[....] Starting enhanced syslogd: rsyslogd[ 17.099593] audit: type=1400 audit(1519373900.730:5): avc: denied { syslog } for pid=4082 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.945601] audit: type=1400 audit(1519373906.576:6): avc: denied { map } for pid=4221 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. 2018/02/23 08:18:32 fuzzer started [ 29.317142] audit: type=1400 audit(1519373912.947:7): avc: denied { map } for pid=4232 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/23 08:18:33 dialing manager at 10.128.0.26:38777 [ 35.536345] can: request_module (can-proto-0) failed. [ 35.545411] can: request_module (can-proto-0) failed. 2018/02/23 08:18:39 kcov=true, comps=true [ 36.100223] audit: type=1400 audit(1519373919.730:8): avc: denied { map } for pid=4232 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=128 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/23 08:18:44 executing program 0: 2018/02/23 08:18:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000603000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000add000)={0x10}, 0xc, &(0x7f00006fa000)={&(0x7f0000087000)=@ipv4_deladdr={0x2c, 0x15, 0x801, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, @common='gretap0\x00'}]}, 0x2c}, 0x1}, 0x0) 2018/02/23 08:18:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x21) connect$inet6(r0, &(0x7f0000002fe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000ff0)=[], 0x0, &(0x7f0000026000)=[]}, 0x2000c080) write(r0, &(0x7f0000000000)="d7ceb7871459779fa1864048bcbcf755e1ef7d5e6f425958b72e54cdd48b6330dc2f3bf453a942c5022641683696a3572240e44a9a607169ab5a1599da285fb60660b7c02f5d9d777291d99689f33849", 0x50) 2018/02/23 08:18:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x100000000004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040), 0x4) write(r0, &(0x7f0000ff2fd9)="2700000014000707030e0000120fe70010ffe0f41207f4cd0a19000000000000240800390075ed", 0x27) 2018/02/23 08:18:44 executing program 3: mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x80000003, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000ceaff6)='/dev/ptmx\x00', 0x0, 0x0) arch_prctl(0x1002, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) ioctl$int_in(r0, 0x20000000541f, &(0x7f00009fbff8)) 2018/02/23 08:18:44 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000fd4000)={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x100000006}) 2018/02/23 08:18:44 executing program 5: mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x80000003, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000ceaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) ioctl$int_in(r0, 0x200000005406, &(0x7f00009fbff8)) 2018/02/23 08:18:44 executing program 6: mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x80000003, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000ceaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) ioctl$int_in(r0, 0x200000005405, &(0x7f00009fbff8)) [ 40.410615] audit: type=1400 audit(1519373924.041:9): avc: denied { map } for pid=4232 comm="syz-fuzzer" path="/root/syzkaller-shm108109438" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 40.452988] audit: type=1400 audit(1519373924.083:10): avc: denied { sys_admin } for pid=4276 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 40.469070] IPVS: ftp: loaded support on port[0] = 21 [ 40.531069] audit: type=1400 audit(1519373924.160:11): avc: denied { net_admin } for pid=4279 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 40.557546] IPVS: ftp: loaded support on port[0] = 21 [ 40.616183] IPVS: ftp: loaded support on port[0] = 21 [ 40.658961] IPVS: ftp: loaded support on port[0] = 21 [ 40.713712] IPVS: ftp: loaded support on port[0] = 21 [ 40.789337] IPVS: ftp: loaded support on port[0] = 21 [ 40.869045] IPVS: ftp: loaded support on port[0] = 21 [ 40.990692] IPVS: ftp: loaded support on port[0] = 21 [ 42.140781] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.200073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.317611] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.328090] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.501935] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.673147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.742371] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.803760] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.934200] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.940340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.025491] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 45.031628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.055562] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 45.061680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.152818] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 45.158956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.188834] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.249511] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 45.255626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.318281] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.330111] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.443608] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.451923] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 45.458040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.481478] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.487751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.499834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.522509] audit: type=1400 audit(1519373929.153:12): avc: denied { sys_chroot } for pid=4280 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 45.589224] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.618311] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 45.624449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.645212] IPv6: veth1: IPv6 duplicate address fe80::a used by aa:aa:aa:aa:00:0a detected! [ 45.655692] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.663873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.670129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.684207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.699431] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 45.705520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.725367] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.732595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.740946] audit: type=1400 audit(1519373929.371:13): avc: denied { net_raw } for pid=5506 comm="syz-executor1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 45.741530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.771886] dccp_invalid_packet: P.CsCov 9 exceeds packet length 80 [ 45.791729] IPv6: veth0: IPv6 duplicate address fe80::a8aa:aaff:feaa:10b used by aa:aa:aa:aa:01:0b detected! [ 45.832586] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.840363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.849998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.869928] IPv6: veth0: IPv6 duplicate address fe80::a8aa:aaff:feaa:711 used by aa:aa:aa:aa:07:11 detected! [ 45.880351] IPv6: veth1: IPv6 duplicate address fe80::a8aa:aaff:feaa:a used by aa:aa:aa:aa:00:0a detected! [ 45.895613] IPv6: veth1: IPv6 duplicate address fe80::1:b used by aa:aa:aa:aa:01:0b detected! [ 45.936644] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.942880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.950454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.960739] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.966899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.974596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.993756] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.004546] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/02/23 08:18:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e9efa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x20003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="29568409e28c73e6c112af8352e10b60ea4c3db5c6714259ad4e3b276ec6060000800000000000e5f9a2deddcf0d60e1f1b4da00000000000000040409ff230dcb1bad6580e8a879ed62f1bda08c4ba1477f24f47cdc5ba0f142f1cb086512ec57c92aab92b330198722d5e9c44e526fb6add3531e618a50ea24cee82a3258a08628617113", 0x85) accept$alg(r2, 0x0, 0x0) 2018/02/23 08:18:49 executing program 1: 2018/02/23 08:18:49 executing program 6: 2018/02/23 08:18:49 executing program 7: 2018/02/23 08:18:49 executing program 3: 2018/02/23 08:18:49 executing program 2: 2018/02/23 08:18:49 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000d25000)=@common='ip6_vti0\x00', 0x10) bind(r0, &(0x7f0000801fa8)=@can={0x1d}, 0x10) 2018/02/23 08:18:49 executing program 5: [ 46.077740] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.084101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.091616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.099893] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.106363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.117961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/23 08:18:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000a76fee)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000c9c000)={0x0, 0x0}) ppoll(&(0x7f00004e8000)=[{r0}], 0x1, &(0x7f00009ffff5)={0x0, r1}, &(0x7f00007ceff8), 0x8) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x400}, {r0}], 0x2, &(0x7f0000000080)={r2, r3+30000000}, &(0x7f00000000c0)={0x80000000}, 0x8) ioctl$TIOCSBRK(r0, 0x40044591) 2018/02/23 08:18:49 executing program 3: syz_fuseblk_mount(&(0x7f0000b25000)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000c19000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000247ff0)='/dev/input/mice\x00', 0x0, 0x0) unshare(0x400) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x7ff}, 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000, 0x0) 2018/02/23 08:18:49 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x30800, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000000c0)={0x7, 0x8000, 0x3, 'queue0\x00', 0x2}) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x1}, 0x8) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x35) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x9142, 0x81, 0x3c, {}, 0x5ca}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000180)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x80}) sendmsg(0xffffffffffffffff, &(0x7f0000f12fd8)={&(0x7f0000218000)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f00000011c0)=[], 0x0, &(0x7f0000000000)=[{0x90, 0x0, 0x7, "38d29672566746e65e613b4599c07f32032ac446781ea6d0dcdc29791c1a51570fe341bd8ee731580530b32da8eac5ee265d17733756cf7e578efc269fa63e2ee44bf6d55332aed04fb3db0e3d60e3f3866b3af0aca9a52a223b7284dc331700000100fcecfb7d8ec13f82439b7ba84b6f0fd729bdb64731945da9030b87"}], 0x90, 0x4}, 0x0) 2018/02/23 08:18:49 executing program 1: r0 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f00009f5fb0)={@common='ip6tnl0\x00', @ifru_ivalue}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, {0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x5c, {0x2, 0x2, @multicast1=0xe0000001}, @generic="03461c3c56044fbe6a83d924ec726399"}) 2018/02/23 08:18:49 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000000)=[]}, 0x20) io_setup(0x2, &(0x7f00000000c0)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[]}, &(0x7f0000000100)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) ustat(0x7, &(0x7f0000000000)) 2018/02/23 08:18:49 executing program 6: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000dc7000), 0xffa4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x2, 0xff, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x6843ff22}}, 0x7ff, 0x2, 0x1, 0x8}, &(0x7f0000000140)=0xa0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r1, 0x4}, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x10000, 0x4) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x7, r0}) 2018/02/23 08:18:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0xfffffffffffffc8d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="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", 0xfffffffffffffd6a}], 0x3bb, &(0x7f0000655000)=[], 0xfffffffffffffdba, 0x400000}, 0x0) recvmsg(r1, &(0x7f00000a6000)={&(0x7f0000074000)=@alg, 0x58, &(0x7f0000eecfc0)=[{&(0x7f0000f95f2c)=""/212, 0xd4}, {&(0x7f000043e000)=""/108, 0x4a}, {&(0x7f000065efd2)=""/46, 0x2e}], 0x3, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/02/23 08:18:49 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x40}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, {0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}}, 0x8, {0x2, 0x2, @broadcast=0xffffffff}, @common='vlan0\x00'}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7ff, &(0x7f0000008000/0x1000)=nil, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, r1, 0x0) read(r1, &(0x7f0000904000)=""/100, 0x64) fchmod(r1, 0x80) 2018/02/23 08:18:49 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) waitid(0x1, r0, 0x0, 0x100000d, &(0x7f0000000100)) 2018/02/23 08:18:49 executing program 0: r0 = semget(0x1, 0x1, 0x2) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000000000)=""/100) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r1 = open(&(0x7f0000267ff6)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000189a2)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xad, "227260a611f878e29321b8f4bc73da4983b97ba781bf1eeb8790f447972fdecbee0918746356b1be04a3153c59f001d76f80f9a68e0b8a724ee61755ab4a99f8df1e281d6a0984835c6eb9676390d1eab2d53942cf7e363a8370c129bbcb2335acd1b88aad61aed93afad6614618f6edfc725ad4213f41d2a0861d357c1c67b50ce66405ab580ccd5f8a7bb41d369cc917d09c44e7f1f25c7ed9259362c379f5243a01890e38519a22a03dcc4d"}, &(0x7f00000000c0)=0xb5) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x7}, 0x8) r3 = openat(r1, &(0x7f000001aff8)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000017000)='./file0\x00', 0x0) r4 = openat(r3, &(0x7f0000fafff2)='./file0/file0\x00', 0x10240, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x40049409, r4) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000000)) pause() mq_open(&(0x7f0000000140)='\x00', 0x0, 0x10, &(0x7f0000000180)={0xfff, 0x7, 0x1, 0x40, 0x4, 0x8, 0x80, 0xcfda}) 2018/02/23 08:18:49 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/4096) r1 = getpgrp(0x0) ptrace$peek(0x1, r1, &(0x7f0000001040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001080)=0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001080)={0x0, 0x3ff}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001100)={r3, 0x0, 0x20}, 0xc) bind$netlink(r2, &(0x7f00004a0ff4)={0x10, 0x0, 0x0}, 0xc) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001040)=0x4, 0x4) [ 46.223260] IPv6: veth0: IPv6 duplicate address fe80::5:f used by aa:aa:aa:aa:05:0f detected! [ 46.249755] IPv6: veth1: IPv6 duplicate address fe80::a8aa:aaff:feaa:50f used by aa:aa:aa:aa:05:0f detected! 2018/02/23 08:18:49 executing program 5: mkdir(&(0x7f000063543e)='./file0\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f00000a7ff8)='./file0\x00', &(0x7f0000d6e000)='sysfs\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) 2018/02/23 08:18:49 executing program 6: r0 = socket$inet(0x2, 0x80006, 0xfffffffffffffff7) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0xd2) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4000, 0x0) accept4$ipx(r2, 0x0, &(0x7f0000000080), 0x800) bind$inet(r1, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) r3 = getpid() syz_open_procfs(r3, &(0x7f00000000c0)='net/fib_trie\x00') sendto$inet(r1, &(0x7f0000000100)='R', 0x1, 0x20020007, &(0x7f0000e97fcf)={0x2, 0x1, @loopback=0x7f000001}, 0x0) 2018/02/23 08:18:49 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@arp={0x806, @generic={0x320, 0x8864, 0x6, 0xc, 0x4, @link_local={0x1, 0x80, 0xc2}, "ffd43ebc363d9decf3d8545f", @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, "ce013d76e42780157c672e2cc085514e"}}}}, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000040)="4886c52bf8584530c0dc3b0262655bff7e55c519391f43cee8b4fc0a1eec46586e95af29d4d0644146a3e6611c45c27115a2a56b585b6aa5aac929e07f5a68691dc7341feb99812244db00c8844399b660bba3db1c7aeae51999", 0x5a) 2018/02/23 08:18:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400082, 0x150) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0x400, 0x1ff, 0x0, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x8) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x38f}]}) 2018/02/23 08:18:49 executing program 3: getpgrp(0x0) timer_create(0x2, &(0x7f0000044000)={0x0, 0x35, 0x1, @thr={&(0x7f0000000080)="4698ceb520ce24c287e2790240fc684bdc0a7603b597159ecdeb3f316e645a24094cca956919196754f5f5326bc3465ce02c40844bcb042d2e0d407a35055a6b978b14091df39e8400e2e2b18fe50e704607d08de4a8307f73da2f8154e3fb00a58c28d9b3f4295a2bdb77c705c0325bf6f33648ad56ce0cfc6753238de84c87b8caf3d9833a76902f9f860f8fa832ec6a62e403cfe0764aa78625435e4303d38ef2cd9644bf09df7237124ce4c46007931490d33840118777d7760629d42dc240db6fd7f3f251047019e399160d141b7df371d314b560dfdf619c", &(0x7f0000000180)="51419742e036f083f2a37893b155afc5e0bc8035e1f0c20fce1b4b1ba2abf206721f7fede06759880e9e0db127a5bd1fed0b81c8d8a82af13e3a852317bf6dd1d5bc4d877dae3138effd8e8c91dd9bf263bb8a"}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) [ 46.279879] audit: type=1400 audit(1519373929.905:14): avc: denied { dac_read_search } for pid=5611 comm="syz-executor0" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 46.305410] audit: type=1400 audit(1519373929.906:15): avc: denied { dac_override } for pid=5611 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 46.336903] IPv6: veth0: IPv6 duplicate address fe80::a8aa:aaff:feaa:30d used by aa:aa:aa:aa:03:0d detected! 2018/02/23 08:18:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000011fe0)={@dev={0xfe, 0x80}, 0x0, 0x0, 0xff, 0x1000000000001, 0x1f}, 0x20) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@common='bridge0\x00', @ifru_addrs={0x2, 0x1, @loopback=0x7f000001}}) getrusage(0x0, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x400400) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 2018/02/23 08:18:50 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x800, 0x4, 0x2, 0x4, 0xfff, 0x2}, 0x1}, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000017df4)=@ipv6_newroute={0x24, 0x48, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_IIF={0x8, 0x1}]}, 0x24}, 0x1}, 0x0) 2018/02/23 08:18:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000513ffc), &(0x7f0000e0bffc)=0x4) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f00007f2000)=[{&(0x7f000036b000)="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", 0x601}], 0x1) recvmsg(r0, &(0x7f000088c000)={&(0x7f00005fe000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @dev}}}, 0x2e, &(0x7f0000cc0f80)=[{&(0x7f0000583000)=""/172, 0xac}], 0x1, &(0x7f0000553fa0)=""/96, 0x60}, 0x0) read(r0, &(0x7f0000001000)=""/4096, 0xfffffffffffffdf5) unshare(0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f00001d9000), &(0x7f0000f32000)=0xc) writev(r0, &(0x7f0000730000)=[{&(0x7f0000192000)="f3bd8a7f35b2674b692ac8e1c1b7d240943742cb7f7f467d51c1d9a883f58bb8770b3b9893caea399d8a802c30c19a207c6210fe6284bab1c4bbe57cb931fd51c753ab3143fe3cb9271b73b4864171898dfae1f7126f66b444001117b1ec7ab1d6e5801a8de1c1e51f335ee0f0ad102d4bbdb736ee7774e60396a1c33ebf8714084e1bdb37836161149a681857aaf4d1d8ec409512fe142789f98b555b2a4d9f31ca06e7761d6667e6d1264f7b4efdccdcc2deb20443db20bfe869e4f3863a561a25616d73d64abaaa1578865950d55750769441ebf7db42248d158bd72c1ec989416daba39148dd73c00553ff57ad8dfd1faba13e082abab3ffae658d317b1bdcdb28e3e1d7cda6b9ec9d1ca3181b03dae542fd8de816fcff4c02bb562a378f789c8092bda28a3ef39a8849b56370489c73ce44b3ce3b60a8d98cb407219e1d9709f8fd44acf37c3584b1edaea3da2109931a071e0a2d54cf0f13e67ff55e39a5bd07f19a273d5e728ae4646d3db8779e5ac8891b363bfd8b4c12ede2b4eedafa4aa928b0a248fd67525ae2cf1bb6a0c5a7bff39b91a60b9b41381513556d1a9d9de0399648ee5ec30a98baa86149d95ddf71fa893660af2d34639569c7abcc189e7f0b078b3c3d8510b1beed7a56123ca15eaec3d2f7785060c3a8a8722d9ff2dceab74072e243e02f55c60e879c9a109e71e07b261d6e65da99b44444389aa3", 0x201}], 0x1) close(r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/144) 2018/02/23 08:18:50 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}, 0x1}) 2018/02/23 08:18:50 executing program 3: syz_open_dev$loop(&(0x7f0000000ff5)='/dev/loop#\x00', 0x2, 0x100) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x1) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x401) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xc0000000, 0x2000) syz_open_pts(r1, 0x40000) 2018/02/23 08:18:50 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000f09fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x7}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000bef000)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000849000)='syzkaller\x00', 0x4, 0xb7, &(0x7f000079d000)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000954ff8)={r0, r1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:sulogin_exec_t:s0', 0x20, '/sbin/dhclient', 0x20}, 0x36) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00007d5000)={r0}) 2018/02/23 08:18:50 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x800) r1 = syz_open_dev$tun(&(0x7f0000619ff3)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000059dfda)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @empty, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x2) 2018/02/23 08:18:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00') getsockname$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0xfffffffffffffd57) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0x1000, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}}, 0x14) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) 2018/02/23 08:18:50 executing program 1: pipe2(&(0x7f0000001000)={0x0}, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000dd8000)) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000f50ff4)) shutdown(r1, 0x1) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r4, 0x1}, 0x8) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x100000000, @empty, 0xb}}, 0x4, 0x7ff, 0x5, 0x5000, 0x3f}, &(0x7f00000000c0)=0xa0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000100)={r5, 0x29, "89ffea455193c9a866615c14dee8ab98661c482c2191731650c5504dfdf00c8e8e67357613ae38ce05"}, &(0x7f0000000140)=0x31) 2018/02/23 08:18:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000507000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000294000)={0x2, &(0x7f0000a90ff0)=[{0x40}, {0x6}]}, 0x10) sendto$unix(r1, &(0x7f0000000000)="e60651d2d3703f487c7831d28dcf0586c3a72c634c28a8ede7d2ecc8252f3abbee17d4d822f5b505758cbc9e11", 0x2d, 0x40000, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) sendto$unix(r1, &(0x7f0000000180)="7cf0df97dc7fe56f187bab81c29fa61c0764a8155db5e7160a94ab7cf1a6394d2dd460f4b994369d32938363e5e5377a78f5a88f0e6040fa695b90e09a9bd29b84cb99bbb5ed68c59ee17b4400010261e4eb11a54a377f7c833756cb57813f70", 0x60, 0x20008000, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r0}) [ 46.460292] device eql entered promiscuous mode [ 46.468919] IPv6: veth1: IPv6 duplicate address fe80::a8aa:aaff:feaa:20c used by aa:aa:aa:aa:02:0c detected! [ 46.479149] audit: type=1400 audit(1519373930.099:16): avc: denied { prog_load } for pid=5640 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 46.552868] audit: type=1400 audit(1519373930.181:17): avc: denied { prog_run } for pid=5640 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/23 08:18:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f0000016edc)={0x14, 0x1e, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r3 = getpid() r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xb19e, 0x4200) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000000c0)={r4, r1, 0x9}) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0), 0x4) prctl$setptracer(0x59616d61, r3) 2018/02/23 08:18:50 executing program 0: pipe(&(0x7f0000000000)={0x0}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x4, 0x0, 0xfffffffffffffff8, 'queue0\x00', 0x7}) r1 = syz_open_dev$evdev(&(0x7f0000a76fee)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000c9c000)={0x0, 0x0}) ppoll(&(0x7f00004e8000)=[{r1}], 0x1, &(0x7f00009ffff5)={0x0, r2}, &(0x7f00007ceff8), 0x8) ioctl$TIOCSBRK(r1, 0x40044591) 2018/02/23 08:18:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x44, 0x0, &(0x7f000000df48)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, &(0x7f0000005fe8)=[], &(0x7f0000206000)=[]}}], 0x0, 0x0, &(0x7f000084b000)}) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400000) open(&(0x7f0000000080)='./file0\x00', 0x800, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) 2018/02/23 08:18:50 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x6, &(0x7f0000000040), 0x0) socket(0x9, 0x4, 0x7) 2018/02/23 08:18:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000000)={0x5, 0x65f, 0x8, 0x5, 0x8}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0xb, 0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000119000)="0177d576526d323d7b3e19559ac72716b9d151e8dcbe7c8be8d4ef9ab11cb65e37", 0x21) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={r2, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x8c) 2018/02/23 08:18:50 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9afc0), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f000000c000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000bc8000)=[{&(0x7f00004db000)="08cff000020000ef63000d113b8f0e", 0xf}], 0x1, &(0x7f00002c8000)=[]}, 0x0) 2018/02/23 08:18:50 executing program 6: r0 = socket(0x1e, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) 2018/02/23 08:18:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d02000)='gid_map\x00') r1 = syz_open_procfs(0x0, &(0x7f0000c1bff5)='projid_map\x00') getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8, 0xff}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r2, @in6={{0xa, 0x3, 0x5eff, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x9}}}, 0x8c) sendfile(r1, r0, &(0x7f0000164ff8), 0x400000ff) [ 46.593872] syz-executor7 (5662) used greatest stack depth: 15784 bytes left 2018/02/23 08:18:50 executing program 6: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = socket$inet(0x2, 0x2, 0x2) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f0000504ffa)='F', 0x1) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) accept(r0, &(0x7f0000000080)=@pptp={0x0, 0x0, {0x0, @loopback}}, &(0x7f00000000c0)=0x20) [ 46.658836] audit: type=1400 audit(1519373930.290:18): avc: denied { map } for pid=5679 comm="syz-executor4" path="/dev/binder0" dev="devtmpfs" ino=205 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 46.688559] xt_connbytes: Forcing CT accounting to be enabled 2018/02/23 08:18:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x1, &(0x7f0000000000)={0x101, 0xffffffff, 0x3, 0x6, 0x0, 0xaab0, 0x0, 0xfffffffffffffff8, 0xec1, 0x4, 0x9f, 0x0, 0x4, 0x1, 0x8000, 0x6, 0x9, 0xffffffffffffff00, 0x20, 0x1, 0x9, 0x55e7, 0x400, 0x2000000, 0x3ff, 0x80000001}) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x84200) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x1002}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3b60ced5c54db0007ddf0df8217040000000000000000e690f5480b34baf04259c9f67543dd66e3612072c914526944b14cdf52add346fadce49e071b9c6cb2710c3e7a18c34a9f035db15aaa33dec62480dbb769dc9c29b34421cf1ed3b5d706fa6a87724393ba494980536e0000000000008001aeaf80154299be3ca038cd84b5b2dd4baec780b278ecf2a9b630350000000500000000003d5b745e876e776b5ffddbba5226410a39cb6bade81bfbdfea353f", 0xbc) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="6ad64a6eab0cc54ec21b3a933b7680fdbf3dd92a0aef0e5addaab479081f044fbabbd44a1202d1ce4bd9c31abe8701df78c44ac92b29f6b11ba391ba4f5b07ca00180d7a79d28115e6c8a4aae387bbd2f6a3f3125ee01f6ec4f248728e9455457324599e1b1ed0378b4bf7640d5823b30fa093bfdf97cf39bc43b7fcbf72a4a28a669b9e6a19b4473af5ee15b278dc5b6baaa6adf84dc126ee7731485871bf91f06532ce2b2faaac95357c77fea929bb63c68d8ebe615fae0b81cb0c05405ad309c6a124577c8c295c550580e89badfdb1e12f0ea28ba8498b6bc86a56fd8adc1816dc9c663c8e4f945af3ad9a45027d68813b664becdbae01c9af4d3464ac145e071350e178e2f369cc43fa30caa53014197e6542d6587e37bb297c6392cafa2b0f0cab6983f2007c3ed212b7c24269935a80070f355431f348cb1a04bdc1c62f07f3cadc4dd93ec33e0941bfcee197239d9457a37c10dda1043ca80e12cd1fa95d7302bec2687d27731e25100ff29dfd14cc72da6f7e2e0d30b40844143f9147093c9c88570e3aa314df1827bdadb9ffbb9c0e7a237b64ff19dc42985966fd449739d3a7fda6fab0be26c4c65f6f317cc1fd9a7863974ae57d59adcd1c82f22ded123d6299c120ed384e382e8852041123c8910c9a48b150d42cc7f9ae5f181ee4ee5b225ccf51a9fc75f8e43abbf8b5a89c800aaf45ea07a36d29f17f9a6952e299386117b875b896ff992ad16c74b45737d4ae422cb141125a058b6ac3131ce1f5d1122f7d5cb5b3863a67a53dfe12c07c18915d171b2dce197d7ebe37ea2bc9a9ea7e8939c9e6f8cec3cd3ad8b94bd0465d206e42025d5957f904bebf4c6e6e0b406468cbd3f9db97781e8f108c5d83887ef1cc1d4628dcec2644155fac59d25edf74ab3ec907d04a738f45f3b85591d368c57e0929dd35cf2e732f87aed20d3616e1fb38612da4c3c0c9532b5da137a998b3c76b6aedf830b5591ca4e355d55f18b9489b2396dde26606f0d09192c1acf1d532d37d63a4350eaad22add6badc233abc1e282a63feadf40d609cac2c591e7a9e383bec8db44ce6aa4ccac5ee877c8afb45bda20841b6bd21a3bfe2fdf705799c1c5c4f683a205d985a5763b557b8e513b6c8807469343a0386774f54cef985cbb7809c77d1ddd37f1825614ee5ce35420adac76217bb4c3813c9f6b6730f4d75a383b93964602287a4e37c05f2028d50361abcea15487c4aaefd366edd34d16bde7028f2257fb0ae8893b9b", 0x381}], 0x1, &(0x7f0000655000)=[]}, 0x0) recvmsg(r2, &(0x7f00001f5000)={&(0x7f0000074000)=@alg, 0x58, &(0x7f0000612f80)=[{&(0x7f0000f81000)=""/4096, 0x1098}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) [ 46.702667] binder: 5679:5687 got transaction with invalid offsets size, 125 [ 46.719061] capability: warning: `syz-executor6' uses 32-bit capabilities (legacy support in use) [ 46.721441] binder: 5679:5687 transaction failed 29201/-22, size 0-125 line 2993 [ 46.728969] audit: type=1400 audit(1519373930.330:19): avc: denied { set_context_mgr } for pid=5679 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/02/23 08:18:50 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x264, 0x3c, 0x308, 0x0, 0x3, {0x12}, [@typed={0xd0, 0x42, @binary="524b947a6ea015e72e43b7d5c49313462d4db178afc8907a626a8e4a928c0313a4fa2ae42d4a862baff7d70090411cec99a20562f3c756518c81f6d3315d84c79d5f30b74bcb1e9281cb525e6fd1342957fed5f65e048acaf217e2738be91d970243d47a50d318d3ef183ddc0fcf6494b3dbc3ac6f7be37a99b6f223ded0a70c65f85aa74d9c70fba285e947c17458f924ed3c4a53e1309d98d48a96e368133c1c4af79ce03e9d4bb6f86fb6d3631850873bfa0fbe598d4ccadf53270e07c170bd6a3fa0311570"}, @nested={0x180, 0xe, [@generic="88efe53665ff2435747e40551ddce63acb95c5c7d703ca6c97b36536776e29249fd45619d3145e4fdceadaaf583f48955fb7f568bbb91d340d8634427c55cddf68fce4ade70381740b0230ff3905a210d864cac5760539908708702b93b9769213590a0c7dfe5b10dad54d1fe1172e3e4ed0ca27615ae563af1a359486f7a7b77c77c476d7b28c2f9a71339985577c2bbc783da9", @typed={0xc, 0x60, @fd=r1}, @generic="e43e61bc4cbe500174cf1522db6c87097cc4c9c54889f99b93da4ef8ee2ffeaa877eed23d7b42d8035d0d48784628fc461b574a9fa5bdb14d169bdb818ec9b", @generic="8532b3629b40579f61dbc7d2a42fb7440427ccaf469860a640a00ebea6df816712976dcac7d16630a255b9097a2701339c8c35fe1e303e20e2ab8d5009a997e704f577a179c84143e1daffeebda5293573ec209064ee41a83ddd7fc988ceee047fc84cb37ccf121de43a06bfbf64ace54ef6f149db21ab1766836aeb59d27eac8a3d8e440d5db5699ae0a01c48f30e0fb345c4ffe287df1b721657925e"]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4004040}, 0x40001) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000003000)='trusted\x00', &(0x7f0000003000)={0x73, 0x79, 0x7a}, &(0x7f0000013ff5)='/dev/vcsa#\x00', 0x0) 2018/02/23 08:18:50 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000093bfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={@generic="d93c87b428027ab611b10d103ad30679", 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, r1}) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0xfffffffffffffff7) accept(r0, 0x0, &(0x7f000060c000)) pkey_alloc(0x0, 0x1) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/126) 2018/02/23 08:18:50 executing program 7: r0 = socket(0x400020000000010, 0x2, 0x0) r1 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x3, 0x0, 0x7a41, 0x1ff, r1}) write(r0, &(0x7f0000000040)="1f00000056000d6dfcffff05bc02ff01000000000000000000000002000039", 0x1f) [ 46.759323] audit: type=1400 audit(1519373930.333:20): avc: denied { call } for pid=5679 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 46.767328] binder: BINDER_SET_CONTEXT_MGR already set [ 46.805110] binder: 5679:5711 got transaction with invalid offsets size, 125 [ 46.835154] binder: 5679:5711 transaction failed 29201/-22, size 0-125 line 2993 [ 46.842933] audit: type=1400 audit(1519373930.466:21): avc: denied { name_bind } for pid=5714 comm="syz-executor3" src=20012 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 2018/02/23 08:18:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmsg$unix(r3, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0)=[], 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x7ffd) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x1, r0, 0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x331}}, [0x0, 0x3ff, 0x0, 0x5, 0x101, 0xffffffff, 0x7, 0xffffffffffffffff, 0x68, 0x2, 0x5, 0x2, 0x8000, 0x81, 0x5]}, &(0x7f00000001c0)=0x108) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000200)={r6, 0x5}, 0x8) nanosleep(&(0x7f0000000240), &(0x7f0000000280)) recvmsg(r2, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f000081afd0)=[], 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 2018/02/23 08:18:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006d9ff4)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000546f9c)={0x14, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0xfe}, 0x1}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x11, 0x5, 0x4, 0x6, 0x0, {0xd, 0x0, 0x3}, [@typed={0x10, 0x7d, @u64=0x670}]}, 0x24}, 0x1}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400, 0x0) 2018/02/23 08:18:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x84800) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x3, [0xd0, 0x7, 0x0]}, &(0x7f00000000c0)=0xa) getsockopt$inet6_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000100)=""/123, &(0x7f0000000180)=0x7b) r4 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x20300) timerfd_create(0x6, 0x80800) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x1, r4}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r5 = semget(0x3, 0x2, 0x208) semctl$SETVAL(r5, 0x0, 0x10, &(0x7f00000001c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x200000, 0x0) 2018/02/23 08:18:50 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2b) bind$ax25(0xffffffffffffffff, &(0x7f000002cff0)={0x3, {"8bcad6f92c0645"}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000010fc8)={0x0, 0x0, &(0x7f000001dfc0)=[{&(0x7f0000032000)=""/4096, 0x1000}], 0x1}, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x8d, &(0x7f0000000000)=""/208, &(0x7f0000000100)=0xd0) connect$inet6(r0, &(0x7f0000017000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x2b) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000906fc0), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={0x28, 'hl\x00'}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={0x30, 'frag\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x428) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000019000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x26, &(0x7f000001d000)=[{&(0x7f000002c000)=""/180, 0x65b}, {&(0x7f000002cfea)=""/22, 0x16}, {&(0x7f000002cf07)=""/249, 0x86}, {&(0x7f000002cf8d)=""/115, 0x73}], 0x4, 0x0, 0xfc7a}, 0x0) sendmsg(r0, &(0x7f000001f000)={0x0, 0x0, &(0x7f000001d000)=[], 0x363, &(0x7f0000004000)=[]}, 0x0) 2018/02/23 08:18:50 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) init_module(&(0x7f0000000000)='vmnet1vboxnet1wlan0(\x00', 0x15, &(0x7f0000000040)='+\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) listen(r0, 0x0) accept(r0, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000000)=0xc) write$eventfd(r0, &(0x7f00000000c0)=0x2, 0x8) 2018/02/23 08:18:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000642ff0)={0x1, &(0x7f0000799000)=[{0x6}]}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xb0, "89d1f40bf5894fd57e7b827bf5052bbc3e8d4ba5a187a57bd704b46234f3f0acab5e5fe13d111fe93b4ee41b70ca02f84a1227099c80f1dc5ddd2d9c0a5c4683b10739373cb466ae5189072cd9479baf40f42faab1d933255ad48f01c57387411e1f4798d41a51309fd50995e393a4771fe153a2d6c1b1d55db3bf3e47795001bac2f65610b5d5db1df56ddc7c373d92c4ecac7c4ec653d5d9e1b374222e3a6983787cd6521b79217d83dc9e6dfd3dcc"}, &(0x7f00000000c0)=0xb8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0xfffffffffffffff7, 0x4, 0x6, 0x3ff, 0x7}, 0x14) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2, 0xbdd, @empty}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x2) ioctl$KDADDIO(r2, 0x4b34, 0x7) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 2018/02/23 08:18:50 executing program 7: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000290000), &(0x7f000033cffc)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1}, {r0}, {r1, 0x5000}], 0x3, &(0x7f0000000080)={r2, r3+10000000}, &(0x7f00000000c0)={0x80000000}, 0x8) 2018/02/23 08:18:50 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0xffffffff00000000, 0xa0040) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) mremap(&(0x7f0000eab000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f000075e000/0x1000)=nil) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) [ 46.881220] binder: 5679:5696 ioctl 40046207 0 returned -16 [ 46.892608] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.898795] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/23 08:18:50 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10080, 0x0) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x401, 0x4, 0x7ff, 0x66, 0xec, 0x17b9072a}}, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x20000000, 0x5, 0xb}) r2 = socket$inet6(0xa, 0x806, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f000000cfc0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @syzn={0x73, 0x79, 0x7a}}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@connlimit={0x40, 'connlimit\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x400) connect$inet6(r2, &(0x7f000001f000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/23 08:18:50 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000616000)='/dev/vcsa#\x00', 0x5, 0x0) socketpair$inet6(0xa, 0xa, 0x9, &(0x7f0000000000)) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@loopback={0x0, 0x1}, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0x0, 0x0, 0x0, 0x0, 0x5}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, @in=@dev={0xac, 0x14}}}, 0xe8) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/20, 0x3}], 0x2, 0x0) 2018/02/23 08:18:50 executing program 7: symlink(&(0x7f000000bffa)='./file0\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000180)='./control/file0\x00', &(0x7f0000000140)='./control\x00') llistxattr(&(0x7f000021c000)='./bus/file0\x00', &(0x7f00004c3f43)=""/189, 0xbd) stat(&(0x7f0000092000)='./bus\x00', &(0x7f0000e73fbc)) 2018/02/23 08:18:50 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9afc0), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @dev={0xfe, 0x80}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}, {}, {}, 0x0, 0x0, 0x5}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x74b) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000353000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "650ac4", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, &(0x7f0000775000)={0x0, 0x0, []}) timerfd_create(0x5, 0x80000) 2018/02/23 08:18:50 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x1, 0x2, 0x0, 0x6, 0x3}, 0x180) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000556000)=""/4096, &(0x7f00003c9000)=0x1000) [ 46.931531] mmap: syz-executor1 (5745) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/02/23 08:18:50 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x7fffffff, &(0x7f0000871000)="020000006c3b172917e25462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54006fe71cbcdc6e30ac10369300aff67d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da6020000435f1f0400d1b0e6ebcb12c7be1871363e97100c4a4c2e9f5c0c14f1659ce8c829d2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000, 0x101000) clock_gettime(0x7, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) sched_setscheduler(r2, 0x0, &(0x7f00000000c0)=0x80000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) clock_gettime(0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000001c0)=""/36, 0x397b4ca0633c7d8, 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}) 2018/02/23 08:18:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000007ffc)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00004e4fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendto$packet(r0, &(0x7f0000f50000), 0x0, 0x0, &(0x7f0000d6e000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="3e7fb1bfe92d"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendto$packet(r0, &(0x7f0000015f41), 0x0, 0x0, &(0x7f0000015fec)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="901170f3a1da"}, 0x14) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000001c0)=[], 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x4}, {{&(0x7f0000004000)=@ethernet={0x0, @empty}, 0x10, &(0x7f0000000200)=[], 0x0, &(0x7f000001b000)=""/29, 0x1d}}], 0x2, 0x2060, &(0x7f0000000040)={0x0, r3+10000000}) 2018/02/23 08:18:50 executing program 7: r0 = eventfd2(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000683000)={0x0, &(0x7f000002d000), 0x0, r0, 0xf}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x250000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000040), 0x4) [ 47.013216] xt_connbytes: Forcing CT accounting to be enabled 2018/02/23 08:18:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000087fff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/135) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1b6, 0x0, []}) 2018/02/23 08:18:50 executing program 5: futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000000ff8), &(0x7f0000000ffc), 0x0) pipe(&(0x7f0000000080)={0x0, 0x0}) fcntl$setsig(r0, 0xa, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast1}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) 2018/02/23 08:18:50 executing program 3: r0 = socket(0x20000000006, 0x3, 0x7) capset(&(0x7f0000fc1ff8)={0x4000019980330}, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001000)={@syzn={0x73, 0x79, 0x7a}, @ifru_addrs={0x2, 0xffffffffffffffff, @empty}}) 2018/02/23 08:18:50 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000b84fc8)={&(0x7f000058f000)=@in={0x2, 0x1, @empty}, 0x10, &(0x7f0000646000)=[]}, 0x8000) sendto$inet6(r0, &(0x7f0000bfd000)="d3", 0x1, 0x4008000, &(0x7f0000d86fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000a61000)={&(0x7f000034eff8)=@sco={0x1f}, 0x8, &(0x7f0000b2f000)=[{&(0x7f0000d04fe7)='v', 0x1}], 0x1, &(0x7f0000801000)=[]}, 0x4008041) sendto$inet6(r0, &(0x7f0000b0cf6e)="b1", 0x1, 0x0, &(0x7f000089cfe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/23 08:18:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b3e000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000012d000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b95e0b00000f326564430fa32ff00fc78d026c0000f364654e0f019df3f934bd64664b0f5445fd66b8c5008ee066480f388168ccc74424000b010000c74424023f000000ff2c2466baf80cb8557fb28aef66bafc0cb001eec4017dd7d7", 0x5d}], 0x1, 0x0, &(0x7f0000000100)=[], 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00008f5fe8)={0x1, 0x0, [{0x40000073, 0x0, 0x9}]}) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000100)={[], 0xbe4, 0x8, 0x2, 0x0, 0x80, 0xf000, 0x6000, [], 0x3ff}) 2018/02/23 08:18:50 executing program 1: r0 = add_key(&(0x7f0000de0ffb)='user\x00', &(0x7f000000f000)={0x73, 0x79, 0x7a}, &(0x7f0000ea7000)='?', 0x1, 0xfffffffffffffffd) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40400, 0x20) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x3ff}, 0x4) add_key$user(&(0x7f0000d00ffb)='user\x00', &(0x7f0000434ffb)={0x73, 0x79, 0x7a}, &(0x7f00000aff4b), 0x0, r0) 2018/02/23 08:18:50 executing program 7: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{&(0x7f0000001080)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000002380)=[]}, {&(0x7f0000002400)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000003900)=[], 0x0, &(0x7f0000003d00)=[]}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000012980)=[{{&(0x7f00000015c0)=@sco={0x1f}, 0x8, &(0x7f00000028c0)=[], 0x0, &(0x7f0000000000)=[]}}, {{0x0, 0x0, &(0x7f0000003dc0)=[], 0x27f, &(0x7f0000003e40)=[{0xc}], 0xc}}], 0x2, 0x0) 2018/02/23 08:18:50 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x1, 0xed, 0x38, 0x1]}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9afc0), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x3, 0x2, 0x4, 0x1, 0x7f}}) listen(r0, 0x20000003) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x2, 0x200, @loopback={0x0, 0x1}}, 0xffffffffffffff51) sendmsg$netrom(r4, &(0x7f0000537000)={&(0x7f0000b55000)=@full={{0x3, {"fdd0c7bdd6ca22"}}, [{"68466c958c3999"}, {"4d32fd90970cf9"}, {"252a33300d5595"}, {"a239f5280b91fe"}, {"817a8c9eed2fb1"}, {"6455f9209623db"}, {"c17a2c3d221f02"}, {"e93f1b98c90a9b"}]}, 0x48, &(0x7f0000f4cfb0)=[]}, 0x0) 2018/02/23 08:18:50 executing program 2: mkdir(&(0x7f0000b4aff8)='./file0\x00', 0x49) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000000)) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in=@loopback, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) setresuid(r0, r1, r2) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x84) getsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f00000002c0), &(0x7f0000000300)=0x4) fdatasync(r4) 2018/02/23 08:18:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x6, 0x0, 0x6, 0x1, "a0d326710e1dc275997969d7955cabe5959f43d5f6cf799a1e611a373a014c8472448055e1a9a8be0d5e6fca", 0xca3e}, 0x0, 0x0, 0x8, r3, 0x1, 0x1, "d9fee8553bad382119645130e784071a8a7aa39b0a2d4a75045046d0c2bf0e4bc44c675023be4ef4451edd76b44954cbfe073d93913bcfe079ad4fd2ceb4a837", &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x16, [], [0x1000, 0x0, 0x800, 0x5]}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x81, 0x0, 0x2, 0xd, 0x6, 0x2, 0x1f}, &(0x7f0000000100)=0x20) r4 = accept$inet6(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f0000000100)=0x10) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000200)=0xff, 0xffffffffffffffcf) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000280)={r5, 0x5}, &(0x7f00000002c0)=0x8) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00004a9fd8)={@common='bond0\x00', @ifru_names=@generic="a4bf5522d4b9c00234c9552825455b65"}) 2018/02/23 08:18:50 executing program 7: r0 = eventfd2(0x80, 0x1) r1 = dup(0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40040, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200, 0x0) r7 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x4001) poll(&(0x7f0000000100)=[{r0, 0x20}, {r1, 0x8000}, {r2, 0x1104}, {r3, 0x1000}, {r4, 0x3000}, {r5}, {r6, 0x203}, {r7, 0x10}], 0x8, 0x5) unshare(0x400) pipe(&(0x7f0000000000)={0x0, 0x0}) ioctl$GIO_SCRNMAP(r8, 0x4b40, &(0x7f0000000040)=""/116) r9 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x400) getsockname(r9, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000002b000)=0x3a) 2018/02/23 08:18:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={@common='ipddp0\x00', 0x5}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/23 08:18:50 executing program 6: r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00008cbfd8)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000bf5fc8)={&(0x7f0000ddb000)={0x10}, 0xc, &(0x7f0000883000)={&(0x7f0000b4af8c)=@setlink={0x28, 0x13, 0x803, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_IF_NETNSID={0x8, 0x2e}]}, 0x28}, 0x1}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/02/23 08:18:50 executing program 3: epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[], 0x3c6, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x21) accept4$nfc_llcp(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x800) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0xaa, &(0x7f0000000080)=0x4) setsockopt(r0, 0x80, 0x401, &(0x7f0000000100)="6eb56142765fa29a5d9ab0262b84d70de3998d0dddbd3f8a62e55e431eea0ed9a776a4d6033afdeacce541a0d0260a175a0fd9a07d70aac35daaf747faf6a3b9ac30a6bf900bf94e7c00a9d4f6e68798cab5e367d388e1ed549e21c69caa555b4e088857115c2d73dd27af302a0e5d3599e27bbd3e33194b41fc554b7f8ba093776feb96cb6e9dc105817268ba9b48d6b2ddde1597a7b4748250e0eeaf3ff3a46afd57e8d0edfeafc1a36a108a58278c1bb91ba22da5576ccf3b851fee57233f28403821fbd0884a566e16dbdac59900eaabc4", 0xd3) r2 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r2) r3 = epoll_create1(0x80000) epoll_wait(r3, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x7f) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000200)=0x10001) [ 47.182817] xt_connbytes: Forcing CT accounting to be enabled 2018/02/23 08:18:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fanotify_init(0x2, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000033b000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000000000}, 0x2d2, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x105, 0xffffffffffffffff, 0xffffffffffffffff, {0x7}, []}, 0x14}, 0x1}, 0x0) r2 = dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) 2018/02/23 08:18:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x400000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x1, 0x10001, 0x100000000, {}, 0x2, 0x2}) sendmsg$nl_xfrm(r0, &(0x7f0000201fc8)={&(0x7f0000e47ff4)={0x10}, 0xc, &(0x7f0000a03ff0)={&(0x7f0000b49f94)=@getpolicy={0x50, 0x15, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@loopback={0x0, 0x1}}, 0xffffffffffffffff, 0x3}, []}, 0x50}, 0x1}, 0x0) 2018/02/23 08:18:50 executing program 3: sched_yield() socketpair$inet(0x2, 0x800, 0x8001, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) getsockopt$inet_tcp_int(r1, 0x6, 0x27, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/02/23 08:18:50 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x406, 0x7f, {0x9}, {0x1, 0x15a}, @ramp={0x7f, 0x200, {0x40, 0x5, 0x4, 0x800}}}) r1 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f000000ef28)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@nested={0xfffffffffffffe2a, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/23 08:18:50 executing program 2: prlimit64(0x0, 0x2, &(0x7f0000008000), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) 2018/02/23 08:18:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x401, 0x8, 0x8000, {0x0, 0x1c9c380}, 0x2, 0x1}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000092fd8)={@common='ip6gre0\x00', @ifru_data=&(0x7f0000b15ffd)="0100000009000200000306000000eb00ecff0000000003000449faf502007e23"}) 2018/02/23 08:18:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000006b00)='children\x00') recvfrom$inet6(r1, &(0x7f0000006b40)=""/131, 0x83, 0x10000, &(0x7f0000006c00)={0xa, 0x1, 0xb8c, @dev={0xfe, 0x80, [], 0x0, 0x14}, 0x4}, 0x1c) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f000067affc)=0x3, 0x4) 2018/02/23 08:18:50 executing program 1: r0 = socket$inet6(0xa, 0x400000000005, 0x0) connect$inet6(r0, &(0x7f0000aa8fe4)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x4}, 0x1c) r1 = dup(r0) connect$inet(r1, &(0x7f0000ac4000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @empty}, 0x10) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x40000) 2018/02/23 08:18:51 executing program 0: r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000008ff0)={r1, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000009ff0)={r1, 0x1, 0x1, @empty}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1830, 0x101800) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) fcntl$notify(r0, 0x402, 0x28) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x3, @random="69d1f7004e28"}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="247d785a94b5a93c586fcfdbef1b80ae", 0x10) 2018/02/23 08:18:51 executing program 7: r0 = add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)="75736572f1", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="6afb", 0x2, r0) keyctl$unlink(0x9, 0x0, r1) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x800) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040)=0xa6, 0x4) keyctl$set_timeout(0xf, 0x0, 0x0) 2018/02/23 08:18:51 executing program 3: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x8000f, 0x4a5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) add_key(&(0x7f0000e5e000)='1yzkller\x00', &(0x7f00000a8ffb)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) 2018/02/23 08:18:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0xffffffffffffffff, @loopback=0x7f000001}}}, 0x90) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000007ffd)) [ 47.342493] mmap: syz-executor2 (5839): VmData 18530304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 2018/02/23 08:18:51 executing program 5: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) accept4$inet(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffff, @rand_addr}, &(0x7f0000000040)=0x10, 0x80000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @rand_addr}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast2, @in=@multicast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, @in=@loopback=0x7f000001, 0x3, 0xffffffffffffcd13, 0x3, 0x0, 0xa, 0x80, 0x80, 0x16, r5, r6}, {0x0, 0xffffffffffffffc1, 0x7, 0x1, 0xfffffffffffffeff, 0x8001, 0x400, 0x8}, {0x2, 0x6, 0x1, 0x5}, 0x8001, 0x1, 0x0, 0x0, 0x3}, {{@in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x1, 0x7f}, 0x2, @in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x3, 0x8}}, 0xe8) r7 = memfd_create(&(0x7f000003e000)='\'', 0x0) r8 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r8, r7) write$sndseq(r7, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/23 08:18:51 executing program 4: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, @remote}, &(0x7f0000000040)=0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={@generic="880ecae67733707651bc18b17257d044", &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x5, 0x7ff, "93a18ff927660774"}}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x2000) close(r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) [ 47.402842] device syz0 entered promiscuous mode 2018/02/23 08:18:51 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x189000) readv(0xffffffffffffffff, &(0x7f0000aa1f60)=[{&(0x7f0000004000)=""/196, 0xc4}], 0x1) write(r0, &(0x7f0000417000)="f0", 0x1) 2018/02/23 08:18:51 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x101000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x7ff, 0x8, 0x101, 0x3, r1}, &(0x7f0000000180)=0x10) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000040)=0x3) socket(0x1f, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000080)={0x12d, 0x8, 0x3, 0x81, [], [], [], 0x0, 0x6, 0x5, 0x3, "a80f94ec2d2f004a3bf7032698486e8c"}) 2018/02/23 08:18:51 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@common='lo\x00', 0x0}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7fffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x1a0, 0x1a0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}, {{@ipv6={@local={0xfe, 0x80, [], 0x0, 0xaa}, @dev={0xfe, 0x80, [], 0x0, 0x11}, [0xff000000, 0xff, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], @common='erspan0\x00', @generic="05b30e89f090cd05e2f5e359dfe7033c", {}, {0xff}, 0x2e, 0x8, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x97f}}}, {{@ipv6={@empty, @empty, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xffffff00], @common='lo\x00', @syzn={0x73, 0x79, 0x7a, 0x0}, {0xff}, {}, 0x1d, 0x6, 0x4, 0xc26c7042d0003121}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x3, 0x0, 0x7, 0x1994600000000, 0x2}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x8, 0x60}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000004c0)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f0000feb000)={0x10}, 0xc, &(0x7f00001f6000)={&(0x7f0000d2e000)=@ipv6_newaddr={0x40, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x1000}}]}, 0x40}, 0x1}, 0x0) write$selinux_context(r2, &(0x7f0000000480)='system_u:object_r:crack_db_t:s0\x00', 0x20) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f00000004c0)=0x401, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000500)=0x0) syz_open_procfs(r3, &(0x7f0000000540)='net\x00') getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000580)=""/51, &(0x7f00000005c0)=0x33) [ 47.425864] syz-executor1 (5838) used greatest stack depth: 14976 bytes left [ 47.429386] [ 47.434727] ====================================================== [ 47.441027] WARNING: possible circular locking dependency detected [ 47.447329] 4.16.0-rc2+ #324 Not tainted [ 47.451378] ------------------------------------------------------ [ 47.457687] syz-executor2/5863 is trying to acquire lock: [ 47.463213] (sk_lock-AF_INET){+.+.}, at: [<00000000cae9253c>] do_ip_getsockopt+0x1b3/0x2170 [ 47.471801] [ 47.471801] but task is already holding lock: [ 47.477759] (rtnl_mutex){+.+.}, at: [<00000000a2bb2e7e>] rtnl_lock+0x17/0x20 [ 47.485064] [ 47.485064] which lock already depends on the new lock. [ 47.485064] [ 47.493367] [ 47.493367] the existing dependency chain (in reverse order) is: [ 47.500958] [ 47.500958] -> #2 (rtnl_mutex){+.+.}: [ 47.506221] __mutex_lock+0x16f/0x1a80 [ 47.510611] mutex_lock_nested+0x16/0x20 [ 47.515174] rtnl_lock+0x17/0x20 [ 47.519033] unregister_netdevice_notifier+0x91/0x4e0 [ 47.524722] tee_tg_destroy+0x61/0xc0 [ 47.529032] cleanup_entry+0x242/0x380 [ 47.533415] __do_replace+0x7ac/0xa70 [ 47.537707] do_ip6t_set_ctl+0x40f/0x5f0 [ 47.542260] nf_setsockopt+0x67/0xc0 [ 47.546472] ipv6_setsockopt+0x10b/0x130 [ 47.551034] dccp_setsockopt+0x85/0xd0 [ 47.555418] sock_common_setsockopt+0x95/0xd0 [ 47.560413] SyS_setsockopt+0x189/0x360 [ 47.564883] do_syscall_64+0x280/0x940 [ 47.569262] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 47.574938] [ 47.574938] -> #1 (&xt[i].mutex){+.+.}: [ 47.580367] __mutex_lock+0x16f/0x1a80 [ 47.584744] mutex_lock_nested+0x16/0x20 [ 47.589298] xt_find_table_lock+0x3e/0x3e0 [ 47.594026] xt_request_find_table_lock+0x28/0xc0 [ 47.599362] get_info+0x154/0x690 [ 47.603312] do_arpt_get_ctl+0x2a9/0xa00 [ 47.607864] nf_getsockopt+0x6a/0xc0 [ 47.612069] ip_getsockopt+0x15c/0x220 [ 47.616460] tcp_getsockopt+0x82/0xd0 [ 47.620761] sock_common_getsockopt+0x95/0xd0 [ 47.625750] SyS_getsockopt+0x178/0x340 [ 47.630216] do_syscall_64+0x280/0x940 [ 47.634607] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 47.640283] [ 47.640283] -> #0 (sk_lock-AF_INET){+.+.}: [ 47.645973] lock_acquire+0x1d5/0x580 [ 47.650264] lock_sock_nested+0xc2/0x110 [ 47.654821] do_ip_getsockopt+0x1b3/0x2170 [ 47.659554] ip_getsockopt+0x90/0x220 [ 47.663848] udp_getsockopt+0x45/0x80 [ 47.668154] sock_common_getsockopt+0x95/0xd0 [ 47.673142] SyS_getsockopt+0x178/0x340 [ 47.677610] do_syscall_64+0x280/0x940 [ 47.681997] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 47.687682] [ 47.687682] other info that might help us debug this: [ 47.687682] [ 47.695798] Chain exists of: [ 47.695798] sk_lock-AF_INET --> &xt[i].mutex --> rtnl_mutex [ 47.695798] [ 47.706004] Possible unsafe locking scenario: [ 47.706004] [ 47.712040] CPU0 CPU1 [ 47.716674] ---- ---- [ 47.721310] lock(rtnl_mutex); [ 47.724561] lock(&xt[i].mutex); [ 47.730501] lock(rtnl_mutex); [ 47.736269] lock(sk_lock-AF_INET); [ 47.739952] [ 47.739952] *** DEADLOCK *** [ 47.739952] [ 47.745983] 1 lock held by syz-executor2/5863: [ 47.751341] #0: (rtnl_mutex){+.+.}, at: [<00000000a2bb2e7e>] rtnl_lock+0x17/0x20 [ 47.759034] [ 47.759034] stack backtrace: [ 47.763502] CPU: 1 PID: 5863 Comm: syz-executor2 Not tainted 4.16.0-rc2+ #324 [ 47.770742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.780075] Call Trace: [ 47.782661] dump_stack+0x194/0x24d [ 47.786266] ? arch_local_irq_restore+0x53/0x53 [ 47.790920] print_circular_bug.isra.38+0x2cd/0x2dc [ 47.795907] ? save_trace+0xe0/0x2b0 [ 47.799592] __lock_acquire+0x30a8/0x3e00 [ 47.803716] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 47.808875] ? rtnl_lock+0x17/0x20 [ 47.812384] ? rtnl_lock+0x17/0x20 [ 47.815906] ? plist_add+0x5cb/0x760 [ 47.821341] ? mutex_lock_io_nested+0x1900/0x1900 [ 47.826166] ? print_irqtrace_events+0x270/0x270 [ 47.830896] ? print_irqtrace_events+0x270/0x270 [ 47.835624] ? rcu_note_context_switch+0x710/0x710 [ 47.840528] ? futex_wait_setup+0x14a/0x3d0 [ 47.844821] ? check_noncircular+0x20/0x20 [ 47.849038] ? check_noncircular+0x20/0x20 [ 47.853253] ? futex_wait_queue_me+0x52f/0x7f0 [ 47.857811] lock_acquire+0x1d5/0x580 [ 47.861586] ? lock_acquire+0x1d5/0x580 [ 47.865534] ? do_ip_getsockopt+0x1b3/0x2170 [ 47.869915] ? lock_release+0xa40/0xa40 [ 47.873862] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 47.879721] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 47.885578] ? do_raw_spin_trylock+0x190/0x190 [ 47.890133] ? lock_sock_nested+0x44/0x110 [ 47.894346] lock_sock_nested+0xc2/0x110 [ 47.898380] ? do_ip_getsockopt+0x1b3/0x2170 [ 47.902759] do_ip_getsockopt+0x1b3/0x2170 [ 47.906966] ? rcu_read_lock+0x90/0x90 [ 47.910824] ? drop_futex_key_refs.isra.13+0x63/0xa0 [ 47.915901] ? futex_wake+0x2ca/0x680 [ 47.919677] ? check_noncircular+0x20/0x20 [ 47.923883] ? get_futex_key+0x1d50/0x1d50 [ 47.928092] ? check_noncircular+0x20/0x20 [ 47.932306] ? find_held_lock+0x35/0x1d0 [ 47.936339] ? avc_has_perm+0x35e/0x680 [ 47.940286] ? lock_downgrade+0x980/0x980 [ 47.944407] ? __fget+0x342/0x5b0 [ 47.947831] ? lock_release+0xa40/0xa40 [ 47.951776] ? lock_release+0xa40/0xa40 [ 47.955724] ? __lock_is_held+0xb6/0x140 [ 47.959757] ? avc_has_perm+0x43e/0x680 [ 47.963705] ? avc_has_perm_noaudit+0x520/0x520 [ 47.968348] ? iterate_fd+0x3f0/0x3f0 [ 47.972119] ? lock_downgrade+0x980/0x980 [ 47.976240] ? find_held_lock+0x35/0x1d0 [ 47.980275] ? do_mprotect_pkey+0x20d/0x900 [ 47.984571] ? sock_has_perm+0x2a4/0x420 [ 47.988605] ip_getsockopt+0x90/0x220 [ 47.992379] ? do_ip_getsockopt+0x2170/0x2170 [ 47.996846] ? file_map_prot_check+0x19f/0x2e0 [ 48.001411] udp_getsockopt+0x45/0x80 [ 48.005185] sock_common_getsockopt+0x95/0xd0 [ 48.009655] SyS_getsockopt+0x178/0x340 [ 48.013601] ? SyS_setsockopt+0x360/0x360 [ 48.017727] ? mprotect_fixup+0x640/0x640 [ 48.021847] ? move_addr_to_kernel+0x60/0x60 [ 48.026227] ? do_syscall_64+0xb6/0x940 [ 48.030171] ? SyS_setsockopt+0x360/0x360 [ 48.034287] do_syscall_64+0x280/0x940 [ 48.038161] ? __do_page_fault+0xc90/0xc90 [ 48.042369] ? finish_task_switch+0x58d/0x860 [ 48.046836] ? syscall_return_slowpath+0x550/0x550 [ 48.051737] ? syscall_return_slowpath+0x2ac/0x550 [ 48.056636] ? prepare_exit_to_usermode+0x350/0x350 [ 48.061624] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 48.066959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.071773] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/02/23 08:18:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x41800) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)) 2018/02/23 08:18:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000adb000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x4008004, 0x0, 0x0) 2018/02/23 08:18:51 executing program 5: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000803ff8)='keyring\x00', &(0x7f000038affb)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50040, 0x102) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1f, 0x2000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) add_key(&(0x7f0000e70ff5)='asymmetric\x00', &(0x7f0000aef000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000e34000)="1003", 0x2, r0) execveat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='/dev/vcsa#\x00', &(0x7f0000000100)='[[\x00', &(0x7f0000000140)='cgroup*#security\x00', &(0x7f0000000180)='bdevsecurityposix_acl_access}\x00', &(0x7f00000001c0)='GPL\x00', &(0x7f0000000200)='\x00'], &(0x7f0000000380)=[&(0x7f0000000280)='em1\'lo\x00', &(0x7f00000002c0)='selinux\x00', &(0x7f0000000300)='}\'+&ppp1\x00', &(0x7f0000000340)='proc-cpuset\x00'], 0x1000) 2018/02/23 08:18:51 executing program 4: ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000080)="06d1b5") r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1ff, 0x400000) getpeername$inet(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffff, @loopback}, &(0x7f00000000c0)=0x327) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000100)) [ 48.076941] RIP: 0033:0x453de9 [ 48.080103] RSP: 002b:00007f80a008ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 48.087780] RAX: ffffffffffffffda RBX: 00007f80a008f6d4 RCX: 0000000000453de9 [ 48.095023] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000013 [ 48.102276] RBP: 000000000072bea0 R08: 0000000020007ffd R09: 0000000000000000 [ 48.109517] R10: 0000000020008000 R11: 0000000000000246 R12: 00000000ffffffff [ 48.116757] R13: 00000000000000f2 R14: 00000000006f1750 R15: 0000000000000000 2018/02/23 08:18:51 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xa, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311, 0x4, 0xffffffffffffffff, {0x17}, []}, 0x14}, 0x1, 0x0, 0x0, 0x7fff}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x80000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r3, r4, 0xa9}) dup3(r0, r1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) [ 48.143330] device syz0 left promiscuous mode 2018/02/23 08:18:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0xffffffffffffffff, @loopback=0x7f000001}}}, 0x90) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000007ffd)) 2018/02/23 08:18:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000009ff70)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, 0x90) r1 = socket$inet(0x2, 0x6, 0xfffffffffffffffc) r2 = socket$inet(0x2, 0x80803, 0x4000000000004) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x438, 0x280, 0x180, 0x180, 0x280, 0x98, 0x98, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@loopback=0x7f000001, @dev={0xac, 0x14}, 0x0, 0x0, @common='syzkaller0\x00', @common='bridge0\x00'}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@rand_addr, @loopback=0x7f000001, 0x0, 0x0, @common='syzkaller1\x00', @generic="c2af8ce3d928ca40800cb5307dcbf1d7"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @generic="aaed30230229a44c06684588fcf967d1", @common='irlan0\x00'}, 0x0, 0x70, 0xe0, 0x0, {}, []}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "fe323177d7c4a6d05d86f1000e25514d83af79da49cfb83fda18ceea65b8467574bfe9de8add52f3f22ca56321e381f39d122e118f932090dbd4eedfa84850ac"}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x498) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000dc4000)={@common='lo\x00', @ifru_ivalue}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000b08fd8)={@common='lo\x00', @ifru_addrs=@rc={0x1f, {0x0, 0x6}}}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f000064b000)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}, 0x0, 0x0, []}, 0x98) keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0}) 2018/02/23 08:18:51 executing program 0: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000d63fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000677fc8)={&(0x7f0000b6f000)={0x10}, 0xc, &(0x7f0000b26ff0)={&(0x7f00001a9fa8)=@ipv6_newroute={0x30, 0x18, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x2}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9, 0x0, 0x0, r1}, {}]}]}, 0x30}, 0x1}, 0x0) fcntl$addseals(r0, 0x409, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) r3 = semget$private(0x0, 0x1, 0x100) semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000040)=""/57) ioctl$sock_ifreq(r0, 0x891c, &(0x7f00000000c0)={@common='bond0\x00', @ifru_data=&(0x7f0000000080)="954dac669353cdb190bf140d9e8b642d2cccd3135b5f27324324ed612fc19b92"}) 2018/02/23 08:18:51 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x1, 0xf18f, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x0, 0x16}}, 0xe961}, {0xa, 0x0, 0x280000000, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x2}, 0x81, [0x401, 0x54, 0x7e4e, 0x81, 0x8, 0x1, 0x400]}, 0x5c) setsockopt$inet6_dccp_int(r2, 0x21, 0x0, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x2e24dfb8cc0688d0, 0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) sendmsg$key(r0, &(0x7f0000004fe4)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000005f88)={0x2, 0x7, 0x0, 0xf, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/23 08:18:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc58, 0x100000000}) sendmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="f42fcb3534af28174ea4c885b2a699ab", 0x10}], 0x1, &(0x7f00000004c0)=[]}}, {{0x0, 0x0, &(0x7f0000000cc0)=[], 0x0, &(0x7f0000000d40)=[]}}], 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc\x00', 0x40000, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000640)=""/132, &(0x7f0000000700)=0x84) 2018/02/23 08:18:51 executing program 4: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000000c0)={@local, @empty, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @empty, 0x4, 0x5, 0x200, 0x400, 0x8001, 0x80, r1}) sendto$inet6(r0, &(0x7f0000000040)="275cb673b94de68a878a54dda1e062a07353887c8ef4892673c48372abb5f12cc1052de58f4e49c30bc888f4d81fe5775223eee20bc7b0f95530e5f6bf0c7e030555a0", 0x43, 0x4040000, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet6(r3, &(0x7f0000f55000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x20000000020}, 0x1c) 2018/02/23 08:18:51 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00003baff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xbeee, 0x4000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xff, 0x7, 0x1ea7, 0x7ff, 0x30b7}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={r2, 0x99, "11612cd7a44ed222f42d2db672e0d3e139dc56b93ac413cf3e10c751595f39443ef25e2604cab4d2a43d09ba8c2dcf0a898830c1de658614b9a712ee480aee375af03edcf3895d5833634a74c2e1f0e4c13cb22529f563098c83ac676893b34afb97ca12537f336c47a7a1fd42f721f28c448f66e1c4db6f01b2dc9953afeacc84e7751b90396d35ad004cdece38f097a871c6bea2984c6626"}, &(0x7f0000000180)=0xa1) ioctl$ION_IOC_ALLOC(r0, 0xc0204900, &(0x7f0000856000)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="8da1019ec82956568eac492861214ff26bd26637a4d85f7f32d2ed892863e7b0f44f4d944325e3c1a6512398c0b1515c5620ae81af32d849631ff8edabb5fe7d15e6b7cefb79248078463ca29591b289af5491f6dd", 0x55}, {&(0x7f0000000080)="6843e9362c35191bc8eb994db023", 0xe}, {&(0x7f00000000c0)="f2cac62732f86f8533a63ee4364963670f1d72f8607677ba0a317521531d30308730d27e98cccdf11c8c90fe4c871cc71207d0854d8f766d9e02cf4698eb042a94c2b1f564cdcc45ef187ae79530e7d63a998f713d000245bb7f796db77afcad40c55b34047e6d5d8ee851abcf7ba295a717817cf83d3fcc872ce6221de7d6faf3d2f35a27949920604a5124a540e0e791c2aee385", 0x95}, {&(0x7f0000000180)="b1641ba279a4c6886e82534c950af898b63609156c42bbe7b1ed882c84a57fb5528c01361dbd4f7ac463f3bd4db85618402a313283406a13e2cb14006caa6b30bae57dbdd272311d18875ec6b212eb9ab03bf1ea952edd0dbcc879b98fc3714a4753c2bdbe312c0379947a098ae714e6d6c206eaf04663e5fbab1e5f60403be7384533432c3d286879795ac23e1785695f34d86b71bc897fd49792965a05f5e8176910a26f8d18185482c7ee79812827b3252a1b01fd0f8a9203cbd41eeb19a0f89a8e6264ad082a1bdff1ad73846624d40d27f7d667f989080b83", 0xdb}], 0x4) 2018/02/23 08:18:51 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xe0c, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[{0x0, 0x7}, {0x2, 0x6}, {0xf, 0x8}, {0xb, 0x45}, {0x0, 0x4f}, {0x7, 0x3}, {0x2, 0x7}, {0x2, 0x400}, {0x7, 0xe86800000}], 0x9) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000f7b000)=0x4) accept(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000000080)=0xfffffffffffffe45) 2018/02/23 08:18:51 executing program 7: r0 = socket$inet(0x10, 0x2, 0x200) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) sendmsg(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000010fdc)="2300000024009115460000000000001201000000000000270b80ffff00000002007352", 0x23}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) ptrace$getsig(0x4202, r2, 0x7, &(0x7f00000000c0)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/02/23 08:18:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x400080000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xfffffffffffffe00, 0xffff}, &(0x7f0000000040)=0xc) fsync(r2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={r3, 0x1000, "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"}, &(0x7f00000010c0)=0x1008) fcntl$getownex(r1, 0x10, &(0x7f0000001100)) connect$unix(r0, &(0x7f0000001140)=@file={0x0, './file0\x00'}, 0xa) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) poll(&(0x7f0000000140)=[{r1, 0xc1a6}], 0x1, 0x4) 2018/02/23 08:18:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000d2b000)='net/tcp6\x00') r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000000)='net/ip_tables_names\x00') prctl$setptracer(0x59616d61, r1) pread64(r0, &(0x7f00008f2f78)=""/136, 0x88, 0x14) 2018/02/23 08:18:51 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)="73656c696e7578807472757381092e70726f6300c2af", 0x5) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) [ 48.208871] IPv6: Can't replace route, no match found [ 48.252959] IPv6: Can't replace route, no match found 2018/02/23 08:18:51 executing program 3: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000000141042, 0x0) truncate(&(0x7f0000011000)='./bus\x00', 0xfffc) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/02/23 08:18:51 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x1, 0x100000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 2018/02/23 08:18:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x2, 0x84) sendto$inet(r0, &(0x7f0000ac0fbb)="c4", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x2}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r1, 0x33, "81b985b2b53845686a80b7abac37b0cc13af98eb188ce238255d50a6a754f1768290a24b09507e17d5bcd4c8fa57741c27d9d4"}, &(0x7f00000000c0)=0x3b) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f00000001c0)=""/42}) 2018/02/23 08:18:51 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400040) getsockopt$inet_int(r0, 0x0, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) setitimer(0x22, &(0x7f00000002c0)={{r1, r2/1000+30000}, {0x77359400}}, &(0x7f0000000280)) 2018/02/23 08:18:51 executing program 5: r0 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(r0, r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000b81000), &(0x7f00005fb000)=0xfffffffffffffeee) 2018/02/23 08:18:51 executing program 6: unshare(0x8000000) r0 = epoll_create1(0x0) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x2}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x800, 0x8000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xffbd}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0x9}, 0x8) r4 = mq_open(&(0x7f0000a04000)='-$\x00', 0x0, 0x10, &(0x7f0000513fc0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000ae0000)) mq_timedsend(r1, &(0x7f000066c000), 0x0, 0x0, &(0x7f000066cff0)) mq_timedreceive(r4, &(0x7f0000b91000)=""/139, 0x8b, 0x0, &(0x7f000020bff8)={0x77359400}) 2018/02/23 08:18:51 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000000)) timerfd_gettime(0xffffffffffffffff, &(0x7f00007bfff0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000c28ff0)={{r0, r1+10000000}, {0x0, 0x989680}}, &(0x7f000008aff0)) 2018/02/23 08:18:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000001, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x1000000, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f00009e7000)={&(0x7f000077a000)={0x10}, 0xc, &(0x7f0000746000)={&(0x7f0000369fa8)=@newneigh={0x24, 0x1c, 0x509, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, r2}, [@NDA_DST_IPV4={0x8, 0x1, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080)={0x5a14}) 2018/02/23 08:18:51 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x2, r0, 0x1}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x1, 0x67b, 0x3, 0x900000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0xffffffffffffffcd, 0x6, 0x9, 0x0, r1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x1, 0x92, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@exit={0x95}, @jmp={0x5, 0x4, 0x8, 0x0, 0xf, 0x80, 0xfffffffffffffffc}, @jmp={0x5, 0x401, 0xd, 0x0, 0x8, 0x20, 0x9}, @generic={0x5, 0x9e, 0xa1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x0, 0x6, 0xf, 0xf, 0xffffffff, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x4}, @generic={0x2, 0x5, 0x8, 0xf18}, @generic={0xfffffffffffffff8, 0x2}], {0x95}}, &(0x7f0000919ff6)='syzkaller\x00', 0x7ff, 0xe1, &(0x7f0000440f63)=""/225, 0x400}, 0x48) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200040000080ff, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x14) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/access\x00', 0x2, 0x0) r5 = getuid() openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@multicast2=0xe0000002, 0x3, 0xe93, 0x3, 0x0, 0x2, 0x20, 0x80, 0x0, r4, r5}, {0x5, 0x698, 0x8000, 0x4, 0x7ff, 0xe93, 0xcc, 0x1cb}, {0x200, 0x7, 0x180, 0x1}, 0x0, 0xb, 0x1, 0x1, 0x0, 0x3}, {{@in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x1, 0x3f}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x0, 0x14}, 0x0, 0x2, 0x1, 0x252, 0x2, 0x1}}, 0xe8) 2018/02/23 08:18:51 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000040)={0xfffffffffffff561, 0x3, 'client1\x00', 0x4, "51ed90586968342a", "950bebb56b5d146981eff01e3eb244eb668cbcc485ff44eb3b46a40ef9cb6c47", 0x7fff, 0x1e6}) sendmsg$kcm(r0, &(0x7f0000d38000)={&(0x7f0000a88ff0)=@can={0x1d}, 0x10, &(0x7f0000cb0000)=[{&(0x7f0000e1dfdc)="dd", 0x1}], 0x1, &(0x7f0000444f00)=[]}, 0x0) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, {0xfff, 0x9, 0xfff, 0x2, 0x7ff, 0x6}}, 0x8) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x40000000800000, 0x2801) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)="3925870c63579bb45fed883c33449384f7f49e81e089c70ac6867afd0f044c7a603b61acaa6f1a0ea2ff2a671e92142527c200274242999fe297e5580b731a232b975959ef0538b344b732192440e3ce54dcd40c0040a0beabe50a63b10250f479d51909a25a89817d5ad214c35a89f3cabae6b231d520592b0c6da92182c69f6fbc95c760ce343d0c7fc03241eab073328c3e6d16987f3e3fbe33d6fc770d8c4e720b8bcfe4b91d0a6b64528e9c7139959e31871592e3a897812cda3f05c951458106fd0240edf06d99cee3302ae88b9be72ac81af084e3063d2c7a", 0xdc, r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={r4, 0x50, &(0x7f00000000c0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, @in={0x2, 0x3, @loopback=0x7f000001}, @in={0x2, 0x3, @multicast1=0xe0000001}, @in={0x2, 0x0, @multicast1=0xe0000001}, @in={0x2, 0x1, @multicast2=0xe0000002}]}, &(0x7f0000000180)=0x10) sendmsg$kcm(r0, &(0x7f00008acfc8)={&(0x7f0000b1b000)=@rc={0x1f}, 0xa, &(0x7f000000b000)=[{&(0x7f0000303f29)='Y', 0x1}], 0x1}, 0x0) ioctl$KVM_NMI(r1, 0xae9a) 2018/02/23 08:18:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={@generic="e0cad7f206f872e66b4cbabdfddb122a", @ifru_flags=0x1000}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x800) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x4, 0x4) 2018/02/23 08:18:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000040)=""/128, 0x1}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000022000)=""/4096, 0x131f}], 0x1) read$eventfd(r0, &(0x7f00006b1000), 0x8) 2018/02/23 08:18:51 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00009d8000)='/dev/sequencer2\x00', 0x20002, 0x0) write$sndseq(r0, &(0x7f0000fa5000)=[{0x5b90, 0x0, 0x0, 0x6fb9, @time, {0x0, 0x8}, {}, @addr}], 0x30) 2018/02/23 08:18:51 executing program 6: syz_emit_ethernet(0x4e, &(0x7f0000005000)={@random="cd3997030f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x82, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}}}}, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) 2018/02/23 08:18:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0xffffffffffffff8e) ftruncate(r0, 0xcc) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) 2018/02/23 08:18:51 executing program 1: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f000003b000)='./file0\x00', r0, &(0x7f0000011000)='./file0\x00') accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) name_to_handle_at(r0, &(0x7f000000a000)='./file0\x00', &(0x7f0000036000)={0xc, 0x0, "58074ad1"}, &(0x7f0000040000), 0x0) renameat(r0, &(0x7f000001b000)='./file0\x00', r0, &(0x7f0000009000)='./control\x00') readlinkat(r0, &(0x7f0000038ff6)='./control\x00', &(0x7f0000002000)=""/213, 0xd5) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 2018/02/23 08:18:52 executing program 5: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@common='ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000022b000)={&(0x7f0000f83000)={0x10, 0x0, 0x0, 0x4001000}, 0xffffffd8, &(0x7f0000f75ff0)={&(0x7f0000000040)=@mpls_newroute={0x0, 0x18, 0x0, 0x7, 0x0, {0x1c, 0x10, 0x0, 0x400, 0xff, 0x0, 0xfe, 0xb, 0x2000}, [@RTA_DST={0x0, 0x1, [{0x2, 0x400, 0x200, 0x4}, {0x0, 0x0, 0xbf, 0x80000001}, {0x53, 0x7fffffff, 0x9, 0x6}, {0x4, 0x4, 0xe5, 0xa2d}, {0x3f, 0x7, 0x78c, 0x10000}, {0x3ff, 0x1000, 0x8, 0xfffffffffffffeff}, {0x5, 0xffffffffffffffff, 0xdb63, 0x3ff}, {0x7b27, 0x6, 0xff, 0x7}, {0x9, 0xe533, 0x2, 0x8000}]}, @RTA_OIF={0x0, 0x4, r1}, @RTA_OIF={0x0, 0x4, r1}, @RTA_DST={0x0, 0x1, [{0xfffffffffffffffb, 0x0, 0x5, 0x6}, {0x3, 0x8, 0x0, 0x8001}, {0x1, 0xe8fb, 0x0, 0x6}]}, @RTA_DST={0x0, 0x1, [{0x1, 0x8000, 0x80000000, 0xfffffffffffffffb}, {0x2, 0x1000, 0x7, 0x7}, {0xe11c, 0x6, 0x200000, 0xfd}, {0x1f, 0x4, 0x9, 0x5}]}, @RTA_DST={0x0, 0x1, [{0x5, 0xee, 0x101, 0x521}, {0x20, 0x9, 0x91d, 0x1}, {0x43, 0x7, 0x1, 0xffffffff}, {0x1, 0xfff, 0x5385, 0x4}, {0x8000, 0x6, 0x5, 0x20}, {0xac, 0x1, 0x80, 0x6}, {0x2, 0x8f3b, 0x9, 0x97a1}, {0x4, 0x7ff, 0x5, 0x5}, {0x3f, 0x1a, 0x6, 0xfffffffffffffff9}]}, @RTA_TTL_PROPAGATE={0x0, 0x1a, 0x100000001}, @RTA_TTL_PROPAGATE={0x0, 0x1a, 0xfffffffffffffff9}, @RTA_OIF={0x0, 0x4, r1}, @RTA_OIF={0x0, 0x4, r1}]}, 0x28}, 0x1}, 0x10000000000000) 2018/02/23 08:18:52 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x3}, 0x8, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000080)=""/87, &(0x7f0000000140)=0x57) 2018/02/23 08:18:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='vxfs\x00', 0x80, &(0x7f00000000c0)="d8698396e1d26b29c5fb566631a20b8466d191a11d4e69f08a29828071eaed1c41e399d02e221e832e54af758a24a3882ac3593ff4e5356a5a018fdb8e6a4c1b4cada30e8d2def12e971a2b7b01ab11930f6b35b") r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, r1, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000d7dfde)="220000001600070000000000090005000a0800001c00080904000080040008000000", 0x22) 2018/02/23 08:18:52 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000275000)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000a0ffec)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x14) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x20000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x100, 0x100000001}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r3, 0xfffffffffffffffb, 0xa, [0x79, 0x7, 0xc35, 0x8, 0x1, 0x1, 0x1, 0xffff, 0x4, 0x200]}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r0, &(0x7f0000001fc8)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c2522aa66"}}, 0x48}, 0x1}, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x9) 2018/02/23 08:18:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/23 08:18:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffff, @remote}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x0, 0xfffffffffffff001, 0x200, 0x2, 0x8e, 0x40, 0xfffffffffffffffd, 0x6, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0x1, 0x1f, "ee26619306d7a274cafb8d2ff43856940b8e968a8ab7d4b8af0a3feee3538d"}, 0x27) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b}, 0x14) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x4) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000080)={0x7, 0xadc6}) 2018/02/23 08:18:52 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000033b000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000140)="707500067401", 0x7) 2018/02/23 08:18:52 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000bfd000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0x8000, 0x1, 0x3, 0x3, "20c4840f6c588be2b3d97daf6e23dfceebeb9afafcacafc18c876e0fe5012e551f6ccab2e2a24904adbab47a", 0x8}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000080)={0x1000, "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"}) 2018/02/23 08:18:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000311ffc)=0x4000000000002, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1, 0xfffffffffffffff9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={r2, 0x29205, 0x2030, 0x80000000, 0x88}, &(0x7f0000000040)=0x10021) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r3, 0xffffffffffffff81}, 0x8) connect$inet6(r0, &(0x7f0000363000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x4}, 0x1c) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x101, 0xc00) accept$inet(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffff, @loopback}, &(0x7f0000000140)=0x10) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@empty}, &(0x7f0000000100)=0x14) 2018/02/23 08:18:52 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$pppoe(r0, &(0x7f0000000fe2)={0x18, 0x0, {0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @syzn={0x73, 0x79, 0x7a, 0x0}}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000004000)={0x18, 0x0, {0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @syzn={0x73, 0x79, 0x7a, 0x0}}}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x79, 0xd968feb46175e491) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @multicast2}, &(0x7f0000000100)=0xc) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2018/02/23 08:18:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r0, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x8927, &(0x7f0000000ffc)) 2018/02/23 08:18:52 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) sendto$ax25(r0, &(0x7f0000000040)="1d62702f30e594c673c61e391f3560d72a351e8a8d45fc3da7468002cee2de29a288dc32dac55ba06e7d7b33379f8cf4acd2ed8c4afb978a6bea08df27dac7224b7376a8ae9715ae3af19c2e502c532587abb8660e39a111b5ca030347d7bbd038e300f6c705d137961313f74a42d74d74715e9397df603100f64c68ad179ab6a85c4fceb4bccb894aea3d525966c7", 0x8f, 0x4000000, &(0x7f0000000100)={0x3, {"ca1b34143ca250"}, 0x7}, 0x10) r1 = socket(0xa, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000fedf98)={&(0x7f000000d000)=[0x8, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000140)) ioctl$VT_RELDISP(r0, 0x5605) r2 = getpgrp(0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000001c0)={r0, r0, 0xffffffffffffffe1}) getsockopt(r1, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fe3000)=0x2c) 2018/02/23 08:18:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000014000)={0x0, 0x0, []}) 2018/02/23 08:18:52 executing program 0: r0 = semget(0x3, 0x0, 0x11) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x1, 0x4) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000000)=""/30) r2 = socket(0x40000000015, 0x5, 0x0) accept(r2, &(0x7f0000f75ff7)=@rc, &(0x7f000004bffc)=0x9) 2018/02/23 08:18:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000000)="5f09a4a20c2640820cdadc950a1ecef561157b866d937569aa8ebbc0f20138b50795bf1dafba04d65aded40ad670f33c1302e11f054986eecc28718c82133ee79e3bb6992e382c4a0d679cc9b5bde2784a414241c7a5a33f221e67cf51090099ce44bea4c9d88246a98c329715d234c188fe197881a4f0a4a93923804d89cff7ee207c26c732827fcf0dd8f361e5d32cc418d15d386d66f393a5033aa669d52d53928d35a1d8d1b9a43df9a0fae37eeb4b65357a5883867b5ea25012b6723868c83d12381441e0b6b97b26762963d42f1e6a12eba93f709bedace0946765949d000d42aa262c25a38686a2714915bb6fe61965a22136074290ca7a6098c5") sendmsg$alg(r1, &(0x7f00008fffc8)={0x0, 0x0, &(0x7f000023efa0)=[], 0x0, &(0x7f00006d9000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000280)='bdevmime_type\x00', 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)="bc388cedd779abe5b55b29a012220d1b16c375e3d0d4183e2a39491b71f50b7d2d2089afda8e6df80bf35b2e325bb947a7d2c7e9b3d2f5ac0e61917f9d279f46ce3264801e628aee79915d61ba4b46d8540a41d634431423c34b9ba45e1203fb2a46c289da3f129e3917019907f4b751c0532fa5edb98a39920785b87de86fe8b9fe0226608e5f8589f953a876b210b3a875b8d80c9fa272f9342dc031cd1843ba67202d2c7b931a5753823ca28e0c8537f9b04d48a86aa740488dbf06b3a55ce98819c688ecb9e9bc5a8391511386bcb7b8666dc02d23db1c383a68ad5967", 0xdf, r2) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000002c0)={@generic="a253e87fa0f026a33af5e2a708968358", @ifru_flags=0x1100}) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x14, 0x23, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}, 0x14}, 0x1}, 0x0) r3 = dup(0xffffffffffffff9c) accept$netrom(r3, &(0x7f0000000000)=@ax25, &(0x7f00000002c0)=0x10) getsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000f7ffa8)=@alg, 0x58, &(0x7f0000ec4fd0)=[{&(0x7f0000f81000)=""/4096, 0x10}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 2018/02/23 08:18:52 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f0000fd7000)=@ipv6_delroute={0x24, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x100) ioctl$TCFLSH(r1, 0x540b, 0x7) 2018/02/23 08:18:52 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000d1d000)) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) connect$rds(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10) r1 = getpgrp(0x0) socket$kcm(0x29, 0x5, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000999ff8)) 2018/02/23 08:18:52 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x2, 0x3, 0x1, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)=@ax25, &(0x7f0000000080)=0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) [ 48.485937] netlink: 'syz-executor1': attribute type 21 has an invalid length. [ 48.501683] netlink: 'syz-executor1': attribute type 21 has an invalid length. 2018/02/23 08:18:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x208040) ioctl$KDSETLED(r1, 0x4b32, 0x9) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x7f, 0x1, 0x1, 0x2, 0x888, 0x20, 0x6}, &(0x7f0000000100)=0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) 2018/02/23 08:18:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000bec000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={@common='ip6tnl0\x00', @ifru_data=&(0x7f0000bebfe0)="01e02f00000000000002062000000000ecef0000000003000449faf502007e23"}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r1}) 2018/02/23 08:18:52 executing program 6: r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom(r0, &(0x7f0000000000)=""/221, 0xdd, 0x0, &(0x7f0000000100)=@sco={0x1f}, 0x8) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x8, 0x22040) accept(r0, &(0x7f0000000200)=@hci={0x0, 0x0}, &(0x7f0000000240)=0xc) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, r2}, 0xc) 2018/02/23 08:18:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, 0x8) flock(r0, 0x6) r1 = syz_open_dev$sndseq(&(0x7f0000ff7000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x3ff}, 0x8) shutdown(0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, @mac=@link_local={0x1, 0x80, 0xc2}, @loopback=0x7f000001, @rand_addr=0xbc8, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, @empty, @multicast1=0xe0000001, @empty, 0x4}}}, {{@arp={@multicast2=0xe0000002, @rand_addr=0x10000, 0x0, 0xff000000, @empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x6, 0x1, 0x8, 0x8, 0x8000, 0x5, @syzn={0x73, 0x79, 0x7a, 0x0}, @syzn={0x73, 0x79, 0x7a, 0x0}, {}, {0xff}, 0x0, 0x80}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x440) 2018/02/23 08:18:52 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80, 0x840) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x98, &(0x7f0000000100)=[@in={0x2, 0x2, @broadcast=0xffffffff}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, @in6={0xa, 0x1, 0xff, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0xff}, @in={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}, @in={0x2, 0x0, @rand_addr=0x1000}, @in6={0xa, 0x3, 0x2, @loopback={0x0, 0x1}, 0x5dd276fc}, @in={0x2, 0x2, @rand_addr=0x4}, @in={0x2, 0x0, @rand_addr=0x2}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x7fffffff}, 0x8) remap_file_pages(&(0x7f0000461000/0x4000)=nil, 0x4000, 0x0, 0x974, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00009ecff8), 0x2, 0x3) 2018/02/23 08:18:52 executing program 5: timer_create(0x4, &(0x7f0000000000)={0x0, 0x21, 0x5, @tid}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = memfd_create(&(0x7f0000021fd0)='ppp1\x00', 0x100000000) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000053ff8)) close(0xffffffffffffffff) 2018/02/23 08:18:52 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x400, 0x1, 0x2, 0xff, 0x9}, 0xc) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback=0x7f000001}, @in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, @in6={0xa, 0x1, 0x3ff, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x1}, @in6={0xa, 0x3, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x6}], 0x58) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) pipe(&(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000140)={0x7, 0x6, 0x80000001, 0x5}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x208, 0x4) 2018/02/23 08:18:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000f12000)={0x400000010, 0x0, 0xffffffffffffffff, 0x70a1}, 0xc) r1 = dup(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f00005c6000)=""/6, &(0x7f00001bb000)=0x6) socket$bt_sco(0x1f, 0x5, 0x2) 2018/02/23 08:18:52 executing program 1: r0 = socket(0x5, 0x400000008007, 0x0) io_setup(0x8000, &(0x7f0000000000)) io_setup(0xf, &(0x7f00000000c0)=0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x1, 0x7fff, @mcast1={0xff, 0x1, [], 0x1}, 0x26e}, @in6={0xa, 0x0, 0xffffffffffffff55, @mcast2={0xff, 0x2, [], 0x1}, 0x2}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r2, 0x5}, &(0x7f0000000180)=0x8) io_submit(r1, 0x24d, &(0x7f0000000300)=[]) 2018/02/23 08:18:52 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/xfrm_stat\x00') readv(r1, &(0x7f00000012c0)=[{&(0x7f0000002040)=""/136, 0x88}], 0x1) dup(r1) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) 2018/02/23 08:18:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00005da000)=0x9, 0x4) 2018/02/23 08:18:52 executing program 2: r0 = dup(0xffffffffffffff9c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) pipe(&(0x7f0000000000)={0x0}) vmsplice(r1, &(0x7f0000709fd0)=[{&(0x7f0000709f21)="cdeafb521fd96e6b573c1de468148b6834e269766ab1704ae5ae6da414e6fe3f358e1d146cb1d2e6ea72ee0adc38f40a9ce10881bbd26fac08a0f3cb19556338c58dd6c3105daaf5a1da9b9b99cb228d7f2015f770fd4e108431bc4fb63c1fedd387fcd4de1adbea76102165a1bb6fd59ed997061b6b0c8e7ee65407ea2464a090eb3ff64e8cb6ccd0733b5e7dfec1311728b81d10101cb8cf9fbe66d61b47b615852df0469e4fd120d930f973bd0fa481cef75a1fd0", 0xb6}], 0x1, 0x0) 2018/02/23 08:18:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') pread64(r0, &(0x7f0000006fb5)=""/1, 0x1, 0x0) 2018/02/23 08:18:52 executing program 7: r0 = socket(0x20004000000015, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2712, &(0x7f0000001000)=""/1, &(0x7f0000000000)=0xf000) r1 = socket(0xf, 0x80000, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040), 0x8) 2018/02/23 08:18:52 executing program 0: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, r0, 0x10001, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00004ff000)='/dev/snd/seq\x00', 0x0, 0x0) flock(r1, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x3, 0xfffffffffffffffd, 0x0, 0x8, 0x0, 0x100}) 2018/02/23 08:18:52 executing program 3: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) futex(&(0x7f0000d64ffc), 0x5, 0x0, &(0x7f0000a8e000)={0x0, 0x989680}, &(0x7f0000000000), 0x7fffffff) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x9, 0x80) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/92) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 2018/02/23 08:18:52 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x4, &(0x7f0000000080)) 2018/02/23 08:18:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80}, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @empty}, 0xffffffffffffffff, 0x6c}, 0x2, @in=@empty, 0xffffffffffffffff, 0x1, 0x0, 0x7ff}}, 0xe8) connect$inet6(r0, &(0x7f000088bfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x10001, 0x2) ioctl$VT_DISALLOCATE(r1, 0x5608) 2018/02/23 08:18:52 executing program 5: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfb9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000d41000)={0x0, 0xffffffffffffffff}) 2018/02/23 08:18:52 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x1000, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{r2, r3/1000+30000}, {r4, r5/1000+10000}}, 0x100) accept$ipx(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000fde000)={&(0x7f0000496ff4)={0x10, 0x0, 0x0, 0x8}, 0xfe79, &(0x7f0000087ff0)={&(0x7f0000def000)=@dellink={0x20, 0x11, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2018/02/23 08:18:52 executing program 2: mkdir(&(0x7f0000915ff8)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000cfb000)='./file0\x00') chdir(&(0x7f0000739ffe)='..') chdir(&(0x7f00001ec000)='..') r1 = accept(r0, &(0x7f0000000040)=@can, &(0x7f0000000080)=0x10) accept4$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000100)=0x8, 0x80000) openat(0xffffffffffffff9c, &(0x7f00004d2ffe)='..', 0x0, 0x0) 2018/02/23 08:18:52 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x800) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000040)=""/199, 0xc7}, &(0x7f0000000140), 0x7}, 0x20) 2018/02/23 08:18:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000080)=0xfffffffffffffe3f) 2018/02/23 08:18:52 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0xfffffdd5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in={0x2, 0xffffffffffffffff, @rand_addr=0xd5}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00004b4000)=[@in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, @in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}], 0x20) 2018/02/23 08:18:52 executing program 1: capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f0000292000)) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4100, 0x4) setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000040)=0x410002, 0x4) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) getgroups(0x3, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) fchown(r0, r1, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f00004a9fd8)={@common='bridge0\x00', @ifru_data=&(0x7f00008e7fe0)="0800000000000000000305fffe00eb00ecff0000a10000000449faf4e2007e23"}) 2018/02/23 08:18:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000c21ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x401, 0x84) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x4, 0x1, {0xa, 0x3, 0x80000000, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}}, 0x32) memfd_create(&(0x7f0000000000)='eth1\x00', 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000040)) 2018/02/23 08:18:52 executing program 4: r0 = memfd_create(&(0x7f0000a91000)="e27c8d772891013143aad08f055ef6cbe2c8b7595b53b307c8ad49b98cbaa812ee7e100007815d9470e2245059b6584a1c209c8c8d9fdef59aa713388da8cd879da3c42db5618a11773c96e39b56", 0x7) fcntl$addseals(r0, 0x409, 0x4) fallocate(r0, 0x0, 0x0, 0x96) 2018/02/23 08:18:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000534000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x400000) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000052000)="e5fcb5bf91aa7855fbcdfef1ddb42113", 0x10) r2 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0xffffffffffffff81) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000380)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) sendmsg(r2, &(0x7f0000c59fc8)={&(0x7f00001a3000)=@un=@abs, 0x8, &(0x7f0000b77000)=[], 0x0, &(0x7f0000bd7000)=[{0x10, 0x117, 0x3}], 0x10}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) 2018/02/23 08:18:52 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000040)={0xffffffffffffff72, {{0x2, 0x1, @loopback=0x7f000001}}, 0x1, 0x0, []}, 0x98) fstat(r0, &(0x7f000001c000)) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000009000)={@common='sit0\x00', @ifru_data=&(0x7f000001c000)="6b6be7000000007000b400a472ca66f3000000ef0002000000000000cb9d3cb0"}) 2018/02/23 08:18:52 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x2b) sendmsg(r0, &(0x7f0000032fc8)={0x0, 0x0, &(0x7f000000f000)=[{&(0x7f0000020000)="da", 0x1}], 0x1, &(0x7f0000006f48)=[]}, 0x24008040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000007000)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000022fd0), {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast=0xffffffff, @common='erspan0\x00'}}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x340) sendmsg(r0, &(0x7f000001f000)={0x0, 0x0, &(0x7f000001d000)=[], 0x363, &(0x7f0000004000)=[]}, 0x0) r1 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)="ab2232dd966586c096b6f229278a4a49a269df0f5aa2614e2f8b16badf03a7825829fa2e34f57eb908163dcdcb66a9c089d59ce9b54f7053906e27acedba90c0caa341c4139384f951cda77e381878f80258c2a39d19dc16102f20c58853ffa851ebe1afc59b9bdf09b6f5ac6627b8de8ecb00accd101503867aa29b673e0fc12b4826bcd8b02c095dfe895dc02cd644f90de90280f47eda2817f5d6ba5ee9f939ccf95feae252c2d4698209f11d30b8b32c995d8f2319946fc6c1b5af121a248900b541b4450eb51575890cbbb9881a977c1f33cce8", 0xd6, 0xfffffffffffffffe) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() keyctl$chown(0x4, r1, r2, r3) 2018/02/23 08:18:52 executing program 1: r0 = creat(&(0x7f0000639000)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000fb7000)={&(0x7f000049f000)='./file0\x00'}, 0x10) fanotify_mark(r0, 0x8, 0x10000, r0, &(0x7f0000000000)='./file0/file0\x00') 2018/02/23 08:18:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x20800, 0x2) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/02/23 08:18:52 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty, @in6=@remote, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) r1 = request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)=',\x00', 0xfffffffffffffff8) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000240)=0x3ff, 0x1) keyctl$get_persistent(0x16, r0, r1) r3 = add_key(&(0x7f0000837ffe)='ceph\x00', &(0x7f000065e07c)={0x73, 0x79, 0x7a}, &(0x7f00005d0f1c), 0x0, 0xfffffffffffffffc) add_key(&(0x7f00006b0ff8)='big_key\x00', &(0x7f0000d7b000)={0x73, 0x79, 0x7a}, &(0x7f000008d000), 0x0, r3) keyctl$get_security(0x11, r3, &(0x7f00002df000), 0x0) 2018/02/23 08:18:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000238fc8)={&(0x7f000028afe4)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c, &(0x7f0000369000)=[], 0x0, &(0x7f00001e1fe0)=[{0x10, 0x29, 0x40000003e}], 0x10}, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000000)="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") 2018/02/23 08:18:52 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x3) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r1, 0xfffffc61) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 2018/02/23 08:18:52 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x80) fstat(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, &(0x7f00000000c0)=r1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x11}, @empty, [], {@arp={0x806, @generic={0x31f, 0x10, 0x6, 0xc, 0xf, @empty, "e9390ee03144f8860adf7123", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, "6c0e056c145b9313a3c316829516c1ba"}}}}, &(0x7f00000000c0)={0x200800000000, 0x1, [0x4]}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000080)=@hopopts={0x3b, 0x3, [], [@enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x8}, @pad1={0x0, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @empty}]}, 0x28) 2018/02/23 08:18:52 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r0, 0x0) shutdown(r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) accept(r0, &(0x7f00004e4000)=@hci, &(0x7f0000e7b000)=0x6) 2018/02/23 08:18:52 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x40000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={r1, &(0x7f0000000080)=""/80}) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x24, 0x23, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0xfd14}, 0x1}, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x7, 0x1ff, 0xb3ea, 0x8001}]}) 2018/02/23 08:18:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x541f, &(0x7f0000000000)=0xfe) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x400) ioctl$TUNSETPERSIST(r1, 0x400454cb, &(0x7f0000000080)=0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x1, @dev={0xac, 0x14, 0x0, 0x12}}, {0x2, 0x2, @rand_addr=0x6}, {0x2, 0x1, @dev={0xac, 0x14, 0x0, 0xf}}, 0xa0, 0x1d, 0x0, 0x8, 0x81, &(0x7f00000000c0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x6, 0x26b, 0x3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='/dev/ptmx\x00') 2018/02/23 08:18:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x400) getsockname$netrom(r1, &(0x7f0000000040)=@full, &(0x7f00000000c0)=0x48) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000418e8c)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@empty, @in=@multicast2=0xe0000002}, {@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x6c}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{"6465666c61746500000000000000000000000000000000000000000000000000000000000000000000f1ffffff00"}}}]}, 0x138}, 0x1}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000100)=""/63, &(0x7f0000000140)=0x3f) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x1, @dev={0xac, 0x14, 0x0, 0xe}}}, 0x6, 0x6, 0x2, 0x7, 0x84}, &(0x7f0000000240)=0xa0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={r2, 0xe4, "9e7eb4b4831c5a46f8cf532b91998e06fb3fb956f9f531803b0ed2fa4c8ae76d64f5e6b15cef645edddd64e109222734bf1a560a191b5f2a8d986323a3f4f72ca4641fdf1a374aeaa261f386ada775bf549260fa32095aec0a0764f961e82040522028d43b7fecf659313903e0c0ba7c871cd598beb5340eb1d23b5ac2dd2a14b1104df2ebe7465ec9d12abf6b93c505181cf3fa773ee584b8aaba6b64c5dc8adb335d0e630166b8a5b5e9bc3e6c16bdc76d83263afa272af4e48848ac1e81f8031056fdd95a74cd2ebd8327b6e30b0819ac3bbb6bca0bf3afb6b7e0f74ab56cdd152047"}, &(0x7f0000000380)=0xec) 2018/02/23 08:18:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x8, 0x2, [0x4, 0x1fffe0]}, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000100)=0x4e25, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x16}}, 0xfffffffffffffee8) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f00002d3f70)=[{&(0x7f0000fe5ff0)='p', 0x1}], 0x1) getsockname$packet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={r3, @multicast1=0xe0000001, @empty}, 0xc) writev(r0, &(0x7f0000818ff0)=[{&(0x7f000016bde8)="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", 0x218}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) get_thread_area(&(0x7f0000000100)={0xf83, 0x20101800, 0x4000, 0x8, 0x100000001, 0x42d, 0x7, 0x80000000, 0x4, 0x3ff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) shutdown(r0, 0x1) 2018/02/23 08:18:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x10001, 0x0, 0xffffffffffffffc1}, 0x10) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x69, 0x0, &(0x7f0000012fc7)}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x78, 0xfffffffffffff001, 0x100000001, 0x5f95, 0x9, 0x0, 0xffffffffffffffe1, 0x200, 0x0, 0x60, 0x0, 0x3, 0x200, 0xffffffff, 0x2923, 0x5, 0x5, 0x7fff, 0xff, 0x10000, 0x5, 0x20, 0x6, 0x4, 0x18, 0x6, 0x3, 0x1f, 0x8, 0x8, 0x2, 0xd1, 0x8, 0x1, 0x2, 0x6e, 0x18b47255, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x400, 0x3, 0x1ff, 0x6, 0xffff, 0x7, 0x8}, r3, 0xe0, r2, 0x4) 2018/02/23 08:18:52 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(r0, &(0x7f0000000040), 0x30, 0x0) syz_emit_ethernet(0x66, &(0x7f0000015e15)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @random="e2f259105142", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x2, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, []}}}}}}}, 0x0) r1 = gettid() sched_getattr(r0, &(0x7f0000000080), 0x30, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x240000000, &(0x7f0000000000)=""/123) r2 = socket(0x0, 0x1, 0xfffffffffffffff8) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0xa000) ioctl$TIOCNOTTY(r3, 0x5422) getsockname$packet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) [ 48.924159] netlink: 16 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/23 08:18:52 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000ecafc8)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000905000)={0x14, 0x27, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, []}, 0x14}, 0x1}, 0x0) 2018/02/23 08:18:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x3, 0x8, 0xffffffffffffff00, 0x6}, 0x6) sendmsg$key(r0, &(0x7f0000f9ffc8)={0x0, 0x0, &(0x7f0000f9f000)={&(0x7f0000f97f50)={0x2, 0x2000007, 0x0, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x100) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000080)=""/193) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003580)={{{@in6=@mcast1, @in=@remote, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000003680)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000036c0)={@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x6c, r4}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000f91f18)={{{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x6c}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x7cc}}, 0xe8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/23 08:18:52 executing program 4: r0 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x4b) r1 = syz_open_dev$sg(&(0x7f0000223ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x2275, &(0x7f00004a2000)="46cd") mmap$binder(&(0x7f0000d4d000/0xb000)=nil, 0xb000, 0x0, 0x12, r1, 0x0) 2018/02/23 08:18:52 executing program 2: r0 = getegid() setgid(r0) setregid(r0, r0) 2018/02/23 08:18:52 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x400000007fff, 0x29, 0x0, 0xffffffffffffffff, 0x9, [0x270]}, 0x2c) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/181, 0xb5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @remote, @multicast2}, &(0x7f0000000400)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xc, &(0x7f0000000180)=@raw=[@alu={0x7, 0x8, 0xf, 0x1, 0x8, 0x50, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x6}, @ldst={0x0, 0x2, 0x6, 0x7, 0xa, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x2f, 0xf, 0x7, 0x6, 0xfffffff0, 0x10}, @map={0x18, 0x6, 0x1, 0x0, r0}], &(0x7f0000000200)='GPL\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227, 0x41f00, 0x1, [], r2}, 0x48) bind$inet6(r1, &(0x7f00009e7fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) r3 = socket$inet_sctp(0x2, 0x0, 0x84) r4 = dup3(r1, r3, 0x0) connect$inet(r3, &(0x7f00009ae000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000cd84e0)={0x1, [0x0]}, &(0x7f0000c9dffc)=0x8) dup(r4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x7a, &(0x7f0000f83000)={r5, @in={{0x2, 0xffffffffffffffff, @empty}}}, &(0x7f000095f000)=0x98) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x10700, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000380)) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000180)={0x3, 0x5, [{0x7ff, 0x0, 0x96c}, {0x9398, 0x0, 0x1}, {0x1, 0x0, 0x3}]}) 2018/02/23 08:18:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000634000)=@filter={'filter\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x290, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000e9afc0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@empty, @dev={0xfe, 0x80}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}, @common=@unspec=@conntrack3={0xc8, 'conntrack\x00', 0x3, {{@ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], @ipv6=@dev={0xfe, 0x80}, [], @ipv6=@empty, [], @ipv6=@loopback={0x0, 0x1}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) close(r0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x80000001, 0x80) accept$packet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x14) 2018/02/23 08:18:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) r3 = accept4$inet(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffff, @rand_addr}, &(0x7f0000000040)=0xfffffffffffffcee, 0x80000) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000080)={0x400, {{0x2, 0x1, @rand_addr=0x7f}}}, 0x90) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x3, @empty}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000280)="660f72e706b8030000000f23c80f21f8350400d0000f23f8c4e16015a191a70000f3f080b67ba2ccb900b9bc0900000f3266baf80cb8b4f92b88ef66bafc0cec2e650f22a6b90e0a00000f320f06f26e", 0x50}], 0x1, 0x0, &(0x7f0000000340)=[@cstype0={0x4, 0xe}], 0x1) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f000016d000)={"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"}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x94, "2c607a7ac0ce079aa8afe0159b9176abbd6a2a0c8d76b61adb27fa86fca9b766181646296b53f655869f8adb8cfb27495876165b03b6e31451a7459b8f92d35a6c4f2572d0bcb24f7226fddece1f361da88da8a13a61cccb677d12e8417ccf90f754d5915eb7072cc353477e3740ae7a2f4c15fbbfe043395a831dc5fd8ce792ac1a812e64684121b0a57775df21c7640cdbf196"}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000380)={r6, 0xfffffffffffffffd, 0x10, 0x1, 0x4}, &(0x7f00000003c0)=0x18) 2018/02/23 08:18:52 executing program 6: r0 = msgget$private(0x0, 0x4c1) msgsnd(r0, &(0x7f0000000000)={0x2, "80"}, 0x9, 0x0) msgrcv(r0, &(0x7f0000000040), 0x8, 0x3, 0x3000) [ 48.969859] binder: 6178:6182 Acquire 1 refcount change on invalid ref 0 ret -22 [ 48.980011] binder: 6178:6182 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 48.993968] binder: 6178:6189 Acquire 1 refcount change on invalid ref 0 ret -22 [ 49.002966] netlink: 16 bytes leftover after parsing attributes in process `syz-executor6'. [ 49.006387] binder: 6178:6182 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/02/23 08:18:52 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f00009b6000)={0x1, 0x78, 0xe3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x404003) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='\x00') setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x138, 0x138, 0x138, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@empty, @loopback={0x0, 0x1}, [0xffffff00, 0xff, 0x0, 0xffffffff], [0x0, 0xff000000, 0xffffff00], @syzn={0x73, 0x79, 0x7a, 0x0}, @syzn={0x73, 0x79, 0x7a, 0x0}, {0xff}, {}, 0x0, 0x10000, 0x6, 0x1e}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @common=@eui64={0x28, 'eui64\x00'}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x0, "9fa118dd636eb045946d93afe278a96af5f91f3004f5015a7217b0052149"}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0x0, 0xaa}, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffff00, 0xff, 0xffffff00], @common='bcsf0\x00', @generic="bf87b1755b3f11b291ba4064be4c9806", {}, {}, 0x7f, 0x9, 0x3, 0x3b}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x90, 0xc, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) 2018/02/23 08:18:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00009b6ff9)='ns/mnt\x00') setns(r0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x80000000, {{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}}}, 0x90) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x6, 0x500000}, 'port0\x00', 0x80, 0x90000, 0x7, 0x5, 0xaf9d, 0x7, 0x7, 0x0, 0x3, 0x3ff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x1, @multicast2=0xe0000002}}, [0xfffffffffffffffe, 0x9b, 0x4a26, 0x8, 0x7fff, 0x100000001, 0x6, 0x7fff, 0x3ff, 0x7, 0x0, 0x1, 0x100000001, 0x2, 0x40]}, &(0x7f0000000240)=0x108) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280)=r1, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x8000, 0x0) 2018/02/23 08:18:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x480000) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000f78)=""/136, 0x88}], 0x1) 2018/02/23 08:18:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) connect$inet(r0, &(0x7f0000adb000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000769fff), 0xa561, 0x4008004, 0x0, 0x0) 2018/02/23 08:18:52 executing program 4: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) 2018/02/23 08:18:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000ede000)={0x80, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x40, 0x9, 0x2, 0x101, 0x8, [{0x9, 0x1, 0x3, 0x0, 0x0, 0x8}, {0x3, 0x57, 0x7}, {0x100, 0x200, 0x7f, 0x0, 0x0, 0x81}, {0xc9f7, 0x81, 0x762, 0x0, 0x0, 0x1}, {0x5, 0x50000000000, 0x9, 0x0, 0x0, 0x1200}, {0xffffffff, 0x8000000000000, 0x8, 0x0, 0x0, 0x4}, {0x2, 0x100000000, 0x8, 0x0, 0x0, 0x100}, {0x9fa, 0x9, 0x1, 0x0, 0x0, 0x80}]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) r1 = memfd_create(&(0x7f0000000000)='wlan0-{\x00', 0x3) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000080)) 2018/02/23 08:18:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000080)={0x5, 0x0, 0x80000001, 0x8001, [], [], [], 0x5, 0x1, 0x80, 0x0, "5583828ae4b8252c8505648186c12d7f"}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000010000)) dup3(r0, r1, 0x0) 2018/02/23 08:18:52 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) dup2(r0, r1) [ 49.080398] kvm: vcpu 0: requested 68374 ns lapic timer period limited to 500000 ns 2018/02/23 08:18:52 executing program 6: r0 = socket(0x20010, 0x802, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={@generic="4fdc6b8214be60aea9453e8dcb0b7dc4", &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x1, 0x401, 0x6, 0x5, 0x4, 0x5, 0x100000000, 0x0, 0x1ff, [0x3, 0xa14000, 0x8, 0x10001, 0x80, 0x1, 0x6, 0x1], [0xffff, 0x1ff]}}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000bf6000)=@common='ipddp0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)=@generic="3adad824c09ce263be49125fa6db0543") r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x480) ioctl$TIOCSTI(r1, 0x5412, 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x20}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r2, 0x71, "392f003747cd00e7f77a900303be4bc648b6aa61c69ad291f474da98aa0ba5e4d86d5a45e22ff20e8a5523a916bd3d4f452e7e824ffe07e5b47024ab34930a8a3adef0767c699a10dddc3b2def620cc97de41d8bc2fc0c1a2080a462a212caf5f5501ee4171dd81d2b9cb1bd432355b7dd"}, &(0x7f0000000140)=0x79) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000dd9ff0)=@common='ipddp0\x00') 2018/02/23 08:18:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007e, 0xa, 0x1000000000000008, 0x14, 0xffffffffffffffff}, 0x2c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8d, 0x20, 0xffffffff}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2, 0xfffffffffffffffa}, &(0x7f00000000c0)=0x8) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000000)=""/6) bind$ax25(r1, &(0x7f0000000000)={0x3, {"4fcad8ae24ace7"}, 0x6654c305}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000014000)='A', &(0x7f0000012000)}, 0x20) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x80000019, 0x40, 0x200, 0x10001, 0xa8}]}) ppoll(&(0x7f0000000040)=[{r0, 0x2}, {r1, 0x2c}, {r1, 0x432}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x817e}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000012000), &(0x7f000000cff6)}, 0x20) 2018/02/23 08:18:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000043f000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f000022efc8)={&(0x7f0000000000)=@ethernet={0x0, @random}, 0x10, &(0x7f0000892fb0)=[{&(0x7f00008fb000)=""/176, 0xb0}], 0x1, &(0x7f00008adfba)=""/70, 0x46}, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/128, 0x80}, {&(0x7f0000000080)=""/165, 0xa5}, {&(0x7f0000000140)=""/113, 0x71}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x4, 0x0) 2018/02/23 08:18:52 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x2000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdir(&(0x7f000085cff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x4e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000ff3000)='./file0\x00', &(0x7f0000c22000)='./file0\x00', &(0x7f000015d000)='nfs\x00', 0x0, &(0x7f000000a000)) [ 49.132800] kvm: vcpu 0: requested 68374 ns lapic timer period limited to 500000 ns 2018/02/23 08:18:52 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/23 08:18:52 executing program 3: mprotect(&(0x7f0000163000/0x800000)=nil, 0x800000, 0x0) munmap(&(0x7f000090f000/0x1000)=nil, 0x1000) pselect6(0x40, &(0x7f0000009000), &(0x7f0000ae1fc0), &(0x7f0000000fc0), &(0x7f0000000ff8)={0x0, 0x1c9c380}, &(0x7f0000000ff9)={&(0x7f000023d000), 0x8}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00004a4000/0x4000)=nil, 0x4000}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/02/23 08:18:52 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffff001, 0x10000) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000033b000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) recvfrom$ax25(r3, &(0x7f0000000040)=""/186, 0xba, 0x0, &(0x7f0000000100)={0x3, {"23c3d0614927a7"}, 0x29f}, 0x10) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000690000)={0x1c, 0x5, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x78, 0x7, 0x0, 0xcf, 0x40, 0x0, 0x2f137ad, 0x40000, 0x4, 0x471d18b6, 0xad8, 0x80, 0x7ff, 0x8, 0x0, 0xd0e, 0x100, 0x4, 0x8, 0xfffffffffffffff7, 0x4a7, 0x7fff, 0x4, 0x7, 0x200, 0x5, 0x2, 0xfffffffffffffffa, 0x2, 0x1ff, 0x5, 0x2, 0x5, 0x3b, 0x7d66, 0x5, 0x9f, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x4000, 0x200, 0xf4e, 0x2, 0x7, 0x4, 0x2d9}, r4, 0x80000000, r2, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8002040, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000080)=""/2) 2018/02/23 08:18:52 executing program 6: rt_sigsuspend(&(0x7f0000057ff8)={0x1}, 0x8) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x200000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/78) r1 = socket$nl_crypto(0x10, 0x3, 0x15) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x1) ioctl$void(r1, 0xc0045c77) 2018/02/23 08:18:52 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) epoll_create1(0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000001ffc), &(0x7f0000012000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/02/23 08:18:52 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x2000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdir(&(0x7f000085cff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x4e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000ff3000)='./file0\x00', &(0x7f0000c22000)='./file0\x00', &(0x7f000015d000)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/02/23 08:18:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000e27cc0)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000ad9000), {[{{@ipv6={@ipv4={[], [0xff, 0xff], @empty}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @common='ip6tnl0\x00', @common='bridge0\x00'}, 0x0, 0xa8, 0x110, 0x0, {}, []}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xf, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}, {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x340) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x30000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x8000, 0xff}, 0x8) 2018/02/23 08:18:52 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x8000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x10001, 0x202, 0xffff, 0x1, 0x9, 0x2, 0x4, r1}, &(0x7f00000000c0)=0x20) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x48000000000, 0x1000}, {0x3, 0x1efd, 0x800}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}) [ 49.271673] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 49.311863] xt_TCPMSS: Only works on TCP SYN packets [ 49.325880] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 49.327408] xt_TCPMSS: Only works on TCP SYN packets 2018/02/23 08:18:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000589000)}}) close(r0) 2018/02/23 08:18:53 executing program 0: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104ff0095430700072c01000000010008000400020423dcff9f00", 0x1f) r1 = getpgrp(0xffffffffffffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000040)={0x6, 0x1, 0x9, 0xbc7, 0x80000000, 0x7}) keyctl$revoke(0x3, 0x0) 2018/02/23 08:18:53 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$llc(0x1a, 0x2, 0x0, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f0000e64ff8), 0x8e18) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/02/23 08:18:53 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ff7000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000ff9ffc)=0x2, 0x4) getpeername(r0, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @rand_addr}}}, &(0x7f0000000040)=0x26) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) rt_sigreturn() recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, 0x32, &(0x7f0000000480)=[], 0x0, &(0x7f0000000500)=""/15, 0xf}, 0xfd2029cf3fd6020e) 2018/02/23 08:18:53 executing program 3: pipe2(&(0x7f0000000000)={0x0}, 0x4800) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000001800)={@loopback, @rand_addr, 0x0}, &(0x7f0000001840)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001880)={@mcast1={0xff, 0x1, [], 0x1}, r1}, 0x14) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001f7a)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="a077c8248657", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast=0xffffffff, {[@ssrr={0x89, 0xb, 0x0, [@empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}]}]}}}}}}}, 0x0) 2018/02/23 08:18:53 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000198000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) flistxattr(r0, &(0x7f0000000000)=""/142, 0x8e) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f0000c7c000)=""/4096) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, &(0x7f00000000c0)) 2018/02/23 08:18:53