[....] Starting enhanced syslogd: rsyslogd[ 16.828524] audit: type=1400 audit(1518263600.849:5): avc: denied { syslog } for pid=4016 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.448691] audit: type=1400 audit(1518263606.469:6): avc: denied { map } for pid=4156 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. 2018/02/10 11:53:32 fuzzer started [ 28.826251] audit: type=1400 audit(1518263612.847:7): avc: denied { map } for pid=4167 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/10 11:53:33 dialing manager at 10.128.0.26:35853 [ 31.774854] can: request_module (can-proto-0) failed. [ 31.783572] can: request_module (can-proto-0) failed. 2018/02/10 11:53:36 kcov=true, comps=true [ 32.306352] audit: type=1400 audit(1518263616.327:8): avc: denied { map } for pid=4167 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9081 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/10 11:53:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x8, &(0x7f0000fca000-0x60)={0x0, 0x36, 0x0, @thr={&(0x7f0000f49000+0xf08), &(0x7f0000a6d000-0xb8)}}, &(0x7f00003f4000-0x4)) 2018/02/10 11:53:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:53:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00004df000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00006d2000)={r2, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/10 11:53:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001aa000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/02/10 11:53:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:53:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00008c0000)=[{&(0x7f0000694000-0x62)="2900000018003109002001090000e6060200000000ffff06800000000c00080004000200000ef4ff01", 0x29}], 0x1) 2018/02/10 11:53:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:53:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000e000-0x1f8)=[{&(0x7f000000a000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f000000d000)=[], 0x22d, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x5, 0x1, 0x2, 0x0, 0x0, r1}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x8}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) [ 33.576940] audit: type=1400 audit(1518263617.597:9): avc: denied { map } for pid=4167 comm="syz-fuzzer" path="/root/syzkaller-shm162508795" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.636249] audit: type=1400 audit(1518263617.656:10): avc: denied { sys_admin } for pid=4212 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.673652] IPVS: ftp: loaded support on port[0] = 21 [ 33.721139] audit: type=1400 audit(1518263617.741:11): avc: denied { net_admin } for pid=4216 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.723236] IPVS: ftp: loaded support on port[0] = 21 [ 33.786319] IPVS: ftp: loaded support on port[0] = 21 [ 33.831779] IPVS: ftp: loaded support on port[0] = 21 [ 33.895908] IPVS: ftp: loaded support on port[0] = 21 [ 33.993115] IPVS: ftp: loaded support on port[0] = 21 [ 34.088795] IPVS: ftp: loaded support on port[0] = 21 [ 34.215383] IPVS: ftp: loaded support on port[0] = 21 [ 34.840744] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.087499] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.096274] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.235925] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.505903] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.523168] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.715817] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.872762] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.319629] audit: type=1400 audit(1518263621.340:12): avc: denied { sys_chroot } for pid=4216 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 37.750914] irq bypass consumer (token 0000000073110ce0) registration fails: -16 [ 37.919407] audit: type=1400 audit(1518263621.940:13): avc: denied { net_raw } for pid=5237 comm="syz-executor3" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/10 11:53:42 executing program 0: syz_open_dev$vcsn(&(0x7f0000fac000-0xa)='/dev/vcs#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000df2000)='keyring\x00', &(0x7f0000c9b000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000590000-0x1)='\x00', 0xfffffffffffffffc) add_key$user(&(0x7f000092b000)='user\x00', &(0x7f0000714000-0x5)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000ae4000)="7fe9b031888ab4dae1e750d27e558ec42770cf9cff0a58c4", 0x18, 0xfffffffffffffffc) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000007000-0x30)='/dev/urandom\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000cd2000)={r0}, &(0x7f000004a000-0x4d)=""/77, 0x4d, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000c01000)={@local={0xfe, 0x80, [], 0x0, 0xaa}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000018000-0x9)='/dev/rtc\x00', 0x0, 0x0) 2018/02/10 11:53:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:53:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) getsockname(r0, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:53:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:53:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:53:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:53:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:53:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:53:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) [ 38.034863] syz-executor5 (5252) used greatest stack depth: 13680 bytes left 2018/02/10 11:53:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) [ 38.073845] audit: type=1400 audit(1518263622.095:14): avc: denied { map } for pid=5261 comm="syz-executor2" path="/dev/dsp" dev="devtmpfs" ino=9174 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 [ 38.099526] audit: type=1400 audit(1518263622.095:15): avc: denied { dac_override } for pid=5266 comm="syz-executor6" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 38.158476] could not allocate digest TFM handle [ 38.184234] could not allocate digest TFM handle 2018/02/10 11:53:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:53:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:53:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:53:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:53:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) getsockname(r0, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:53:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:53:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:53:50 executing program 0: syz_open_dev$vcsn(&(0x7f0000fac000-0xa)='/dev/vcs#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000df2000)='keyring\x00', &(0x7f0000c9b000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000590000-0x1)='\x00', 0xfffffffffffffffc) add_key$user(&(0x7f000092b000)='user\x00', &(0x7f0000714000-0x5)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000ae4000)="7fe9b031888ab4dae1e750d27e558ec42770cf9cff0a58c4", 0x18, 0xfffffffffffffffc) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000007000-0x30)='/dev/urandom\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000cd2000)={r0}, &(0x7f000004a000-0x4d)=""/77, 0x4d, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000c01000)={@local={0xfe, 0x80, [], 0x0, 0xaa}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000018000-0x9)='/dev/rtc\x00', 0x0, 0x0) 2018/02/10 11:53:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:53:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) getsockname(r0, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:53:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) getsockname(r0, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:53:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:53:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:53:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:53:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:53:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:53:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) getsockname(r0, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:53:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:53:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) [ 46.889608] could not allocate digest TFM handle 2018/02/10 11:53:59 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:53:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:53:59 executing program 0: syz_open_dev$vcsn(&(0x7f0000fac000-0xa)='/dev/vcs#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000df2000)='keyring\x00', &(0x7f0000c9b000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000590000-0x1)='\x00', 0xfffffffffffffffc) add_key$user(&(0x7f000092b000)='user\x00', &(0x7f0000714000-0x5)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000ae4000)="7fe9b031888ab4dae1e750d27e558ec42770cf9cff0a58c4", 0x18, 0xfffffffffffffffc) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000007000-0x30)='/dev/urandom\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000cd2000)={r0}, &(0x7f000004a000-0x4d)=""/77, 0x4d, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000c01000)={@local={0xfe, 0x80, [], 0x0, 0xaa}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000018000-0x9)='/dev/rtc\x00', 0x0, 0x0) 2018/02/10 11:53:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) getsockname(r0, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:53:59 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:53:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:53:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:53:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:53:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:53:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:53:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:53:59 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:53:59 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:53:59 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:53:59 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:53:59 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:53:59 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) [ 55.063604] could not allocate digest TFM handle [ 55.077409] syz-executor5 (5346) used greatest stack depth: 11984 bytes left 2018/02/10 11:54:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:54:07 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:07 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) getsockname(r0, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:54:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) sendfile(r1, 0xffffffffffffffff, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:15 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) getsockname(r0, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:54:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x81) r0 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) sendfile(r1, 0xffffffffffffffff, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:15 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) getsockname(r0, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:54:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:15 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) getsockname(r0, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:54:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) sendfile(r1, 0xffffffffffffffff, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:15 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:54:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x81) r0 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:15 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:54:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x5) sendfile(0xffffffffffffffff, r1, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000a73000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, &(0x7f0000316000-0x4)=0x3a) 2018/02/10 11:54:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x81) r0 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x5) sendfile(0xffffffffffffffff, r1, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x5) sendfile(0xffffffffffffffff, r1, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000cd4000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000a67000)="efc1dd04b929ec55e3d31ce465b16d3f62ce8b7d09187b0ae4333aa4e87f21d81c0f416ba7e1459373e84f858bf66e8a", 0x30, 0x0, &(0x7f000073b000-0x10)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000f80000-0x58)=@alg, 0x58, &(0x7f00009ab000)=[{&(0x7f0000f81000)=""/4096, 0x1000}], 0x1, &(0x7f0000f80000-0x36)=""/87, 0x57}, 0x0) 2018/02/10 11:54:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) readv(0xffffffffffffffff, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(0xffffffffffffffff, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x0, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:31 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) 2018/02/10 11:54:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) readv(0xffffffffffffffff, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(0xffffffffffffffff, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:31 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) 2018/02/10 11:54:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x0, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) readv(0xffffffffffffffff, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(0xffffffffffffffff, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:31 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) 2018/02/10 11:54:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x0, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:40 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) 2018/02/10 11:54:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x5) sendfile(r0, r1, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(0xffffffffffffffff, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:40 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) 2018/02/10 11:54:40 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x5) sendfile(r0, r1, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000071000-0x78)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000a2a000)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 11:54:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x5) sendfile(r0, r1, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(0xffffffffffffffff, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 1: mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(0xffffffffffffffff, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 3: r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 3: r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, 0xffffffffffffffff, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, 0xffffffffffffffff, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 3: r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 6: request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, 0xffffffffffffffff, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 6: request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 6: request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{}, {0xffffffb0}}) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}}) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}}) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}}) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x0, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f000048f000)=0x4, 0x4) r1 = open(&(0x7f0000b92000-0x7)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000db7000-0x4)=0x20102, 0x4) fallocate(r1, 0x0, 0x0, 0x9) sendto$inet(r0, &(0x7f000038d000-0x69), 0x0, 0x0, &(0x7f0000822000-0x10)={0x2, 0x0, @empty}, 0x10) sendfile(r0, r1, &(0x7f0000af5000), 0x10001) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x0, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00005a7000)=[{&(0x7f0000f03000)}, {&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x2, 0x0) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x1, 0x0) 2018/02/10 11:54:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x0, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:54:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b06000-0x130c)={0x1c, 0x13, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x8, 0x1}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:54:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x1, 0x0) 2018/02/10 11:54:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000e20000-0xd)=""/13, 0xd}], 0x1, 0x0) 2018/02/10 11:54:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000003d000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x10001) 2018/02/10 11:54:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:54:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000dae000)=0x4000000000001, 0x48) 2018/02/10 11:54:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) [ 104.926600] audit: type=1400 audit(1518263688.947:16): avc: denied { create } for pid=5847 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 104.950653] audit: type=1400 audit(1518263688.947:17): avc: denied { write } for pid=5847 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/10 11:54:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}], 0x1, 0x0) 2018/02/10 11:54:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(0xffffffffffffffff, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:54:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000756000-0x3)='\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$sg(&(0x7f000007b000-0x9)='/dev/sg#\x00', 0x0, 0x0) 2018/02/10 11:54:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x0, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000), 0x48) 2018/02/10 11:54:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}], 0x1, 0x0) 2018/02/10 11:54:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(0xffffffffffffffff, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(0xffffffffffffffff, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) [ 105.079087] audit: type=1400 audit(1518263689.099:18): avc: denied { map } for pid=5888 comm="syz-executor7" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=15609 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 2018/02/10 11:54:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x0, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000067f000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f00005a7000)=[{&(0x7f0000f03000)}], 0x1, 0x0) 2018/02/10 11:54:57 executing program 7: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000002000)=0xffffffffffffffff, 0x8) 2018/02/10 11:54:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(0xffffffffffffffff, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:54:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(0xffffffffffffffff, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x0, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:54:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000), 0x48) 2018/02/10 11:54:57 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000e66000-0x20)) 2018/02/10 11:54:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[], 0x0) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:54:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(0xffffffffffffffff, r2, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:54:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/10 11:54:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x0, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x40000000015, 0x5, 0x0) 2018/02/10 11:54:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f000055d000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000dae000), 0x48) 2018/02/10 11:54:57 executing program 1: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000021000)=@ipv4_newroute={0x24, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, 0x308}, 0x1}, 0x0) 2018/02/10 11:54:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x0, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:54:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/10 11:54:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dff000-0xc)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f00003a1000-0x2964)=@newlink={0x48, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x5, [@generic="b13832cd02"]}]}]}]}, 0x48}, 0x1}, 0x0) 2018/02/10 11:55:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, 0xffffffffffffffff, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:55:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x0, 0x22812, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:55:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000c2c000-0xb)='/dev/vcsa#\x00', 0x3, 0x0) pread64(r0, &(0x7f0000167000-0x2)=""/2, 0x2, 0x0) 2018/02/10 11:55:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/10 11:55:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[], 0x0) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:55:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000b17000-0x5)='user\x00', &(0x7f0000812000)={0x73, 0x79, 0x7a}, &(0x7f000023d000-0x1000)="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", 0x3ea, 0xfffffffffffffffb) 2018/02/10 11:55:05 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000002000)=[{&(0x7f0000003000-0x9e)=""/158, 0x9e}, {&(0x7f0000003000-0xb8)=""/184, 0xb8}], 0x2, &(0x7f0000002000)=[{&(0x7f0000003000-0x13)=""/106, 0x6a}], 0x1, 0x0) 2018/02/10 11:55:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, 0xffffffffffffffff, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:55:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[], 0x0) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:55:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x2, &(0x7f00003d3000-0x10)) 2018/02/10 11:55:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00001fe000-0xb)='/dev/loop#\x00', 0x40000000, 0x0) readv(r0, &(0x7f0000c99000)=[{&(0x7f0000f8f000)=""/177, 0xb1}, {&(0x7f0000c21000-0x1000)=""/4096, 0x1000}], 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b30000-0xa)='/dev/cuse\x00', 0x0, 0x0) pread64(r1, &(0x7f00007b1000), 0x37c, 0x0) r2 = syz_open_dev$loop(&(0x7f00002ca000)='/dev/loop#\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r3, 0x0) ioctl(r3, 0x400004000001276, &(0x7f00008a5000)) 2018/02/10 11:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, 0xffffffffffffffff, &(0x7f0000e65000-0x8), 0x5) 2018/02/10 11:55:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x0, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:55:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000dde000-0x28)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000003000-0x10)={&(0x7f0000005000-0x48)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002cd000-0x10)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000af000-0x80)={0x6, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) 2018/02/10 11:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x0) 2018/02/10 11:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00004f8000)=@get={0x1, &(0x7f0000b84000-0x48)=""/72, 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x200000004, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x80000000000}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000028000)={r0, &(0x7f000000b000-0xb5), &(0x7f0000571000-0x1)}, 0x20) 2018/02/10 11:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x0) 2018/02/10 11:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(r0, 0xffffffffffffff11, &(0x7f0000184000-0x8)=0xfffffffffffffffe) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000003000-0x20)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000904000)=""/100, 0x64) 2018/02/10 11:55:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={0xffffffffffffffff, 0x0, 0x0, 0xec, &(0x7f0000934000), &(0x7f0000008000-0xec)=""/236, 0x0, 0x9}, 0x28) sendmmsg(0xffffffffffffffff, &(0x7f0000f53000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) setsockopt(r0, 0x111, 0x1, &(0x7f000003b000-0x4)="7f5bffea", 0x4) sendmsg$nl_generic(r0, &(0x7f0000ca7000)={&(0x7f00002f5000-0xc)={0x10}, 0xc, &(0x7f0000ddd000-0x10)={&(0x7f00008ae000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:55:13 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(0xffffffffffffffff, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:55:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x0, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x0) 2018/02/10 11:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(0xffffffffffffffff, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) [ 129.795367] audit: type=1400 audit(1518263713.816:19): avc: denied { map_create } for pid=6008 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 129.818476] audit: type=1400 audit(1518263713.816:20): avc: denied { map_read map_write } for pid=6008 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/10 11:55:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000882000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00008d9000-0x39), 0x5da, 0x0, &(0x7f0000f7b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/10 11:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x0, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:55:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) sendmsg(r0, &(0x7f00007c4000-0x38)={0x0, 0x0, &(0x7f0000005000-0x20)=[{&(0x7f0000007000-0x1000)="cf1616ca7459334fe4c59b46738d49d2c50df484ed52dccd79db1876707900c69aff6211e01f40c1d23c03c411d0a05c87a051425baa7c2f7a47bcc3d423a4100fa2571a34ff236616e6a27601370901b9ccb5631deb3a67d906a3f32f2be2160b2e5165601a6e67fbb0e13b9cc835d82f22872f20eb4596da361b7a78c50a111377046bbf635efc2bdcb4056e06836fdae5684c656dd8e3de8e6be2feb645f5a8b6ab0cfee8d888fb324598dea99e7421ee2fd0ed514f0bba2b71", 0xbb}], 0x1, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:55:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00008e5000)=""/89) 2018/02/10 11:55:21 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x0, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000022000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) 2018/02/10 11:55:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(0xffffffffffffffff, &(0x7f0000f5c000)=[{&(0x7f000097a000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:55:21 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00009cf000-0x38)={0x0, 0x0, &(0x7f00002bf000+0xeff)=[], 0x0, &(0x7f000050f000)=[]}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f0000044000)='ns/mnt\x00') setns(r0, 0x0) unshare(0x20000400) clone(0x30020100, &(0x7f0000e69000), &(0x7f00009c5000-0x4), &(0x7f00001cc000), &(0x7f00004fc000)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00001a5000)=""/13) 2018/02/10 11:55:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x0, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) write$tun(r1, &(0x7f00003f1000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x102d5) 2018/02/10 11:55:30 executing program 1: futex(&(0x7f00003ed000), 0x8000000200000085, 0x0, &(0x7f0000000000), &(0x7f0000003000-0x4), 0x40000003) 2018/02/10 11:55:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[], 0x0) 2018/02/10 11:55:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x0, r0, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:55:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) mmap(&(0x7f0000a2b000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/02/10 11:55:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00007b7000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383c4b3b60ced7c54dbb7295df0df8217ad2c00000000000000e6", 0x20) close(r0) 2018/02/10 11:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) write$tun(r1, &(0x7f00003f1000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x102d5) 2018/02/10 11:55:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[], 0x0) 2018/02/10 11:55:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000916000)='trusted\x00', &(0x7f000010a000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000757000)='/selinux/load\x00', 0xfffffffffffffff9) mremap(&(0x7f0000736000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000023d000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000ca3000)='smaps\x00') readv(r0, &(0x7f00009a6000-0x80)=[{&(0x7f0000215000-0x1000)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000d71000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f00004ad000/0x800000)=nil) readv(r0, &(0x7f0000f5c000)=[], 0x0) 2018/02/10 11:55:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00009cf000-0x38)={0x0, 0x0, &(0x7f00002bf000+0xeff)=[], 0x0, &(0x7f000050f000)=[]}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f0000044000)='ns/mnt\x00') setns(r0, 0x0) unshare(0x20000400) clone(0x30020100, &(0x7f0000e69000), &(0x7f00009c5000-0x4), &(0x7f00001cc000), &(0x7f00004fc000)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00001a5000)=""/13) 2018/02/10 11:55:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00008f8000), 0x4) 2018/02/10 11:55:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000eb6000)=[{&(0x7f0000e1d000-0x39)="390000001300094700bb61e1c30500000700000002000000450000000000800019001a000d003f000000280ff4000300000000000000060400", 0x39}], 0x1) 2018/02/10 11:55:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:55:38 executing program 1: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000006000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @rand_addr=0xfffffffffffffff8, {[@lsrr={0x83, 0xb, 0x7fffffff, [@loopback=0x7f000001, @dev={0xac, 0x14}]}, @rr={0x7, 0x3, 0x0, []}]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/10 11:55:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:38 executing program 5: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x80002) syz_open_dev$midi(&(0x7f00003ee000)='/dev/midi#\x00', 0x0, 0x2) 2018/02/10 11:55:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f0000331000-0x8)='./file0\x00', &(0x7f0000391000)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ppoll(&(0x7f0000581000)=[{r0}, {r1}, {0xffffffffffffffff}], 0x3, &(0x7f0000720000), &(0x7f0000000000), 0x8) 2018/02/10 11:55:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x2, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_RECVERR(r0, 0x84, 0x3, &(0x7f0000000000), 0x4) 2018/02/10 11:55:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00008e8000)=@sack_info={0x0, 0x0, 0x4}, &(0x7f0000c7a000-0x4)=0xfffffffffffffc43) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='E', 0x1) ioctl$sock_ifreq(r0, 0x1000080000089f1, &(0x7f0000569000-0x28)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="01000000090002fbff031d0000010000c7000000e00003000480fbf502007e23"}) 2018/02/10 11:55:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:55:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$unix(r0, &(0x7f000048c000)={&(0x7f0000ef1000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00007a2000)=[], 0x0, &(0x7f00008fb000)=[]}, 0x20040084) 2018/02/10 11:55:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:55:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a7000-0x10)={&(0x7f0000453000-0x1334)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in=@multicast2=0xe0000002}, {@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/10 11:55:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00001dd000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2018/02/10 11:55:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000023000)="6e65742f7274365f73746174730073d9fda7ffa4ace8489bd4294df96b3b083d6441844434adfad4980c5a746de2f76d89c690") sendfile(r0, r0, &(0x7f0000f20000-0x8)=0x4, 0x8) 2018/02/10 11:55:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000040000-0x50)={@ipv4={[], [0xff, 0xff], @empty}, @empty, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x3}) 2018/02/10 11:55:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:55:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$admmidi(&(0x7f000066c000-0xe)='/dev/admmidi#\x00', 0xfffffffffffffffc, 0x125101) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 2018/02/10 11:55:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000909000-0x5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x440000000000127f, &(0x7f0000fd8000-0x2)) 2018/02/10 11:55:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000e07000-0x10)=@common='erspan0\x00', 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f0000c19000-0x72)="b9", 0x1, 0xc080, &(0x7f0000391000)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) 2018/02/10 11:55:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00009d5000-0xa8)=[{&(0x7f00006ec000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f00007ef000)=[], 0x0, &(0x7f0000df3000-0x30)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8000}}], 0x30}], 0x1, 0x0) 2018/02/10 11:55:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000e07000-0x10)=@common='erspan0\x00', 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f0000c19000-0x72)="b9", 0x1, 0xc080, &(0x7f0000391000)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) 2018/02/10 11:55:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 2018/02/10 11:55:54 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000fc4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000fc5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000fc9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000fc0000-0x1)='\x00', 0x1, 0x0, &(0x7f0000fc9000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/02/10 11:55:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:55:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:55:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000516000-0x2)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00008fa000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000bf2000-0x8)=0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000f6f000-0x400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/10 11:55:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000004000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, "0400003e1e000000"}}}}}, 0x0) 2018/02/10 11:55:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x8c) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), 0x10) 2018/02/10 11:55:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x8000) sendto$inet6(r0, &(0x7f000044c000), 0xffffffffffffff65, 0x20000002, &(0x7f0000cc8000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4(r1, &(0x7f0000219000-0x58)=@alg, &(0x7f0000db5000-0x4)=0xfffffdd1, 0x0) 2018/02/10 11:55:54 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) getsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000004000-0x4), &(0x7f0000013000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/02/10 11:55:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:54 executing program 6: mmap(&(0x7f0000000000/0xf85000)=nil, 0xf85000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:55:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) lseek(r0, 0x0, 0x3) 2018/02/10 11:55:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:55:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:55:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000684000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00002ba000-0x2c)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@loopback=0x7f000001]}, 0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000231000)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 2018/02/10 11:56:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00006a7000-0x1c)=[@in6={0xa, 0x3, 0x0, @empty}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000ba3000-0x18)={0x0, 0x0, 0x20}, &(0x7f00007a5000-0x4)=0x18) 2018/02/10 11:56:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:56:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:03 executing program 6: mmap(&(0x7f0000000000/0x1e000)=nil, 0x1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001e000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000e000)=@ipv6_newroute={0x1c, 0x18, 0x501, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, []}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:56:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 11:56:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:03 executing program 1: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000001000-0x4)=0xfd, 0x4) 2018/02/10 11:56:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000833000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000dc6000-0x68)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000bcc000)) 2018/02/10 11:56:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x401054d5, &(0x7f0000023000-0x4)) 2018/02/10 11:56:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6e000-0x30)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000009000-0xc9)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000ea000)={0x8, 0x0, &(0x7f0000007000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/10 11:56:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f000098f000-0x20)={{0x0, 0x0}}) timer_settime(0x0, 0x0, &(0x7f00003d0000-0x20)={{0x0, 0x8}, {0x0, r0}}, &(0x7f0000e10000)) 2018/02/10 11:56:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/10 11:56:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000002000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt(r0, 0x114, 0x8, &(0x7f0000000000), 0x0) 2018/02/10 11:56:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:56:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000048000-0x4)=0xc, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) listen$netrom(r2, 0x0) [ 187.218296] audit: type=1400 audit(1518263771.238:21): avc: denied { name_bind } for pid=6288 comm="syz-executor7" src=20028 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 187.229418] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/10 11:56:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00006d6000), 0x4) 2018/02/10 11:56:11 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0xfffffefffffffffd, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000004000-0x8)) 2018/02/10 11:56:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 2018/02/10 11:56:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 2018/02/10 11:56:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 187.240821] audit: type=1400 audit(1518263771.239:22): avc: denied { node_bind } for pid=6288 comm="syz-executor7" saddr=::1 src=20028 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 187.250440] binder: 6283:6295 ioctl 40046207 0 returned -16 [ 187.269407] audit: type=1400 audit(1518263771.246:23): avc: denied { set_context_mgr } for pid=6283 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/02/10 11:56:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000dba000-0x4)={0x0, 0x5}, 0x4) syz_emit_ethernet(0x46, &(0x7f000018b000-0x241)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "ba9ecc", 0x10, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "000464", 0x0, "8255f0"}}}}}}}, &(0x7f0000e0f000-0x10)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000089e000)="2400000020002551075d0165ff72fc0280000000001000220ee1000c0800040000001700", 0x24) 2018/02/10 11:56:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(0xffffffffffffffff, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 2018/02/10 11:56:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/10 11:56:11 executing program 7: mmap(&(0x7f0000000000/0xc7f000)=nil, 0xc7f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000009000-0xa0)={0x7ff, @in={{0x2, 0x0, @loopback=0x7f000001}}}, &(0x7f0000578000-0x4)=0xa0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000c7f000-0x8)={r1}, &(0x7f00001ca000)=0x8) 2018/02/10 11:56:11 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet_opts(r1, 0x0, 0x7, &(0x7f0000018000), 0x0) 2018/02/10 11:56:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(0xffffffffffffffff, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) [ 187.307368] audit: type=1400 audit(1518263771.322:24): avc: denied { name_connect } for pid=6288 comm="syz-executor7" dest=20028 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 187.321056] binder: 6283:6303 Release 1 refcount change on invalid ref 0 ret -22 2018/02/10 11:56:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) sendto(r0, &(0x7f0000c77000-0x5d), 0x0, 0x40, &(0x7f00003e1000)=@l2={0x1f}, 0xe) 2018/02/10 11:56:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 2018/02/10 11:56:19 executing program 1: process_vm_readv(0x0, &(0x7f0000986000)=[{&(0x7f0000001000-0x1000)=""/4096, 0x1000}], 0x1, &(0x7f00004ea000)=[], 0x0, 0x0) 2018/02/10 11:56:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000782000-0x2)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$sg(&(0x7f00006b4000)='/dev/sg#\x00', 0x0, 0x0) 2018/02/10 11:56:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000a02000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x7}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000955000-0x8)={r0, r1}) r3 = syz_open_procfs(0x0, &(0x7f000018d000-0xa)='net/kcm\x00\b\x00') readv(r3, &(0x7f0000c44000-0x90)=[{&(0x7f0000ea5000)=""/4096, 0x1000}], 0x1) 2018/02/10 11:56:19 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000002000-0x4), 0x4) 2018/02/10 11:56:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(0xffffffffffffffff, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f000000c000)=[], 0x0, 0x0, &(0x7f0000002000-0x1)}) 2018/02/10 11:56:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000252000-0x90)=[], 0x0) 2018/02/10 11:56:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @empty}, 0x1c) listen(r0, 0x3) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000deb000)={0x0, 0x0, 0x1, 0x1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000848000-0x1)='X', 0x1, 0x0, &(0x7f0000060000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4$inet6(r0, &(0x7f0000362000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f0000c42000)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x9, &(0x7f0000912000-0x98)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @empty}}, 0x0, 0x4fb5}, 0x98) [ 195.434931] binder: 6350 RLIMIT_NICE not set [ 195.444852] binder: 6348:6350 ioctl c0306201 2000a000 returned -11 [ 195.460749] audit: type=1400 audit(1518263779.481:25): avc: denied { prog_load } for pid=6343 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 195.530897] audit: type=1400 audit(1518263779.551:26): avc: denied { prog_run } for pid=6343 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/10 11:56:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f000000c000)=[], 0x0, 0x0, &(0x7f0000002000-0x1)}) 2018/02/10 11:56:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000000a000-0x3d)={0x26, 'hash\x00', 0x0, 0x0, "637263333200001f000000000000000000000000000000000000000020000063000000000000000f000000000000f3ffffff0000c600"}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ce0000-0x4)="3b692cec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f000075e000)={&(0x7f00005cc000-0x10)=@ipx={0x4, 0x0, 0x0, "808f954bfd50"}, 0x10, &(0x7f00003d9000-0x30)=[{&(0x7f00001d7000-0xf9)="73e3270e5240e945d82ff70a691eb7e2fecc59d5f1498b783b3ce232263ee8991612d7ec373f238c0109483e3d91b60fa715f8c661ea397f345c18f71867faa2874e67b9296c15a40ec32abad977b7", 0x4f}], 0x1}, 0x0) 2018/02/10 11:56:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x80800000010d, 0x6, &(0x7f0000961000)="00c1001b", 0x4) 2018/02/10 11:56:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 2018/02/10 11:56:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000ca8000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000fb0000-0x4)=0x0) ptrace$getregs(0xffffffffffffffff, r4, 0x9, &(0x7f0000cd2000)=""/186) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = dup3(r5, r3, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(r2, &(0x7f000098f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f000080f000)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000862000-0x18)={@mcast1={0xff, 0x1, [], 0x1}, 0x79, r8}) r9 = shmget(0x3, 0x4000, 0x400, &(0x7f0000691000/0x4000)=nil) shmctl$SHM_INFO(r9, 0xe, &(0x7f0000224000)=""/86) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000da9000)={0x0, r5}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00003fa000-0x18)={0x4000, 0x4, 0x3, 0x5, 0xfffffffffffffffa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00001e6000-0x4)='tls\x00', 0x4) getgid() ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) getresgid(&(0x7f0000c7d000-0x4), &(0x7f0000337000), &(0x7f000018e000)) msgget$private(0x0, 0x40) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_NMI(r12, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/10 11:56:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000c79000)='stat\x00') close(r0) 2018/02/10 11:56:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20000000002, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f000034a000-0x10)='/selinux/create\x00', 0x2, 0x0) write(r0, &(0x7f0000160000-0x1000)="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", 0xff8) 2018/02/10 11:56:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20000000002, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:27 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fgetxattr(r0, &(0x7f0000014000-0x1a)=@known='com.apple.system.Security\x00', &(0x7f0000002000-0x8), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f000039b000), &(0x7f0000bda000)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/10 11:56:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000008e000)={0x0}, &(0x7f000093d000)=0x499) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000d00000)) 2018/02/10 11:56:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20000000002, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f000000c000)=[], 0x0, 0x0, &(0x7f0000002000-0x1)}) [ 203.634533] binder: 6376 RLIMIT_NICE not set [ 203.639203] binder: 6371:6376 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20000000002, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000be7000-0x8)={0x19980330}, &(0x7f000032e000)) prctl$intptr(0x18, 0x0) 2018/02/10 11:56:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0x0, 0x4002) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r4 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000f8a000), &(0x7f0000528000+0xb0b)=0xc) sched_getattr(0x0, &(0x7f0000ce3000-0x30), 0x30, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8db) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000704000)={0xa}) sysfs$1(0x1, &(0x7f0000bc1000)='/dev/loop-control\x00') add_key$keyring(&(0x7f00009d5000)='keyring\x00', &(0x7f00000ce000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000a86000-0x6)) 2018/02/10 11:56:27 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20000000002, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f000000c000)=[], 0x0, 0x0, &(0x7f0000002000-0x1)}) 2018/02/10 11:56:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) close(r0) 2018/02/10 11:56:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ca8000/0x4000)=nil, 0x4000, 0x0, &(0x7f000051f000-0x8), 0x3, 0x0) syz_open_dev$adsp(&(0x7f000086e000)='/dev/adsp#\x00', 0x0, 0x0) 2018/02/10 11:56:27 executing program 6: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) munmap(&(0x7f0000006000/0x3000)=nil, 0x3000) connect$can_bcm(r0, &(0x7f0000001000)={0x1d}, 0x10) sendmsg(r0, &(0x7f000000c000)={&(0x7f0000002000-0x58)=@hci={0x1f}, 0x6, &(0x7f0000003000-0x10)=[{&(0x7f0000007000-0x38)="07000000017daebd4c317b8c0649831def071b7c358611a6238d495f9f3ff91ee6d69764e7db2b81abfffdc05da6f696bfc575b2f528f6ef", 0x38}], 0x1, &(0x7f000000e000)=[]}, 0x0) [ 203.699218] binder: 6408 RLIMIT_NICE not set [ 203.711540] binder: 6407:6408 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:27 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20000000002, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000002000-0x18)) r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000af1000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000202000)=@ethtool_pauseparam}) 2018/02/10 11:56:27 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20000000002, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20000000002, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:27 executing program 7: quotactl(0x80000201, &(0x7f00000ef000-0x8)='./file0\x00', 0x0, &(0x7f0000001000-0x13)) 2018/02/10 11:56:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) [ 203.772208] binder: 6426 RLIMIT_NICE not set [ 203.773851] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) [ 203.784065] binder: 6422:6426 ioctl c0306201 2000a000 returned -11 [ 203.791843] audit: type=1400 audit(1518263787.812:27): avc: denied { setpcap } for pid=6419 comm="syz-executor7" capability=8 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/10 11:56:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20000000002, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f000000c000)=[], 0x0, 0x0, &(0x7f0000002000-0x1)}) 2018/02/10 11:56:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) close(r0) 2018/02/10 11:56:27 executing program 7: epoll_create(0x1ff) 2018/02/10 11:56:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000782000-0x2)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$sg(&(0x7f0000832000)='/dev/sg#\x00', 0x0, 0x0) 2018/02/10 11:56:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d37000-0xc)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000022000-0xc)={0x2001}) epoll_pwait(r2, &(0x7f0000a1f000-0x54)=[{}], 0x1, 0x10, &(0x7f0000bc0000-0x8), 0x8) 2018/02/10 11:56:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00009ec000), 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) dup2(r1, r0) 2018/02/10 11:56:27 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2000000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000035000-0x1000)=""/144, &(0x7f0000001000-0x4)=0x90) 2018/02/10 11:56:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20000000002, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:27 executing program 6: splice(0xffffffffffffffff, &(0x7f0000671000), 0xffffffffffffffff, &(0x7f0000c29000-0x8), 0x9, 0x0) 2018/02/10 11:56:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f000000c000-0x9)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c0044dff, &(0x7f0000001000)) 2018/02/10 11:56:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000da2000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000a5d000)='/dev/admmidi#\x00', 0x1, 0x42000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00007ac000-0x4)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000069000-0xb0)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085e000-0x10)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r0, r2) getresgid(&(0x7f0000e5e000), &(0x7f00001d1000)=0x0, &(0x7f0000ffb000-0x4)) fstat(r2, &(0x7f0000a8a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f000076c000)='./file0\x00', &(0x7f0000417000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000fc4000)={0xd6b, 0x10000}) r7 = getgid() lstat(&(0x7f0000d63000-0x8)='./file0\x00', &(0x7f0000cda000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() lstat(&(0x7f00000ef000-0x8)='./file0\x00', &(0x7f0000876000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000f4b000)='./file0\x00', &(0x7f000090e000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00007d3000)=[r4, r5, r6, r7, r8, r9, r10, r11]) read(r3, &(0x7f00004b9000-0x55)=""/85, 0x55) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f000000c000)=[], 0x0, 0x0, &(0x7f0000002000-0x1)}) [ 203.945348] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 203.946289] binder: 6463 RLIMIT_NICE not set [ 203.964715] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 203.971994] binder: 6458:6463 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000001000-0x3), 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f000000c000-0x9)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c0044dff, &(0x7f0000001000)) 2018/02/10 11:56:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000684000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00009c4000-0x34)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) close(r0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000360000)={@random="cd97393f0f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x8, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xf8f000)=nil, 0xf8f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00003ae000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000483000-0x1c)={0xa, 0xffffffffffffffff, 0x10001, @empty}, 0x1c) sendmsg(r0, &(0x7f0000cdc000-0x38)={0x0, 0x0, &(0x7f00003c8000)=[], 0x0, &(0x7f0000e31000)=[]}, 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000407000)='/dev/mixer\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000b29000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000ce0000)=0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000af3000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000584000)=0x2, 0x4) sendto$inet(r1, &(0x7f0000482000), 0xff2b, 0x800000120000001, &(0x7f0000172000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000ff6000-0x3c)=[{{&(0x7f0000e77000-0xe)=@l2={0x1f}, 0xe, &(0x7f0000637000-0x50)=[], 0x0, &(0x7f000081a000-0x170)=[]}}], 0x1, 0x40) r2 = getpgid(0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000c9c000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000f79000)=0x98) tkill(r2, 0x1000000000016) [ 204.026726] binder: 6498 RLIMIT_NICE not set [ 204.032373] binder: 6493:6498 ioctl c0306201 2000a000 returned -11 [ 204.065744] binder: 6513 RLIMIT_NICE not set 2018/02/10 11:56:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f000029a000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x0) r1 = socket(0x10002000000011, 0x8000000080003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000e13000)={0x0, 0x0, 0xfff, 0x20}, &(0x7f000049d000-0x4)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000061e000-0x20)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006ca000-0x4)=0x20) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000ea0000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) bind$ipx(r1, &(0x7f0000447000)={0x4, 0x80000000, 0xa000, "45fa8dcf1ce4", 0x80000001}, 0x10) bind$packet(r1, &(0x7f0000c85000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x81) r1 = socket$inet(0x11, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000001e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000d1000), 0x4) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 11:56:28 executing program 1: mmap(&(0x7f0000000000/0x26000)=nil, 0x26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000016000-0x1eb)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x2, 0x4], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, []}}}}}}}, 0x0) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 0: setgid(0x0) [ 204.081190] binder: 6501:6513 ioctl c0306201 2000a000 returned -11 [ 204.096975] syz-executor2 uses obsolete (PF_INET,SOCK_PACKET) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000002000+0x922)="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", 0x6df) 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:28 executing program 1: mmap(&(0x7f0000000000/0xe81000)=nil, 0xe81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000471000-0xe8)={{{@in6=@mcast1, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000504000-0x4)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000647000-0x50)={@dev={0xfe, 0x80, [], 0x0, 0xa}, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x10001, 0xfffffffffffff533, 0x8, 0x500, 0x2, 0x200000, r1}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f000087d000)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000616000)='/dev/vcsa#\x00', 0x5, 0x80000) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000535000-0xc)={@local, @empty, 0x0}, &(0x7f0000e7f000)=0xfffffffffffffe41) r5 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000e7f000)={{{@in6=@loopback={0x0, 0x1}, @in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x3, 0x5, 0x2, 0x4, 0xa, 0x80, 0xa0, 0xbb, r4, r5}, {0x2, 0x8, 0x14, 0x7ff, 0x5, 0x7, 0x0, 0x6}, {0x0, 0x4}, 0xfe, 0x1, 0x1, 0x1, 0x3}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x1, 0x3b}, 0x2, @in=@dev={0xac, 0x14, 0x0, 0xc}, 0x1, 0x2, 0xd0c0ff3d3519ba14, 0xc0f, 0x7fffffff, 0x101, 0x1f}}, 0xe8) preadv(r3, &(0x7f0000e7b000)=[{&(0x7f0000e7c000-0x37)=""/55, 0x37}, {&(0x7f0000e7b000)=""/125, 0x7d}], 0x2, 0x0) r6 = getpgrp(0xffffffffffffffff) r7 = shmget$private(0x0, 0x4000, 0x78000004, &(0x7f00004cb000/0x4000)=nil) shmat(r7, &(0x7f0000c82000/0x4000)=nil, 0x409705dd76705c0f) tgkill(r2, r6, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000e80000-0x18)=@get={0x1, &(0x7f0000e80000-0x7f)=""/127, 0x6aa}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000e71000)={0xa, 0x0, 0x45da8146, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x2}, 0x1c) connect$inet6(r8, &(0x7f000035d000)={0xa, 0x3, 0x6, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x0, 0x10}}, 0x1}, 0x1c) r9 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r9, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r9, &(0x7f0000380000-0x38)={&(0x7f00009dd000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00002cf000-0x10)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x0, "", []}, 0x10}, 0x1, 0x0, 0x0, 0x8820}, 0x81) [ 204.124960] audit: type=1400 audit(1518263788.145:28): avc: denied { ipc_owner } for pid=6524 comm="syz-executor2" capability=15 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 204.128613] binder: 6536 RLIMIT_NICE not set 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xe69000)=nil, 0xe69000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000af2000-0x4)=0x404100fffffffff, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000774000-0x4)=0xffffffffffffffff, 0x4) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00006c5000-0xa0)=[{&(0x7f0000318000-0x5d)="b5c5242e283536f05dfcf3c925d43c6cf1eb17fde04dfbf2b3", 0x19}], 0x1) write(r0, &(0x7f0000805000)="346bd71b3c015b53c0833e97df6312f9b0659db5b29837caa9", 0x19) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x4) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000237000-0x38)=[{0x0, 0x0, &(0x7f0000100000-0x80)=[], 0x0, &(0x7f00001e3000-0x1188)=[]}], 0x1, 0x0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 204.169615] audit: type=1400 audit(1518263788.186:29): avc: denied { setgid } for pid=6538 comm="syz-executor0" capability=6 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) [ 204.233295] binder: 6560 RLIMIT_NICE not set 2018/02/10 11:56:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e22000-0x28)={@common='ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000022b000)={&(0x7f0000f83000)={0x10}, 0x132, &(0x7f0000f76000-0x10)={&(0x7f0000f86000-0x58)=@newneigh={0x28, 0x1c, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0x100000000000007, 0x0, 0x0, r1, 0x0, 0x32}, [@NDA_LLADDR={0xa, 0x2, @random="e5e1b3e90be5"}]}, 0x392}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x80045104, &(0x7f0000264000)) 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000073e000), &(0x7f0000a52000)=0x4) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000f02000-0x28)={@common='ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000fde000)={&(0x7f0000497000-0xc)={0x10}, 0xc, &(0x7f0000088000-0x10)={&(0x7f0000208000)=@dellink={0x20, 0x11, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, []}, 0x20}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:28 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) [ 204.307490] binder: 6578 RLIMIT_NICE not set 2018/02/10 11:56:28 executing program 2: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000002000-0x8)=&(0x7f000098a000-0x1)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000005000-0x8)={0x7, 0x0, []}) 2018/02/10 11:56:28 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000000e000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) dup3(r2, r0, 0x0) 2018/02/10 11:56:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x78, 0x47, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) sync() socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000003000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) set_mempolicy(0xc000, &(0x7f0000001000-0x8), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000), 0x4) syz_open_dev$usbmon(&(0x7f0000f49000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000558000-0x8)={0x0, 0x9}, &(0x7f0000470000)=0x8) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00005c4000-0x8)) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000036000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000826000-0x16), 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000278000+0x303)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00004e6000-0x10)={0x1, &(0x7f0000f8d000-0x18)=[{0xfffffffffffff5ed}]}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000bf2000), 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) write$evdev(0xffffffffffffffff, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) close(r0) [ 204.357199] device syz3 entered promiscuous mode 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) write$evdev(0xffffffffffffffff, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000034c000-0x10)={0x1, &(0x7f0000769000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) semtimedop(0x0, &(0x7f0000c0b000-0x6)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000860000-0x10)={0x0, 0x989680}) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 2: clone(0x0, &(0x7f00009df000), &(0x7f000083d000-0x4), &(0x7f0000ac7000), &(0x7f0000fe4000)) prctl$intptr(0x24, 0x6) [ 204.381445] device syz3 left promiscuous mode [ 204.401216] device syz3 entered promiscuous mode [ 204.407639] device syz3 left promiscuous mode [ 204.419865] audit: type=1326 audit(1518263788.440:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6612 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x453a59 code=0x7ffc0000 [ 204.447617] audit: type=1326 audit(1518263788.468:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6612 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=220 compat=0 ip=0x453a59 code=0x7ffc0000 [ 204.472116] audit: type=1326 audit(1518263788.468:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6612 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x453a59 code=0x7ffc0000 [ 204.496443] audit: type=1326 audit(1518263788.468:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6612 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x453a59 code=0x7ffc0000 [ 204.520748] audit: type=1326 audit(1518263788.473:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6612 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x453a59 code=0x7ffc0000 [ 204.544900] audit: type=1326 audit(1518263788.474:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6612 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x453a59 code=0x7ffc0000 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) write$evdev(0xffffffffffffffff, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:28 executing program 1: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000ab7000), 0x4) sendmsg$inet_sctp(r0, &(0x7f0000558000-0x38)={&(0x7f0000a34000)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000119000)=[{&(0x7f0000967000)="c8", 0x1}], 0x1}, 0x0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000001000-0x10)={0x28, 0x0, 0x0, @hyper}, 0x10) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000c2d000-0x8)={0x20071026}, &(0x7f0000706000-0x18)) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000467000)=""/39) 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f000048b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$binder(&(0x7f0000aff000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 2018/02/10 11:56:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095c000-0x4)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0xfdc7, 0x0, &(0x7f000057c000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) r2 = socket(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000b9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r2, &(0x7f000050a000-0x6e), 0xff77, 0x8000, &(0x7f0000560000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg$inet_sctp(r2, &(0x7f000009b000-0x38)={&(0x7f0000ef6000-0x10)=@in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10, &(0x7f00008e2000-0x90)=[], 0x0, &(0x7f0000438000-0x90)=[]}, 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) [ 204.569199] audit: type=1326 audit(1518263788.474:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6612 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x453a59 code=0x7ffc0000 [ 204.619326] capability: warning: `syz-executor0' uses deprecated v2 capabilities in a way that may be insecure 2018/02/10 11:56:28 executing program 1: mremap(&(0x7f00004ef000/0x1000)=nil, 0x1000, 0x4000, 0x1000000000000003, &(0x7f00004cf000/0x4000)=nil) [ 204.656436] binder: 6658 RLIMIT_NICE not set 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000704000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fda000-0x4)=0x3) close(r0) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000308000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f000010f000)={0x0, &(0x7f000002d000), 0x0, 0xffffffffffffffff, 0x80003}) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000fbd000)=0x72, 0x4) write(r0, &(0x7f0000569000)="1f0000001a001bf200001321fdf3167600041d0100008d3d93391a0001454a", 0x1f) recvmmsg(r0, &(0x7f0000659000)=[{{&(0x7f0000989000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x14, &(0x7f0000632000-0x10)=[], 0x0, &(0x7f0000eec000)=""/167, 0xa7}}], 0x1, 0x0, 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000aee000)='net/psched\x00') 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 204.730574] binder: 6682 RLIMIT_NICE not set 2018/02/10 11:56:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d37000-0xc)={0x10002018}) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f000060d000-0x8)='/', 0x0, 0x0) getdents(r0, &(0x7f00003a1000-0xd2)=""/210, 0x6c) 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000fbd000)=0x72, 0x4) write(r0, &(0x7f0000569000)="1f0000001a001bf200001321fdf3167600041d0100008d3d93391a0001454a", 0x1f) recvmmsg(r0, &(0x7f0000659000)=[{{&(0x7f0000989000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x14, &(0x7f0000632000-0x10)=[], 0x0, &(0x7f0000eec000)=""/167, 0xa7}}], 0x1, 0x0, 0x0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc3, @time}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000b7d000-0x11)='/selinux/enforce\x00', 0x0, 0x0) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000aa8000-0x54)={'system_u:object_r:ptchown_exec_t:s0', 0x20, 'system_u:object_r:ksm_device_t:s0', 0x20, 0x0, 0x0, 0x20, 'unconfined\x00'}, 0x54) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00002cd000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000681000-0x8c)={0x0, 0x0, 0x0, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000200"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x513}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:28 executing program 2: mmap(&(0x7f0000000000/0x57000)=nil, 0x57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000053000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000054000-0xd)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) write$sndseq(r2, &(0x7f0000053000)=[{0xfffffffffffffffd, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @ext={0x0, &(0x7f0000056000-0x2)}}], 0x30) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) [ 204.795141] binder: 6705 RLIMIT_NICE not set 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x100000000000010, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000096f000)="1f000000160007f2000094ffa4000800000000000000000000000000030004", 0x1f) recvmsg$netrom(r0, &(0x7f00009c7000)={&(0x7f0000a9c000-0x10)=@ax25={0x3, {"98dba607110b45"}}, 0x10, &(0x7f0000fcf000)=[], 0x0, &(0x7f00000af000)=[]}, 0x0) recvfrom$unix(r0, &(0x7f0000409000-0x66), 0x0, 0x0, &(0x7f000040d000-0x2)=@abs, 0x20000000) 2018/02/10 11:56:28 executing program 3: mmap(&(0x7f0000000000/0x427000)=nil, 0x427000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000003000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0x15}}, 0x10) sendmsg$rds(r0, &(0x7f0000007000-0x38)={&(0x7f0000014000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000)=[], 0x0, &(0x7f000000f000)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000013000-0xba)=""/186, 0xba}, &(0x7f0000006000)=[{&(0x7f0000014000-0x69)=""/122, 0x15ea15c6}], 0x1}}], 0x48}, 0x0) 2018/02/10 11:56:28 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:28 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x0, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc3, @time}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000b7d000-0x11)='/selinux/enforce\x00', 0x0, 0x0) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000aa8000-0x54)={'system_u:object_r:ptchown_exec_t:s0', 0x20, 'system_u:object_r:ksm_device_t:s0', 0x20, 0x0, 0x0, 0x20, 'unconfined\x00'}, 0x54) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00002cd000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000681000-0x8c)={0x0, 0x0, 0x0, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000200"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/10 11:56:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:29 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:29 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x0, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 204.980411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6749 comm=syz-executor7 [ 204.998156] [ 204.999849] ============================= [ 205.004037] WARNING: suspicious RCU usage [ 205.008180] 4.15.0+ #307 Not tainted [ 205.011895] ----------------------------- [ 205.016049] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! 2018/02/10 11:56:29 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) [ 205.017169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6761 comm=syz-executor7 [ 205.025353] [ 205.025353] other info that might help us debug this: [ 205.025353] [ 205.025360] [ 205.025360] rcu_scheduler_active = 2, debug_locks = 1 [ 205.025364] 1 lock held by syz-executor3/6756: [ 205.025370] #0: (rcu_read_lock){....}, at: [<00000000a1034268>] __rds_conn_create+0xe46/0x1b50 [ 205.065624] [ 205.065624] stack backtrace: [ 205.070144] CPU: 0 PID: 6756 Comm: syz-executor3 Not tainted 4.15.0+ #307 [ 205.077047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.086376] Call Trace: [ 205.088948] dump_stack+0x194/0x257 [ 205.092556] ? arch_local_irq_restore+0x53/0x53 [ 205.097220] lockdep_rcu_suspicious+0x123/0x170 [ 205.101868] ___might_sleep+0x385/0x470 [ 205.105817] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 205.111695] ? debug_mutex_init+0x1c/0x60 [ 205.115827] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 205.120823] __might_sleep+0x95/0x190 [ 205.124604] kmem_cache_alloc+0x2a2/0x760 [ 205.128726] ? lock_acquire+0x1d5/0x580 [ 205.132677] ? __rds_conn_create+0xe46/0x1b50 [ 205.137150] ? SyS_membarrier+0x700/0x700 [ 205.141268] ? init_timer_key+0x163/0x3f0 [ 205.145396] rds_tcp_conn_alloc+0xa7/0x4e0 [ 205.149608] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 205.153993] ? rds_cmsg_atomic+0xff0/0xff0 [ 205.158203] ? __lockdep_init_map+0xe4/0x650 [ 205.162584] ? rds_cmsg_atomic+0xff0/0xff0 [ 205.166797] __rds_conn_create+0x112f/0x1b50 [ 205.171204] ? rds_conn_drop+0xb0/0xb0 [ 205.175070] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 205.180065] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 205.184798] ? __raw_spin_lock_init+0x1c/0x100 [ 205.189356] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 205.194356] ? __lockdep_init_map+0xe4/0x650 [ 205.198741] ? lockdep_init_map+0x9/0x10 [ 205.202775] ? __init_waitqueue_head+0x97/0x140 [ 205.207421] ? init_wait_entry+0x1b0/0x1b0 [ 205.211636] ? lockdep_init_map+0x9/0x10 [ 205.215676] ? rds_message_alloc+0x28c/0x330 [ 205.220063] ? rds_message_next_extension+0x210/0x210 [ 205.225231] ? rds_rdma_extra_size+0x205/0x2b0 [ 205.229796] ? rds_atomic_free_op+0x330/0x330 [ 205.234266] ? lock_sock_nested+0x91/0x110 [ 205.238480] rds_conn_create_outgoing+0x3f/0x50 [ 205.243129] rds_sendmsg+0xda3/0x2390 [ 205.246934] ? rds_send_drop_to+0x19d0/0x19d0 [ 205.251442] ? find_held_lock+0x35/0x1d0 [ 205.255484] ? sock_has_perm+0x2a4/0x420 [ 205.259524] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 205.264858] ? lock_downgrade+0x980/0x980 [ 205.268987] ? lock_release+0xa40/0xa40 [ 205.272952] ? selinux_socket_sendmsg+0x36/0x40 [ 205.277593] ? security_socket_sendmsg+0x89/0xb0 [ 205.282325] ? rds_send_drop_to+0x19d0/0x19d0 [ 205.286801] sock_sendmsg+0xca/0x110 [ 205.290492] ___sys_sendmsg+0x767/0x8b0 [ 205.294447] ? copy_msghdr_from_user+0x590/0x590 [ 205.299180] ? up_read+0x1a/0x40 [ 205.302521] ? rds_trans_get_preferred+0xfb/0x130 [ 205.307344] ? rds_bind+0x3bd/0xc00 [ 205.310962] ? __fget_light+0x2b2/0x3c0 [ 205.314913] ? fget_raw+0x20/0x20 [ 205.318345] ? __might_sleep+0x95/0x190 [ 205.322321] __sys_sendmsg+0xe5/0x210 [ 205.326097] ? __sys_sendmsg+0xe5/0x210 [ 205.330050] ? SyS_shutdown+0x290/0x290 [ 205.334009] ? SyS_futex+0x269/0x390 [ 205.337713] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 205.343233] SyS_sendmsg+0x2d/0x50 [ 205.346752] ? __sys_sendmsg+0x210/0x210 [ 205.350787] do_syscall_64+0x282/0x940 [ 205.354650] ? __do_page_fault+0xc90/0xc90 [ 205.358859] ? mmdrop+0x18/0x30 [ 205.362116] ? finish_task_switch+0x29b/0x890 [ 205.366589] ? syscall_return_slowpath+0x550/0x550 [ 205.371495] ? syscall_return_slowpath+0x2ac/0x550 [ 205.376399] ? prepare_exit_to_usermode+0x350/0x350 [ 205.381390] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 205.386736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.391561] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 205.396725] RIP: 0033:0x453a59 [ 205.399886] RSP: 002b:00007fbd56bddc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.407578] RAX: ffffffffffffffda RBX: 00007fbd56bde6d4 RCX: 0000000000453a59 [ 205.414822] RDX: 0000000000000000 RSI: 0000000020006fc8 RDI: 0000000000000013 [ 205.422068] RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 [ 205.429312] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 205.436556] R13: 00000000000004b5 R14: 00000000006f7198 R15: 0000000000000000 [ 205.443895] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 205.451357] in_atomic(): 1, irqs_disabled(): 0, pid: 6756, name: syz-executor3 [ 205.458710] 1 lock held by syz-executor3/6756: [ 205.463285] #0: (rcu_read_lock){....}, at: [<00000000a1034268>] __rds_conn_create+0xe46/0x1b50 [ 205.472226] CPU: 0 PID: 6756 Comm: syz-executor3 Not tainted 4.15.0+ #307 [ 205.479125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.488454] Call Trace: [ 205.491019] dump_stack+0x194/0x257 [ 205.494623] ? arch_local_irq_restore+0x53/0x53 [ 205.499282] ? print_lock+0x9f/0xa2 [ 205.502885] ? lockdep_print_held_locks+0xc4/0x130 [ 205.507796] ___might_sleep+0x2b2/0x470 [ 205.511746] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 205.517615] ? debug_mutex_init+0x1c/0x60 [ 205.521740] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 205.526738] __might_sleep+0x95/0x190 [ 205.530522] kmem_cache_alloc+0x2a2/0x760 [ 205.534646] ? lock_acquire+0x1d5/0x580 [ 205.538598] ? __rds_conn_create+0xe46/0x1b50 [ 205.543070] ? SyS_membarrier+0x700/0x700 [ 205.547276] ? init_timer_key+0x163/0x3f0 [ 205.551402] rds_tcp_conn_alloc+0xa7/0x4e0 [ 205.555617] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 205.560004] ? rds_cmsg_atomic+0xff0/0xff0 [ 205.564222] ? __lockdep_init_map+0xe4/0x650 [ 205.568605] ? rds_cmsg_atomic+0xff0/0xff0 [ 205.572818] __rds_conn_create+0x112f/0x1b50 [ 205.577252] ? rds_conn_drop+0xb0/0xb0 [ 205.581140] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 205.586137] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 205.590870] ? __raw_spin_lock_init+0x1c/0x100 [ 205.595427] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 205.600423] ? __lockdep_init_map+0xe4/0x650 [ 205.604810] ? lockdep_init_map+0x9/0x10 [ 205.608849] ? __init_waitqueue_head+0x97/0x140 [ 205.613507] ? init_wait_entry+0x1b0/0x1b0 [ 205.617729] ? lockdep_init_map+0x9/0x10 [ 205.621770] ? rds_message_alloc+0x28c/0x330 [ 205.626155] ? rds_message_next_extension+0x210/0x210 [ 205.631322] ? rds_rdma_extra_size+0x205/0x2b0 [ 205.635884] ? rds_atomic_free_op+0x330/0x330 [ 205.640353] ? lock_sock_nested+0x91/0x110 [ 205.644569] rds_conn_create_outgoing+0x3f/0x50 [ 205.649217] rds_sendmsg+0xda3/0x2390 [ 205.653030] ? rds_send_drop_to+0x19d0/0x19d0 [ 205.657523] ? find_held_lock+0x35/0x1d0 [ 205.661568] ? sock_has_perm+0x2a4/0x420 [ 205.665607] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 205.670944] ? lock_downgrade+0x980/0x980 [ 205.675074] ? lock_release+0xa40/0xa40 [ 205.679042] ? selinux_socket_sendmsg+0x36/0x40 [ 205.683700] ? security_socket_sendmsg+0x89/0xb0 [ 205.688431] ? rds_send_drop_to+0x19d0/0x19d0 [ 205.692904] sock_sendmsg+0xca/0x110 [ 205.696594] ___sys_sendmsg+0x767/0x8b0 [ 205.700546] ? copy_msghdr_from_user+0x590/0x590 [ 205.705279] ? up_read+0x1a/0x40 [ 205.708620] ? rds_trans_get_preferred+0xfb/0x130 [ 205.713440] ? rds_bind+0x3bd/0xc00 [ 205.717052] ? __fget_light+0x2b2/0x3c0 [ 205.721005] ? fget_raw+0x20/0x20 [ 205.724439] ? __might_sleep+0x95/0x190 [ 205.728414] __sys_sendmsg+0xe5/0x210 [ 205.732192] ? __sys_sendmsg+0xe5/0x210 [ 205.736143] ? SyS_shutdown+0x290/0x290 [ 205.740099] ? SyS_futex+0x269/0x390 [ 205.743802] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 205.749332] SyS_sendmsg+0x2d/0x50 [ 205.752859] ? __sys_sendmsg+0x210/0x210 [ 205.756896] do_syscall_64+0x282/0x940 [ 205.760755] ? __do_page_fault+0xc90/0xc90 [ 205.764961] ? mmdrop+0x18/0x30 [ 205.768227] ? finish_task_switch+0x29b/0x890 [ 205.772701] ? syscall_return_slowpath+0x550/0x550 [ 205.777607] ? syscall_return_slowpath+0x2ac/0x550 [ 205.782513] ? prepare_exit_to_usermode+0x350/0x350 [ 205.787509] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 205.792853] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.797694] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 205.802858] RIP: 0033:0x453a59 [ 205.806024] RSP: 002b:00007fbd56bddc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.813706] RAX: ffffffffffffffda RBX: 00007fbd56bde6d4 RCX: 0000000000453a59 [ 205.820952] RDX: 0000000000000000 RSI: 0000000020006fc8 RDI: 0000000000000013 2018/02/10 11:56:29 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x0, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000ad3000), 0x3) 2018/02/10 11:56:29 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000fd6000-0x4), 0x4) 2018/02/10 11:56:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00006f0000)="2400000052001f0014f9f426000904000a0007100800ebff07000000080000000000008d", 0x24) 2018/02/10 11:56:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) [ 205.828197] RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 [ 205.835444] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 205.842689] R13: 00000000000004b5 R14: 00000000006f7198 R15: 0000000000000000 2018/02/10 11:56:29 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00004fe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x380000000000000) 2018/02/10 11:56:29 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000)) write$evdev(r0, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) close(0xffffffffffffffff) 2018/02/10 11:56:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000792000-0x90)={0x0, {{0x2, 0xffffffffffffffff, @loopback=0x7f000001}}}, 0x90) 2018/02/10 11:56:29 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:29 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x3) 2018/02/10 11:56:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:29 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) [ 205.880967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6787 comm=syz-executor7 2018/02/10 11:56:29 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000025000-0xcc)={0x14, 0x25, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:56:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x1c, 0x6, 0x0, @fuse_notify_inval_entry_out}, 0x1c) mmap(&(0x7f0000fc3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000fc3000), &(0x7f0000fc4000-0x4)=0xffffffffffffff05) 2018/02/10 11:56:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000)) write$evdev(r0, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) close(0xffffffffffffffff) 2018/02/10 11:56:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ded000)='/dev/loop#\x00', 0x0, 0x44042) sendfile(r0, r0, 0x0, 0x3) 2018/02/10 11:56:29 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000041c000-0xc)={0x10000011}) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000)) write$evdev(r0, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) close(0xffffffffffffffff) [ 205.938664] binder: 6816 RLIMIT_NICE not set [ 205.951196] binder: 6813:6816 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000010000+0x7d8)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000011a000/0xc00000)=nil, 0xc00000, 0x0, 0x10011, r0, 0x0) 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000000000/0xf79000)=nil, 0xf79000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d83000-0x438)=@filter={'filter\x00', 0xe, 0x4, 0x344, 0xffffffff, 0x210, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000f79000-0x40), {[{{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @rand_addr}, [], [], @common='ip_vti0\x00', @common='tunl0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00'}, @common=@ah={0x30, 'ah\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "37b59bff1817af0a19b6f3faeb686a439efc51be176ca1ee150dc4f7ad1e"}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="deee946384f5ffe6f5ef01000080b25d"}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x410) 2018/02/10 11:56:30 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000054b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f000035a000)) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x80000000000087) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000fa8000)={0x77359400}, 0x10) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) [ 206.007098] binder: 6834 RLIMIT_NICE not set [ 206.020753] binder: 6831:6834 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:30 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) [ 206.059973] binder: 6851 RLIMIT_NICE not set [ 206.072294] binder: 6846:6851 ioctl c0306201 2000a000 returned -11 [ 206.091823] binder_alloc: binder_alloc_mmap_handler: 6844 2011a000-2051a000 already mapped failed -16 [ 206.114317] mmap: syz-executor7 (6855) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000e0000)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x105}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) mmap$binder(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 2018/02/10 11:56:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x29, &(0x7f00000ce000-0xc)={@multicast1=0xe0000001, @multicast2=0xe0000002}, 0xc) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000bab000-0xa)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000004000-0x30)=[{&(0x7f0000007000-0xf9)=""/249, 0xf9}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000004000-0x8)) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80000000000001, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f000061d000-0x560)={0x7, {{0x2, 0x2, @rand_addr=0x4}}, 0x1, 0x9, [{{0x2, 0x2, @multicast1=0xe0000001}}, {{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}}, {{0x2, 0x1, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x1, @broadcast=0xffffffff}}, {{0x2, 0x1, @multicast2=0xe0000002}}, {{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}}}, {{0x2, 0x1, @broadcast=0xffffffff}}, {{0x2, 0x0, @loopback=0x7f000001}}]}, 0x560) fcntl$setstatus(r0, 0x4, 0x2000) setsockopt(r0, 0x6, 0x20, &(0x7f00005b3000)="020000126c3b172917e25462fa01a15eb90d2cf653f13cc379ede465f40f4a95bbff850a82633574f0b30000800099b397e69501f03d3b3d54436fc71cbcdc6e30ac10369300aff67d076348320700c0a94c470502e90000009398fc74e81b105fd02f9b14732017e2466a9fc43aea71263335960415800020ffffffff7fffffff00020006d1b0e6ebcb12c7291871363e9700004a4c939f5c0c14f1659ce8c8bed2e97e60a3649f2eea0c8263f845802ad72fa698807ef14a6a1813e900bf1d113b514dbdc05ea1309163d6a40de8391f2e98b7bbfbcbea", 0xd8) bind$inet(r0, &(0x7f00000f5000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00008ec000-0xc)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000d1000)={&(0x7f00005ef000/0x1000)=nil, 0x10001, 0x3, 0x11, &(0x7f0000b5c000/0x1000)=nil, 0x8000}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000bda000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000cb0000)={{0x2000, 0x2, 0xd, 0x8, 0x20, 0x100, 0x2, 0x10000, 0x0, 0x81, 0xfff, 0x3f}, {0x2002, 0x5000, 0xf, 0x1, 0xb1e, 0x0, 0x5, 0xa13, 0x8, 0x7, 0xd7f, 0x9}, {0x1, 0x100000, 0x3, 0x1f, 0x0, 0x1, 0x18, 0x2, 0x8, 0x1, 0x9, 0x2}, {0xf000, 0x100000, 0x0, 0x200, 0x0, 0x101, 0x48, 0x9, 0x0, 0xffffffffffffff7f, 0x1, 0x6}, {0x100000, 0x100001, 0xd, 0x10001, 0x40, 0x6e6e, 0x62ff, 0xc8f4, 0xffffffffffff979a, 0x3, 0x0, 0xe087}, {0x6000, 0x6}}) sendmmsg$inet_sctp(r0, &(0x7f00002f0000)=[{&(0x7f00003df000-0x10)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f00002f5000)=[]}], 0x1, 0x20008843) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000962000-0x8), &(0x7f0000c00000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00008b0000), &(0x7f0000c2a000+0x2f2)=0x10) r3 = dup(r0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d84000-0x8), 0x8000fffffffe) 2018/02/10 11:56:30 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000a60000)={0x0, 0x0, 0x0, []}, &(0x7f000060b000-0x4)=0x8) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 3: socket$netlink(0x10, 0x3, 0x0) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00006a2000-0xa)='numa_maps\x00') r2 = dup(r1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1) io_setup(0x21, &(0x7f00003e1000-0x8)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000f79000-0x16)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000c3e000)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000a1000-0x10)='/dev/sequencer2\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f000039f000)={0x0, 0xfffffffffffffffd, 0x200007b2}, &(0x7f0000b42000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000aea000)={r4, 0x84}, &(0x7f000052d000-0x4)=0x3f) pselect6(0x40, &(0x7f00000fd000-0x40)={0x4000000000, 0x3, 0x6, 0xb2, 0x5, 0x100000000, 0x3ff, 0x293}, &(0x7f0000279000)={0x40, 0x0, 0x6df, 0x0, 0x80, 0x8, 0x0, 0x3}, &(0x7f0000151000-0x40)={0x4, 0x7, 0x1, 0x3, 0x9, 0x6, 0x8, 0x3f}, &(0x7f0000101000-0x10)={0x77359400}, &(0x7f000027a000-0x10)={&(0x7f000027a000-0x8)={0x100000000}, 0x8}) nanosleep(&(0x7f0000279000-0x10)={r5}, &(0x7f0000715000-0x10)) r6 = semget(0x2, 0x4000007, 0x400) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x91e) semctl$GETVAL(r6, 0x3, 0xc, &(0x7f000012d000)=""/178) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00003d2000-0x10)={0xfffffffffffffff8, 0x2000802, 0xa21, 0x5}, 0x3f4) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000049000-0x4)=0x4, 0x4) unshare(0x0) inotify_init() semget(0xffffffffffffffff, 0x0, 0x0) utime(&(0x7f00003f6000)='./file0\x00', &(0x7f000039f000-0x10)) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000883000)=""/55) shmget$private(0x0, 0x1000, 0x0, &(0x7f00009ee000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00006ec000)=""/132) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000c17000-0x4), 0x4) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000cc9000)=""/253, &(0x7f00000ea000)=0xfd) syz_open_dev$mouse(&(0x7f0000727000-0x12)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000fe7000)) semop(0x0, &(0x7f0000271000)=[{0x0, 0x0, 0x1000}, {0x0, 0x7}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x10) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80000000000001, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f000061d000-0x560)={0x7, {{0x2, 0x2, @rand_addr=0x4}}, 0x1, 0x9, [{{0x2, 0x2, @multicast1=0xe0000001}}, {{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}}, {{0x2, 0x1, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x1, @broadcast=0xffffffff}}, {{0x2, 0x1, @multicast2=0xe0000002}}, {{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}}}, {{0x2, 0x1, @broadcast=0xffffffff}}, {{0x2, 0x0, @loopback=0x7f000001}}]}, 0x560) fcntl$setstatus(r0, 0x4, 0x2000) setsockopt(r0, 0x6, 0x20, &(0x7f00005b3000)="020000126c3b172917e25462fa01a15eb90d2cf653f13cc379ede465f40f4a95bbff850a82633574f0b30000800099b397e69501f03d3b3d54436fc71cbcdc6e30ac10369300aff67d076348320700c0a94c470502e90000009398fc74e81b105fd02f9b14732017e2466a9fc43aea71263335960415800020ffffffff7fffffff00020006d1b0e6ebcb12c7291871363e9700004a4c939f5c0c14f1659ce8c8bed2e97e60a3649f2eea0c8263f845802ad72fa698807ef14a6a1813e900bf1d113b514dbdc05ea1309163d6a40de8391f2e98b7bbfbcbea", 0xd8) bind$inet(r0, &(0x7f00000f5000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00008ec000-0xc)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000d1000)={&(0x7f00005ef000/0x1000)=nil, 0x10001, 0x3, 0x11, &(0x7f0000b5c000/0x1000)=nil, 0x8000}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000bda000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000cb0000)={{0x2000, 0x2, 0xd, 0x8, 0x20, 0x100, 0x2, 0x10000, 0x0, 0x81, 0xfff, 0x3f}, {0x2002, 0x5000, 0xf, 0x1, 0xb1e, 0x0, 0x5, 0xa13, 0x8, 0x7, 0xd7f, 0x9}, {0x1, 0x100000, 0x3, 0x1f, 0x0, 0x1, 0x18, 0x2, 0x8, 0x1, 0x9, 0x2}, {0xf000, 0x100000, 0x0, 0x200, 0x0, 0x101, 0x48, 0x9, 0x0, 0xffffffffffffff7f, 0x1, 0x6}, {0x100000, 0x100001, 0xd, 0x10001, 0x40, 0x6e6e, 0x62ff, 0xc8f4, 0xffffffffffff979a, 0x3, 0x0, 0xe087}, {0x6000, 0x6}}) sendmmsg$inet_sctp(r0, &(0x7f00002f0000)=[{&(0x7f00003df000-0x10)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f00002f5000)=[]}], 0x1, 0x20008843) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000962000-0x8), &(0x7f0000c00000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00008b0000), &(0x7f0000c2a000+0x2f2)=0x10) r3 = dup(r0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d84000-0x8), 0x8000fffffffe) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x20000400) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000f51000-0x40), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/10 11:56:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000013000-0x1c)={0x1, 0x9, 0x7, 0x4, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000bf4000-0x20)={r0, &(0x7f0000c75000-0xd0)="b6ecc03709fdf6", &(0x7f000062c000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000007000)={r0, &(0x7f0000012000-0x1000), &(0x7f0000012000-0x61)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000017000-0x18)={r0, &(0x7f0000004000), &(0x7f0000016000)}, 0x18) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000002000-0x4), 0x4) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000066b000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x1, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0xa0}, 0x1}, 0x0) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 3: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) bind$inet6(r0, &(0x7f000000c000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000002000)={0x1f, {0x0, 0x0, 0x0, 0x0, 0xff}}, 0x9) sendto$inet6(r0, &(0x7f0000002000-0x2), 0x21f, 0x0, &(0x7f0000003000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0xfb5000)=nil, 0xfb5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x6c}, 0x0, @in=@loopback=0x7f000001}}, 0xe8) sendto$inet6(r0, &(0x7f0000fa1000-0x2a), 0x0, 0x0, &(0x7f0000f9f000-0x1c)={0xa, 0x1, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000f10000)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}}}, &(0x7f0000000000)=0xa0) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 3: mmap(&(0x7f0000000000/0x61000)=nil, 0x61000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x101042) r2 = dup2(r1, r0) write$sndseq(r2, &(0x7f0000049000-0x1c)=[{0x0, 0x1ff, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x1c) 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) poll(&(0x7f0000f95000-0x50)=[{r0, 0x1}], 0x1, 0x88) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000057a000-0xc)) timerfd_settime(r1, 0x1, &(0x7f0000765000)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f000003d000-0xc)={0x7}) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) [ 206.625118] binder: 6988 RLIMIT_NICE not set [ 206.632346] binder: 6987:6988 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80513}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f4, &(0x7f000002d000)={@common='sit0\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f00005ec000)}}) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c2d000)={@common='lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f000073b000-0x50)={@empty, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, r1}) 2018/02/10 11:56:30 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x0, 0x82, &(0x7f0000000000), 0x0) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000001000-0x14)="120000003200e706000f0000000000000800", 0x12, 0x0, 0x0, 0x0) [ 206.749514] binder: 7012 RLIMIT_NICE not set [ 206.769558] binder: 7008:7012 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002f4000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000016b000)="78733976000898fcffff6054be13cfe62785ce10", 0x14) 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f000080b000-0x10)=[&(0x7f0000735000/0x1000)=nil], &(0x7f0000c01000-0x28)=[0x1], &(0x7f000022b000)=[], 0x0) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1b, 0x5, 0x6f8, 0x188, 0x188, 0xffffffff, 0x188, 0x360, 0x628, 0x628, 0xffffffff, 0x628, 0x628, 0x5, &(0x7f00001da000), {[{{@ipv6={@dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @common='ifb0\x00', @common='bcsf0\x00', {}, {}, 0x11, 0x0, 0x0, 0x42}, 0x0, 0x140, 0x188, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00'}, @common=@inet=@multiport={0x50, 'multiport\x00', 0x1}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@broadcast=0xffffffff, @ipv4=@broadcast=0xffffffff, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@mh={0x28, 'mh\x00'}, @common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], @ipv4=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [], @ipv4=@multicast1=0xe0000001}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv4=@multicast2=0xe0000002, @port, @icmp_id}}}, {{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @dev={0xfe, 0x80}, [], [], @common='yam0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack1={0xc0, 'conntrack\x00', 0x1, {{@ipv4=@empty, [], @ipv6=@dev={0xfe, 0x80}, [], @ipv6=@loopback={0x0, 0x1}, [], @ipv4=@broadcast=0xffffffff}}}, @common=@icmp6={0x28, 'icmp6\x00'}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@loopback={0x0, 0x1}, @ipv6=@loopback={0x0, 0x1}, @gre_key, @gre_key}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @rand_addr}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, [], [], @generic="85239910a6423d0c242cf3df5c38d151", @generic="5f42206c24d3057d276b8cc5a70bdec3"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@rand_addr, @ipv6=@empty, @icmp_id, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x758) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000a1000)='/dev/loop-control\x00', 0x0, 0x0) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x9}, 0x14) close(r0) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) [ 206.875428] binder: 7050 RLIMIT_NICE not set [ 206.887975] binder: 7038:7050 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:30 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) io_cancel(0x0, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001000-0x88), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f000039b000), &(0x7f00000d8000-0x1)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/10 11:56:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000668000-0x38)={&(0x7f00009ed000-0xc)={0x10}, 0xc, &(0x7f0000f7a000)={&(0x7f0000701000)={0x18, 0x40000027, 0x405, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 11:56:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:30 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) [ 206.945963] binder: 7074 RLIMIT_NICE not set [ 206.953429] binder: 7072:7074 ioctl c0306201 2000a000 returned -11 [ 206.982098] binder: 7090 RLIMIT_NICE not set 2018/02/10 11:56:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) [ 206.993009] binder: 7085:7090 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:31 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000001000-0x4), 0x27b) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) r0 = syz_open_procfs(0x0, &(0x7f0000c1b000-0x7)='ns/pid\x00') setns(r0, 0x0) 2018/02/10 11:56:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) [ 207.052848] binder: 7111 RLIMIT_NICE not set [ 207.061779] binder: 7107:7111 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000a89000), &(0x7f0000ba3000)=0x4) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000210000), 0x4) 2018/02/10 11:56:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000cc1000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f000027a000-0x4)) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000002000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x58, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3f, {0x0, 0x6, "0a07ec", 0xae3, 0x29, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, [], "a82f7ae1cd16d2e29ec370b17de075025dd0d40c29be46586985ea5d7b12d99989c2ad53524ba53f"}}}}}}}, &(0x7f0000000000)={0x0, 0x1, [0x0]}) [ 207.148397] binder: 7132 RLIMIT_NICE not set [ 207.164200] binder: 7128:7132 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:31 executing program 1: mmap(&(0x7f0000000000/0xff4000)=nil, 0xff4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000ff1000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x1}, 0x20) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) [ 207.248775] binder: 7161 RLIMIT_NICE not set [ 207.263090] binder: 7157:7161 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:56:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000782000-0x2)="0010", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$sg(&(0x7f00003bb000-0x9)='/dev/sg#\x00', 0x0, 0x4000) 2018/02/10 11:56:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000439000), 0x73) [ 207.343249] binder: 7185 RLIMIT_NICE not set 2018/02/10 11:56:31 executing program 1: mmap(&(0x7f0000000000/0xb07000)=nil, 0xb07000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b03000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001000), &(0x7f000058e000)=0xc) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x1c, 0x1, 0x2, []}], 0x1}, 0x0) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 1: mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000690000-0xb)="0800d700000816f2f9ff6e") 2018/02/10 11:56:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) [ 207.371629] binder: 7181:7185 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) sendto$inet6(r0, &(0x7f00003a1000)="8205a9ae36102f4f5b512590b39db0911aa77b4632d3790f3cb10acadc45be825d78e18c7005fedd", 0x28, 0x0, &(0x7f0000003000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x6}, 0x1c) 2018/02/10 11:56:31 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) [ 207.442737] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 207.462249] binder: 7219 RLIMIT_NICE not set [ 207.475793] binder: 7211:7219 ioctl c0306201 2000a000 returned -11 [ 207.478368] [ 207.483771] ====================================================== [ 207.490078] WARNING: possible circular locking dependency detected [ 207.496396] 4.15.0+ #307 Tainted: G W [ 207.501391] ------------------------------------------------------ [ 207.507680] syz-executor3/7217 is trying to acquire lock: [ 207.513189] (rtnl_mutex){+.+.}, at: [<00000000fe856cc8>] rtnl_lock+0x17/0x20 [ 207.520446] [ 207.520446] but task is already holding lock: [ 207.526386] (&xt[i].mutex){+.+.}, at: [<00000000ce58d1b3>] xt_find_table_lock+0x3e/0x3e0 [ 207.534679] [ 207.534679] which lock already depends on the new lock. [ 207.534679] [ 207.542971] [ 207.542971] the existing dependency chain (in reverse order) is: [ 207.550561] [ 207.550561] -> #2 (&xt[i].mutex){+.+.}: [ 207.555994] __mutex_lock+0x16f/0x1a80 [ 207.560375] mutex_lock_nested+0x16/0x20 [ 207.564930] xt_find_table_lock+0x3e/0x3e0 [ 207.569656] xt_request_find_table_lock+0x28/0xc0 [ 207.574994] get_info+0x154/0x690 [ 207.578943] do_arpt_get_ctl+0x2a9/0xa00 [ 207.583499] nf_getsockopt+0x6a/0xc0 [ 207.587706] ip_getsockopt+0x15c/0x220 [ 207.592085] tcp_getsockopt+0x82/0xd0 [ 207.596380] sock_common_getsockopt+0x95/0xd0 [ 207.601370] SyS_getsockopt+0x178/0x340 [ 207.605837] do_syscall_64+0x282/0x940 [ 207.610219] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 207.615900] [ 207.615900] -> #1 (sk_lock-AF_INET){+.+.}: [ 207.621590] lock_sock_nested+0xc2/0x110 [ 207.626143] do_ip_setsockopt.isra.12+0x1d9/0x3210 [ 207.631565] ip_setsockopt+0x3a/0xa0 [ 207.635779] tcp_setsockopt+0x82/0xd0 [ 207.640072] sock_common_setsockopt+0x95/0xd0 [ 207.645059] SyS_setsockopt+0x189/0x360 [ 207.649527] do_syscall_64+0x282/0x940 [ 207.653906] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 207.659584] [ 207.659584] -> #0 (rtnl_mutex){+.+.}: [ 207.664852] lock_acquire+0x1d5/0x580 [ 207.669156] __mutex_lock+0x16f/0x1a80 [ 207.673536] mutex_lock_nested+0x16/0x20 [ 207.678091] rtnl_lock+0x17/0x20 [ 207.681954] unregister_netdevice_notifier+0x91/0x4e0 [ 207.687637] tee_tg_destroy+0x61/0xc0 [ 207.691929] cleanup_entry+0x242/0x380 [ 207.696313] __do_replace+0x7ac/0xa70 [ 207.700604] do_ip6t_set_ctl+0x40f/0x5f0 [ 207.705158] nf_setsockopt+0x67/0xc0 [ 207.709362] ipv6_setsockopt+0x10b/0x130 [ 207.713916] rawv6_setsockopt+0x4a/0xf0 [ 207.718387] sock_common_setsockopt+0x95/0xd0 [ 207.723377] SyS_setsockopt+0x189/0x360 [ 207.727845] do_syscall_64+0x282/0x940 [ 207.732227] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 207.737905] [ 207.737905] other info that might help us debug this: [ 207.737905] [ 207.746107] Chain exists of: [ 207.746107] rtnl_mutex --> sk_lock-AF_INET --> &xt[i].mutex [ 207.746107] [ 207.756312] Possible unsafe locking scenario: [ 207.756312] [ 207.762338] CPU0 CPU1 [ 207.766974] ---- ---- [ 207.771610] lock(&xt[i].mutex); [ 207.775035] lock(sk_lock-AF_INET); [ 207.781239] lock(&xt[i].mutex); [ 207.787178] lock(rtnl_mutex); [ 207.790430] [ 207.790430] *** DEADLOCK *** [ 207.790430] [ 207.796461] 1 lock held by syz-executor3/7217: [ 207.801016] #0: (&xt[i].mutex){+.+.}, at: [<00000000ce58d1b3>] xt_find_table_lock+0x3e/0x3e0 [ 207.809750] [ 207.809750] stack backtrace: [ 207.814219] CPU: 0 PID: 7217 Comm: syz-executor3 Tainted: G W 4.15.0+ #307 [ 207.822418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.831741] Call Trace: [ 207.835061] dump_stack+0x194/0x257 [ 207.838661] ? arch_local_irq_restore+0x53/0x53 [ 207.843306] print_circular_bug.isra.38+0x2cd/0x2dc [ 207.848296] ? save_trace+0xe0/0x2b0 [ 207.851986] __lock_acquire+0x30a8/0x3e00 [ 207.856106] ? print_irqtrace_events+0x270/0x270 [ 207.860837] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 207.866001] ? __lock_acquire+0x664/0x3e00 [ 207.870217] ? perf_trace_lock+0xd6/0x900 [ 207.874339] ? trace_event_raw_event_lock+0x340/0x340 [ 207.879501] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 207.884666] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 207.889834] lock_acquire+0x1d5/0x580 [ 207.893607] ? lock_acquire+0x1d5/0x580 [ 207.897554] ? rtnl_lock+0x17/0x20 [ 207.901068] ? lock_release+0xa40/0xa40 [ 207.905020] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 207.910878] ? rcu_note_context_switch+0x710/0x710 [ 207.915782] ? __lock_acquire+0x664/0x3e00 [ 207.919992] ? find_held_lock+0x35/0x1d0 [ 207.924030] ? __might_sleep+0x95/0x190 [ 207.927976] ? rtnl_lock+0x17/0x20 [ 207.931487] __mutex_lock+0x16f/0x1a80 [ 207.935345] ? rtnl_lock+0x17/0x20 [ 207.938857] ? rtnl_lock+0x17/0x20 [ 207.942370] ? lock_release+0xa40/0xa40 [ 207.946316] ? mutex_lock_io_nested+0x1900/0x1900 [ 207.951132] ? rcutorture_record_progress+0x10/0x10 [ 207.956125] ? is_bpf_text_address+0xa4/0x120 [ 207.960591] ? kernel_text_address+0x102/0x140 [ 207.965149] ? perf_trace_lock+0xd6/0x900 [ 207.969268] ? __kernel_text_address+0xd/0x40 [ 207.973736] ? unwind_get_return_address+0x61/0xa0 [ 207.978638] ? trace_event_raw_event_lock+0x340/0x340 [ 207.983805] ? check_noncircular+0x20/0x20 [ 207.988020] ? save_stack+0x43/0xd0 [ 207.991618] ? kasan_kmalloc+0xad/0xe0 [ 207.995478] ? __kmalloc+0x162/0x760 [ 207.999166] ? xt_replace_table+0x641/0x9d0 [ 208.003458] ? __do_replace+0x2e3/0xa70 [ 208.007403] ? do_ip6t_set_ctl+0x40f/0x5f0 [ 208.011611] ? ipv6_setsockopt+0x10b/0x130 [ 208.015817] ? rawv6_setsockopt+0x4a/0xf0 [ 208.019944] ? sock_common_setsockopt+0x95/0xd0 [ 208.024586] ? SyS_setsockopt+0x189/0x360 [ 208.028704] ? do_syscall_64+0x282/0x940 [ 208.032740] ? pcpu_chunk_relocate+0x315/0x770 [ 208.037296] ? print_irqtrace_events+0x270/0x270 [ 208.042026] ? free_percpu+0x229/0x830 [ 208.045887] ? lock_downgrade+0x980/0x980 [ 208.050009] ? __lock_is_held+0xb6/0x140 [ 208.054043] ? lock_release+0xa40/0xa40 [ 208.057991] ? tee_tg6+0x170/0x170 [ 208.061506] mutex_lock_nested+0x16/0x20 [ 208.065538] ? mutex_lock_nested+0x16/0x20 [ 208.069746] rtnl_lock+0x17/0x20 [ 208.073088] unregister_netdevice_notifier+0x91/0x4e0 [ 208.078251] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 208.083239] ? trace_hardirqs_on+0xd/0x10 [ 208.087361] ? register_netdevice_notifier+0x860/0x860 [ 208.092610] ? free_modinfo_version+0x70/0x70 [ 208.097078] ? __alloc_percpu+0x30/0x30 [ 208.101029] ? find_next_bit+0xcc/0x100 [ 208.104978] ? cpumask_next+0x24/0x30 [ 208.108752] ? tee_tg6+0x170/0x170 [ 208.112263] tee_tg_destroy+0x61/0xc0 [ 208.116037] cleanup_entry+0x242/0x380 [ 208.119899] ? cleanup_match+0x220/0x220 [ 208.123932] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 208.129791] ? find_next_bit+0xaa/0x100 [ 208.133737] __do_replace+0x7ac/0xa70 [ 208.137512] ? compat_table_info+0x4a0/0x4a0 [ 208.141900] ? kasan_check_write+0x14/0x20 [ 208.146111] ? _copy_from_user+0x99/0x110 [ 208.150229] do_ip6t_set_ctl+0x40f/0x5f0 [ 208.154263] ? translate_compat_table+0x1c50/0x1c50 [ 208.159258] ? mutex_unlock+0xd/0x10 [ 208.162948] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 208.168200] nf_setsockopt+0x67/0xc0 [ 208.171890] ipv6_setsockopt+0x10b/0x130 [ 208.175928] rawv6_setsockopt+0x4a/0xf0 [ 208.179883] sock_common_setsockopt+0x95/0xd0 [ 208.184356] SyS_setsockopt+0x189/0x360 [ 208.188305] ? SyS_recv+0x40/0x40 [ 208.191732] ? move_addr_to_kernel+0x60/0x60 [ 208.196116] ? do_syscall_64+0xb7/0x940 [ 208.200065] ? SyS_recv+0x40/0x40 [ 208.203491] do_syscall_64+0x282/0x940 [ 208.207350] ? __do_page_fault+0xc90/0xc90 [ 208.211556] ? mmdrop+0x18/0x30 [ 208.214808] ? finish_task_switch+0x29b/0x890 [ 208.219275] ? syscall_return_slowpath+0x550/0x550 [ 208.224179] ? syscall_return_slowpath+0x2ac/0x550 [ 208.229081] ? prepare_exit_to_usermode+0x350/0x350 [ 208.234073] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 208.239410] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000439000), 0x73) [ 208.244226] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 208.249388] RIP: 0033:0x453a59 [ 208.252551] RSP: 002b:00007fbd56bddc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.260231] RAX: ffffffffffffffda RBX: 00007fbd56bde6d4 RCX: 0000000000453a59 [ 208.267476] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 [ 208.274720] RBP: 000000000071bea0 R08: 00000000000003c0 R09: 0000000000000000 [ 208.281965] R10: 0000000020010c40 R11: 0000000000000246 R12: 00000000ffffffff [ 208.289208] R13: 00000000000004d4 R14: 00000000006f7480 R15: 0000000000000000 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00003f5000-0x2f8)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f000059e000), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x2, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2f8) sendmsg(r0, &(0x7f00009f2000-0x38)={&(0x7f0000db5000)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00007de000-0x70)=[]}, 0x0) 2018/02/10 11:56:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000439000), 0x73) 2018/02/10 11:56:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:32 executing program 2: r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000439000), 0x73) [ 208.342535] binder: 7237 RLIMIT_NICE not set 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) [ 208.369096] binder: 7234:7237 ioctl c0306201 2000a000 returned -11 2018/02/10 11:56:32 executing program 2: r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000439000), 0x73) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:32 executing program 7: r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 2: r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000006000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000439000), 0x73) 2018/02/10 11:56:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) [ 208.412479] binder: 7262 RLIMIT_NICE not set [ 208.419947] binder: 7257:7262 ioctl c0306201 2000a000 returned -11 [ 208.449681] binder: 7276 RLIMIT_NICE not set 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54db", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54db", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 7: r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f000017e000)={'filter\x00', 0x7, 0x4, 0x3f8, 0xf0, 0x200, 0x200, 0x310, 0x310, 0x310, 0x4, &(0x7f0000f47000-0x40), {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1=0xe0000001, @multicast1=0xe0000001}}}, {{@arp={@broadcast=0xffffffff, @empty, 0x0, 0x0, @mac=@random="213caee5ddd5", {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @generic="7c73a1026430df6b9bc7ee65d2dd522b", @common='bcsf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1=0xe0000001, @rand_addr}}}], {{[], 0xc0, 0xfffffc51}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x448) 2018/02/10 11:56:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54db", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 7: r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) [ 208.532293] binder: 7308 RLIMIT_NICE not set 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x51, &(0x7f0000002000)=[{0xff1e, 0x10d}], 0xffffffffffffffc6}, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000002000)) 2018/02/10 11:56:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) [ 208.584543] binder: 7334 RLIMIT_NICE not set 2018/02/10 11:56:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x51, &(0x7f0000002000)=[{0xff1e, 0x10d}], 0xffffffffffffffc6}, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000002000)) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) connect$inet6(0xffffffffffffffff, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x51, &(0x7f0000002000)=[{0xff1e, 0x10d}], 0xffffffffffffffc6}, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000002000)) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) connect$inet6(0xffffffffffffffff, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) [ 208.671207] binder: 7362 RLIMIT_NICE not set 2018/02/10 11:56:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x51, &(0x7f0000002000)=[{0xff1e, 0x10d}], 0xffffffffffffffc6}, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000002000)) 2018/02/10 11:56:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) connect$inet6(0xffffffffffffffff, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x51, &(0x7f0000002000)=[{0xff1e, 0x10d}], 0xffffffffffffffc6}, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000002000)) 2018/02/10 11:56:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) [ 208.762218] binder: 7397 RLIMIT_NICE not set 2018/02/10 11:56:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[@iv={0x18, 0x117, 0x2}], 0x18}, 0x0) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x51, &(0x7f0000002000)=[{0xff1e, 0x10d}], 0xffffffffffffffc6}, 0x0) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[]}, 0x0) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) [ 208.848245] binder: 7434 RLIMIT_NICE not set 2018/02/10 11:56:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[]}, 0x0) 2018/02/10 11:56:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:32 executing program 0: mmap(&(0x7f0000000000/0xf81000)=nil, 0xf81000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000591000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000862000-0x38)={0x0, 0x0, &(0x7f0000039000)=[], 0x0, &(0x7f0000f42000-0x100)=[]}, 0x0) 2018/02/10 11:56:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) [ 208.914797] binder: 7454 RLIMIT_NICE not set 2018/02/10 11:56:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a78000-0x69b), 0x0, 0x48000, &(0x7f0000e3f000-0x1c)={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000fac000-0xf), 0xffffffffffffff91, 0x20000010, &(0x7f000016b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/10 11:56:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(0xffffffffffffffff, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:33 executing program 6: prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) [ 208.991948] binder: 7475 RLIMIT_NICE not set [ 209.038415] binder: 7497 RLIMIT_NICE not set 2018/02/10 11:56:33 executing program 6: prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a78000-0x69b), 0x0, 0x48000, &(0x7f0000e3f000-0x1c)={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000fac000-0xf), 0xffffffffffffff91, 0x20000010, &(0x7f000016b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/10 11:56:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(0xffffffffffffffff, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:33 executing program 6: prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a78000-0x69b), 0x0, 0x48000, &(0x7f0000e3f000-0x1c)={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000fac000-0xf), 0xffffffffffffff91, 0x20000010, &(0x7f000016b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/10 11:56:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a78000-0x69b), 0x0, 0x48000, &(0x7f0000e3f000-0x1c)={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000fac000-0xf), 0xffffffffffffff91, 0x20000010, &(0x7f000016b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/10 11:56:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(0xffffffffffffffff, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/02/10 11:56:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a78000-0x69b), 0x0, 0x48000, &(0x7f0000e3f000-0x1c)={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000fac000-0xf), 0xffffffffffffff91, 0x20000010, &(0x7f000016b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/10 11:56:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f000000b000-0x10)=[], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000fac000-0xf), 0xffffffffffffff91, 0x20000010, &(0x7f000016b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/10 11:56:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000902000-0x6a)=""/106, 0x6a, 0x2, 0x0, 0x9b) 2018/02/10 11:56:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="ecbcf5d274be44d85c165320f97261dc"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000003000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000011000-0x3c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="dd13596b28248e279bfd57254f84cfd0", {}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="3445565941589532e5a06958c0f0d2c4"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @syzn={0x73, 0x79, 0x7a}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) sendmsg(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000b000-0xb9)="4d8a03000000", 0x6}], 0x1}, 0x0) 2018/02/10 11:56:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000fac000-0xf), 0xffffffffffffff91, 0x20000010, &(0x7f000016b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/10 11:56:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) 2018/02/10 11:56:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000d0e000-0x2e8)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000c7a000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/10 11:56:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/10 11:56:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f0000ff9000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f000000b000-0x10)=[], 0x1, 0x0, &(0x7f0000004000)='\''}) 2018/02/10 11:56:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b00