[....] Starting enhanced syslogd: rsyslogd[ 12.217690] audit: type=1400 audit(1515271533.536:5): avc: denied { syslog } for pid=3345 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.513594] audit: type=1400 audit(1515271537.832:6): avc: denied { map } for pid=3483 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. 2018/01/06 20:45:44 fuzzer started [ 22.732459] audit: type=1400 audit(1515271544.051:7): avc: denied { map } for pid=3495 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/01/06 20:45:44 dialing manager at 10.128.0.26:40919 2018/01/06 20:45:47 kcov=true, comps=true [ 26.485089] audit: type=1400 audit(1515271547.803:8): avc: denied { map } for pid=3495 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=8830 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/01/06 20:45:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000002d000-0xb)='/dev/loop#\x00', 0x0, 0x0) unshare(0x600) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/01/06 20:45:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005000)="", 0x0) socketpair(0x0, 0x0, 0x100, &(0x7f0000d3e000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x4b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x1fffffd, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f10714c1f83a0022fb07000044010000000000020000000000000000eb7435", 0x26) 2018/01/06 20:45:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000d6e000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000c66000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f00003c2000-0x97)=""/151, &(0x7f0000042000-0x4)=0x97) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) getpid() ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00003bc000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2018/01/06 20:45:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcc000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f000016d000)={"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"}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000757000)={0x8, 0x4}) 2018/01/06 20:45:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00002b9000-0x4)=0x8, 0x4) sendto$inet6(r0, &(0x7f00009f1000-0x3d)="", 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) recvmmsg(r0, &(0x7f0000689000-0x10)=[{{&(0x7f0000ff7000)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, 0x10, &(0x7f0000f5d000)=[], 0x0, &(0x7f0000f62000)=""/0, 0x0, 0x0}, 0x0}], 0x1, 0x2041, 0x0) 2018/01/06 20:45:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005be000)='/dev/sequencer\x00', 0x42, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b23000-0xc)={0x0, 0x0}) write$tun(r1, &(0x7f0000a49000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "cfa494", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @loopback={0x0, 0x1}, {[], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}, 0x46) 2018/01/06 20:45:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00006f0000-0xc3)="ae", 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00001e4000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000965000)={0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f000024d000-0x10)=[&(0x7f000069d000/0x2000)=nil, &(0x7f00000ce000/0x3000)=nil], 0x0, &(0x7f0000001000-0x1c)=[], 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00007d7000)={0x0, {{0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) openat$selinux_mls(0xffffffffffffff9c, &(0x7f000009e000-0xd)='/selinux/mls\x00', 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) connect$bt_l2cap(0xffffffffffffffff, &(0x7f000039b000)={0x1f, 0xb8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe) 2018/01/06 20:45:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f00002c9000-0x8)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000974000-0x12)='net/ip6_flowlabel\x00') sendfile(r0, r0, &(0x7f0000023000)=0x84, 0x26a950b) [ 28.414433] audit: type=1400 audit(1515271549.732:9): avc: denied { map } for pid=3495 comm="syz-fuzzer" path="/root/syzkaller-shm144223685" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 29.447073] audit: type=1400 audit(1515271550.764:10): avc: denied { sys_admin } for pid=3538 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/06 20:45:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000d6e000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000c66000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f000055c000)={@common='ip6gre0\x00', @ifru_settings={0x10001, 0x0, @fr_pvc_info=&(0x7f0000cc0000-0x14)={0x0, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}}}) [ 29.553533] audit: type=1400 audit(1515271550.872:11): avc: denied { sys_chroot } for pid=3725 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/06 20:45:50 executing program 0: 2018/01/06 20:45:50 executing program 0: [ 29.583679] audit: type=1400 audit(1515271550.902:12): avc: denied { net_admin } for pid=3744 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/06 20:45:50 executing program 0: 2018/01/06 20:45:50 executing program 0: 2018/01/06 20:45:50 executing program 0: 2018/01/06 20:45:50 executing program 0: 2018/01/06 20:45:50 executing program 0: [ 29.656969] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. [ 29.674543] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. [ 29.959955] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 30.390670] audit: type=1400 audit(1515271551.709:13): avc: denied { dac_override } for pid=3773 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/06 20:45:51 executing program 7: 2018/01/06 20:45:51 executing program 5: 2018/01/06 20:45:51 executing program 6: 2018/01/06 20:45:51 executing program 4: 2018/01/06 20:45:51 executing program 1: 2018/01/06 20:45:51 executing program 2: 2018/01/06 20:45:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2018/01/06 20:45:51 executing program 3: 2018/01/06 20:45:51 executing program 4: 2018/01/06 20:45:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000045a000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)="") r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000478000-0x60)={0x0, 0x0, 0x1, @thr={&(0x7f0000bc8000)="", &(0x7f0000ca9000-0x1)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mq_timedsend(r0, &(0x7f0000544000-0xd8)="", 0x0, 0x0, &(0x7f0000191000)={0x0, 0x0}) 2018/01/06 20:45:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:51 executing program 0: 2018/01/06 20:45:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x43) setsockopt$inet_opts(r0, 0x0, 0x3, &(0x7f00006ce000-0x5)='w', 0x1) sendto$inet(r0, &(0x7f0000440000)="", 0xffe6, 0x0, &(0x7f00002ce000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/06 20:45:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000f64000-0x1000)="", 0x0, 0x48000, &(0x7f00008b1000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f0000f64000-0x12)='\a', 0x1, 0x0, &(0x7f00006e5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2018/01/06 20:45:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000618000-0xb)='/dev/adsp#\x00', 0x8, 0x20400) r0 = open(&(0x7f00000ea000)='./bus\x00', 0x141046, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000fb2000-0x12)='/dev/input/event#\x00', 0x2, 0x1000101002) ftruncate(r0, 0x10401) sendfile(r1, r0, 0x0, 0x72439a6b) 2018/01/06 20:45:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dec000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000df1000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000de2000-0x1)="", 0x0, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) sendto$inet(r0, &(0x7f000058c000-0x1000)="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", 0x1000, 0x4, 0x0, 0x0) 2018/01/06 20:45:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b65000-0x10)={0x1, &(0x7f0000193000-0x10)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000f3f000-0x4)=0x519, 0x4) sendto$inet6(r1, &(0x7f0000c22000-0x679)="", 0x0, 0x8001, &(0x7f0000825000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) writev(r1, &(0x7f0000642000-0x20)=[{&(0x7f0000e3c000)="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", 0x754}], 0x1) 2018/01/06 20:45:51 executing program 0: 2018/01/06 20:45:52 executing program 0: 2018/01/06 20:45:52 executing program 1: 2018/01/06 20:45:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) [ 30.650559] audit: type=1400 audit(1515271551.969:14): avc: denied { net_raw } for pid=3796 comm="syz-executor4" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/06 20:45:52 executing program 0: 2018/01/06 20:45:52 executing program 5: 2018/01/06 20:45:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000d27000)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000076f000)={0x0, 0x4, 0x0}, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000d5e000-0x28)={@common='gre0\x00', @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000971000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000723000)="", 0x0, 0x20000042, &(0x7f0000ef0000-0x10)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/06 20:45:52 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000885000)={0x0, 0x0, &(0x7f0000f0b000-0x11)=""}) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000d86000-0x1c)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000558000-0x38)={&(0x7f0000a34000)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000f70000)=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1, 0x0}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/06 20:45:52 executing program 7: 2018/01/06 20:45:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000031000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000)=0x0, 0x8, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00005e9000-0x20)={0x0, &(0x7f000002d000)=0x0, 0x200000000008, r2, 0x5}) 2018/01/06 20:45:52 executing program 0: 2018/01/06 20:45:52 executing program 5: 2018/01/06 20:45:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:52 executing program 7: 2018/01/06 20:45:52 executing program 0: [ 30.687481] netlink: 10 bytes leftover after parsing attributes in process `syz-executor2'. [ 30.687495] netlink: 10 bytes leftover after parsing attributes in process `syz-executor2'. [ 30.692118] netlink: 10 bytes leftover after parsing attributes in process `syz-executor2'. [ 30.692131] netlink: 10 bytes leftover after parsing attributes in process `syz-executor2'. 2018/01/06 20:45:52 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) write(r0, &(0x7f0000005000)="", 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000d3e000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x4b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000bc000)="260000001e0047f10714c1f83a0022fb07000044010000000000020000000000000000eb7435", 0x26) 2018/01/06 20:45:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000037c000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2, 0x0, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/06 20:45:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) r2 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000001000-0x8)={0x39980732, r2}, &(0x7f0000f80000)={0xfffffffffffffffa, 0x2, 0x856, 0xb61, 0x1f, 0x19c8c1a1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1, r2}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000001000)=@req={0x0, 0x0}) listen(r1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$LOOP_SET_FD(r1, 0x4030582a, 0xffffffffffffffff) 2018/01/06 20:45:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005be000)='/dev/sequencer\x00', 0x42, 0x0) write$tun(r0, &(0x7f0000a49000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "cfa494", 0xd46, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @loopback={0x0, 0x1}, {[], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {"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"}}}}}, 0xd78) 2018/01/06 20:45:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005be000)='/dev/sequencer\x00', 0x42, 0x0) write$tun(r0, &(0x7f0000a49000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "cfa494", 0xd46, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @loopback={0x0, 0x1}, {[], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {"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"}}}}}, 0xd78) 2018/01/06 20:45:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000520000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005000-0x10)={0x0, 0x0}) ppoll(&(0x7f00008f0000-0x50)=[{r0, 0x0, 0x0}], 0x1, &(0x7f0000da5000-0x10)={0x0, r1+30000000}, &(0x7f0000819000)={0x0}, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f000002a000-0xb0)={{0x80, 0x0}, "001700095dad126e00000002a1569b3fd4ecc307e8083d13eb79f9c9c65aba0e0d229db692542e5b78f8b29e0a27800f0000000000000009fb42d576589701a4", 0x6e, 0x10000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00003b1000-0x2)='/dev/sequencer2\x00', 0x100006002, 0x0) 2018/01/06 20:45:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000dc0000-0x4)=0x3, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf7000-0x1c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000c9f000-0x4)=0x0, 0x4) sendto$inet6(r0, &(0x7f0000ab5000-0x72)="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", 0x599, 0x0, &(0x7f0000aaa000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg(r0, &(0x7f0000470000)=[{{0x0, 0x0, &(0x7f000040b000-0xa0)=[{&(0x7f00009c9000)='J', 0x1}], 0x1, &(0x7f0000f57000)=[], 0x0, 0x0}, 0x0}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000553000-0xcc)="9a", 0x1, 0x0, &(0x7f00005a2000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 30.734660] netlink: 10 bytes leftover after parsing attributes in process `syz-executor2'. [ 30.734673] netlink: 10 bytes leftover after parsing attributes in process `syz-executor2'. [ 30.745755] device gre0 entered promiscuous mode [ 30.781992] netlink: 10 bytes leftover after parsing attributes in process `syz-executor2'. [ 30.782071] netlink: 10 bytes leftover after parsing attributes in process `syz-executor2'. 2018/01/06 20:45:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) mknod(&(0x7f00009af000)='./file0\x00', 0x10, 0x5) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000920000-0x8c)={0x0, @in={{0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000aa2000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000574000+0x314)={r1, 0xa9, "6de1db9c5136a520e69b2094f1756ffa2f4f3e403a40117167cc8ffdc6ddbe27c7b94df09f07f73e187175006f92291f703948826343e142b472f652e3f76dddad9045d5a36f9916ed276b7a17fd1ed0abfb4f63a3e5c08703ee086bb4b3b83c9155afe8bb4d6e245305ca65f004c261dad59ea69966ab60197269199acfd803d132a975a597a5c356ee4bcdaeb5e82da418a52c6676b795fe7c0b402cefe7c5b3b050d92a4ad6d2c0"}, &(0x7f00000f3000-0x4)=0xb1) write(r0, &(0x7f0000dca000)="", 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000d07000-0x20)={0x7670, 0x4, 0x8000, 0x89, 0x1, 0x2, 0x4, 0x8, r2}, 0x20) setsockopt(r0, 0x9, 0x8, &(0x7f0000cee000)="", 0x0) 2018/01/06 20:45:52 executing program 1: mmap(&(0x7f0000000000/0xf80000)=nil, 0xf80000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f80000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000f81000-0xf)='/dev/sequencer\x00', 0x80, 0x0) flistxattr(r0, &(0x7f00006ac000)=""/38, 0x26) mmap(&(0x7f0000f80000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f80000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x50000006, &(0x7f0000eae000-0x8)=0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = shmget$private(0x0, 0xa000, 0x7800004d, &(0x7f0000f1d000/0xa000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmget$private(0x0, 0x1000, 0x54000080, &(0x7f0000d0f000/0x1000)=nil) io_destroy(r1) io_setup(0x530, &(0x7f0000003000)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2018/01/06 20:45:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:52 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xad2, 0x80000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000861000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [], {0x95, 0x0, 0x0, 0x0}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000062000-0xb7)=""/183, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000fd8000-0x8)={0x0, 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008bd000)='/dev/hwrng\x00', 0x40, 0x0) setsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000b75000-0x4)=0x9, 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000554000)={r3, r1}) dup3(r1, r2, 0x0) 2018/01/06 20:45:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x9) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c37000)={0xaa, 0x0, 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f000037a000)='/dev/ppp\x00', 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000be8000-0x40)={0xfffffffffffffffb, 0x2, 0x8ee9, 0x100, "a90c9ab726a126b117fb526b8a96cf43d10a72ead4fdaf90a76059a7485f3a2b968ff4a6ebc0c76074b36dd7", 0x6}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000f7d000)={&(0x7f0000a74000-0x8)='./file0\x00', r2}, 0xc) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r3 = creat(&(0x7f0000e4b000-0x8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@time={0x77359400, 0x0}}], 0x30) unlink(&(0x7f0000e88000)='./file0\x00') mount(&(0x7f000055d000)='./file0\x00', &(0x7f00007a5000)='./file0\x00', &(0x7f0000e38000)='anon_inodefs\x00', 0x11088, &(0x7f00004e8000-0x83)="") ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000c2a000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/01/06 20:45:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:52 executing program 0: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/rfkill\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000000000)={@local={0xac, 0x14, 0x0, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, @rand_addr=0x1}, 0xc) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000011000)=[{0x0, 0x0}], 0x1, 0x100) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000003000)={0x0, 0x0}) [ 30.943162] audit: type=1400 audit(1515271552.260:15): avc: denied { prog_load } for pid=3863 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 31.006517] audit: type=1400 audit(1515271552.262:16): avc: denied { ipc_lock } for pid=3862 comm="syz-executor1" capability=14 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 31.045573] audit: type=1400 audit(1515271552.301:17): avc: denied { prog_run } for pid=3863 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 31.061782] FAULT_FLAG_ALLOW_RETRY missing 30 [ 31.061812] CPU: 0 PID: 3875 Comm: syz-executor6 Not tainted 4.15.0-rc6+ #250 [ 31.061817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.061820] Call Trace: 2018/01/06 20:45:52 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000be7000-0x8)={0x19980330, 0x0}, &(0x7f000032e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$amidi(&(0x7f000028d000)='/dev/amidi#\x00', 0x1000, 0x8000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000f1c000-0x4)=0xffffffffffff7fff, 0x4) setgroups(0x4000000000000373, &(0x7f00003f9000)=[]) ioctl$TCSETS(r0, 0x5402, &(0x7f00004bc000-0x24)={0xfffffffffffffffc, 0x1f, 0x0, 0x6, 0x7, 0x9, 0x10001, 0x10001, 0x52, 0x85, 0x1, 0x100}) write$evdev(r0, &(0x7f0000ae3000-0x18)=[{{0x77359400, 0x0}, 0x0, 0xffffffffffffffc0, 0xffffffff}], 0x18) openat$mixer(0xffffffffffffff9c, &(0x7f00002d1000-0xb)='/dev/mixer\x00', 0x0, 0x0) 2018/01/06 20:45:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000037c000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2, 0x0, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/06 20:45:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000401000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r0, &(0x7f00006f1000)=""/24, 0x343) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) openat$selinux_mls(0xffffffffffffff9c, &(0x7f000090f000-0xd)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000e13000-0x12)='/dev/snd/midiC#D#\x00', 0x6, 0x440001) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000168000-0x8)=0x0) r2 = syz_open_dev$vcsn(&(0x7f00005f4000)='/dev/vcs#\x00', 0xcab5, 0x1000000000000000) pkey_free(0xffffffffffffffff) ioctl$VT_WAITACTIVE(r2, 0x5607) io_setup(0x2, &(0x7f000048e000-0x8)=0x0) 2018/01/06 20:45:52 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000ad0000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket(0x10002000000011, 0x8000000080003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000b13000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$packet(r3, &(0x7f0000c85000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) r5 = dup2(r3, r2) ioctl$int_in(r1, 0x5452, &(0x7f000059e000)=0x96e) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00006ce000-0x10)="89f682cc737d27d3a8520f96e32c8a44", 0x10) write$evdev(r5, &(0x7f0000eab000)=[{{0x0, 0x0}, 0x400, 0x0, 0x0}], 0x18) getsockname$packet(r3, &(0x7f00006e0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00001a4000)=0x14) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00004a2000-0x4)=0x0) tkill(r6, 0xf) 2018/01/06 20:45:52 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000001000-0x10)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000340000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000b45000)='./file0\x00', &(0x7f00006d3000-0x8)='./file0\x00') ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f000001d000-0x44)={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, {0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="46b584f4917d7e25ed7763bc682bcbb0"}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x101771}) bpf$PROG_LOAD(0x5, &(0x7f00006f5000-0x48)={0x1, 0x3, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x81, 0xc3, &(0x7f0000c1e000-0xc3)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = creat(&(0x7f000091b000-0x8)='./file0\x00', 0x100) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000ea2000)={0x2, &(0x7f0000816000-0x10)=[{0x0, 0x0}, {0x0, 0x0}]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00001ef000)={0x0, 0x54, "efa8fbf98ffbecb7041d51c99179aafdf60d0ca6d3736ca6a77e961d9c6c9f1dac9889cc2eaee6ef248ed31d5b8977da54ee40176ad5c33543c9cc18f82a1a9d7f0dcbedda60bea6bddbed18409463548d230c12"}, &(0x7f00000e5000)=0x5c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00005bd000)={r3, 0x4}, 0x8) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f000076f000-0x8)={r2, 0x20}) 2018/01/06 20:45:52 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000001000-0x8)=0xa49c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00008cf000-0xe)='/selinux/user\x00', 0x2, 0x0) getpeername$llc(r2, &(0x7f0000c68000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00005de000)=0x10) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(r4, &(0x7f00003cf000)=[], 0x0) sched_rr_get_interval(r1, &(0x7f0000188000-0x10)={0x0, 0x0}) close(r3) 2018/01/06 20:45:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fe, 0x4) bind$inet6(r0, &(0x7f0000bcf000-0x1c)={0xa, 0x2, 0x280, @loopback={0x0, 0x1}, 0x100000001}, 0xfffffd26) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f000072a000)='nv\x00', 0x3) sendto$inet6(r0, &(0x7f00007a9000-0x1)="", 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 31.061839] dump_stack+0x194/0x257 [ 31.061855] ? arch_local_irq_restore+0x53/0x53 [ 31.061877] ? handle_userfault+0x12b7/0x24c0 [ 31.061894] handle_userfault+0x12fa/0x24c0 [ 31.061923] ? userfaultfd_ioctl+0x4520/0x4520 [ 31.061931] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 31.061940] ? check_usage_forwards+0x410/0x410 [ 31.061965] ? print_irqtrace_events+0x270/0x270 [ 31.061973] ? trace_hardirqs_off+0x10/0x10 [ 31.061984] ? get_user_pages_fast+0x277/0x340 [ 31.062002] ? perf_trace_lock+0xd6/0x900 [ 31.062011] ? __perf_event_task_sched_in+0x200/0xc20 [ 31.062034] ? __lock_acquire+0x664/0x3e00 [ 31.062044] ? check_noncircular+0x20/0x20 [ 31.062050] ? __lock_acquire+0x2d15/0x3e00 [ 31.062080] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 31.062091] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 31.062107] ? find_held_lock+0x35/0x1d0 [ 31.062128] ? __handle_mm_fault+0x3296/0x3ce0 [ 31.062139] ? lock_downgrade+0x980/0x980 [ 31.062153] ? lock_release+0xa40/0xa40 [ 31.062164] ? copy_overflow+0x20/0x20 [ 31.062189] ? do_raw_spin_trylock+0x190/0x190 [ 31.062201] ? userfaultfd_ctx_put+0x740/0x740 [ 31.062229] __handle_mm_fault+0x32a3/0x3ce0 [ 31.062249] ? __pmd_alloc+0x4e0/0x4e0 [ 31.062258] ? print_irqtrace_events+0x270/0x270 [ 31.062278] ? find_held_lock+0x35/0x1d0 [ 31.062301] ? handle_mm_fault+0x248/0x8d0 [ 31.062313] ? lock_downgrade+0x980/0x980 [ 31.062362] handle_mm_fault+0x334/0x8d0 [ 31.062370] ? down_read+0x96/0x150 [ 31.062381] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 31.062388] ? vmacache_find+0x5f/0x280 [ 31.062404] ? find_vma+0x30/0x150 [ 31.062420] __do_page_fault+0x5c9/0xc90 [ 31.062441] ? mm_fault_error+0x2c0/0x2c0 [ 31.062451] ? find_held_lock+0x35/0x1d0 [ 31.062472] do_page_fault+0xee/0x720 [ 31.062484] ? __do_page_fault+0xc90/0xc90 [ 31.062497] ? lock_release+0xa40/0xa40 [ 31.062515] ? do_raw_spin_trylock+0x190/0x190 [ 31.062539] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 31.062560] page_fault+0x2c/0x60 [ 31.062570] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 31.062574] RSP: 0018:ffff8801a5c87928 EFLAGS: 00010246 [ 31.062582] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82584c61 [ 31.062587] RDX: 000000000000010b RSI: ffffc90002538000 RDI: ffff8801a5c87d28 [ 31.062592] RBP: ffff8801a5c87a08 R08: ffff8801a7b4d6d0 R09: 1ffff10034b90ee7 [ 31.062596] R10: ffff8801a5c87858 R11: 0000000000000003 R12: 1ffff10034b90f28 [ 31.062601] R13: ffff8801a5c879e0 R14: 0000000000000000 R15: ffff8801a5c87d20 [ 31.062622] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 31.062640] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 31.062653] ? iov_iter_revert+0x9d0/0x9d0 [ 31.062668] ? mark_held_locks+0xaf/0x100 [ 31.062675] ? simple_xattr_get+0xeb/0x160 [ 31.062686] ? current_kernel_time64+0x122/0x2f0 [ 31.062698] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 31.062714] generic_perform_write+0x200/0x600 [ 31.062746] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 31.062754] ? generic_update_time+0x1b2/0x270 [ 31.062767] ? __mnt_drop_write_file+0xd/0x70 [ 31.062777] ? file_update_time+0xbf/0x470 [ 31.062791] ? current_time+0xc0/0xc0 [ 31.062807] ? down_write+0x87/0x120 [ 31.062823] __generic_file_write_iter+0x366/0x5b0 [ 31.062831] ? check_noncircular+0x20/0x20 [ 31.062848] generic_file_write_iter+0x399/0x790 [ 31.062866] ? __generic_file_write_iter+0x5b0/0x5b0 [ 31.062881] ? iov_iter_init+0xaf/0x1d0 [ 31.062897] __vfs_write+0x684/0x970 [ 31.062903] ? lock_acquire+0x1d5/0x580 [ 31.062917] ? kernel_read+0x120/0x120 [ 31.062958] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 31.062967] ? __sb_start_write+0x209/0x2a0 [ 31.062982] vfs_write+0x189/0x510 [ 31.062998] SyS_write+0xef/0x220 [ 31.063012] ? SyS_read+0x220/0x220 [ 31.063019] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 31.063030] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 31.063050] entry_SYSCALL_64_fastpath+0x23/0x9a [ 31.063056] RIP: 0033:0x452ac9 [ 31.063059] RSP: 002b:00007fbc0e5a0c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 [ 31.063068] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452ac9 [ 31.063072] RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000015 [ 31.063076] RBP: 000000000000003b R08: 0000000000000000 R09: 0000000000000000 2018/01/06 20:45:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00008bf000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f00006e4000-0x70)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/06 20:45:52 executing program 4: mmap(&(0x7f0000000000/0xdd5000)=nil, 0xdd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006bc000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000d19000-0x8)={0x0, 0x4}, &(0x7f0000ce8000)=0x8) mmap(&(0x7f0000dd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000dd5000)={r1, 0x5, 0x20, 0xab, 0x101}, &(0x7f0000dd5000)=0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f000080d000-0x10c)={0x401, 0x20, 0x9, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xfffffffffffffff7, 0xfffffffffffffff9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000dc9000-0x26)="1e000000130047cf00dfff7f00ffff0407ffffff01000000070000000000", 0x1e) 2018/01/06 20:45:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000037c000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2, 0x0, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/06 20:45:52 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013000+0xe95)=0x0, 0x4) r2 = dup2(r1, r1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000013000)={0x0, @in6={{0xa, 0x0, 0x7ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7fffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000000)=0x8c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={r3, 0xd7, "53d4b284b79df34099f04bb6761ed7a500160e29d11bb65e84812059635d752f46a88c25752506a536f2f2a88a68307cb7fbdb30de142663a20cbe3bcea9d5cb62fdd5002692cdbc11ff542f25e2343eaffc0ecf122b420d0092b23211ff5768c5b01eff40ea54b167198c33cac3d9a085c55904cc24b33b56d1f9f670e7a24a068d0d4b187af3f3daccd42a162c8d1bb6218aaf875241de0c01a862d85afb729df29a1620094184b8e7e9673dbb7d4f6a01bc576b4451b01e54e4b2ac8b3489a1104aaaf75536e449bee74c83141eb5f35c47f20d05d6"}, &(0x7f0000011000)=0xdf) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000005000-0x20)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000004000)=0x20) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/01/06 20:45:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f000035a000-0xb)='/dev/mixer\x00', 0x4400, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00002d1000-0x1)={0x7}, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000842000-0x18)={0x0, 0x2a5, 0x30, 0x46, 0x1}, &(0x7f0000cc2000)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f000089c000)=@assoc_value={r2, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000599000-0x3c)=[@in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0xde2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, 0x6}, @in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x3c) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, @msi={0x0, 0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x0, 0xe0000000000, 0x0, 0x0, 0x0}}]}) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000328000)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f000048b000)=r3) 2018/01/06 20:45:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000786000-0x4)=0x8000000000000018, 0x4) sendmmsg$nfc_llcp(r0, &(0x7f0000511000-0x38)=[{&(0x7f0000003000-0x60)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0fcca4bb22f2892559edddba1a892f216c6adb6dac3291add84e7dd1b9b1e1043844071c4d783ef83c7baa707bef6850ccd339c111743913f1b7601256cf03", 0x0}, 0xfffffffffffffe13, &(0x7f0000006000)=[], 0x0, &(0x7f0000239000-0x1010)={0x28, 0x29, 0x2, "f1eb437ee62fa89f7006e4a66e02000000"}, 0x28, 0x0}], 0x1, 0xfffffffffffffffa) 2018/01/06 20:45:52 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="80000000ffb0", [{[], {0x8100, 0x2, 0xc023, 0x1ff}}], {{0x840, @x25={0xffffffffffffffff, 0x6, 0xff, "f04fe3c6a8e6b1b218d366676d4eeee712a8f1b27bfd7200189efbcceb9e0c49e17dd0463b099bfa4a567eb8a0ea402ed46fbe7910226b47e6164a4a2639b9670412e9bb9abb95b3c845958609e988b300b657aac6bba8cdba4771f26301e30d07a3a2853c6964351282a8894383a2da5d54e9accc680a2efd310a76c574df5364c185f12ad3baac2f902eeef87b25a68ecb8d256f17a80c670692172521ec2e495a3149da545cf1e2b7e5a9ecbc4e701eaa207619a8b98544770c5f78a416b69cbe1b286e188a2b03602680ec7aa3"}}}}, 0x0) [ 31.063080] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ee628 [ 31.063085] R13: 00000000ffffffff R14: 00007fbc0e5a16d4 R15: 0000000000000000 [ 31.136815] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) [ 31.139815] syz-executor3 uses obsolete (PF_INET,SOCK_PACKET) 2018/01/06 20:45:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [], {0x95, 0x0, 0x0, 0x0}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000ef9000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00006c6000)=0xffffffff, &(0x7f0000a5a000)=0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000af2000)={r3, r0}) sendmsg$kcm(r1, &(0x7f00002e6000)={0x0, 0x0, &(0x7f0000d47000-0x20)=[{&(0x7f0000101000-0x49)="e2", 0x1}], 0x1, &(0x7f0000490000)=[], 0x0, 0x0}, 0x0) dup3(r0, r1, 0x0) 2018/01/06 20:45:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000253000-0x24)={@common='sit0\x00', &(0x7f0000863000)=@ethtool_gstrings={0x1b, 0x8, 0x0, ""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000001000-0xbd)=""/189, 0xbd) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3a4, []}, 0x6) 2018/01/06 20:45:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000f7d000)={0x0, 0x0, 0x0}, &(0x7f0000962000-0x4)=0xc) setfsuid(r2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000877000)={@common='lo\x00', &(0x7f00002ad000)=@ethtool_wolinfo={0x24, 0xfffffffffffffffb, 0x0, "35631b99c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/06 20:45:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000648000)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000d81000)={0x3, 0xffffffffffffff9c, 0x1}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f000098b000-0x1)=0x9, 0x4) r1 = eventfd2(0x0, 0x0) unshare(0x400) io_setup(0xa2, &(0x7f0000d12000-0x8)=0x0) io_submit(r2, 0x144, &(0x7f00007da000)=[&(0x7f0000501000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000a9f000)="", 0x0, 0x0, 0x0, 0x1, r1}]) 2018/01/06 20:45:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000037c000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2, 0x0, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/06 20:45:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000550000-0x4)=0x0, &(0x7f000000c000)=0x4) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d09000-0x62e)=@hdr={0x1, 0x0, 0x0, 0x0, 0x80000003e, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @loopback=0x7f000001, @broadcast=0xffffffff, {[]}}, @udp={0x0, 0x0, 0x2c, 0x0, "3060c8449ca4de20e3da406ae6d2ade6af1b622645913a75dcc601009913ef6d51cffd44"}}}, 0x4a) 2018/01/06 20:45:53 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000001000-0xc)={0x2, 0x0, 0x2, 0x8, 0x10000, 0x9}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000)={0xaa, 0x0, 0x0}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000011000)='/dev/ptmx\x00', 0x101201, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) uname(&(0x7f0000013000-0x62)=""/98) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000d33000-0x11)='/selinux/context\x00', 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000f94000-0x4)={0x1}, 0x4) clone(0x0, &(0x7f0000b6c000)="", &(0x7f00008a3000)=0x0, &(0x7f000057c000)=0x0, &(0x7f0000ac4000)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00009a2000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mq_getsetattr(r1, &(0x7f000032b000-0x40)={0x80, 0x8, 0x4, 0x10000, 0xfffffffffffffffa, 0x100000000, 0x78f, 0x4}, 0x0) connect$llc(r2, &(0x7f0000fa9000)={0x1a, 0x8, 0x40, 0x0, 0x0, 0x30, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00007d6000)={0x8, &(0x7f0000b55000-0x20)=[{0xfffffffffffffffe, 0x80000000}, {0x6, 0x3}, {0x10000, 0x9}, {0x4, 0x3}, {0x7f, 0x4}, {0x1000, 0x1}, {0xffffffffe17cf9aa, 0x10000}, {0x1, 0x3}]}) [ 31.786777] QAT: Invalid ioctl [ 31.826534] QAT: Invalid ioctl 2018/01/06 20:45:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xd, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000c37000-0x2a)="1f0000000a0a01000200f2ffffff20000000fffd090000001ae10080160051", 0xffffffffffffffee) 2018/01/06 20:45:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ce8000-0xf)='/dev/sequencer\x00', 0x40001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00004f1000)=""/99) fremovexattr(r0, &(0x7f0000a15000-0xd)=@known='security.ima\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000ea4000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000ecd000)='/dev/loop#\x00', 0x5, 0x101) 2018/01/06 20:45:53 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000b6c000-0x10)={0xb118991, 0x200, 0x400, 0x8, 0x0}, &(0x7f0000000000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/load\x00', 0x2, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001000-0xa0)={r1, @in={{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x5, 0x7f, 0x6, 0x1}, 0xa0) r3 = openat(0xffffffffffffffff, &(0x7f0000c95000)='./file0\x00', 0x402, 0x60) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000002000)={r1, @in={{0x2, 0x0, @rand_addr=0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001000-0x8)={0x0, 0x3}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000193000-0x20)={0x0, 0xffffffffffffffc1, 0x4, 0x0, 0x100, 0x89f, 0xd1, 0x0, r4}, 0x20) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000d5b000-0x58)=""/88) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) fstat(r5, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/06 20:45:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000037c000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2, 0x0, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/06 20:45:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000034c000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000074000)='/dev/loop-control\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000294000-0x8)={0x0}, 0x8) syz_open_procfs(0x0, &(0x7f0000769000)='net/ipx\x00') r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) 2018/01/06 20:45:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000759000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000c2d000)='oom_score\x00') sendfile(r0, r1, &(0x7f0000cd3000-0x8)=0x0, 0xff) io_setup(0x800, &(0x7f000093f000)=0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000607000)=""/4096) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000dfa000)='/selinux/load\x00', 0x2, 0x0) io_cancel(r2, &(0x7f0000140000)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f000022b000-0xdc)="cd2155780776c7d9460b571a6236cb1076a51cf9a29c79c4f7a725641fbaa8ab5ace9d4e26ddd778020f73a6de52c28e1699b6eb9f2f38119a465e9545b8e2ef6ad8aea28e8f611e476e6ec27bf4696e60e947f94ce6e6d5bc866db55a02bf2251832f882f5d7a71ce583654f349b05eb4e12e5065bae3cf8555af481e15a116fd772b03ebb5f8df045a8c9082dd49b693f4c8704df97d0d02f49c75476e407091a4ddfc8f122275649f21b4ed33e4b897540f8b3492c5aaf3d057d7454cd6c625a9094540c85c4f6effda3b7e40e506926b9c36fd5e21764fb1833c", 0xdc, 0x8000, 0x0, 0x1, r0}, &(0x7f0000118000+0xccd)={0x0, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000c50000)=0x0, 0xb7) 2018/01/06 20:45:53 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f60000-0x20)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x0, 0xff, 0x1, 0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00003ea000-0x20)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0}, 0x20) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000258000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000b5e000-0x4)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000d19000)={0x0, 0x0}) r4 = socket$bt_hci(0x1f, 0x3, 0x1) kcmp(r2, r3, 0x7, r0, r4) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) bind$inet6(r1, &(0x7f0000dbc000)={0xa, 0x1, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3}, 0x1c) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000e78000)=0x0) connect$inet6(r1, &(0x7f0000f61000)={0xa, 0x0, 0xffffffffffffff7f, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) 2018/01/06 20:45:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xe, 0xfffffffffffffffe, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000614000)={0x1, &(0x7f0000326000)=[{0x6, 0x0, 0x0, 0x0}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000686000-0x5f)=""/95, &(0x7f0000c47000)=0x5f) 2018/01/06 20:45:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f00008d1000-0x30)="b63db85e1e8d010000010f9d00049b00ffff00000000d2bc7018cebc070000923f4d872caa8ce22c00160e96aa1fae1a", 0x30) readv(r0, &(0x7f0000b09000-0x70)=[{&(0x7f0000ec4000)=""/246, 0x10000007d}, {&(0x7f0000d07000-0x9b)=""/155, 0x311}, {&(0x7f0000d99000)=""/81, 0xb9}, {&(0x7f0000044000)=""/169, 0xa9}, {&(0x7f0000f1f000-0x5f)=""/95, 0x5f}, {&(0x7f0000a0b000)=""/192, 0x2de}, {&(0x7f0000da8000-0x55)=""/85, 0x55}], 0x7) 2018/01/06 20:45:53 executing program 3: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000ab8000)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f0000bb8000)=[{0x11, 0x202, 0xd09, 0x0, 0x0, '\t'}], 0x11}], 0x1, &(0x7f00003c3000)=[], 0x0, 0x0}, 0x10000000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x128, &(0x7f0000000000)={@random="9f5d78a58237", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [{[], {0x8100, 0x3, 0x0, 0x7}}], {{0x883e, @ipv6={0x401, 0x6, "e2d5f5", 0xee, 0x3b, 0x3ff, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, {[@routing={0xbf, 0xa, 0x3, 0x7fffffff, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, @loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast2=0xe0000002}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}]}, @routing={0x1, 0x6, 0x3, 0x2, 0x0, [@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}]}], @udp={0x3, 0x0, 0x5e, 0x0, "2f6b6ecd92c71f46110a717f418bf3ed42a115022c26390b24f2c4a81d853c03f9b143900db385881f842c8d753b82a9e879eb8525ca31aefbbddbb3fa69538d4cc12ceaf846af57af3eca560a50a7add019c266ab6a"}}}}}}, &(0x7f0000909000)={0x0, 0x2, [0x95, 0xdf7]}) 2018/01/06 20:45:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000037c000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2, 0x0, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/06 20:45:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000ffc000-0x1e)='/selinux/commit_pending_bools\x00') r0 = openat$cuse(0xffffffffffffff9c, &(0x7f000095d000)='/dev/cuse\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f000004b000-0x30)={0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f000020f000-0x5)='/dev/dsp\x00', 0x84002, 0x0) unlinkat(r1, &(0x7f0000959000)='./file0\x00', 0x100000000000000) 2018/01/06 20:45:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00001bf000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000048000)={0x0, 0x0, &(0x7f00006c2000)=[{&(0x7f0000256000)="d3", 0x1}], 0x1, &(0x7f00008a3000-0x30)=[], 0x0, 0x0}, 0x8001) mmap(&(0x7f0000f74000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$alg(r1, &(0x7f0000f6d000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f0000f75000-0x1f)="c0", 0x1}], 0x1, &(0x7f0000c3b000)=[], 0x0, 0x0}, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00009fb000)='/selinux/mls\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4$ipx(r2, &(0x7f00003a6000)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f000093d000-0x4)=0x10, 0x80800) ioctl$int_in(r3, 0x5452, &(0x7f0000ef6000-0x8)=0x2) 2018/01/06 20:45:53 executing program 3: mmap(&(0x7f0000000000/0xdcd000)=nil, 0xdcd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dcd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000dce000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00006a9000)=0x10, 0x800) signalfd(r0, &(0x7f0000acf000)={0x4}, 0x8) unshare(0x40004fe) mmap(&(0x7f0000dce000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dce000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() mmap(&(0x7f0000dce000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000dcf000-0x10)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000dcf000-0x78)={0x6, 0x78, 0x1, 0x1000, 0x3, 0x7fff, 0x0, 0x1, 0x2000, 0x4, 0x1, 0x6, 0x1, 0x4, 0x8001, 0x9, 0x80000000, 0x1ff, 0x7, 0x0, 0x34e, 0xffffffffffffffd4, 0x6, 0x1965, 0x4008435e, 0x0, 0x3ff, 0x4c, 0x1, 0x3, 0x8b, 0x3, 0x6, 0x4, 0x9, 0x5c03, 0x3fc2092d, 0x7, 0x0, 0xf492, 0x4, @perf_bp={&(0x7f0000dce000)=0x0, 0x3}, 0x80c0, 0x0, 0x4, 0x6, 0x6, 0x5, 0x9f9, 0x0}, r1, 0x8000, r2, 0x6) r3 = syz_open_dev$usbmon(&(0x7f0000a36000)='/dev/usbmon#\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000351000)={r3, 0x28, &(0x7f00009c6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) 2018/01/06 20:45:53 executing program 1: mmap(&(0x7f0000000000/0xf9e000)=nil, 0xf9e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x10000, 0x0, 0x0, 0x0}, 0x14) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000f9f000-0x10)='/selinux/create\x00', 0x2, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00009e6000)=""/154) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001000+0xfde)=0x0, 0x4) 2018/01/06 20:45:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f00008d1000-0x30)="b63db85e1e8d010000010f9d00049b00ffff00000000d2bc7018cebc070000923f4d872caa8ce22c00160e96aa1fae1a", 0x30) readv(r0, &(0x7f0000b09000-0x70)=[{&(0x7f0000ec4000)=""/246, 0x10000007d}, {&(0x7f0000d07000-0x9b)=""/155, 0x311}, {&(0x7f0000d99000)=""/81, 0xb9}, {&(0x7f0000044000)=""/169, 0xa9}, {&(0x7f0000f1f000-0x5f)=""/95, 0x5f}, {&(0x7f0000a0b000)=""/192, 0x2de}, {&(0x7f0000da8000-0x55)=""/85, 0x55}], 0x7) 2018/01/06 20:45:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000e22000)='/selinux/validatetrans\x00', 0x1, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000b71000-0x4)=0xf0f4, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00009b7000)='./file0\x00', &(0x7f0000a77000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e309000000000008009500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00100000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) connect$unix(r1, &(0x7f0000a61000)=@file={0x1, './file0\x00'}, 0xa) r2 = socket$inet(0x2, 0x80a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00007fc000-0x4)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x6) io_setup(0x80000000, &(0x7f0000505000-0x8)=0x0) 2018/01/06 20:45:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x33a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000f09000)=@pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/06 20:45:53 executing program 6: r0 = shmget$private(0x0, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)='/dev/sequencer\x00', 0x440, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000001000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) socketpair$ax25(0x3, 0x3, 0x80000000000cd, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) [ 32.039251] device lo entered promiscuous mode 2018/01/06 20:45:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00002ad000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000e22000)='./file0\x00', 0x0, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r2, 0x89e3, &(0x7f0000366000)=0x8) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000e1d000)=0x0) getpgrp(0xffffffffffffffff) fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000c67000)=0x0) r4 = getpgid(r3) ptrace$setsig(0x4203, r4, 0x5, &(0x7f00008ba000-0x10)={0xb, 0x8001, 0x101, 0x9}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000268000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x301}) write$tun(r1, &(0x7f0000f5d000-0x233)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "625cbc", 0x18, 0x2f, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[@fragment={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e62507", 0x0, 'TBt'}, ""}}}}, 0x4a) 2018/01/06 20:45:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00007cb000)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [], {0x95, 0x0, 0x0, 0x0}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000062000-0xb7)=""/183, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000fd8000-0x8)={0x0, 0x0}) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000187000-0x8)={r0, r1}) shutdown(r2, 0x2) 2018/01/06 20:45:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000617000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f00006c7000-0x10)=[], 0x98, &(0x7f00009e0000-0x48)=[], 0x3b2, 0x1000}, 0x2) close(r0) 2018/01/06 20:45:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000037c000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2, 0x0, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/06 20:45:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:53 executing program 5: mincore(&(0x7f00006ca000/0x3000)=nil, 0xffffffffffffff3f, &(0x7f0000c91000)=""/34) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x100, &(0x7f0000001000-0x8)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000001000-0x38)={&(0x7f0000002000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14, &(0x7f0000001000)=[{&(0x7f0000000000)=""/132, 0x84}, {&(0x7f0000002000-0x5d)=""/93, 0x5d}, {&(0x7f0000001000)=""/77, 0x4d}, {&(0x7f0000001000)=""/169, 0xa9}, {&(0x7f0000002000-0xf5)=""/245, 0xf5}, {&(0x7f0000002000-0x32)=""/50, 0x32}], 0x6, &(0x7f0000001000-0x59)=""/89, 0x59, 0x3ff}, 0x100) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r3, 0x1, 0x6, @random="4d808524d25c", [0x0, 0x0]}, 0x10) io_cancel(r0, &(0x7f0000ced000)={0x0, 0x0, 0x0, 0x3, 0x7ff, r1, &(0x7f0000bb7000)="b5258c4a4ad7ccb72b00a44638610fa50c374cc80fa66a329f82ec251e830d34fe47961c0a0aca71b67c25cebc55dc5f08f0fc2a6074d6c587626683ae0b3c9fdd2935fa2d9980a99af2f59d9d98690420741267ef58093929859960a980434ec700fe454c30227c996eda7ce7f553fb94af19802021927164e7cc4f13a8ee72f326175dfd30a90af6bd154043feca9901dc9c6e1629f6b1f1261c7d0e83ba6af27d8bd02c6c3dfb576388ccb45aa901c6e9c7bab582a47816d39a488ba104b7f04b24185c376839e812541e0814f2e4b556f6c02b6831c3aadfd029530f281b4bfd58885df8d8b65c72675f9ed7594019292e36b5a881a2b2", 0xf9, 0x5, 0x0, 0x0, r2}, &(0x7f0000914000-0x20)={0x0, 0x0, 0x0, 0x0}) 2018/01/06 20:45:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000bc000)="260000001e0047f1071404000000000000000044010000e4ffe8010000000000000000eb7435", 0x26) 2018/01/06 20:45:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000037c000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2, 0x0, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/06 20:45:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000ae4000)='/dev/sequencer2\x00', 0x12000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f000038d000)={r0, &(0x7f0000409000-0x4a)="c7b583cb34af288fcbcd428b343c7b4ee86b2ab639e08ff5fba3624531ef648381a11e2d7c1cb22f4a8eab38835835a05802ebdf068732b2b226e0558ab7381ad75bf2eb0473c94d1726", &(0x7f0000702000-0xb3)=""/179}, 0x18) syz_open_dev$sndpcmc(&(0x7f0000af3000-0x12)='/dev/snd/pcmC#D#c\x00', 0x9, 0x400000) clock_gettime(0x0, &(0x7f00003a1000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000f3c000)={r1, r2/1000+10000}, 0x10) syz_open_procfs(0x0, &(0x7f0000cc6000-0x7)='ns/net\x00') 2018/01/06 20:45:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000f8c000)='/dev/ptmx\x00', 0x0, 0x0) flock(r0, 0x3) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f00007b5000-0x10)='/dev/input/mice\x00', 0x0, 0x80) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d41000-0xf)='/dev/sequencer\x00', 0x185200, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000f88000-0x4e)=""/78) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9, 0x0, r1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000028000)={r3, &(0x7f00004e6000-0x1)="", &(0x7f00003a4000-0x1)="16", 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00005ec000-0x10)={r3, &(0x7f0000de6000)=""}, 0x10) [ 32.154321] mmap: syz-executor6 (4031) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/01/06 20:45:53 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000ea2000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000001000-0xde)={0xde, 0x401, "21a5329383ec34b2b3941045b06d46749ac211c0767ba847e82f9a02a6e76321941006069ba2a8777ba96f40fbf71b1f3d266718372f82fa865034c3d23eed91208da10ef84e8b854fa2b91f5e4118df72ae8fc5422c9aacb03c7634f861ff42ef53ca16102c5b92b1ff27d74253ab340d61d15f6377cc19bc687bb94a589f157d4cb3123179682d77bcb2c300f500e5fe0b7eb786c08915b66a0f5d66e3fc92cdabf0ba2ef863b7974f12c4bb4517d69833a94702ea2f777a5475781837c1defb6fc7b65fd426e6749adf1550b91da92fd63ef5bcd5"}, &(0x7f0000001000-0x4)=0x0, 0x1000) eventfd(0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80f, 0x10000) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x400000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f0000002000-0x8)="cb5c49966b6b44f3", 0x8, 0x4000000, &(0x7f0000002000-0xa)=@file={0x1, './file0\x00'}, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000-0x8c)={0x2, 0xac, 0x0, 'queue0\x00', 0x401, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2800, 0x0) read$eventfd(r2, &(0x7f0000001000)=0x0, 0x8) 2018/01/06 20:45:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) listen(r0, 0xfffffffffffffffe) r1 = socket$inet6(0xa, 0x6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f000051c000)='/selinux/load\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000604000-0x4)=0x2, 0x4) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000304000-0x8)=@fragment={0x3f, 0x0, 0x8, 0x2, 0x0, 0x100, 0x1}, 0x8) [ 32.228581] ================================================================== [ 32.236039] BUG: KASAN: use-after-free in shm_get_unmapped_area+0xfd/0x120 [ 32.243037] Read of size 8 at addr ffff8801d2745ce8 by task syz-executor6/4054 [ 32.250370] [ 32.251979] CPU: 0 PID: 4054 Comm: syz-executor6 Not tainted 4.15.0-rc6+ #250 [ 32.259245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.268574] Call Trace: [ 32.271149] dump_stack+0x194/0x257 [ 32.274760] ? arch_local_irq_restore+0x53/0x53 [ 32.279403] ? show_regs_print_info+0x18/0x18 [ 32.283888] ? shm_get_unmapped_area+0xfd/0x120 [ 32.288535] print_address_description+0x73/0x250 [ 32.293352] ? shm_get_unmapped_area+0xfd/0x120 [ 32.298000] kasan_report+0x25b/0x340 [ 32.301792] __asan_report_load8_noabort+0x14/0x20 [ 32.306697] shm_get_unmapped_area+0xfd/0x120 [ 32.311170] ? shm_fallocate+0x110/0x110 [ 32.315210] get_unmapped_area+0x18d/0x300 [ 32.319433] do_mmap+0x2aa/0xe00 [ 32.322800] ? mmap_region+0x15a0/0x15a0 [ 32.326846] ? vmacache_find+0x5f/0x280 [ 32.330794] ? vmacache_update+0xfe/0x130 [ 32.334934] SyS_remap_file_pages+0x7ce/0xb30 [ 32.339409] ? SyS_futex+0x269/0x390 [ 32.343128] ? do_mmap+0xe00/0xe00 [ 32.346645] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.351642] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 32.356394] entry_SYSCALL_64_fastpath+0x23/0x9a [ 32.361123] RIP: 0033:0x452ac9 [ 32.364288] RSP: 002b:00007fbc0e55ec58 EFLAGS: 00000212 ORIG_RAX: 00000000000000d8 [ 32.371982] RAX: ffffffffffffffda RBX: 00007fbc0e55f700 RCX: 0000000000452ac9 [ 32.379237] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020002000 [ 32.386481] RBP: 0000000000a2f870 R08: 0000000000000000 R09: 0000000000000000 [ 32.393735] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 32.400980] R13: 0000000000a2f7ef R14: 00007fbc0e55f9c0 R15: 0000000000000002 [ 32.408274] [ 32.409876] Allocated by task 4031: [ 32.413479] save_stack+0x43/0xd0 [ 32.416905] kasan_kmalloc+0xad/0xe0 [ 32.420591] kasan_slab_alloc+0x12/0x20 [ 32.424536] kmem_cache_alloc+0x12e/0x760 [ 32.428657] get_empty_filp+0xfb/0x4f0 [ 32.432516] alloc_file+0x26/0x390 [ 32.436039] __shmem_file_setup+0x54f/0x6a0 [ 32.440345] shmem_kernel_file_setup+0x32/0x40 [ 32.444897] newseg+0x7bd/0xcb0 [ 32.448149] ipcget+0x8f0/0xfd0 [ 32.451399] SyS_shmget+0x158/0x230 [ 32.454999] entry_SYSCALL_64_fastpath+0x23/0x9a [ 32.459738] [ 32.461339] Freed by task 4034: [ 32.464589] save_stack+0x43/0xd0 [ 32.468018] kasan_slab_free+0x71/0xc0 [ 32.471880] kmem_cache_free+0x83/0x2a0 [ 32.475834] file_free_rcu+0x5c/0x70 [ 32.479530] rcu_process_callbacks+0xd6c/0x17f0 [ 32.484171] __do_softirq+0x2d7/0xb85 [ 32.487940] [ 32.489544] The buggy address belongs to the object at ffff8801d2745cc0 [ 32.489544] which belongs to the cache filp of size 456 [ 32.501569] The buggy address is located 40 bytes inside of [ 32.501569] 456-byte region [ffff8801d2745cc0, ffff8801d2745e88) [ 32.513328] The buggy address belongs to the page: [ 32.518231] page:ffffea000749d140 count:1 mapcount:0 mapping:ffff8801d2745040 index:0xffff8801d2745540 [ 32.527652] flags: 0x2fffc0000000100(slab) [ 32.531862] raw: 02fffc0000000100 ffff8801d2745040 ffff8801d2745540 0000000100000003 [ 32.539717] raw: ffffea00074916a0 ffffea0007460420 ffff8801dae2c180 0000000000000000 [ 32.547572] page dumped because: kasan: bad access detected [ 32.553253] [ 32.554852] Memory state around the buggy address: [ 32.559757] ffff8801d2745b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.567100] ffff8801d2745c00: fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 32.574432] >ffff8801d2745c80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 32.581762] ^ [ 32.588498] ffff8801d2745d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.595846] ffff8801d2745d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.603182] ================================================================== [ 32.610512] Disabling lock debugging due to kernel taint [ 32.616412] Kernel panic - not syncing: panic_on_warn set ... [ 32.616412] [ 32.623789] CPU: 0 PID: 4054 Comm: syz-executor6 Tainted: G B 4.15.0-rc6+ #250 [ 32.632367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.641728] Call Trace: [ 32.644310] dump_stack+0x194/0x257 [ 32.647926] ? arch_local_irq_restore+0x53/0x53 [ 32.652572] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 32.657301] ? vsnprintf+0x1ed/0x1900 [ 32.661084] ? shm_fallocate+0x110/0x110 [ 32.665128] panic+0x1e4/0x41c [ 32.668293] ? refcount_error_report+0x214/0x214 [ 32.673025] ? add_taint+0x1c/0x50 [ 32.676541] ? add_taint+0x1c/0x50 [ 32.680061] ? shm_get_unmapped_area+0xfd/0x120 [ 32.684711] kasan_end_report+0x50/0x50 [ 32.688665] kasan_report+0x144/0x340 [ 32.692454] __asan_report_load8_noabort+0x14/0x20 [ 32.697353] shm_get_unmapped_area+0xfd/0x120 [ 32.701819] ? shm_fallocate+0x110/0x110 [ 32.705851] get_unmapped_area+0x18d/0x300 [ 32.710064] do_mmap+0x2aa/0xe00 [ 32.713406] ? mmap_region+0x15a0/0x15a0 [ 32.717439] ? vmacache_find+0x5f/0x280 [ 32.721383] ? vmacache_update+0xfe/0x130 [ 32.725521] SyS_remap_file_pages+0x7ce/0xb30 [ 32.730079] ? SyS_futex+0x269/0x390 [ 32.733774] ? do_mmap+0xe00/0xe00 [ 32.737285] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.742272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 32.747008] entry_SYSCALL_64_fastpath+0x23/0x9a [ 32.751745] RIP: 0033:0x452ac9 [ 32.754904] RSP: 002b:00007fbc0e55ec58 EFLAGS: 00000212 ORIG_RAX: 00000000000000d8 [ 32.762583] RAX: ffffffffffffffda RBX: 00007fbc0e55f700 RCX: 0000000000452ac9 [ 32.769823] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020002000 [ 32.777062] RBP: 0000000000a2f870 R08: 0000000000000000 R09: 0000000000000000 [ 32.784302] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 32.791543] R13: 0000000000a2f7ef R14: 00007fbc0e55f9c0 R15: 0000000000000002 [ 32.799232] Dumping ftrace buffer: [ 32.802747] (ftrace buffer empty) [ 32.806425] Kernel Offset: disabled [ 32.810026] Rebooting in 86400 seconds..