[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.571734] audit: type=1400 audit(1519722059.945:6): avc: denied { map } for pid=4223 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. 2018/02/27 09:01:06 fuzzer started syzkaller login: [ 24.832849] audit: type=1400 audit(1519722066.206:7): avc: denied { map } for pid=4234 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/27 09:01:06 dialing manager at 10.128.0.26:35219 [ 27.569269] can: request_module (can-proto-0) failed. [ 27.578374] can: request_module (can-proto-0) failed. 2018/02/27 09:01:09 kcov=true, comps=true [ 28.080823] audit: type=1400 audit(1519722069.454:8): avc: denied { map } for pid=4234 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=72 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/27 09:01:09 executing program 7: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000)=[], 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0), &(0x7f00006aafc0)) 2018/02/27 09:01:09 executing program 3: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x1b, &(0x7f0000000ff0), 0x28c) 2018/02/27 09:01:09 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x0, &(0x7f0000000000), 0x0) 2018/02/27 09:01:09 executing program 1: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0xf0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@mark={0x30, 'mark\x00', 0x1}, @common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@connmark={0x30, 'connmark\x00', 0x1, {0x0, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, 0x0, 0x0, 'bridge0\x00', 'ip6tnl0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback={0x0, 0x1}, [], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x0, 0x0, 0x0, 0xbc}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3d8) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 09:01:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f000020e000), 0x4) 2018/02/27 09:01:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x11, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000064e8f776fc"], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/27 09:01:09 executing program 5: r0 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x3, r0, 0x0) 2018/02/27 09:01:09 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000fe1000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) write(r0, &(0x7f000059a000)="ed", 0x1) [ 28.475115] audit: type=1400 audit(1519722069.848:9): avc: denied { map } for pid=4234 comm="syz-fuzzer" path="/root/syzkaller-shm581525771" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 28.518190] audit: type=1400 audit(1519722069.891:10): avc: denied { sys_admin } for pid=4278 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.533130] IPVS: ftp: loaded support on port[0] = 21 [ 28.623419] IPVS: ftp: loaded support on port[0] = 21 [ 28.630781] audit: type=1400 audit(1519722070.004:11): avc: denied { net_admin } for pid=4281 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.664562] IPVS: ftp: loaded support on port[0] = 21 [ 28.726065] IPVS: ftp: loaded support on port[0] = 21 [ 28.795727] IPVS: ftp: loaded support on port[0] = 21 [ 28.882062] IPVS: ftp: loaded support on port[0] = 21 [ 28.983789] IPVS: ftp: loaded support on port[0] = 21 [ 29.101748] IPVS: ftp: loaded support on port[0] = 21 [ 30.340929] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.386530] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.393775] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.516983] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.640365] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.754565] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.945382] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.965586] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.293601] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.299784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.336881] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.343052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.366295] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.372636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.389970] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.396129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.591532] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.598851] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.605099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.648556] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.706177] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.725111] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.824851] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.831053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.864248] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.870542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.880257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.904109] audit: type=1400 audit(1519722075.276:12): avc: denied { sys_chroot } for pid=4293 comm="syz-executor6" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.913444] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.934823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.945597] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.956831] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.968477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 2018/02/27 09:01:15 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000fe1000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) write(r0, &(0x7f000059a000)="ed", 0x1) [ 33.985351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/27 09:01:15 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000fe1000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) write(r0, &(0x7f000059a000)="ed", 0x1) [ 34.016689] audit: type=1400 audit(1519722075.390:13): avc: denied { set_context_mgr } for pid=5501 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 34.041983] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.048085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.048953] binder: 5501:5502 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 76f7e86400000000 [ 34.065941] binder: 5501:5502 unknown command 252 2018/02/27 09:01:15 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000fe1000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) write(r0, &(0x7f000059a000)="ed", 0x1) [ 34.104505] binder: BINDER_SET_CONTEXT_MGR already set [ 34.123545] binder: 5501:5517 ioctl 40046207 0 returned -16 [ 34.142055] binder: 5501:5502 ioctl c0306201 2000dfd0 returned -22 [ 34.148556] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/02/27 09:01:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x11, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000064e8f776fc"], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/27 09:01:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x11, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000064e8f776fc"], 0x0, 0x0, &(0x7f0000008f37)}) [ 34.159363] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.165742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.185351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/27 09:01:15 executing program 5: r0 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x3, r0, 0x0) [ 34.204761] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.213083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.215092] binder: 5536:5539 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 76f7e86400000000 [ 34.222005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.231459] binder: 5536:5539 unknown command 252 [ 34.251768] binder: 5532:5537 Acquire 1 refcount change on invalid ref 0 ret -22 [ 34.273917] binder: 5532:5541 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 34.285509] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.288114] binder: 5532:5537 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 34.291734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.298389] binder: 5532:5537 unknown command 252 [ 34.304939] audit: type=1400 audit(1519722075.678:14): avc: denied { map } for pid=5548 comm="syz-executor7" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14983 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 34.324182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.344940] binder: 5536:5539 ioctl c0306201 2000dfd0 returned -22 [ 34.351515] binder: 5532:5537 ioctl c0306201 2000dfd0 returned -22 [ 34.388936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.409541] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.425299] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.431547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.438464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.472533] audit: type=1400 audit(1519722075.845:15): avc: denied { net_raw } for pid=5572 comm="syz-executor3" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.507684] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.513952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.521788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/27 09:01:15 executing program 7: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000)=[], 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0), &(0x7f00006aafc0)) 2018/02/27 09:01:15 executing program 5: r0 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x3, r0, 0x0) 2018/02/27 09:01:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x11, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000064e8f776fc"], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/27 09:01:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x11, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000064e8f776fc"], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/27 09:01:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f000020e000), 0x4) 2018/02/27 09:01:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x4a8, 0xffffffff, 0x218, 0x218, 0x2e8, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, &(0x7f0000000840), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, [], [], 'syzkaller0\x00', 'syzkaller0\x00', {}, {}, 0x84}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@sctp={0x148, 'sctp\x00', 0x0, {0x4e20, 0x4e20, 0x4e20}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, 'sit0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x508) 2018/02/27 09:01:15 executing program 1: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0xf0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@mark={0x30, 'mark\x00', 0x1}, @common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@connmark={0x30, 'connmark\x00', 0x1, {0x0, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, 0x0, 0x0, 'bridge0\x00', 'ip6tnl0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback={0x0, 0x1}, [], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x0, 0x0, 0x0, 0xbc}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3d8) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 09:01:15 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x0, &(0x7f0000000000), 0x0) [ 34.546382] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.552567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.559528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/02/27 09:01:16 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x0, &(0x7f0000000000), 0x0) 2018/02/27 09:01:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f000020e000), 0x4) 2018/02/27 09:01:16 executing program 1: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0xf0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@mark={0x30, 'mark\x00', 0x1}, @common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@connmark={0x30, 'connmark\x00', 0x1, {0x0, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, 0x0, 0x0, 'bridge0\x00', 'ip6tnl0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback={0x0, 0x1}, [], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x0, 0x0, 0x0, 0xbc}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3d8) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) [ 34.606902] binder: 5592:5596 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 76f7e86400000000 [ 34.618792] binder: 5592:5596 unknown command 252 [ 34.619418] binder: 5591:5601 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 76f7e86400000000 [ 34.635601] binder: 5591:5601 unknown command 252 [ 34.650915] binder: 5592:5596 ioctl c0306201 2000dfd0 returned -22 2018/02/27 09:01:16 executing program 5: r0 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x3, r0, 0x0) 2018/02/27 09:01:16 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x0, &(0x7f0000000000), 0x0) 2018/02/27 09:01:16 executing program 7: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000)=[], 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0), &(0x7f00006aafc0)) 2018/02/27 09:01:16 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000)=[], 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0), &(0x7f00006aafc0)) 2018/02/27 09:01:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f000020e000), 0x4) 2018/02/27 09:01:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x11, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000064e8f776fc"], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/27 09:01:16 executing program 1: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0xf0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@mark={0x30, 'mark\x00', 0x1}, @common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@connmark={0x30, 'connmark\x00', 0x1, {0x0, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, 0x0, 0x0, 'bridge0\x00', 'ip6tnl0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback={0x0, 0x1}, [], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x0, 0x0, 0x0, 0xbc}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3d8) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 09:01:16 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x11, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000064e8f776fc"], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/27 09:01:16 executing program 0: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0xf0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@mark={0x30, 'mark\x00', 0x1}, @common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@connmark={0x30, 'connmark\x00', 0x1, {0x0, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, 0x0, 0x0, 'bridge0\x00', 'ip6tnl0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback={0x0, 0x1}, [], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x0, 0x0, 0x0, 0xbc}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3d8) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 09:01:16 executing program 7: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000)=[], 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0), &(0x7f00006aafc0)) 2018/02/27 09:01:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000852000), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f00005c4000)={&(0x7f00006f7ff8)=@sco={0x1f}, 0x8, &(0x7f000027efb0)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) sendto$inet(r0, &(0x7f00004c6f94)='>', 0x1, 0x7, 0x0, 0x0) 2018/02/27 09:01:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000a2df44)={0x14, 0x0, 'client1\x00', 0x0, "a33ea7e83c262788", "5c4e2a6fc293e67014bf611482a5ef5e8e07dfba966836c76609319c8fd0fcd5"}) 2018/02/27 09:01:16 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000)=[], 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0), &(0x7f00006aafc0)) 2018/02/27 09:01:16 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000)=[], 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0), &(0x7f00006aafc0)) 2018/02/27 09:01:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000333f88)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) [ 34.693625] binder: 5591:5601 ioctl c0306201 2000dfd0 returned -22 [ 34.706956] binder: 5620:5622 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 76f7e86400000000 [ 34.718943] binder: 5620:5622 unknown command 252 [ 34.729313] binder: 5620:5622 ioctl c0306201 2000dfd0 returned -22 2018/02/27 09:01:16 executing program 0: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0xf0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@mark={0x30, 'mark\x00', 0x1}, @common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@connmark={0x30, 'connmark\x00', 0x1, {0x0, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, 0x0, 0x0, 'bridge0\x00', 'ip6tnl0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback={0x0, 0x1}, [], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x0, 0x0, 0x0, 0xbc}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3d8) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/27 09:01:16 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000)=[], 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0), &(0x7f00006aafc0)) 2018/02/27 09:01:16 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000)=[], 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0), &(0x7f00006aafc0)) 2018/02/27 09:01:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000944fde)="220000005e000721004f10f7e2ffd90000000000000000edff000000e700ff02f157", 0x22) recvfrom(r0, &(0x7f0000362f74)=""/140, 0x8c, 0x0, 0x0, 0x0) 2018/02/27 09:01:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000333f88)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/02/27 09:01:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000a2df44)={0x14, 0x0, 'client1\x00', 0x0, "a33ea7e83c262788", "5c4e2a6fc293e67014bf611482a5ef5e8e07dfba966836c76609319c8fd0fcd5"}) 2018/02/27 09:01:16 executing program 0: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0xf0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@mark={0x30, 'mark\x00', 0x1}, @common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@connmark={0x30, 'connmark\x00', 0x1, {0x0, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, 0x0, 0x0, 'bridge0\x00', 'ip6tnl0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback={0x0, 0x1}, [], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x0, 0x0, 0x0, 0xbc}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3d8) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) [ 34.764239] binder: 5627:5629 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 76f7e86400000000 [ 34.776187] binder: 5627:5629 unknown command 252 [ 34.794161] binder: 5627:5629 ioctl c0306201 2000dfd0 returned -22 2018/02/27 09:01:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000852000), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f00005c4000)={&(0x7f00006f7ff8)=@sco={0x1f}, 0x8, &(0x7f000027efb0)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) sendto$inet(r0, &(0x7f00004c6f94)='>', 0x1, 0x7, 0x0, 0x0) 2018/02/27 09:01:16 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000)=[], 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0), &(0x7f00006aafc0)) 2018/02/27 09:01:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x218, 0x110, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x14}, 0x2}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'teql0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x460) 2018/02/27 09:01:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000a2df44)={0x14, 0x0, 'client1\x00', 0x0, "a33ea7e83c262788", "5c4e2a6fc293e67014bf611482a5ef5e8e07dfba966836c76609319c8fd0fcd5"}) 2018/02/27 09:01:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000852000), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f00005c4000)={&(0x7f00006f7ff8)=@sco={0x1f}, 0x8, &(0x7f000027efb0)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) sendto$inet(r0, &(0x7f00004c6f94)='>', 0x1, 0x7, 0x0, 0x0) 2018/02/27 09:01:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000944fde)="220000005e000721004f10f7e2ffd90000000000000000edff000000e700ff02f157", 0x22) recvfrom(r0, &(0x7f0000362f74)=""/140, 0x8c, 0x0, 0x0, 0x0) 2018/02/27 09:01:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000333f88)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/02/27 09:01:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000944fde)="220000005e000721004f10f7e2ffd90000000000000000edff000000e700ff02f157", 0x22) recvfrom(r0, &(0x7f0000362f74)=""/140, 0x8c, 0x0, 0x0, 0x0) 2018/02/27 09:01:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000944fde)="220000005e000721004f10f7e2ffd90000000000000000edff000000e700ff02f157", 0x22) recvfrom(r0, &(0x7f0000362f74)=""/140, 0x8c, 0x0, 0x0, 0x0) 2018/02/27 09:01:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000a2df44)={0x14, 0x0, 'client1\x00', 0x0, "a33ea7e83c262788", "5c4e2a6fc293e67014bf611482a5ef5e8e07dfba966836c76609319c8fd0fcd5"}) 2018/02/27 09:01:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000944fde)="220000005e000721004f10f7e2ffd90000000000000000edff000000e700ff02f157", 0x22) recvfrom(r0, &(0x7f0000362f74)=""/140, 0x8c, 0x0, 0x0, 0x0) 2018/02/27 09:01:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000852000), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f00005c4000)={&(0x7f00006f7ff8)=@sco={0x1f}, 0x8, &(0x7f000027efb0)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) sendto$inet(r0, &(0x7f00004c6f94)='>', 0x1, 0x7, 0x0, 0x0) 2018/02/27 09:01:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x218, 0x110, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x14}, 0x2}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'teql0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x460) 2018/02/27 09:01:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000333f88)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/02/27 09:01:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000852000), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f00005c4000)={&(0x7f00006f7ff8)=@sco={0x1f}, 0x8, &(0x7f000027efb0)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) sendto$inet(r0, &(0x7f00004c6f94)='>', 0x1, 0x7, 0x0, 0x0) 2018/02/27 09:01:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x9}) 2018/02/27 09:01:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x9}) 2018/02/27 09:01:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000852000), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f00005c4000)={&(0x7f00006f7ff8)=@sco={0x1f}, 0x8, &(0x7f000027efb0)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) sendto$inet(r0, &(0x7f00004c6f94)='>', 0x1, 0x7, 0x0, 0x0) 2018/02/27 09:01:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x218, 0x110, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x14}, 0x2}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'teql0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x460) 2018/02/27 09:01:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000944fde)="220000005e000721004f10f7e2ffd90000000000000000edff000000e700ff02f157", 0x22) recvfrom(r0, &(0x7f0000362f74)=""/140, 0x8c, 0x0, 0x0, 0x0) 2018/02/27 09:01:16 executing program 1: r0 = getpid() syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/02/27 09:01:16 executing program 4: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00') renameat(r0, &(0x7f0000000100)='./file0/', r0, &(0x7f0000000140)='./file0/') 2018/02/27 09:01:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000852000), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f00005c4000)={&(0x7f00006f7ff8)=@sco={0x1f}, 0x8, &(0x7f000027efb0)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) sendto$inet(r0, &(0x7f00004c6f94)='>', 0x1, 0x7, 0x0, 0x0) 2018/02/27 09:01:16 executing program 4: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00') renameat(r0, &(0x7f0000000100)='./file0/', r0, &(0x7f0000000140)='./file0/') 2018/02/27 09:01:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x9}) 2018/02/27 09:01:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x218, 0x110, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x14}, 0x2}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'teql0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x460) [ 35.030288] audit: type=1400 audit(1519722076.403:16): avc: denied { dac_read_search } for pid=5692 comm="syz-executor4" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.055184] audit: type=1400 audit(1519722076.404:17): avc: denied { dac_override } for pid=5692 comm="syz-executor4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/27 09:01:16 executing program 7: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000000)={r2, r1}) 2018/02/27 09:01:16 executing program 0: r0 = semget$private(0x0, 0x20000000104, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8091}, {}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/152) 2018/02/27 09:01:16 executing program 4: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00') renameat(r0, &(0x7f0000000100)='./file0/', r0, &(0x7f0000000140)='./file0/') 2018/02/27 09:01:16 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4000000000000003, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) 2018/02/27 09:01:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x9}) 2018/02/27 09:01:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000944fde)="220000005e000721004f10f7e2ffd90000000000000000edff000000e700ff02f157", 0x22) recvfrom(r0, &(0x7f0000362f74)=""/140, 0x8c, 0x0, 0x0, 0x0) 2018/02/27 09:01:16 executing program 1: r0 = getpid() syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/02/27 09:01:16 executing program 2: r0 = getpid() syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/02/27 09:01:16 executing program 3: r0 = getpid() syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) [ 35.192764] audit: type=1400 audit(1519722076.566:18): avc: denied { ipc_owner } for pid=5718 comm="syz-executor0" capability=15 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/27 09:01:16 executing program 2: r0 = getpid() syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/02/27 09:01:16 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4000000000000003, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) 2018/02/27 09:01:16 executing program 4: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00') renameat(r0, &(0x7f0000000100)='./file0/', r0, &(0x7f0000000140)='./file0/') 2018/02/27 09:01:16 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/02/27 09:01:16 executing program 0: r0 = semget$private(0x0, 0x20000000104, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8091}, {}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/152) 2018/02/27 09:01:16 executing program 1: r0 = getpid() syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/02/27 09:01:16 executing program 3: r0 = getpid() syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/02/27 09:01:16 executing program 7: r0 = semget$private(0x0, 0x20000000104, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8091}, {}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/152) 2018/02/27 09:01:16 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4000000000000003, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) 2018/02/27 09:01:16 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/02/27 09:01:16 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4000000000000003, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) 2018/02/27 09:01:16 executing program 0: r0 = semget$private(0x0, 0x20000000104, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8091}, {}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/152) 2018/02/27 09:01:16 executing program 3: r0 = getpid() syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/02/27 09:01:16 executing program 1: r0 = getpid() syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/02/27 09:01:16 executing program 7: r0 = semget$private(0x0, 0x20000000104, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8091}, {}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/152) 2018/02/27 09:01:16 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/02/27 09:01:16 executing program 2: r0 = getpid() syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/02/27 09:01:16 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/02/27 09:01:16 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/02/27 09:01:16 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/02/27 09:01:16 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/02/27 09:01:16 executing program 7: r0 = semget$private(0x0, 0x20000000104, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8091}, {}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/152) 2018/02/27 09:01:16 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/02/27 09:01:16 executing program 0: r0 = semget$private(0x0, 0x20000000104, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8091}, {}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/152) 2018/02/27 09:01:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x4) 2018/02/27 09:01:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000080, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) 2018/02/27 09:01:16 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/02/27 09:01:16 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'tunl0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'H.245\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20020003, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14}}, 0x10) 2018/02/27 09:01:16 executing program 2: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$tun(r0, &(0x7f0000000000)=@hdr={0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x0, []}]}}, @dccp={{0x4e20, 0x4e20, 0x4, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x3, "fcaaa4", 0x0, "4ff7bd"}}}}, 0x32) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/27 09:01:16 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/02/27 09:01:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x4) 2018/02/27 09:01:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp384-generic,cbc-serpent-sse2)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) 2018/02/27 09:01:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f000069c000)=[{&(0x7f0000ad8000)='T', 0x1}], 0x1) close(r1) 2018/02/27 09:01:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/02/27 09:01:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@empty}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) [ 35.511941] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) [ 35.529792] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 2018/02/27 09:01:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x4) 2018/02/27 09:01:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000fa4a7f), 0x0, 0x0, &(0x7f00004d4fe4)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 2: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$tun(r0, &(0x7f0000000000)=@hdr={0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x0, []}]}}, @dccp={{0x4e20, 0x4e20, 0x4, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x3, "fcaaa4", 0x0, "4ff7bd"}}}}, 0x32) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/27 09:01:17 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'tunl0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'H.245\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20020003, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14}}, 0x10) 2018/02/27 09:01:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'tunl0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'H.245\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20020003, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14}}, 0x10) 2018/02/27 09:01:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/02/27 09:01:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f000069c000)=[{&(0x7f0000ad8000)='T', 0x1}], 0x1) close(r1) 2018/02/27 09:01:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'tunl0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'H.245\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20020003, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14}}, 0x10) 2018/02/27 09:01:17 executing program 2: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$tun(r0, &(0x7f0000000000)=@hdr={0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x0, []}]}}, @dccp={{0x4e20, 0x4e20, 0x4, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x3, "fcaaa4", 0x0, "4ff7bd"}}}}, 0x32) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/27 09:01:17 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'tunl0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'H.245\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20020003, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14}}, 0x10) 2018/02/27 09:01:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/02/27 09:01:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x4) 2018/02/27 09:01:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f000069c000)=[{&(0x7f0000ad8000)='T', 0x1}], 0x1) close(r1) 2018/02/27 09:01:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'tunl0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'H.245\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20020003, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14}}, 0x10) 2018/02/27 09:01:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'tunl0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'H.245\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20020003, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14}}, 0x10) 2018/02/27 09:01:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000fa4a7f), 0x0, 0x0, &(0x7f00004d4fe4)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 35.675528] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 35.677187] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 2018/02/27 09:01:17 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'tunl0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'H.245\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20020003, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14}}, 0x10) 2018/02/27 09:01:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'tunl0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'H.245\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20020003, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14}}, 0x10) 2018/02/27 09:01:17 executing program 2: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$tun(r0, &(0x7f0000000000)=@hdr={0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x0, []}]}}, @dccp={{0x4e20, 0x4e20, 0x4, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x3, "fcaaa4", 0x0, "4ff7bd"}}}}, 0x32) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/27 09:01:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/02/27 09:01:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000fa4a7f), 0x0, 0x0, &(0x7f00004d4fe4)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'tunl0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'H.245\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'rose0\x00'}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2b8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20020003, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14}}, 0x10) 2018/02/27 09:01:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f000069c000)=[{&(0x7f0000ad8000)='T', 0x1}], 0x1) close(r1) 2018/02/27 09:01:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000fa4a7f), 0x0, 0x0, &(0x7f00004d4fe4)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f000069c000)=[{&(0x7f0000ad8000)='T', 0x1}], 0x1) close(r1) 2018/02/27 09:01:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f000069c000)=[{&(0x7f0000ad8000)='T', 0x1}], 0x1) close(r1) 2018/02/27 09:01:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000fa4a7f), 0x0, 0x0, &(0x7f00004d4fe4)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 0: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$tun(r0, &(0x7f0000000000)=@hdr={0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x0, []}]}}, @dccp={{0x4e20, 0x4e20, 0x4, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x3, "fcaaa4", 0x0, "4ff7bd"}}}}, 0x32) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/27 09:01:17 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000fbfffc)=0x3, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendto$inet6(r1, &(0x7f0000fbd000), 0x0, 0x0, &(0x7f0000fbb000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000fa4a7f), 0x0, 0x0, &(0x7f00004d4fe4)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 4: mkdir(&(0x7f0000a09000)='./file0\x00', 0x160) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) mkdir(&(0x7f0000758000)='./file0/file0\x00', 0x0) 2018/02/27 09:01:17 executing program 0: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$tun(r0, &(0x7f0000000000)=@hdr={0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x0, []}]}}, @dccp={{0x4e20, 0x4e20, 0x4, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x3, "fcaaa4", 0x0, "4ff7bd"}}}}, 0x32) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/27 09:01:17 executing program 4: mkdir(&(0x7f0000a09000)='./file0\x00', 0x160) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) mkdir(&(0x7f0000758000)='./file0/file0\x00', 0x0) 2018/02/27 09:01:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f000069c000)=[{&(0x7f0000ad8000)='T', 0x1}], 0x1) close(r1) 2018/02/27 09:01:17 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000fa4a7f), 0x0, 0x0, &(0x7f00004d4fe4)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f000069c000)=[{&(0x7f0000ad8000)='T', 0x1}], 0x1) close(r1) 2018/02/27 09:01:17 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000fbfffc)=0x3, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendto$inet6(r1, &(0x7f0000fbd000), 0x0, 0x0, &(0x7f0000fbb000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 0: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$tun(r0, &(0x7f0000000000)=@hdr={0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x0, []}]}}, @dccp={{0x4e20, 0x4e20, 0x4, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x3, "fcaaa4", 0x0, "4ff7bd"}}}}, 0x32) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/27 09:01:17 executing program 4: mkdir(&(0x7f0000a09000)='./file0\x00', 0x160) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) mkdir(&(0x7f0000758000)='./file0/file0\x00', 0x0) 2018/02/27 09:01:17 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 4: mkdir(&(0x7f0000a09000)='./file0\x00', 0x160) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) mkdir(&(0x7f0000758000)='./file0/file0\x00', 0x0) 2018/02/27 09:01:17 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f000069c000)=[{&(0x7f0000ad8000)='T', 0x1}], 0x1) close(r1) 2018/02/27 09:01:17 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f000069c000)=[{&(0x7f0000ad8000)='T', 0x1}], 0x1) close(r1) 2018/02/27 09:01:17 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000fbfffc)=0x3, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendto$inet6(r1, &(0x7f0000fbd000), 0x0, 0x0, &(0x7f0000fbb000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000fbfffc)=0x3, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendto$inet6(r1, &(0x7f0000fbd000), 0x0, 0x0, &(0x7f0000fbb000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000fbfffc)=0x3, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendto$inet6(r1, &(0x7f0000fbd000), 0x0, 0x0, &(0x7f0000fbb000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1, 0x0, 0x0) 2018/02/27 09:01:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="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", 0x400}], 0x1, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x60, 0x117, 0x2, 0x46, "940b398a22e070f09982846bdab2ab5139bc31f6bfafb75e5af4a148b67cf5b32492045f80963fa6c63d095d9fcf5186ae757c2414f654b7ad36831cd724318f7ab434294fa0"}], 0xc0, 0x3}, 0x4800) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000074000)=@alg, 0x58, &(0x7f0000612f80)=[{&(0x7f0000f81000)=""/4096, 0x1098}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/02/27 09:01:17 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b1c54112aad2c4c3c495962c2e68b6455b79accaad45c65a1270dce257777350e2ea63300c04f8e3a2918b719d1a509471e6aedf6210a53e3397a5557e143ffc1c106af5452f296befba34bfaafb53dfd72d8b115f633e4fd99491f57d2178ac50c94957ae79071af2f524819d44731d892a83cae4a3788b65812acc97dff3b79b118d255a1683d872eb0aa9b38316917a00456e29b0e750cc67ad010981f6c88c418779a772cf329e8d6d953ea8200a7fe85f7c8e2352d60761823bf1f4f30f", 0xc0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}, {&(0x7f00000cd000)=""/26, 0x1a}], 0x2, &(0x7f0000590000)}, 0x0) 2018/02/27 09:01:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="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", 0x400}], 0x1, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x60, 0x117, 0x2, 0x46, "940b398a22e070f09982846bdab2ab5139bc31f6bfafb75e5af4a148b67cf5b32492045f80963fa6c63d095d9fcf5186ae757c2414f654b7ad36831cd724318f7ab434294fa0"}], 0xc0, 0x3}, 0x4800) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000074000)=@alg, 0x58, &(0x7f0000612f80)=[{&(0x7f0000f81000)=""/4096, 0x1098}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/02/27 09:01:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="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", 0x400}], 0x1, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x60, 0x117, 0x2, 0x46, "940b398a22e070f09982846bdab2ab5139bc31f6bfafb75e5af4a148b67cf5b32492045f80963fa6c63d095d9fcf5186ae757c2414f654b7ad36831cd724318f7ab434294fa0"}], 0xc0, 0x3}, 0x4800) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000074000)=@alg, 0x58, &(0x7f0000612f80)=[{&(0x7f0000f81000)=""/4096, 0x1098}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/02/27 09:01:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="128589904b4c2e1a9ccaa809f9f1b0142e7c523f3f27c083c9d333f8d317cb1b", 0x20}], 0x1, &(0x7f0000000840)=[]}], 0x1, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0xc, &(0x7f0000f75000)=[{&(0x7f0000f75000)=""/228, 0xe4}], 0x1, &(0x7f0000ec7000)=""/107, 0x6b}, 0x0) 2018/02/27 09:01:17 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000d64f50)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/27 09:01:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000fbfffc)=0x3, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendto$inet6(r1, &(0x7f0000fbd000), 0x0, 0x0, &(0x7f0000fbb000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="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", 0x400}], 0x1, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x60, 0x117, 0x2, 0x46, "940b398a22e070f09982846bdab2ab5139bc31f6bfafb75e5af4a148b67cf5b32492045f80963fa6c63d095d9fcf5186ae757c2414f654b7ad36831cd724318f7ab434294fa0"}], 0xc0, 0x3}, 0x4800) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000074000)=@alg, 0x58, &(0x7f0000612f80)=[{&(0x7f0000f81000)=""/4096, 0x1098}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/02/27 09:01:17 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="6ad64a6eab0cc54ec21b3a933b7680fdbf3dd92a0aef0e5addaab479081f044fbabbd44a1202d1ce4bd9c31abe8701df78c44ac92b29f6b11ba391ba4f5b07ca00180d7a79d28115e6c8a4aae387bbd2f6a3f3125ee01f6ec4f248728e9455457324599e1b1ed0378b4bf7640d5823b30fa093bfdf97cf39bc43b7fcbf72a4a28a669b9e6a19b4473af5ee15b278dc5b6baaa6adf84dc126ee7731485871bf91f06532ce2b2faaac95357c77fea929bb63c68d8ebe615fae0b81cb0c05405ad309c6a124577c8c295c550580e89badfdb1e12f0ea28ba8498b6bc86a56fd8adc1816dc9c663c8e4f945af3ad9a45027d68813b664becdbae01c9af4d3464ac145e071350e178e2f369cc43fa30caa53014197e6542d6587e37bb297c6392cafa2b0f0cab6983f2007c3ed212b7c24269935a80070f355431f348cb1a04bdc1c62f07f3cadc4dd93ec33e0941bfcee197239d9457a37c10dda1043ca80e12cd1fa95d7302bec2687d27731e25100ff29dfd14cc72da6f7e2e0d30b40844143f9147093c9c88570e3aa314df1827bdadb9ffbb9c0e7a237b64ff19dc42985966fd449739d3a7fda6fab0be26c4c65f6f317cc1fd9a7863974ae57d59adcd1c82f22ded123d6299c120ed384e382e8852041123c8910c9a48b150d42cc7f9ae5f181ee4ee5b225ccf51a9fc75f8e43abbf8b5a89c800aaf45ea07a36d29f17f9a6952e299386117b875b896ff992ad16c74b45737d4ae422cb141125a058b6ac3131ce1f5d1122f7d5cb5b3863a67a53dfe12c07c18915d171b2dce197d7ebe37ea2bc9a9ea7e1792c9e6f8cec3cd3ad8b94bd0465d206e42025d5957f904bebf4c6e6e0b406468cbd3f9db97781e8f108c5d83887ef1cc1d4628dcec2644155fac59d25edf74ab3ec907d04a738f45f3b85591d368c57e0929dd35cf2e732f87aed20d3616e1fb38612da4c3c0c9532b5da137a9eeb3c76b6aedf830b5591ca4e355d55f18b9489b2396dde26606f0d09192c1acf1d532d37d63a4350eaad22add6badc233abc1e282a63feadf40d609cac2c591e7a9e383bec8db44ce6aa4ccac5ee877c8afb45bda20841b6bd21a3bfe2fdf705799c1c5c4f683a205d985a5763b557b8e513b6c8807469343a0386774f54cef985cbb7809c77d1ddd37f1825614ee5ce35420adac76217bb4c3813c9f6b6730f4d75a383b93964602287a4e37c05f2028d50361abcea15487c4aaefd366edd34d16bde7028f2257fb0ae8893b9b692ff101e4cd9984fbefa4e9877ef206d9da6e14c9dd3112d3eb4f30510b23bf485cafb59ebdcc68e6768efd55c6ab4b6765d992f2d9d965694cd2d39673d4bb143a685a1c4593dd0b1e41c54bb9a2f7224839873777a8534ae5267b4581179bcf5d3448e36c779243bd5dcc588c2a9807bc3c562625e19c82818238a6d34e", 0x400}], 0x1, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x60, 0x117, 0x2, 0x46, "940b398a22e070f09982846bdab2ab5139bc31f6bfafb75e5af4a148b67cf5b32492045f80963fa6c63d095d9fcf5186ae757c2414f654b7ad36831cd724318f7ab434294fa0"}], 0xc0, 0x3}, 0x4800) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000074000)=@alg, 0x58, &(0x7f0000612f80)=[{&(0x7f0000f81000)=""/4096, 0x1098}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/02/27 09:01:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="6ad64a6eab0cc54ec21b3a933b7680fdbf3dd92a0aef0e5addaab479081f044fbabbd44a1202d1ce4bd9c31abe8701df78c44ac92b29f6b11ba391ba4f5b07ca00180d7a79d28115e6c8a4aae387bbd2f6a3f3125ee01f6ec4f248728e9455457324599e1b1ed0378b4bf7640d5823b30fa093bfdf97cf39bc43b7fcbf72a4a28a669b9e6a19b4473af5ee15b278dc5b6baaa6adf84dc126ee7731485871bf91f06532ce2b2faaac95357c77fea929bb63c68d8ebe615fae0b81cb0c05405ad309c6a124577c8c295c550580e89badfdb1e12f0ea28ba8498b6bc86a56fd8adc1816dc9c663c8e4f945af3ad9a45027d68813b664becdbae01c9af4d3464ac145e071350e178e2f369cc43fa30caa53014197e6542d6587e37bb297c6392cafa2b0f0cab6983f2007c3ed212b7c24269935a80070f355431f348cb1a04bdc1c62f07f3cadc4dd93ec33e0941bfcee197239d9457a37c10dda1043ca80e12cd1fa95d7302bec2687d27731e25100ff29dfd14cc72da6f7e2e0d30b40844143f9147093c9c88570e3aa314df1827bdadb9ffbb9c0e7a237b64ff19dc42985966fd449739d3a7fda6fab0be26c4c65f6f317cc1fd9a7863974ae57d59adcd1c82f22ded123d6299c120ed384e382e8852041123c8910c9a48b150d42cc7f9ae5f181ee4ee5b225ccf51a9fc75f8e43abbf8b5a89c800aaf45ea07a36d29f17f9a6952e299386117b875b896ff992ad16c74b45737d4ae422cb141125a058b6ac3131ce1f5d1122f7d5cb5b3863a67a53dfe12c07c18915d171b2dce197d7ebe37ea2bc9a9ea7e1792c9e6f8cec3cd3ad8b94bd0465d206e42025d5957f904bebf4c6e6e0b406468cbd3f9db97781e8f108c5d83887ef1cc1d4628dcec2644155fac59d25edf74ab3ec907d04a738f45f3b85591d368c57e0929dd35cf2e732f87aed20d3616e1fb38612da4c3c0c9532b5da137a9eeb3c76b6aedf830b5591ca4e355d55f18b9489b2396dde26606f0d09192c1acf1d532d37d63a4350eaad22add6badc233abc1e282a63feadf40d609cac2c591e7a9e383bec8db44ce6aa4ccac5ee877c8afb45bda20841b6bd21a3bfe2fdf705799c1c5c4f683a205d985a5763b557b8e513b6c8807469343a0386774f54cef985cbb7809c77d1ddd37f1825614ee5ce35420adac76217bb4c3813c9f6b6730f4d75a383b93964602287a4e37c05f2028d50361abcea15487c4aaefd366edd34d16bde7028f2257fb0ae8893b9b692ff101e4cd9984fbefa4e9877ef206d9da6e14c9dd3112d3eb4f30510b23bf485cafb59ebdcc68e6768efd55c6ab4b6765d992f2d9d965694cd2d39673d4bb143a685a1c4593dd0b1e41c54bb9a2f7224839873777a8534ae5267b4581179bcf5d3448e36c779243bd5dcc588c2a9807bc3c562625e19c82818238a6d34e", 0x400}], 0x1, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x60, 0x117, 0x2, 0x46, "940b398a22e070f09982846bdab2ab5139bc31f6bfafb75e5af4a148b67cf5b32492045f80963fa6c63d095d9fcf5186ae757c2414f654b7ad36831cd724318f7ab434294fa0"}], 0xc0, 0x3}, 0x4800) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000074000)=@alg, 0x58, &(0x7f0000612f80)=[{&(0x7f0000f81000)=""/4096, 0x1098}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/02/27 09:01:17 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)={0x0, 0x0, []}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f0000435fd6)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000071f000)) 2018/02/27 09:01:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000fbfffc)=0x3, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendto$inet6(r1, &(0x7f0000fbd000), 0x0, 0x0, &(0x7f0000fbb000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/27 09:01:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0xb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/02/27 09:01:17 executing program 1: r0 = socket(0x1000000000011, 0x800000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000630fc0)=[{&(0x7f0000720000)="7f59371ee49877eeefc4bcaab10e", 0xe}], 0x1) 2018/02/27 09:01:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2018/02/27 09:01:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="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", 0x400}], 0x1, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x60, 0x117, 0x2, 0x46, "940b398a22e070f09982846bdab2ab5139bc31f6bfafb75e5af4a148b67cf5b32492045f80963fa6c63d095d9fcf5186ae757c2414f654b7ad36831cd724318f7ab434294fa0"}], 0xc0, 0x3}, 0x4800) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000074000)=@alg, 0x58, &(0x7f0000612f80)=[{&(0x7f0000f81000)=""/4096, 0x1098}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/02/27 09:01:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000d64f50)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/27 09:01:17 executing program 7: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f00002e7fec)="020000002000000000feff00010000808c000000", 0x14, 0x0) 2018/02/27 09:01:18 executing program 7: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f00002e7fec)="020000002000000000feff00010000808c000000", 0x14, 0x0) 2018/02/27 09:01:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2018/02/27 09:01:18 executing program 1: r0 = socket(0x1000000000011, 0x800000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000630fc0)=[{&(0x7f0000720000)="7f59371ee49877eeefc4bcaab10e", 0xe}], 0x1) 2018/02/27 09:01:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0xb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000d64f50)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/27 09:01:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000d64f50)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/27 09:01:18 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB='raw'], 0x1) getsockopt(r0, 0x0, 0x40, &(0x7f0000000040)=""/84, &(0x7f0000000000)=0x54) 2018/02/27 09:01:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2018/02/27 09:01:18 executing program 7: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f00002e7fec)="020000002000000000feff00010000808c000000", 0x14, 0x0) 2018/02/27 09:01:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0xb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 1: r0 = socket(0x1000000000011, 0x800000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000630fc0)=[{&(0x7f0000720000)="7f59371ee49877eeefc4bcaab10e", 0xe}], 0x1) 2018/02/27 09:01:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2018/02/27 09:01:18 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB='raw'], 0x1) getsockopt(r0, 0x0, 0x40, &(0x7f0000000040)=""/84, &(0x7f0000000000)=0x54) 2018/02/27 09:01:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000d64f50)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/27 09:01:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000d64f50)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/27 09:01:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000d64f50)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/27 09:01:18 executing program 1: r0 = socket(0x1000000000011, 0x800000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000630fc0)=[{&(0x7f0000720000)="7f59371ee49877eeefc4bcaab10e", 0xe}], 0x1) 2018/02/27 09:01:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0xb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000226000)={&(0x7f00008bc000)={0x2c, 0x13, 0x2ff, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x4, @u32}]}, 0x2c}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 7: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f00002e7fec)="020000002000000000feff00010000808c000000", 0x14, 0x0) 2018/02/27 09:01:18 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB='raw'], 0x1) getsockopt(r0, 0x0, 0x40, &(0x7f0000000040)=""/84, &(0x7f0000000000)=0x54) 2018/02/27 09:01:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d}, 0x10, &(0x7f0000012000)={&(0x7f0000011000)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) [ 36.863858] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 36.871442] ip6gretap0: Invalid MTU 0 requested, hw min 68 2018/02/27 09:01:18 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d}, 0x10, &(0x7f0000012000)={&(0x7f0000011000)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB='raw'], 0x1) getsockopt(r0, 0x0, 0x40, &(0x7f0000000040)=""/84, &(0x7f0000000000)=0x54) 2018/02/27 09:01:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x310) 2018/02/27 09:01:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d}, 0x10, &(0x7f0000012000)={&(0x7f0000011000)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000226000)={&(0x7f00008bc000)={0x2c, 0x13, 0x2ff, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x4, @u32}]}, 0x2c}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000d64f50)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/27 09:01:18 executing program 1: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000e05000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000f12ff8), 0xc5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00003fbff3)='numa_maps\x00') sendfile(r0, r0, &(0x7f0000469000), 0x7fff) 2018/02/27 09:01:18 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d}, 0x10, &(0x7f0000012000)={&(0x7f0000011000)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000226000)={&(0x7f00008bc000)={0x2c, 0x13, 0x2ff, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x4, @u32}]}, 0x2c}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 1: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000e05000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000f12ff8), 0xc5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00003fbff3)='numa_maps\x00') sendfile(r0, r0, &(0x7f0000469000), 0x7fff) 2018/02/27 09:01:18 executing program 2: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000e05000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000f12ff8), 0xc5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00003fbff3)='numa_maps\x00') sendfile(r0, r0, &(0x7f0000469000), 0x7fff) 2018/02/27 09:01:18 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d}, 0x10, &(0x7f0000012000)={&(0x7f0000011000)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d}, 0x10, &(0x7f0000012000)={&(0x7f0000011000)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d}, 0x10, &(0x7f0000012000)={&(0x7f0000011000)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) [ 36.969693] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 36.977091] ip6gretap0: Invalid MTU 0 requested, hw min 68 [ 36.980618] audit: type=1400 audit(1519722078.351:19): avc: denied { map_create } for pid=6177 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/27 09:01:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 1: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000e05000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000f12ff8), 0xc5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00003fbff3)='numa_maps\x00') sendfile(r0, r0, &(0x7f0000469000), 0x7fff) [ 37.050349] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 37.057740] ip6gretap0: Invalid MTU 0 requested, hw min 68 [ 37.067325] audit: type=1400 audit(1519722078.395:20): avc: denied { prog_load } for pid=6177 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/27 09:01:18 executing program 2: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000e05000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000f12ff8), 0xc5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00003fbff3)='numa_maps\x00') sendfile(r0, r0, &(0x7f0000469000), 0x7fff) 2018/02/27 09:01:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d}, 0x10, &(0x7f0000012000)={&(0x7f0000011000)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d}, 0x10, &(0x7f0000012000)={&(0x7f0000011000)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000011fb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f000000fff0)={0x1d}, 0x10, &(0x7f0000012000)={&(0x7f0000011000)={0x2, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c44cd3b05aa92c5b"}}, 0x48}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 1: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000e05000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000f12ff8), 0xc5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00003fbff3)='numa_maps\x00') sendfile(r0, r0, &(0x7f0000469000), 0x7fff) 2018/02/27 09:01:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000226000)={&(0x7f00008bc000)={0x2c, 0x13, 0x2ff, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x4, @u32}]}, 0x2c}, 0x1}, 0x0) 2018/02/27 09:01:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@mcast2={0xff, 0x2, [], 0x1}}, 0x20) [ 37.146791] audit: type=1400 audit(1519722078.520:21): avc: denied { prog_run } for pid=6177 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/27 09:01:18 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 2: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000e05000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000f12ff8), 0xc5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00003fbff3)='numa_maps\x00') sendfile(r0, r0, &(0x7f0000469000), 0x7fff) 2018/02/27 09:01:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 6: pselect6(0x40, &(0x7f0000000000), &(0x7f0000003000), &(0x7f0000003fc0), &(0x7f0000003000), &(0x7f0000001000)={&(0x7f0000003000)={0xfffffffffffff801}, 0x8}) 2018/02/27 09:01:18 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, 'sit0\x00', 'ipddp0\x00'}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback=0x7f000001, 0x0, 0xffffffff, 'ip6gre0\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty}}}, {{@ip={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'sane-20000\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x340) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) [ 37.228196] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 37.235689] ip6gretap0: Invalid MTU 0 requested, hw min 68 2018/02/27 09:01:18 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@mcast2={0xff, 0x2, [], 0x1}}, 0x20) 2018/02/27 09:01:18 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00001abfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40096100, &(0x7f000065c000)) 2018/02/27 09:01:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@mcast2={0xff, 0x2, [], 0x1}}, 0x20) 2018/02/27 09:01:18 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 6: pselect6(0x40, &(0x7f0000000000), &(0x7f0000003000), &(0x7f0000003fc0), &(0x7f0000003000), &(0x7f0000001000)={&(0x7f0000003000)={0xfffffffffffff801}, 0x8}) 2018/02/27 09:01:18 executing program 6: pselect6(0x40, &(0x7f0000000000), &(0x7f0000003000), &(0x7f0000003fc0), &(0x7f0000003000), &(0x7f0000001000)={&(0x7f0000003000)={0xfffffffffffff801}, 0x8}) 2018/02/27 09:01:18 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, 'sit0\x00', 'ipddp0\x00'}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback=0x7f000001, 0x0, 0xffffffff, 'ip6gre0\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty}}}, {{@ip={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'sane-20000\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x340) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) [ 37.315444] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 37.337163] ipt_CLUSTERIP: unknown protocol 127 [ 37.356790] ipt_CLUSTERIP: unknown protocol 127 2018/02/27 09:01:18 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00001abfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40096100, &(0x7f000065c000)) 2018/02/27 09:01:18 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@mcast2={0xff, 0x2, [], 0x1}}, 0x20) [ 37.433441] ipt_CLUSTERIP: unknown protocol 127 2018/02/27 09:01:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 6: pselect6(0x40, &(0x7f0000000000), &(0x7f0000003000), &(0x7f0000003fc0), &(0x7f0000003000), &(0x7f0000001000)={&(0x7f0000003000)={0xfffffffffffff801}, 0x8}) 2018/02/27 09:01:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, 'sit0\x00', 'ipddp0\x00'}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback=0x7f000001, 0x0, 0xffffffff, 'ip6gre0\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty}}}, {{@ip={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'sane-20000\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x340) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/02/27 09:01:18 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00001abfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40096100, &(0x7f000065c000)) 2018/02/27 09:01:18 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 7: r0 = socket$inet(0x2, 0x80003, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, 'sit0\x00', 'ipddp0\x00'}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback=0x7f000001, 0x0, 0xffffffff, 'ip6gre0\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty}}}, {{@ip={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'sane-20000\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x340) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) [ 37.500665] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 37.511573] ipt_CLUSTERIP: unknown protocol 127 2018/02/27 09:01:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/27 09:01:18 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00001abfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40096100, &(0x7f000065c000)) 2018/02/27 09:01:18 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, 'sit0\x00', 'ipddp0\x00'}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback=0x7f000001, 0x0, 0xffffffff, 'ip6gre0\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty}}}, {{@ip={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'sane-20000\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x340) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/02/27 09:01:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 7: r0 = socket$inet(0x2, 0x80003, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, 'sit0\x00', 'ipddp0\x00'}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback=0x7f000001, 0x0, 0xffffffff, 'ip6gre0\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty}}}, {{@ip={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'sane-20000\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x340) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/02/27 09:01:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eee000)=[], 0x0, &(0x7f0000b18faf)=""/81, 0x51}, 0x40002106) 2018/02/27 09:01:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/02/27 09:01:18 executing program 6: r0 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001274, &(0x7f0000000700)) 2018/02/27 09:01:19 executing program 6: r0 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001274, &(0x7f0000000700)) 2018/02/27 09:01:19 executing program 1: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x40a01c, {0x400003ffffffc}}, &(0x7f0000b4afe0), 0x8, &(0x7f00005eaff8)) syz_open_dev$evdev(&(0x7f0000001fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/27 09:01:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eee000)=[], 0x0, &(0x7f0000b18faf)=""/81, 0x51}, 0x40002106) 2018/02/27 09:01:19 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eee000)=[], 0x0, &(0x7f0000b18faf)=""/81, 0x51}, 0x40002106) [ 37.616923] ipt_CLUSTERIP: unknown protocol 127 [ 37.623932] ipt_CLUSTERIP: unknown protocol 127 [ 37.628387] netlink: 7 bytes leftover after parsing attributes in process `syz-executor4'. 2018/02/27 09:01:19 executing program 7: r0 = socket$inet(0x2, 0x80003, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, 'sit0\x00', 'ipddp0\x00'}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback=0x7f000001, 0x0, 0xffffffff, 'ip6gre0\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty}}}, {{@ip={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'sane-20000\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x340) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/02/27 09:01:19 executing program 6: r0 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001274, &(0x7f0000000700)) 2018/02/27 09:01:19 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eee000)=[], 0x0, &(0x7f0000b18faf)=""/81, 0x51}, 0x40002106) [ 37.668052] netlink: 7 bytes leftover after parsing attributes in process `syz-executor4'. 2018/02/27 09:01:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eee000)=[], 0x0, &(0x7f0000b18faf)=""/81, 0x51}, 0x40002106) 2018/02/27 09:01:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/27 09:01:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x20, 0x1) sendmsg$unix(r2, &(0x7f0000000280)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000200)="da033b6e8a0f33b72ff141a01d022efffa609f249dfde60ae1dc8597306f5b6c66ff0a98c71e6a4bb884bba15f60dd0e81a87de9e9a0", 0x36}], 0x1, 0x0, 0x0, 0x4010}, 0x84) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) flock(r0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r3, 0x7, 0x3}, 0x14) r5 = dup3(r4, r3, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockname$inet(r2, &(0x7f0000000080)={0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0xfffffffffffffe90) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@textreal={0x8, &(0x7f00000000c0)="ba200066b80000000066ef0f0f6a07bf3e0f060f20e06635000200000f22e0660f6dc666b9800000c00f326635001000000f3066b9800000c00f326635010000000f300f01c866b93208000066b80100000066ba000000000f300f01ca", 0x5d}], 0x1, 0x0, &(0x7f0000000140)=[], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/02/27 09:01:19 executing program 1: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x40a01c, {0x400003ffffffc}}, &(0x7f0000b4afe0), 0x8, &(0x7f00005eaff8)) syz_open_dev$evdev(&(0x7f0000001fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/27 09:01:19 executing program 7: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eee000)=[], 0x0, &(0x7f0000b18faf)=""/81, 0x51}, 0x40002106) 2018/02/27 09:01:19 executing program 6: r0 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001274, &(0x7f0000000700)) 2018/02/27 09:01:19 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eee000)=[], 0x0, &(0x7f0000b18faf)=""/81, 0x51}, 0x40002106) 2018/02/27 09:01:19 executing program 5: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x40a01c, {0x400003ffffffc}}, &(0x7f0000b4afe0), 0x8, &(0x7f00005eaff8)) syz_open_dev$evdev(&(0x7f0000001fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/27 09:01:19 executing program 7: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eee000)=[], 0x0, &(0x7f0000b18faf)=""/81, 0x51}, 0x40002106) 2018/02/27 09:01:19 executing program 1: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x40a01c, {0x400003ffffffc}}, &(0x7f0000b4afe0), 0x8, &(0x7f00005eaff8)) syz_open_dev$evdev(&(0x7f0000001fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/27 09:01:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eee000)=[], 0x0, &(0x7f0000b18faf)=""/81, 0x51}, 0x40002106) 2018/02/27 09:01:19 executing program 5: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x40a01c, {0x400003ffffffc}}, &(0x7f0000b4afe0), 0x8, &(0x7f00005eaff8)) syz_open_dev$evdev(&(0x7f0000001fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/27 09:01:19 executing program 6: mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) lstat(&(0x7f0000000040)='./file0/bus\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)) lseek(r0, 0x0, 0x3) [ 37.773105] netlink: 7 bytes leftover after parsing attributes in process `syz-executor4'. [ 37.828165] kasan: CONFIG_KASAN_INLINE enabled [ 37.832878] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 37.840274] general protection fault: 0000 [#1] SMP KASAN [ 37.845800] Dumping ftrace buffer: [ 37.849326] (ftrace buffer empty) [ 37.853022] Modules linked in: [ 37.856212] CPU: 1 PID: 6338 Comm: syz-executor3 Not tainted 4.16.0-rc3+ #331 [ 37.863471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.872819] RIP: 0010:hrtimer_active+0x1da/0x3c0 [ 37.877549] RSP: 0018:ffff8801ae79f3c0 EFLAGS: 00010202 [ 37.882890] RAX: 0000000000000008 RBX: 1ffff10035cf3ea5 RCX: ffffffff81610225 [ 37.890136] RDX: 0000000000010000 RSI: ffffc90002b4a000 RDI: 0000000000000010 [ 37.897381] RBP: ffff8801ae79f500 R08: 0000000000002c02 R09: 0000000000000000 [ 37.904627] R10: 0000000000000011 R11: ffffed0035aae078 R12: 0000000000000010 [ 37.911871] R13: 0000000000000000 R14: ffffed0035cf3e83 R15: dffffc0000000000 [ 37.919116] FS: 00007fd755b61700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 37.927316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.933171] CR2: 00007fd755b40000 CR3: 00000001ade3f001 CR4: 00000000001626e0 [ 37.940421] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.947667] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.954912] Call Trace: [ 37.957490] ? hrtimer_forward+0x2d0/0x2d0 [ 37.961707] ? vmx_update_msr_bitmap+0x13a/0x430 [ 37.966453] ? setup_msrs+0x926/0x1d80 [ 37.970319] ? vmx_set_cr4+0x353/0x610 [ 37.974200] hrtimer_try_to_cancel+0x91/0x5b0 [ 37.978673] ? update_exception_bitmap+0x19a/0x200 [ 37.983581] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 37.988486] ? vmx_vcpu_reset+0x55f/0xc70 [ 37.992614] ? load_vmcs12_host_state+0x1fa0/0x1fa0 [ 37.997615] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 38.002432] ? trace_hardirqs_off+0x10/0x10 [ 38.006730] ? __lock_is_held+0xb6/0x140 [ 38.010777] ? kvm_arch_vcpu_load+0x1c1/0x8d0 [ 38.015254] hrtimer_cancel+0x22/0x40 [ 38.019039] kvm_lapic_reset+0x93/0xf40 [ 38.022997] ? kvm_lapic_set_base+0x750/0x750 [ 38.027473] ? kvm_arch_vcpu_free+0x80/0x80 [ 38.031788] kvm_arch_vcpu_setup+0x31/0x50 [ 38.036002] kvm_vm_ioctl+0x52d/0x1cf0 [ 38.039871] ? perf_event_sync_stat+0x5b0/0x5b0 [ 38.044520] ? kvm_set_memory_region+0x50/0x50 [ 38.049088] ? find_held_lock+0x35/0x1d0 [ 38.053140] ? perf_trace_lock_acquire+0xe3/0x980 [ 38.057959] ? lock_downgrade+0x980/0x980 [ 38.062094] ? perf_trace_lock+0x900/0x900 [ 38.066305] ? lock_release+0xa40/0xa40 [ 38.070258] ? do_raw_spin_trylock+0x190/0x190 [ 38.074819] ? compat_start_thread+0x80/0x80 [ 38.079205] ? trace_hardirqs_off+0x10/0x10 [ 38.083508] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 38.088504] ? trace_hardirqs_on+0xd/0x10 [ 38.092630] ? _raw_spin_unlock_irq+0x27/0x70 [ 38.097102] ? finish_task_switch+0x1c1/0x7e0 [ 38.101591] ? find_held_lock+0x35/0x1d0 [ 38.105644] ? __fget+0x342/0x5b0 [ 38.109078] ? lock_downgrade+0x980/0x980 [ 38.113207] ? lock_release+0xa40/0xa40 [ 38.117164] ? __lock_is_held+0xb6/0x140 [ 38.121226] ? __fget+0x36b/0x5b0 [ 38.124672] ? iterate_fd+0x3f0/0x3f0 [ 38.128452] ? retint_kernel+0x10/0x10 [ 38.132323] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 38.137316] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 38.142060] ? kvm_set_memory_region+0x50/0x50 [ 38.146620] do_vfs_ioctl+0x1b1/0x1520 [ 38.150481] ? retint_kernel+0x10/0x10 [ 38.154351] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 38.159258] ? ioctl_preallocate+0x2b0/0x2b0 [ 38.163648] ? selinux_capable+0x40/0x40 [ 38.167696] ? exit_to_usermode_loop+0x8b/0x2f0 [ 38.172358] ? security_file_ioctl+0x7d/0xb0 [ 38.176741] ? security_file_ioctl+0x89/0xb0 [ 38.181135] SyS_ioctl+0x8f/0xc0 [ 38.184479] ? do_vfs_ioctl+0x1520/0x1520 [ 38.188607] do_syscall_64+0x281/0x940 [ 38.192474] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 38.197988] ? syscall_return_slowpath+0x550/0x550 [ 38.202900] ? syscall_return_slowpath+0x2ac/0x550 [ 38.207812] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 38.213158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.217990] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 38.223155] RIP: 0033:0x453d69 [ 38.226320] RSP: 002b:00007fd755b60c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.234003] RAX: ffffffffffffffda RBX: 00007fd755b616d4 RCX: 0000000000453d69 [ 38.241257] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000014 [ 38.248500] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 38.255745] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 38.262991] R13: 000000000000020e R14: 00000000006f31f0 R15: 0000000000000000 [ 38.270269] Code: ff ff 48 8d 85 18 ff ff ff 48 c1 e8 03 4e 8d 34 38 e8 1b f2 0f 00 48 8b 85 f0 fe ff ff c6 00 00 48 8b 85 d8 fe ff ff 48 c1 e8 03 <42> 80 3c 38 00 0f 85 c2 01 00 00 48 8b 85 e8 fe ff ff 48 8b 58 [ 38.289490] RIP: hrtimer_active+0x1da/0x3c0 RSP: ffff8801ae79f3c0 [ 38.296105] ---[ end trace fcc804af8b03ec47 ]--- [ 38.300898] Kernel panic - not syncing: Fatal exception [ 38.306743] Dumping ftrace buffer: [ 38.310264] (ftrace buffer empty) [ 38.313942] Kernel Offset: disabled [ 38.317548] Rebooting in 86400 seconds..