newsa={0xf0, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in6=@loopback={0x0, 0x1}}, {@in6=@loopback={0x0, 0x1}}, @in6=@loopback={0x0, 0x1}}, []}, 0xf0}, 0x1}, 0x0) 2018/02/27 08:58:56 executing program 4: clone(0x200, &(0x7f0000c34000), &(0x7f0000ad8ffc), &(0x7f0000676000), &(0x7f00003ed000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f14000)='./file0\x00', &(0x7f0000eb2000)=[], &(0x7f0000949fc8)=[]) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r1, &(0x7f0000000080), 0x296, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f000074eff8)='./file0\x00', 0x0) 2018/02/27 08:58:56 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:56 executing program 1: r0 = memfd_create(&(0x7f0000000040)="7307026d26b3cc93a717c40bac549f084b0dac4d161a152d33ca10d4bc586957513ea8bac972451021c97057ce4355fa215dbbb0a317906ab3c4d7812712c04a8e9edd4c2480003d857a2e29fec1b0c830256a10ae5620bda08e8c816a3c1d40d66424175e9f8ed690e580fb4ce6e5255aec33b4d50390b15fb2cdf43036150936b66d03be0dbf3200967b9048dcb6dc64e65f63849dbe67fb91d1c60d83fd6932b9cf0cc88d89bbcaa6c5d5d30e5bf7d0a15f6eeb2323392ebf3f22378d7ee6ab09fa89793d69e550a897", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) flistxattr(r0, &(0x7f0000000200)=""/183, 0xb7) close(0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, "105642854868fa8b82d2e5c5a249a8157d87a02192eeadc8450dad0af8378d82"}) 2018/02/27 08:58:56 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/02/27 08:58:56 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000ab4f8e)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 08:58:56 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f00000f5fe0)=[{0x60}, {0x6}]}, 0x10) 2018/02/27 08:58:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000473000)) 2018/02/27 08:58:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000f8d000)='smaps\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) 2018/02/27 08:58:56 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f00000f5fe0)=[{0x60}, {0x6}]}, 0x10) 2018/02/27 08:58:56 executing program 0: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000be0000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00001daa24)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000ad9ffc)=0xe8) 2018/02/27 08:58:56 executing program 1: r0 = memfd_create(&(0x7f0000000040)="7307026d26b3cc93a717c40bac549f084b0dac4d161a152d33ca10d4bc586957513ea8bac972451021c97057ce4355fa215dbbb0a317906ab3c4d7812712c04a8e9edd4c2480003d857a2e29fec1b0c830256a10ae5620bda08e8c816a3c1d40d66424175e9f8ed690e580fb4ce6e5255aec33b4d50390b15fb2cdf43036150936b66d03be0dbf3200967b9048dcb6dc64e65f63849dbe67fb91d1c60d83fd6932b9cf0cc88d89bbcaa6c5d5d30e5bf7d0a15f6eeb2323392ebf3f22378d7ee6ab09fa89793d69e550a897", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) flistxattr(r0, &(0x7f0000000200)=""/183, 0xb7) close(0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, "105642854868fa8b82d2e5c5a249a8157d87a02192eeadc8450dad0af8378d82"}) 2018/02/27 08:58:56 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000ab4f8e)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 08:58:56 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x44}) sched_setaffinity(0x0, 0x8, &(0x7f000080b000)=0x51b2) readv(r0, &(0x7f0000d32fc0)=[{&(0x7f000039a000)=""/185, 0xb9}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 2018/02/27 08:58:56 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f00000f5fe0)=[{0x60}, {0x6}]}, 0x10) 2018/02/27 08:58:56 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000ab4f8e)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 08:58:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000473000)) [ 54.559481] audit: type=1400 audit(1519721936.884:34): avc: denied { getopt } for pid=6998 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 2018/02/27 08:58:56 executing program 0: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000be0000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00001daa24)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000ad9ffc)=0xe8) 2018/02/27 08:58:56 executing program 1: r0 = memfd_create(&(0x7f0000000040)="7307026d26b3cc93a717c40bac549f084b0dac4d161a152d33ca10d4bc586957513ea8bac972451021c97057ce4355fa215dbbb0a317906ab3c4d7812712c04a8e9edd4c2480003d857a2e29fec1b0c830256a10ae5620bda08e8c816a3c1d40d66424175e9f8ed690e580fb4ce6e5255aec33b4d50390b15fb2cdf43036150936b66d03be0dbf3200967b9048dcb6dc64e65f63849dbe67fb91d1c60d83fd6932b9cf0cc88d89bbcaa6c5d5d30e5bf7d0a15f6eeb2323392ebf3f22378d7ee6ab09fa89793d69e550a897", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) flistxattr(r0, &(0x7f0000000200)=""/183, 0xb7) close(0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, "105642854868fa8b82d2e5c5a249a8157d87a02192eeadc8450dad0af8378d82"}) 2018/02/27 08:58:56 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f00000f5fe0)=[{0x60}, {0x6}]}, 0x10) 2018/02/27 08:58:56 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000ab4f8e)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 08:58:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000473000)) 2018/02/27 08:58:56 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000473000)) 2018/02/27 08:58:56 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x44}) sched_setaffinity(0x0, 0x8, &(0x7f000080b000)=0x51b2) readv(r0, &(0x7f0000d32fc0)=[{&(0x7f000039a000)=""/185, 0xb9}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 2018/02/27 08:58:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000f8d000)='smaps\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) 2018/02/27 08:58:57 executing program 0: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000be0000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00001daa24)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000ad9ffc)=0xe8) 2018/02/27 08:58:57 executing program 7: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000be0000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00001daa24)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000ad9ffc)=0xe8) 2018/02/27 08:58:57 executing program 1: r0 = memfd_create(&(0x7f0000000040)="7307026d26b3cc93a717c40bac549f084b0dac4d161a152d33ca10d4bc586957513ea8bac972451021c97057ce4355fa215dbbb0a317906ab3c4d7812712c04a8e9edd4c2480003d857a2e29fec1b0c830256a10ae5620bda08e8c816a3c1d40d66424175e9f8ed690e580fb4ce6e5255aec33b4d50390b15fb2cdf43036150936b66d03be0dbf3200967b9048dcb6dc64e65f63849dbe67fb91d1c60d83fd6932b9cf0cc88d89bbcaa6c5d5d30e5bf7d0a15f6eeb2323392ebf3f22378d7ee6ab09fa89793d69e550a897", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) flistxattr(r0, &(0x7f0000000200)=""/183, 0xb7) close(0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, "105642854868fa8b82d2e5c5a249a8157d87a02192eeadc8450dad0af8378d82"}) 2018/02/27 08:58:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000473000)) 2018/02/27 08:58:57 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x44}) sched_setaffinity(0x0, 0x8, &(0x7f000080b000)=0x51b2) readv(r0, &(0x7f0000d32fc0)=[{&(0x7f000039a000)=""/185, 0xb9}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 2018/02/27 08:58:57 executing program 0: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000be0000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00001daa24)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000ad9ffc)=0xe8) 2018/02/27 08:58:57 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000473000)) 2018/02/27 08:58:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000f8d000)='smaps\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) 2018/02/27 08:58:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000473000)) 2018/02/27 08:58:57 executing program 5: r0 = socket$inet(0x2, 0x200000000000003, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f00003b1000)=[]}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/02/27 08:58:57 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x44}) sched_setaffinity(0x0, 0x8, &(0x7f000080b000)=0x51b2) readv(r0, &(0x7f0000d32fc0)=[{&(0x7f000039a000)=""/185, 0xb9}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 2018/02/27 08:58:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f000042d000)=@sack_info={0x0, 0x61, 0x1}, 0xc) 2018/02/27 08:58:57 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x44}) sched_setaffinity(0x0, 0x8, &(0x7f000080b000)=0x51b2) readv(r0, &(0x7f0000d32fc0)=[{&(0x7f000039a000)=""/185, 0xb9}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 2018/02/27 08:58:57 executing program 7: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000be0000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00001daa24)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000ad9ffc)=0xe8) 2018/02/27 08:58:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000f8d000)='smaps\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) 2018/02/27 08:58:57 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000473000)) 2018/02/27 08:58:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f000042d000)=@sack_info={0x0, 0x61, 0x1}, 0xc) 2018/02/27 08:58:57 executing program 5: r0 = socket$inet(0x2, 0x200000000000003, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f00003b1000)=[]}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/02/27 08:58:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000473000)) 2018/02/27 08:58:57 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x44}) sched_setaffinity(0x0, 0x8, &(0x7f000080b000)=0x51b2) readv(r0, &(0x7f0000d32fc0)=[{&(0x7f000039a000)=""/185, 0xb9}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 2018/02/27 08:58:57 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x44}) sched_setaffinity(0x0, 0x8, &(0x7f000080b000)=0x51b2) readv(r0, &(0x7f0000d32fc0)=[{&(0x7f000039a000)=""/185, 0xb9}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 2018/02/27 08:58:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f000042d000)=@sack_info={0x0, 0x61, 0x1}, 0xc) 2018/02/27 08:58:57 executing program 7: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000be0000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00001daa24)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000ad9ffc)=0xe8) 2018/02/27 08:58:57 executing program 4: r0 = socket$inet(0x2, 0x200000000000003, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f00003b1000)=[]}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/02/27 08:58:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f000042d000)=@sack_info={0x0, 0x61, 0x1}, 0xc) 2018/02/27 08:58:57 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/02/27 08:58:57 executing program 5: r0 = socket$inet(0x2, 0x200000000000003, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f00003b1000)=[]}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/02/27 08:58:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000802, 0x300) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000473000)) 2018/02/27 08:58:57 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000a1eff8)) syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000)) 2018/02/27 08:58:57 executing program 6: getrlimit(0x81c691ae9b48fea1, &(0x7f0000ed6000)) 2018/02/27 08:58:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x7fffffff}) 2018/02/27 08:58:57 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/02/27 08:58:57 executing program 4: r0 = socket$inet(0x2, 0x200000000000003, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f00003b1000)=[]}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/02/27 08:58:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/02/27 08:58:57 executing program 6: getrlimit(0x81c691ae9b48fea1, &(0x7f0000ed6000)) 2018/02/27 08:58:57 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/02/27 08:58:57 executing program 5: r0 = socket$inet(0x2, 0x200000000000003, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f00003b1000)=[]}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/02/27 08:58:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000cf9000)="2400000024007f009b6700415e00770100000000010000000001000000000000bb010710", 0x24) 2018/02/27 08:58:57 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/02/27 08:58:57 executing program 4: r0 = socket$inet(0x2, 0x200000000000003, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000cff0)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f00003b1000)=[]}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/02/27 08:58:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/02/27 08:58:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004aeff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)) 2018/02/27 08:58:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2018/02/27 08:58:57 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000a1eff8)) syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000)) 2018/02/27 08:58:57 executing program 6: getrlimit(0x81c691ae9b48fea1, &(0x7f0000ed6000)) 2018/02/27 08:58:57 executing program 4: r0 = socket(0x2000000010, 0x3, 0x0) write(r0, &(0x7f00002a2000)="240000001a0025f00017fb1000f7fc0e0a0b00000004bf0202ffffeb0800040048186be0", 0x24) 2018/02/27 08:58:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000cf9000)="2400000024007f009b6700415e00770100000000010000000001000000000000bb010710", 0x24) 2018/02/27 08:58:57 executing program 2: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) clone(0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000ffc), &(0x7f0000000000)) 2018/02/27 08:58:57 executing program 6: getrlimit(0x81c691ae9b48fea1, &(0x7f0000ed6000)) 2018/02/27 08:58:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000cf9000)="2400000024007f009b6700415e00770100000000010000000001000000000000bb010710", 0x24) 2018/02/27 08:58:57 executing program 4: r0 = socket(0x2000000010, 0x3, 0x0) write(r0, &(0x7f00002a2000)="240000001a0025f00017fb1000f7fc0e0a0b00000004bf0202ffffeb0800040048186be0", 0x24) 2018/02/27 08:58:57 executing program 2: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) clone(0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000ffc), &(0x7f0000000000)) 2018/02/27 08:58:57 executing program 6: socket$inet6(0xa, 0x80003, 0xef) socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000559ff8), 0x8) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000f08fc0), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000d0a000)={&(0x7f00001da000), 0x8}) 2018/02/27 08:58:57 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000a1eff8)) syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000)) 2018/02/27 08:58:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2018/02/27 08:58:57 executing program 4: r0 = socket(0x2000000010, 0x3, 0x0) write(r0, &(0x7f00002a2000)="240000001a0025f00017fb1000f7fc0e0a0b00000004bf0202ffffeb0800040048186be0", 0x24) 2018/02/27 08:58:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/02/27 08:58:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004aeff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)) 2018/02/27 08:58:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000cf9000)="2400000024007f009b6700415e00770100000000010000000001000000000000bb010710", 0x24) 2018/02/27 08:58:57 executing program 2: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) clone(0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000ffc), &(0x7f0000000000)) 2018/02/27 08:58:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2018/02/27 08:58:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/02/27 08:58:57 executing program 4: r0 = socket(0x2000000010, 0x3, 0x0) write(r0, &(0x7f00002a2000)="240000001a0025f00017fb1000f7fc0e0a0b00000004bf0202ffffeb0800040048186be0", 0x24) 2018/02/27 08:58:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004aeff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)) 2018/02/27 08:58:57 executing program 6: socket$inet6(0xa, 0x80003, 0xef) socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000559ff8), 0x8) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000f08fc0), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000d0a000)={&(0x7f00001da000), 0x8}) 2018/02/27 08:58:57 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000a1eff8)) syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000ea3000)) 2018/02/27 08:58:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2018/02/27 08:58:57 executing program 1: set_mempolicy(0x3, &(0x7f0000001ff8)=0x1, 0x38) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/191, 0xbf) 2018/02/27 08:58:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e20, @rand_addr}, 0x0, 0x0, 0x0, 0x53, 0x0, &(0x7f0000000080)='vlan0\x00'}) 2018/02/27 08:58:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)={0x0, 0x0, 0x0, 0x0, r1}) 2018/02/27 08:58:57 executing program 2: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) clone(0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000ffc), &(0x7f0000000000)) 2018/02/27 08:58:57 executing program 6: socket$inet6(0xa, 0x80003, 0xef) socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000559ff8), 0x8) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000f08fc0), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000d0a000)={&(0x7f00001da000), 0x8}) 2018/02/27 08:58:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004aeff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)) 2018/02/27 08:58:57 executing program 2: set_mempolicy(0x3, &(0x7f0000001ff8)=0x1, 0x38) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/191, 0xbf) 2018/02/27 08:58:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e20, @rand_addr}, 0x0, 0x0, 0x0, 0x53, 0x0, &(0x7f0000000080)='vlan0\x00'}) 2018/02/27 08:58:57 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x1949, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/27 08:58:57 executing program 6: socket$inet6(0xa, 0x80003, 0xef) socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000559ff8), 0x8) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000f08fc0), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000d0a000)={&(0x7f00001da000), 0x8}) 2018/02/27 08:58:57 executing program 1: set_mempolicy(0x3, &(0x7f0000001ff8)=0x1, 0x38) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/191, 0xbf) 2018/02/27 08:58:57 executing program 7: set_mempolicy(0x3, &(0x7f0000001ff8)=0x1, 0x38) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/191, 0xbf) 2018/02/27 08:58:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)={0x0, 0x0, 0x0, 0x0, r1}) 2018/02/27 08:58:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)={0x0, 0x0, 0x0, 0x0, r1}) 2018/02/27 08:58:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)={0x0, 0x0, 0x0, 0x0, r1}) 2018/02/27 08:58:57 executing program 2: set_mempolicy(0x3, &(0x7f0000001ff8)=0x1, 0x38) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/191, 0xbf) 2018/02/27 08:58:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e20, @rand_addr}, 0x0, 0x0, 0x0, 0x53, 0x0, &(0x7f0000000080)='vlan0\x00'}) 2018/02/27 08:58:57 executing program 7: set_mempolicy(0x3, &(0x7f0000001ff8)=0x1, 0x38) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/191, 0xbf) 2018/02/27 08:58:57 executing program 1: set_mempolicy(0x3, &(0x7f0000001ff8)=0x1, 0x38) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/191, 0xbf) 2018/02/27 08:58:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)={0x0, 0x0, 0x0, 0x0, r1}) 2018/02/27 08:58:57 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x1949, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/27 08:58:57 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x1949, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 55.393345] audit: type=1400 audit(1519721937.717:35): avc: denied { ipc_lock } for pid=7207 comm="syz-executor5" capability=14 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/27 08:58:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)={0x0, 0x0, 0x0, 0x0, r1}) 2018/02/27 08:58:57 executing program 2: set_mempolicy(0x3, &(0x7f0000001ff8)=0x1, 0x38) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/191, 0xbf) 2018/02/27 08:58:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)={0x0, 0x0, 0x0, 0x0, r1}) 2018/02/27 08:58:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e20, @rand_addr}, 0x0, 0x0, 0x0, 0x53, 0x0, &(0x7f0000000080)='vlan0\x00'}) 2018/02/27 08:58:57 executing program 7: set_mempolicy(0x3, &(0x7f0000001ff8)=0x1, 0x38) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/191, 0xbf) 2018/02/27 08:58:57 executing program 1: set_mempolicy(0x3, &(0x7f0000001ff8)=0x1, 0x38) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/191, 0xbf) 2018/02/27 08:58:57 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x1949, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/27 08:58:57 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x1949, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/27 08:58:57 executing program 3: prctl$setname(0xf, &(0x7f000097ffff)='\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000041eff7)='/dev/dsp\x00', 0x0, 0x0) 2018/02/27 08:58:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000822000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x800000040004500, &(0x7f0000000080)) 2018/02/27 08:58:57 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x1949, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/27 08:58:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000180)="260000002200470105000008000000000000001900000000000000040000000000e7033500b0", 0x26) 2018/02/27 08:58:57 executing program 3: prctl$setname(0xf, &(0x7f000097ffff)='\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000041eff7)='/dev/dsp\x00', 0x0, 0x0) 2018/02/27 08:58:57 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x1949, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/02/27 08:58:57 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x1, 0x800000001, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 08:58:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xd6}}], 0x30) pread64(r0, &(0x7f0000000140)=""/250, 0xfa, 0x0) 2018/02/27 08:58:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000197fe0)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000867000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000e9d000)) 2018/02/27 08:58:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000822000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x800000040004500, &(0x7f0000000080)) 2018/02/27 08:58:57 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = semget$private(0x0, 0x7, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000013ff4)=[]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000bb6ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/27 08:58:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000180)="260000002200470105000008000000000000001900000000000000040000000000e7033500b0", 0x26) 2018/02/27 08:58:57 executing program 6: prctl$setname(0xf, &(0x7f000097ffff)='\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000041eff7)='/dev/dsp\x00', 0x0, 0x0) 2018/02/27 08:58:57 executing program 3: prctl$setname(0xf, &(0x7f000097ffff)='\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000041eff7)='/dev/dsp\x00', 0x0, 0x0) 2018/02/27 08:58:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000822000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x800000040004500, &(0x7f0000000080)) 2018/02/27 08:58:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000180)="260000002200470105000008000000000000001900000000000000040000000000e7033500b0", 0x26) 2018/02/27 08:58:57 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x1, 0x800000001, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 08:58:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xd6}}], 0x30) pread64(r0, &(0x7f0000000140)=""/250, 0xfa, 0x0) [ 55.652592] kasan: CONFIG_KASAN_INLINE enabled [ 55.657268] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 55.664695] general protection fault: 0000 [#1] SMP KASAN [ 55.670226] Dumping ftrace buffer: [ 55.673757] (ftrace buffer empty) [ 55.677460] Modules linked in: [ 55.680655] CPU: 0 PID: 7291 Comm: syz-executor4 Not tainted 4.16.0-rc3+ #331 [ 55.687922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.697284] RIP: 0010:hrtimer_active+0x1da/0x3c0 [ 55.702030] RSP: 0018:ffff8801d35bf3c0 EFLAGS: 00010202 [ 55.707390] RAX: 0000000000000008 RBX: 1ffff1003a6b7ea5 RCX: ffffffff81610225 [ 55.714655] RDX: 0000000000010000 RSI: ffffc90002194000 RDI: 0000000000000010 [ 55.721917] RBP: ffff8801d35bf500 R08: 0000000000002c02 R09: 0000000000000000 [ 55.729167] R10: 0000000000000011 R11: ffffed0037f1e080 R12: 0000000000000010 [ 55.736415] R13: 0000000000000000 R14: ffffed003a6b7e83 R15: dffffc0000000000 [ 55.743667] FS: 00007f1a5c6dd700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 55.751869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.757728] CR2: 00007f1a5c69b000 CR3: 00000001b8bf3003 CR4: 00000000001626f0 [ 55.764980] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.772228] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 55.779474] Call Trace: [ 55.782064] ? hrtimer_forward+0x2d0/0x2d0 [ 55.786285] ? vmx_update_msr_bitmap+0x13a/0x430 [ 55.791049] ? setup_msrs+0x926/0x1d80 [ 55.794920] ? vmx_set_cr4+0x353/0x610 [ 55.798820] hrtimer_try_to_cancel+0x91/0x5b0 [ 55.803300] ? update_exception_bitmap+0x19a/0x200 [ 55.808214] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 55.813126] ? vmx_vcpu_reset+0x55f/0xc70 [ 55.817261] ? load_vmcs12_host_state+0x1fa0/0x1fa0 [ 55.822272] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 55.827118] ? kvm_arch_vcpu_load+0x1c1/0x8d0 [ 55.831590] ? futex_wake+0x680/0x680 [ 55.835384] hrtimer_cancel+0x22/0x40 [ 55.839171] kvm_lapic_reset+0x93/0xf40 [ 55.843136] ? kvm_lapic_set_base+0x750/0x750 [ 55.847617] ? kvm_arch_vcpu_free+0x80/0x80 [ 55.851945] kvm_arch_vcpu_setup+0x31/0x50 [ 55.856164] kvm_vm_ioctl+0x52d/0x1cf0 [ 55.860038] ? perf_tp_event+0xae0/0xae0 [ 55.864091] ? kvm_set_memory_region+0x50/0x50 [ 55.868668] ? memset+0x31/0x40 [ 55.871946] ? perf_trace_lock_acquire+0x532/0x980 [ 55.876886] ? perf_trace_lock+0x900/0x900 [ 55.881103] ? lock_release+0xa40/0xa40 [ 55.885081] ? trace_hardirqs_off+0x10/0x10 [ 55.889388] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 55.894390] ? trace_hardirqs_on+0xd/0x10 [ 55.898553] ? find_held_lock+0x35/0x1d0 [ 55.902618] ? __fget+0x342/0x5b0 [ 55.906056] ? lock_downgrade+0x980/0x980 [ 55.910198] ? lock_release+0xa40/0xa40 [ 55.914164] ? __lock_is_held+0xb6/0x140 [ 55.918244] ? __fget+0x36b/0x5b0 [ 55.921705] ? iterate_fd+0x3f0/0x3f0 [ 55.925506] ? __do_page_fault+0x5f7/0xc90 [ 55.929726] ? lock_downgrade+0x980/0x980 [ 55.933866] ? kvm_set_memory_region+0x50/0x50 [ 55.938429] do_vfs_ioctl+0x1b1/0x1520 [ 55.942307] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 55.947220] ? ioctl_preallocate+0x2b0/0x2b0 [ 55.951620] ? selinux_capable+0x40/0x40 [ 55.955681] ? SyS_futex+0x1fb/0x390 [ 55.959408] ? security_file_ioctl+0x7d/0xb0 [ 55.963800] ? security_file_ioctl+0x89/0xb0 [ 55.968206] SyS_ioctl+0x8f/0xc0 [ 55.971558] ? do_vfs_ioctl+0x1520/0x1520 [ 55.975696] do_syscall_64+0x281/0x940 [ 55.979575] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 55.985100] ? syscall_return_slowpath+0x550/0x550 [ 55.990021] ? syscall_return_slowpath+0x2ac/0x550 [ 55.994949] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 56.000312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.005156] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 56.010324] RIP: 0033:0x453d69 [ 56.013493] RSP: 002b:00007f1a5c6dcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.021185] RAX: ffffffffffffffda RBX: 00007f1a5c6dd6d4 RCX: 0000000000453d69 [ 56.028432] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000018 [ 56.035683] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 56.042932] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 2018/02/27 08:58:57 executing program 6: prctl$setname(0xf, &(0x7f000097ffff)='\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000041eff7)='/dev/dsp\x00', 0x0, 0x0) 2018/02/27 08:58:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xd6}}], 0x30) pread64(r0, &(0x7f0000000140)=""/250, 0xfa, 0x0) 2018/02/27 08:58:58 executing program 6: prctl$setname(0xf, &(0x7f000097ffff)='\x00') openat$dsp(0xffffffffffffff9c, &(0x7f000041eff7)='/dev/dsp\x00', 0x0, 0x0) 2018/02/27 08:58:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xd6}}], 0x30) pread64(r0, &(0x7f0000000140)=""/250, 0xfa, 0x0) [ 56.050181] R13: 000000000000020e R14: 00000000006f31f0 R15: 0000000000000001 [ 56.057480] Code: ff ff 48 8d 85 18 ff ff ff 48 c1 e8 03 4e 8d 34 38 e8 1b f2 0f 00 48 8b 85 f0 fe ff ff c6 00 00 48 8b 85 d8 fe ff ff 48 c1 e8 03 <42> 80 3c 38 00 0f 85 c2 01 00 00 48 8b 85 e8 fe ff ff 48 8b 58 [ 56.076846] RIP: hrtimer_active+0x1da/0x3c0 RSP: ffff8801d35bf3c0 [ 56.083362] ---[ end trace b7ec5f788fcc8bdc ]--- [ 56.088150] Kernel panic - not syncing: Fatal exception [ 56.093879] Dumping ftrace buffer: [ 56.097394] (ftrace buffer empty) [ 56.101079] Kernel Offset: disabled [ 56.104682] Rebooting in 86400 seconds..