Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.762833] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.772605] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 25.068345] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 26.118399] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. 2018/02/01 17:01:45 fuzzer started 2018/02/01 17:01:45 dialing manager at 10.128.0.26:46211 2018/02/01 17:01:49 kcov=true, comps=false 2018/02/01 17:01:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000557000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00001e1000)={{0x4000001ff, 0x80000a}, {}, 0xfffffffffffffffe}) 2018/02/01 17:01:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00004f3000)='em1$\x00', 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000005000)={{0x0, 0x4}}, &(0x7f00002df000)) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/02/01 17:01:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d11000-0x4)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0xffffffffffffffff, @rand_addr=0xd5}, @in={0x2, 0x1, @multicast1=0xe0000001}], 0x3c) 2018/02/01 17:01:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe, &(0x7f0000dd5000-0x4), &(0x7f0000e7f000-0x4)=0x4) 2018/02/01 17:01:50 executing program 5: mmap(&(0x7f0000000000/0xddc000)=nil, 0xddc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000318000), &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) open(&(0x7f0000195000-0x8)='./file0\x00', 0x20000000080047, 0x0) r1 = open(&(0x7f0000625000-0x8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) 2018/02/01 17:01:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000b58000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000a6b000)) 2018/02/01 17:01:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000b75000-0x44)='oom_score_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000c7e000)='-4', 0x2}], 0x1) 2018/02/01 17:01:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000041000)="01800d05", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000-0xd)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000042000-0x8c)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001000-0x1b0)=[{0x9, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x1a, @tick=0xffffffff}) [ 36.841785] IPVS: Creating netns size=2552 id=1 [ 36.906503] IPVS: Creating netns size=2552 id=2 [ 36.972556] IPVS: Creating netns size=2552 id=3 [ 37.026767] IPVS: Creating netns size=2552 id=4 [ 37.095492] IPVS: Creating netns size=2552 id=5 [ 37.201982] IPVS: Creating netns size=2552 id=6 [ 37.331641] IPVS: Creating netns size=2552 id=7 [ 37.490766] IPVS: Creating netns size=2552 id=8 2018/02/01 17:01:54 executing program 0: mmap(&(0x7f0000000000/0x2a000)=nil, 0x2a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000017000-0x10)={&(0x7f0000029000)={0x38, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x20}, [@typed={0x18, 0x5b, @ipv6=@loopback={0x0, 0x1}}, @typed={0xc, 0x0, @fd=0xffffffffffffffff}]}, 0x38}, 0x1}, 0x0) 2018/02/01 17:01:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000a09000)='./file0\x00', 0x160) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) chroot(&(0x7f0000c94000)='./file0\x00') 2018/02/01 17:01:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000058d000-0x38)={&(0x7f000078d000)={0x10}, 0xc, &(0x7f00004e8000-0x10)={&(0x7f00008b1000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x18, 0x0, 0xfe, r1}, [@IFA_LOCAL={0x8, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}}]}, 0x20}, 0x1}, 0x0) 2018/02/01 17:01:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe, &(0x7f0000dd5000-0x4), &(0x7f0000e7f000-0x4)=0x4) 2018/02/01 17:01:54 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) bind$packet(r0, &(0x7f0000003000)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x14) bind$packet(r0, &(0x7f0000003000-0x14)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) 2018/02/01 17:01:54 executing program 3: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000001000-0x1e)={0x18, 0x0, {0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @common='ip6gre0\x00'}}, 0x1e) write(r0, &(0x7f0000010000-0x2), 0x0) 2018/02/01 17:01:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000052d000-0x38)={&(0x7f0000db7000)={0x10}, 0xc, &(0x7f000097d000-0x10)={&(0x7f0000f71000-0x14)={0x14, 0x1, 0x9, 0x2000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/01 17:01:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x8, 0x6c, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_reply={0x81}}}}}}, 0x0) 2018/02/01 17:01:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000007000-0x4)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 2018/02/01 17:01:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000242000)={{{{0xa, 0xffffffffffffffff, @multicast2=0xe0000002}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x0, 0x0, 0x0, "f69f8464be4bc994fe56c49be0fb7bbf7ae30c58ddb25940908b0631f9bcad39f8d94c02d9887d1dacc91624cccab892c486fb71db996733edbfc23c18c67b67cbaf8b9336638ea940e207344b6d72ec"}, 0x160) [ 40.762189] audit: type=1400 audit(1517504514.775:5): avc: denied { create } for pid=5068 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 40.770018] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 2018/02/01 17:01:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe, &(0x7f0000dd5000-0x4), &(0x7f0000e7f000-0x4)=0x4) 2018/02/01 17:01:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000015000-0x4)=0x0) perf_event_open(&(0x7f0000398000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, r1, 0x0, r0, 0x0) 2018/02/01 17:01:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000551000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x421a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 40.798404] audit: type=1400 audit(1517504514.815:6): avc: denied { create } for pid=5077 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 40.803214] audit: type=1400 audit(1517504514.825:7): avc: denied { write } for pid=5068 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 40.877647] audit: type=1400 audit(1517504514.895:8): avc: denied { write } for pid=5077 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/01 17:01:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000025000-0x10)='./file0/control\x00', 0x0) mkdir(&(0x7f0000156000-0xe)='./file0/file0\x00', 0x0) rename(&(0x7f0000b95000)='./file0/file0\x00', &(0x7f0000663000)='./file0/control\x00') 2018/02/01 17:01:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000a8d000)={&(0x7f0000e4e000)={0x10}, 0xc, &(0x7f0000fcf000-0x10)={&(0x7f00005d5000)=@updsa={0x104, 0x1a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in=@dev={0xac, 0x14}}, {@in6=@empty, 0xffffffffffffffff, 0x2b}, @in=@multicast2=0xe0000002, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@coaddr={0x14, 0xe, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}]}, 0x104}, 0x1}, 0x0) 2018/02/01 17:01:55 executing program 3: mmap(&(0x7f0000000000/0xfd9000)=nil, 0xfd9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x1, 0x0, &(0x7f000004a000-0x10)={0x67, 0x100000}, &(0x7f0000048000), 0x0) 2018/02/01 17:01:55 executing program 1: mmap(&(0x7f0000000000/0x23000)=nil, 0x23000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000001d000)={&(0x7f000001e000-0x40)=@ipv4_deladdr={0x15, 0x15, 0x40d, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@IFA_LABEL={0x14, 0x3, @common="65716c000000000000000000000000c8"}]}, 0x2c}, 0x1}, 0x0) 2018/02/01 17:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000d65000)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "be01b5", 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "669f4c", 0x0, 0x32, 0x0, @dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, [], "afbe0bd67b62c462"}}}}}}}, 0x0) 2018/02/01 17:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) readv(r0, &(0x7f0000d6f000-0x20)=[{&(0x7f00003fb000-0x87)=""/135, 0x87}], 0x1) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000a95000)={0x0, 0x0}, &(0x7f0000c13000-0x4)=0x10) write$evdev(r0, &(0x7f0000b5e000-0x78)=[{}, {{0x0, r1}}], 0x30) 2018/02/01 17:01:55 executing program 2: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f0000027000-0xb0)=""/176, 0xb0) sendmsg$nl_generic(r0, &(0x7f000001a000-0x38)={&(0x7f0000001000)={0x10}, 0xc, &(0x7f0000011000)={&(0x7f0000019000-0x14)={0x14, 0x1e, 0xd84eecbcdd442381, 0xffffffffffffffff, 0xffffffffffffffff, {0x100000000006}, []}, 0x14}, 0x1}, 0x0) 2018/02/01 17:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f000003e000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "a0035d", 0x10, 0x21, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0xfffffff5, 0x2, 0x0, "f0810e", 0x0, "c6ff9f"}}}}}}}, &(0x7f0000047000-0x10)={0x0, 0x0, []}) 2018/02/01 17:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000cd1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000918000)="c1", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000cd1000)={0x0, 0x0, &(0x7f0000978000)=[], 0x0, &(0x7f00000db000)}, 0x40000100) close(r1) 2018/02/01 17:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000f97000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000499000-0xc)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, @multicast1=0xe0000001}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') readv(r1, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x42}, {&(0x7f0000120000)=""/4096, 0x1000}], 0x2) 2018/02/01 17:01:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000f87000)="240000001a0025f0006b000420bbfc00020b00ff00090000001000eb08001900000000b7", 0x24) [ 40.998568] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 2018/02/01 17:01:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/01 17:01:55 executing program 2: mmap(&(0x7f0000000000/0xffc000)=nil, 0xffc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00005f3000-0x28)={@common='ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000aa7000), 0x0, 0x0, &(0x7f0000fef000)={0x11, 0x10000000000800, r1, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) 2018/02/01 17:01:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000002000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00004ff000)='net/mcfilter6\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f000095e000)) [ 41.022430] audit: type=1400 audit(1517504515.025:9): avc: denied { read } for pid=5126 comm="syz-executor2" path="socket:[11246]" dev="sockfs" ino=11246 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/01 17:01:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00005a1000-0x1)='8', 0x1, 0x0, &(0x7f00007bd000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000173000)={0x0, 0x5, 0x30}, &(0x7f0000bf8000)=0xc) writev(r0, &(0x7f0000f80000-0x20)=[{&(0x7f0000514000-0xa7), 0xfee1}], 0x1) 2018/02/01 17:01:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000025000-0x10)='./file0/control\x00', 0x0) mkdir(&(0x7f0000156000-0xe)='./file0/file0\x00', 0x0) rename(&(0x7f0000b95000)='./file0/file0\x00', &(0x7f0000663000)='./file0/control\x00') 2018/02/01 17:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000025000-0x10)='./file0/control\x00', 0x0) mkdir(&(0x7f0000156000-0xe)='./file0/file0\x00', 0x0) rename(&(0x7f0000b95000)='./file0/file0\x00', &(0x7f0000663000)='./file0/control\x00') 2018/02/01 17:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x2, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000f77000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f00003d9000)='attr/fscreate\x00') write$fuse(r1, &(0x7f0000663000-0x28)={0x18, 0x0, 0x0, @fuse_bmap_out}, 0x18) 2018/02/01 17:01:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00001d9000)=[{&(0x7f0000224000-0x16)=""/22, 0x16}], 0x1) 2018/02/01 17:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000f4e000-0x8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000794000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00005d9000)={0x0, 0xa, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004fe000-0x8)={0x2bd6671c}, 0x0, &(0x7f000048f000), 0x8) 2018/02/01 17:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000831000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000135000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) creat(&(0x7f0000326000-0x10)='./file0/control\x00', 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/01 17:01:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000a36000), &(0x7f0000855000), &(0x7f0000007000-0x4), &(0x7f0000340000)) 2018/02/01 17:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00009b9000)=0x1000000, 0x4) 2018/02/01 17:01:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_flags=0x7102}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00009e1000)='/selinux/status\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d18000), 0x10200000000000) 2018/02/01 17:01:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000305000)=0x2, 0x4) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000c91000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x9, 0x0, "ff"}}}}}, 0x0) 2018/02/01 17:01:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000661000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000aea000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) [ 41.122315] audit: type=1401 audit(1517504515.135:10): op=fscreate invalid_context=1800000000000000000000000000000000000000000000 2018/02/01 17:01:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000dd8000)=[{{0x0, 0x0, &(0x7f0000a62000)=[{&(0x7f0000e12000)=""/86, 0x56}], 0x1, &(0x7f00004e8000)=""/74, 0x4a}}], 0x1, 0x0, &(0x7f0000d23000-0x10)) 2018/02/01 17:01:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000d72000)={{0x3, 0x0, 0x12b, 0x2, 0x7fff}, 0x800, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x100000001, 0x100000000, 0x7ff}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000caf000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) unlink(&(0x7f0000d61000)='./control/file0\x00') rmdir(&(0x7f0000ef9000-0xa)='./control\x00') mount(&(0x7f000095d000-0x10)='./control/file0\x00', &(0x7f00009bc000-0xa)='./control\x00', &(0x7f0000f66000)='mqueue\x00', 0x0, &(0x7f0000f80000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000af6000-0x10)='./control/file0\x00', &(0x7f00004e0000-0x10)='./control/file0\x00') ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005b8000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 17:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/01 17:01:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0xa, &(0x7f00001ca000-0x1)="03", 0x1) connect$inet(r1, &(0x7f0000929000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/02/01 17:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000001000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000604000)={0x0, 0x0, &(0x7f0000e18000)=[{&(0x7f0000f88000)='QFP', 0x3}], 0x1, &(0x7f00006c3000-0x1110)=[]}, 0x8000) sendmsg(r0, &(0x7f0000a1c000-0x38)={0x0, 0x0, &(0x7f0000cbc000-0x10)=[{&(0x7f0000c0d000-0xefa)="c10e", 0x2}], 0x1, &(0x7f0000d82000)=[]}, 0x0) 2018/02/01 17:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00008d8000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0xffffffffffffffff, 0x200, @loopback={0x0, 0x1}}}]}, 0x110) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00003cf000)={&(0x7f0000f4e000-0xc)={0x10}, 0x37b, &(0x7f00005ad000)={&(0x7f00008d8000)=@migrate={0x15c, 0x21, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @in6=@dev={0xfe, 0x80}}}, [@migrate={0x10c, 0x11, []}]}, 0x15c}, 0x1}, 0x0) 2018/02/01 17:01:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00006fc000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000501000-0x20)={0x0, 0x0, 0x3}) fcntl$lock(r0, 0x7, &(0x7f000052b000)={0x0, 0x0, 0x0, 0x1}) unshare(0x24000200) unshare(0x28060400) [ 41.244202] device eql entered promiscuous mode 2018/02/01 17:01:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000648000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f000064c000)=[{r1}], 0x1, &(0x7f0000347000)={0x77359400}, &(0x7f0000d23000-0x8), 0x8) dup3(r1, r0, 0x0) 2018/02/01 17:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000114000), 0x4) 2018/02/01 17:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/01 17:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000169000)={0x10}, 0xc, &(0x7f000016f000)={&(0x7f0000c0e000)={0xfffffffffffffeb7, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x3) 2018/02/01 17:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00002ea000+0xf55)=0xd4a5) socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057f000-0x8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f000051d000)=[], 0x301, 0x0) recvmmsg(r0, &(0x7f000030f000-0x3c)=[{{&(0x7f0000414000-0x6)=@hci, 0x6, &(0x7f0000b60000)=[], 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/02/01 17:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00000400, 0x3fffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000dcf000-0x8)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000344000-0x8)='./file0\x00', &(0x7f0000293000-0x4)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/02/01 17:01:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_flags=0x7102}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00009e1000)='/selinux/status\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d18000), 0x10200000000000) 2018/02/01 17:01:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00008d6000), 0x4) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000711000-0x4), 0x4) 2018/02/01 17:01:55 executing program 6: r0 = gettid() waitid(0x1, r0, &(0x7f000001b000-0xb), 0x8, &(0x7f0000016000)) 2018/02/01 17:01:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000c4c000)=0x401, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000912000), 0xc) [ 41.488515] device eql entered promiscuous mode 2018/02/01 17:01:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f000055b000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xd34}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000bec000/0x400000)=nil) 2018/02/01 17:01:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f11000+0xd55)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x18) connect$inet6(r0, &(0x7f0000f02000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg$unix(r0, &(0x7f00001ee000-0xc4)=[{&(0x7f0000da1000)=@abs, 0x8, &(0x7f00004dd000)=[], 0x0, &(0x7f0000723000-0x98)=[]}], 0x1, 0x0) 2018/02/01 17:01:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000d49000)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000c17000)) 2018/02/01 17:01:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000548000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000737000), 0x0, 0x0, &(0x7f0000b86000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f0000a30000-0x43)=""/67, 0x43, 0x2022, &(0x7f0000cd8000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/01 17:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000039f000-0x90)={0x1, {{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f0000af3000-0x4)=0x10) 2018/02/01 17:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005a1000-0x1)='8', 0x1, 0x0, &(0x7f00007bd000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom(r0, &(0x7f0000a1d000)=""/142, 0x8e, 0x2, &(0x7f00008a2000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @loopback=0x7f000001}}}, 0x2e) 2018/02/01 17:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) ioctl$TIOCLINUX2(r1, 0x541b, &(0x7f0000a95000)={0x2}) 2018/02/01 17:01:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000d70000-0x5)='user\x00', &(0x7f00009d6000-0x5)={0x73, 0x79, 0x7a}, &(0x7f000053d000)="10", 0x1, r0) r2 = add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000753000-0x5)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000908000-0x137)="b33ab76079ebe0d94f729cd65300000100d7d97fe21769e7c4db44c249b544230ba287fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd640b336616fe0f3c3002801b4627ee7597689525e8e81f75da86eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149be31bd78b506e8b741427b622a9c0dee03a44d861b5995610e1013e9c0225b2ccaff775a45690b8302946c8b35794ed219dcb4688f09655932f9cab2ecdba1da9253c3038a90c9bd452dbfb1042f1af6468472c72907bf83059554fe96e93b4ccdae3e76657b08b144a209bda4816c9e42fc7ee26ef800ac810c023e24f5b", 0x137, r0) keyctl$dh_compute(0x17, &(0x7f00004be000-0xc)={r1, r2, r1}, &(0x7f00005cd000)=""/48, 0x30, &(0x7f000032f000-0x38)={&(0x7f0000d78000)={'sha224-generic\x00'}, &(0x7f00008af000)}) 2018/02/01 17:01:55 executing program 3: mmap(&(0x7f0000000000/0x4c000)=nil, 0x4c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000001b000-0x1b)="7d7d9574686f5e707230630100000400001e0070ff6f630ff8", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000028000-0xd)='/dev/snd/seq\x00', 0x0, 0x20001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000042000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000036000)=[{0x0, 0x3, 0x0, 0x0, @tick=0x2, {}, {}, @connect}], 0x1c) timer_gettime(0x0, &(0x7f0000003000-0x20)={{}, {0x0, 0x0}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000028000-0x50)={0x203, @time={0x77359400, r3}}) 2018/02/01 17:01:55 executing program 4: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000003000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/01 17:01:55 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000eb8000-0x10), &(0x7f0000000000)=0x10) 2018/02/01 17:01:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='\x00\x00\x00\b') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9d000-0xc)={0x0}, &(0x7f000044c000)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000ed0000-0xd)='attr/current\x00') sendfile(r2, r2, &(0x7f00006c7000), 0x2a) getdents(r0, &(0x7f0000825000-0xa7)=""/167, 0xa7) 2018/02/01 17:01:55 executing program 2: mmap(&(0x7f0000000000/0xf72000)=nil, 0xf72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}], 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000)={0x0, 0x10, "8252cc7051f5e05e71ee63b76f6c3c92"}, &(0x7f0000abb000-0x4)=0x18) 2018/02/01 17:01:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) 2018/02/01 17:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cf000-0x1c)={&(0x7f000018a000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000008000-0x10)={&(0x7f0000114000-0x1198)={0x24, 0x29, 0x701, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@nested={0x10, 0x0, [@typed={0xc, 0x8, @uid}]}]}, 0x24}, 0x1}, 0x0) 2018/02/01 17:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @perf_config_ext, 0xa00000400, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000dcf000-0x8)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000344000-0x8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/02/01 17:01:55 executing program 6: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000005000-0x10)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) sendto$inet(r1, &(0x7f0000016000)="a5", 0x1, 0x0, &(0x7f0000014000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) 2018/02/01 17:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a78000-0x69b), 0x0, 0x48000, &(0x7f0000e3f000-0x1c)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000a63000)=0x3, 0x4) sendto$inet6(r0, &(0x7f00001a7000), 0x0, 0x0, &(0x7f000016b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/01 17:01:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000e12000)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f0000ca8000)='affs\x00', 0x80000, &(0x7f00009c7000)) mount(&(0x7f00004bf000-0x1)='.', &(0x7f00001a3000-0x1)='.', &(0x7f0000ea6000-0x6)='mslos\x00', 0x200500e, &(0x7f0000ec3000-0x1)) mount(&(0x7f0000607000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x81000, &(0x7f0000508000-0x1)) umount2(&(0x7f0000535000-0x1)='.', 0x0) 2018/02/01 17:01:55 executing program 1: clone(0x0, &(0x7f0000378000-0x1), &(0x7f0000956000-0x4), &(0x7f000040b000), &(0x7f00006c2000)) mq_getsetattr(0xffffffffffffffff, &(0x7f00005fb000), &(0x7f0000706000)) 2018/02/01 17:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f000073a000)=0x1, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000632000-0xe)='net/ip_mr_vif\x00') sendfile(r0, r0, &(0x7f0000909000)=0x10004, 0x200000000000009) 2018/02/01 17:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000434000)={{0x55c}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/01 17:01:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000676000)='uid_map\x00') perf_event_open(&(0x7f00001ed000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000354000)=[{&(0x7f00000e9000)='6', 0x1}], 0x1) [ 41.700247] audit: type=1400 audit(1517504515.715:11): avc: denied { dyntransition } for pid=5308 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0,c1 tclass=process permissive=1 2018/02/01 17:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000368000-0x5)='user\x00', &(0x7f0000ad4000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000f3b000)='K', 0x1, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f0000133000)='4', 0x1) 2018/02/01 17:01:55 executing program 1: mmap(&(0x7f0000000000/0x1d000)=nil, 0x1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f0000017000-0x124)={0x14, 0x10, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/01 17:01:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000013e000)='./file0\x00', 0x141046, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000fb2000-0x12)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000c89000)=[{{0x77359400}, 0x1, 0x4c, 0x400000002}], 0x36) sendfile(r1, r0, 0x0, 0x100000072439a6b) 2018/02/01 17:01:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000f3000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) r2 = epoll_create1(0x0) fcntl$setstatus(r1, 0x4, 0x2400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000053c000)={0x10000004}) close(r0) 2018/02/01 17:01:56 executing program 4: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f000000e000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x7, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14}, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @tcp={{0x3, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}}, &(0x7f0000007000-0xc)={0x0, 0x1, [0x0]}) 2018/02/01 17:01:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x5fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)) ioctl$TCSETSF(r0, 0x5404, &(0x7f00003af000-0x24)={0x0, 0x0, 0x0, 0xfffffffffffffffb}) 2018/02/01 17:01:56 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x0, {{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {{0x2, 0xffffffffffffffff, @loopback=0x7f000001}}}, 0x108) 2018/02/01 17:01:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000cf3000)='./file0\x00', &(0x7f0000b8d000-0x8)='./file0\x00', &(0x7f0000fe3000)='anon_inodefs\x00', 0x13004, &(0x7f00008b6000-0xf)) unlink(&(0x7f0000cbb000)='./file0\x00') 2018/02/01 17:01:56 executing program 7: mmap(&(0x7f0000000000/0x2a000)=nil, 0x2a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f000000a000-0x38)={0x0, 0x0, &(0x7f0000026000)=[{&(0x7f0000026000-0x76)="d4f4", 0x2}], 0x1, &(0x7f000000e000-0x468)=[]}, 0xc100) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000021000)=[{&(0x7f0000004000)="be", 0x1}], 0x1, &(0x7f000001f000-0xf8)=[]}, 0x0) 2018/02/01 17:01:56 executing program 3: mmap(&(0x7f0000000000/0x5d3000)=nil, 0x5d3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$sndseq(r0, &(0x7f00005cc000-0x90)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x0, 0x8}}], 0x30) read(r0, &(0x7f000097a000)=""/88, 0x58) 2018/02/01 17:01:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x78, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000b3d000)={0x0, 0x32, 0x0, @thr={&(0x7f000022f000), &(0x7f0000298000)}}, &(0x7f0000a7e000)) timer_settime(0x0, 0x0, &(0x7f00002f2000)={{0x0, 0x3}, {0x7ff, 0x4}}, &(0x7f000061b000)) timer_settime(0x0, 0x0, &(0x7f0000d9f000-0x20)={{0x0, 0x1c9c380}}, &(0x7f0000efa000-0x20)) 2018/02/01 17:01:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000613000)={&(0x7f000084a000-0xc)={0x10}, 0xc, &(0x7f0000aaa000)={&(0x7f0000684000)=@updsa={0x180, 0x1a, 0x503, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@empty, @in6=@loopback={0x0, 0x1}}, {@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, 0xffffffffffffffff, 0x33}, @in=@dev={0xac, 0x14}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_auth={0x48, 0x1, {{'cryptd(md5-generic)\x00'}}}]}, 0x180}, 0x1}, 0x0) 2018/02/01 17:01:56 executing program 4: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004000)={&(0x7f000000d000-0x14)={0x14, 0x2c, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/01 17:01:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000f3000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) r2 = epoll_create1(0x0) fcntl$setstatus(r1, 0x4, 0x2400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000053c000)={0x10000004}) close(r0) 2018/02/01 17:01:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) connect$inet(r0, &(0x7f0000674000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/02/01 17:01:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000e8d000-0x10)={0x1, &(0x7f00005c6000)=[{0x6}]}, 0x10) 2018/02/01 17:01:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f000011b000-0x208)={0x14, 0xc, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/01 17:01:56 executing program 7: mmap(&(0x7f0000000000/0xf17000)=nil, 0xf17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) sendto$inet(r0, &(0x7f0000f15000), 0x0, 0x0, &(0x7f0000f17000-0x10)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) 2018/02/01 17:01:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00009eb000)={@common='bridge0\x00', @ifru_settings={0x1, 0x1, @cisco=&(0x7f00006ad000-0x8)}}) 2018/02/01 17:01:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = gettid() clock_gettime(0x0, &(0x7f0000e3a000-0x10)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000769000)={0x0, r2/1000+10000}, 0x10) r3 = dup(r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000980000-0x6), &(0x7f0000b96000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001000-0x8)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000001000-0x4)=0xa0) listen$netrom(r3, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00003c2000)=[{&(0x7f0000ee5000-0xd1)=""/209, 0xd1}], 0x1) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000ee7000-0x20)) tkill(r1, 0x1000000000016) 2018/02/01 17:01:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000f3000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) r2 = epoll_create1(0x0) fcntl$setstatus(r1, 0x4, 0x2400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000053c000)={0x10000004}) close(r0) 2018/02/01 17:01:56 executing program 7: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000551000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5434, &(0x7f0000001000)) 2018/02/01 17:01:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000c61000-0x38)={0x0, 0x0, &(0x7f00005c9000)={&(0x7f000054a000-0xe0)={0x2, 0x3, 0x0, 0x0, 0x20000000000000b9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_key={0x1, 0x0, 0x2a0}]}, 0x18}, 0x1}, 0x0) 2018/02/01 17:01:56 executing program 5: clone(0x0, &(0x7f0000004000-0x28), &(0x7f0000003000+0x616), &(0x7f00007e3000-0x4), &(0x7f0000001000-0x61)) ustat(0x0, &(0x7f0000851000)) 2018/02/01 17:01:56 executing program 6: mmap(&(0x7f0000000000/0xe80000)=nil, 0xe80000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000e7d000), 0x8) r1 = epoll_create(0x7ffffffe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000519000-0xc)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000e7d000), 0x8, 0x0) signalfd4(r2, &(0x7f0000cec000-0x8), 0x8, 0x0) 2018/02/01 17:01:56 executing program 0: mmap(&(0x7f0000000000/0xa97000)=nil, 0xa97000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000008000), &(0x7f0000007000)) 2018/02/01 17:01:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/01 17:01:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00003f8000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x60000000401070ca, &(0x7f0000c81000)) 2018/02/01 17:01:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x15d8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137663b, 0x10000a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000773000)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000d7c000-0x10)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000882000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/01 17:01:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b92000-0x7)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000db7000-0x4)=0x200ff, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, &(0x7f000038d000-0x69), 0x0, 0x0, &(0x7f0000822000-0x10)={0x2, 0x0, @empty}, 0x10) sendfile(r0, r1, &(0x7f0000af5000)=0x62, 0x10001) write(r0, &(0x7f0000d7f000)='O', 0x1) 2018/02/01 17:01:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x3ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000aed000), &(0x7f00002dc000), &(0x7f000045e000), &(0x7f0000e31000-0x1)) 2018/02/01 17:01:56 executing program 0: mmap(&(0x7f0000000000/0xf8000)=nil, 0xf8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000090000-0x20b)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "0003c8", 0x58, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ab8099", 0x0, 0x29, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, [@dstopts={0x0, 0x1, [], [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x0, []}}]}, @fragment], "9526c57b6ea8ad434433e2ca40b9"}}}}}}}, 0x0) 2018/02/01 17:01:56 executing program 3: r0 = socket(0x1e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x0, &(0x7f0000a94000), 0x0) 2018/02/01 17:01:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) perf_event_open(&(0x7f0000fdf000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x10, 0x0, &(0x7f000000d000-0x98)=[@request_death={0x400c630f}], 0x0, 0x0, &(0x7f0000009000-0xc9)}) 2018/02/01 17:01:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000041f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000a44000)=[], 0x1ef, 0x0) 2018/02/01 17:01:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00003f8000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x60000000401070ca, &(0x7f0000c81000)) 2018/02/01 17:01:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000055000)={0x0, 0x0, 0x3}) rt_sigtimedwait(&(0x7f0000002000-0x8)={0x3ffff}, &(0x7f0000f0b000-0x10), &(0x7f0000fbd000-0x10)={0xffffd, 0x989680}, 0x8) 2018/02/01 17:01:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xc, &(0x7f0000999000)=""/4, &(0x7f0000000000)=0x4) 2018/02/01 17:01:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x3ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000aed000), &(0x7f00002dc000), &(0x7f000045e000), &(0x7f0000e31000-0x1)) 2018/02/01 17:01:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00009a0000-0xa)='net/arp\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000003000)='.s/ \x00\x00\x00\x00') readv(r0, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) 2018/02/01 17:01:56 executing program 3: mmap(&(0x7f0000000000/0xfdc000)=nil, 0xfdc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000a, 0x2, 0x0) sendto(r0, &(0x7f0000001000-0xb8), 0x0, 0x0, &(0x7f0000fdb000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="169196e50fdd"}, 0x10) 2018/02/01 17:01:56 executing program 0: mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendto$inet6(r0, &(0x7f000089b000-0x7e), 0x0, 0x8000, &(0x7f0000dee000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000fc4000-0xf)='\'', 0x1, 0x0, &(0x7f0000fbb000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) 2018/02/01 17:01:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000041f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000a44000)=[], 0x1ef, 0x0) 2018/02/01 17:01:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000f8000-0x10)=@req={0x3fc, 0x0, 0x3, 0x5}, 0x10) sendmsg$netlink(r0, &(0x7f00005e3000-0x38)={0x0, 0x0, &(0x7f0000ce3000-0x30)=[], 0x0, &(0x7f00009b5000)=[]}, 0x0) 2018/02/01 17:01:56 executing program 5: clone(0x0, &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000113000), &(0x7f000027e000-0x1)) socket(0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x7eb0) ioprio_get$pid(0x2, 0x0) [ 42.699938] audit: type=1400 audit(1517504516.715:12): avc: denied { set_context_mgr } for pid=5482 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/02/01 17:01:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000c43000-0x4)) sendmsg$nl_netfilter(r0, &(0x7f0000243000+0xf41)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000dd1000-0x10)={&(0x7f0000d3e000-0x368)={0x20, 0x13, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x2, @pid}]}, 0x20}, 0x1}, 0x0) 2018/02/01 17:01:56 executing program 7: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000005000)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 42.752414] binder: BINDER_SET_CONTEXT_MGR already set [ 42.757954] binder: 5482:5497 ioctl 40046207 0 returned -16 [ 42.781500] binder: 5482:5497 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/02/01 17:01:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) accept(r0, 0x0, &(0x7f000060c000)) 2018/02/01 17:01:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000011000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r0, &(0x7f000000e000)={0x0, 0x0, &(0x7f0000020000-0x80)=[], 0x0, &(0x7f0000008000-0x90)=[]}, 0x0) 2018/02/01 17:01:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000882000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00008d9000-0x39), 0x5da, 0x0, &(0x7f0000f7b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/01 17:01:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f00003f9000), &(0x7f00001c2000)=0x4) 2018/02/01 17:01:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, &(0x7f00003f9000+0xc8b), &(0x7f0000000000)) 2018/02/01 17:01:56 executing program 1: mmap(&(0x7f0000000000/0xed0000)=nil, 0xed0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x40000000000036, &(0x7f0000ec9000)="dc13b51a5b31306e78dd580871ab2144ece470e534cf0195f75d34c82d9d233f08008875c432d64ade0e8ce0442fbc50974e8e1195c604f8000000040002663d75dd0500000000000500000000090838a46611f937f96f7d4ff812a8f9fc3f0716e60000000000000000d359bdeb62e18a769c8600000004f8b9f3aee345d79eee7026fe40be9cda06a2f125e2c3525ad0ffffffffffffffff3dcc8501902d973e668fa3f9b8974fec92b836614657ade6035a6ca6556ddfaeda0896440f396f4b9b3e5a2db8352780dff40bb4937883", 0xd0) setsockopt$inet6_buf(r0, 0x29, 0x36, &(0x7f0000248000-0x1), 0x0) 2018/02/01 17:01:56 executing program 7: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000005000)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 2018/02/01 17:01:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000001000-0x1e)={0x18, 0x0, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @syzn={0x73, 0x79, 0x7a, 0x0}}}, 0x1e) connect$pppoe(r0, &(0x7f0000002000-0x1e)={0x18, 0x0, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @syzn={0x73, 0x79, 0x7a, 0x0}}}, 0x1e) [ 42.809394] binder: undelivered death notification, 0000000000000000 2018/02/01 17:01:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f00009f6000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_data=&(0x7f00001ae000)="38ac3393a05d752d9968ac496a0db509889254bb81abf242cbadcb9dde4d664b"}) 2018/02/01 17:01:56 executing program 2: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002000-0x1cf)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x18, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x86, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}}}}, 0x0) 2018/02/01 17:01:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x6a6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000847000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f00004df000)=""/15, 0xf, 0x0) 2018/02/01 17:01:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000253000-0x24)={@common='sit0\x00', &(0x7f0000a7b000-0x4e)=@ethtool_gstrings={0x1b, 0x4}}) 2018/02/01 17:01:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f00003f9000), &(0x7f00001c2000)=0x4) 2018/02/01 17:01:56 executing program 4: mmap(&(0x7f0000000000/0xd1e000)=nil, 0xd1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000d1d000)='id_legacy\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000002000-0xd4), 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000d1d000)='asymmetric\x00', &(0x7f0000001000)={0x73, 0x79, 0x7a}, 0x0) 2018/02/01 17:01:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000c79000-0x8)='./file0\x00', 0x0, &(0x7f000003c000-0x9c)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00001e7000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000678000-0x38)={&(0x7f0000b6f000)={0x10}, 0xc, &(0x7f0000b27000-0x10)={&(0x7f00001aa000-0x58)=@ipv6_newroute={0x30, 0x18, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9, 0x0, 0x0, r1}, {}]}]}, 0x30}, 0x1}, 0x0) 2018/02/01 17:01:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x20, 0xd, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@typed={0xc, 0x200000001, @u32}]}, 0x20}, 0x1}, 0x0) 2018/02/01 17:01:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00006c1000), 0x0) 2018/02/01 17:01:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000a99000)) mmap(&(0x7f0000ee5000/0x2000)=nil, 0x2000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, {0xa, 0xffffffffffffffff, 0x0, @empty}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000ee6000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, 0x5c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) 2018/02/01 17:01:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x5) pipe2(&(0x7f0000865000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009b000-0x8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00003b3000)='./file0\x00') link(&(0x7f0000f3c000-0x8)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') ftruncate(r3, 0x0) dup2(r1, r2) 2018/02/01 17:01:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000001000)={0x23, &(0x7f000002c000-0x23)=""/35}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000001000-0x1)) 2018/02/01 17:01:57 executing program 6: mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000017000-0x10)={&(0x7f0000005000-0x1b0)={0x14, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4011}, []}, 0x14}, 0x1}, 0x0) 2018/02/01 17:01:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000e9000)='keyring\x00', &(0x7f0000336000-0x5)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000a00000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000fad000-0x1)="01", 0x1, r0) r2 = add_key$user(&(0x7f0000fc1000-0x5)='user\x00', &(0x7f0000753000-0x5)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b33ab76079ebe0d94f729cd653e520c19ad7d97fe21769e7c4db44c249b544230ba287fb8bd6ed266ccf59ef70995bf2e8c0ecd3fff3283f747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd640b336616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d3056391f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149be31bd78b506e8b", 0xc0, r0) keyctl$dh_compute(0x17, &(0x7f0000b55000-0xc)={r1, r2, r1}, &(0x7f0000702000-0x5)=""/5, 0x5, &(0x7f0000c97000)={&(0x7f0000a72000-0x10)={'poly1305-generic\x00'}}) 2018/02/01 17:01:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00006b1000)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffffffffe01, @dev={0xac, 0x14, 0x0}, {[]}}, @igmp={0x1f, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f0000ea3000)={0x0, 0x0, []}) 2018/02/01 17:01:57 executing program 4: mmap(&(0x7f0000000000/0xf25000)=nil, 0xf25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000d4000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e93000)={@common='gre0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000f23000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}, r1}, 0x14) 2018/02/01 17:01:57 executing program 2: r0 = socket(0x1e, 0x4, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000004000-0x4d), &(0x7f0000000000)) 2018/02/01 17:01:57 executing program 1: mmap(&(0x7f0000000000/0x1e000)=nil, 0x1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d000+0x379)={&(0x7f000000f000)={0x24, 0x12, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x6}, [@nested={0x10, 0x0, [@typed={0xc, 0x3, @uid}]}]}, 0x24}, 0x1}, 0x0) 2018/02/01 17:01:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a1000-0x20)={{&(0x7f000014d000/0x800000)=nil, 0x800000}, 0x200000}) openat(0xffffffffffffffff, &(0x7f0000ed1000-0x8)='./file0\x00', 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/01 17:01:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$peekuser(0x3, r0, 0x7f) r1 = socket$inet6(0xa, 0x2, 0x800000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000e50000-0x32)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x2, 0x0, {0xa, 0x0, 0x3ff, @dev={0xfe, 0x80, [], 0x0, 0x12}}}}, 0x32) bind$inet6(r1, &(0x7f0000813000-0x1c)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xb}, 0x1c) syz_emit_ethernet(0x131, &(0x7f000005b000-0x131)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0xfb, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0xfb, 0x0, "366a20f1a2721ccf839874c4efa988f6475a9ce63822b3af3c1b2d7ad4adf42ae80199bc7c8887fe9284850d815f27d330d42dfa50c2d4c39e4c46a29f567eda30cc7bc9df2d80515c0500c9a201e2cde80d01f651c32668cc79b556a2e69f8d1976897fb06f9f15b00aa2f15832154e282901c6d52a460879a772f7decba59c481505593e953659bc8e8bd1e4a57a79a0cdfa87d81fa9ed0000000812509cb3163585d73470a194e0c4ba817f95dea977621ffc8631ac030974559c258c06916ed8fcf4bbcc04019a05b543249d2828c256b351ae40482db0f0c9b45201f6a0fe3ee2c958090000a45aa17f9b7bdaa7c3bd93"}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0xfffffffffffffffc]}) [ 43.042713] kasan: CONFIG_KASAN_INLINE enabled [ 43.047157] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 43.060075] Dumping ftrace buffer: [ 43.063595] (ftrace buffer empty) [ 43.067294] Modules linked in: [ 43.070617] CPU: 1 PID: 5627 Comm: syz-executor1 Not tainted 4.4.114-gfe09418 #3 [ 43.071916] IPVS: length: 24 != 8 [ 43.081574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.090917] task: ffff8801d973df00 task.stack: ffff8801ccfb8000 [ 43.095142] device eql entered promiscuous mode [ 43.101616] RIP: 0010:[] [] __list_del_entry+0x86/0x1d0 [ 43.110322] RSP: 0018:ffff8801ccfbf5a8 EFLAGS: 00010246 [ 43.112965] IPVS: length: 24 != 8 [ 43.119209] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8800bbb33810 [ 43.126466] RDX: 0000000000000000 RSI: ffffffff851c4d50 RDI: ffff8800bbb33818 [ 43.126469] IPVS: length: 24 != 8 [ 43.137153] RBP: ffff8801ccfbf5c0 R08: 0000000000000001 R09: 0000000000000000 [ 43.144760] R10: 0000000000000001 R11: 1ffff100399f7e84 R12: 0000000000000000 [ 43.152036] R13: ffff8800bbb337b9 R14: ffff8800bbb33838 R15: 00000000ffffffde [ 43.152318] IPVS: length: 24 != 8 [ 43.162735] FS: 00007f56c6cf0700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 43.170946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.172531] IPVS: length: 24 != 8 [ 43.180246] CR2: 00007ff9a02b0db8 CR3: 00000001cd576000 CR4: 0000000000160670 2018/02/01 17:01:57 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f000000a000-0x4e)={@random="e9e73ababc72", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x18, 0x40000000003a, 0x3ff, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x86, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80}}}}}}}, 0x0) 2018/02/01 17:01:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000482, &(0x7f00008f3000)=""/24, &(0x7f00009f6000-0x4)=0x18) 2018/02/01 17:01:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000955000)=@hdr={0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x20000000000002, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) 2018/02/01 17:01:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$peekuser(0x3, r0, 0x7f) r1 = socket$inet6(0xa, 0x2, 0x800000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000e50000-0x32)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x2, 0x0, {0xa, 0x0, 0x3ff, @dev={0xfe, 0x80, [], 0x0, 0x12}}}}, 0x32) bind$inet6(r1, &(0x7f0000813000-0x1c)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xb}, 0x1c) syz_emit_ethernet(0x131, &(0x7f000005b000-0x131)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0xfb, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0xfb, 0x0, "366a20f1a2721ccf839874c4efa988f6475a9ce63822b3af3c1b2d7ad4adf42ae80199bc7c8887fe9284850d815f27d330d42dfa50c2d4c39e4c46a29f567eda30cc7bc9df2d80515c0500c9a201e2cde80d01f651c32668cc79b556a2e69f8d1976897fb06f9f15b00aa2f15832154e282901c6d52a460879a772f7decba59c481505593e953659bc8e8bd1e4a57a79a0cdfa87d81fa9ed0000000812509cb3163585d73470a194e0c4ba817f95dea977621ffc8631ac030974559c258c06916ed8fcf4bbcc04019a05b543249d2828c256b351ae40482db0f0c9b45201f6a0fe3ee2c958090000a45aa17f9b7bdaa7c3bd93"}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0xfffffffffffffffc]}) 2018/02/01 17:01:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000482, &(0x7f00008f3000)=""/24, &(0x7f00009f6000-0x4)=0x18) 2018/02/01 17:01:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000482, &(0x7f00008f3000)=""/24, &(0x7f00009f6000-0x4)=0x18) 2018/02/01 17:01:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x5) pipe2(&(0x7f0000865000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009b000-0x8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00003b3000)='./file0\x00') link(&(0x7f0000f3c000-0x8)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') ftruncate(r3, 0x0) dup2(r1, r2) 2018/02/01 17:01:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$peekuser(0x3, r0, 0x7f) r1 = socket$inet6(0xa, 0x2, 0x800000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000e50000-0x32)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x2, 0x0, {0xa, 0x0, 0x3ff, @dev={0xfe, 0x80, [], 0x0, 0x12}}}}, 0x32) bind$inet6(r1, &(0x7f0000813000-0x1c)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xb}, 0x1c) syz_emit_ethernet(0x131, &(0x7f000005b000-0x131)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0xfb, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0xfb, 0x0, "366a20f1a2721ccf839874c4efa988f6475a9ce63822b3af3c1b2d7ad4adf42ae80199bc7c8887fe9284850d815f27d330d42dfa50c2d4c39e4c46a29f567eda30cc7bc9df2d80515c0500c9a201e2cde80d01f651c32668cc79b556a2e69f8d1976897fb06f9f15b00aa2f15832154e282901c6d52a460879a772f7decba59c481505593e953659bc8e8bd1e4a57a79a0cdfa87d81fa9ed0000000812509cb3163585d73470a194e0c4ba817f95dea977621ffc8631ac030974559c258c06916ed8fcf4bbcc04019a05b543249d2828c256b351ae40482db0f0c9b45201f6a0fe3ee2c958090000a45aa17f9b7bdaa7c3bd93"}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0xfffffffffffffffc]}) 2018/02/01 17:01:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000482, &(0x7f00008f3000)=""/24, &(0x7f00009f6000-0x4)=0x18) 2018/02/01 17:01:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$peekuser(0x3, r0, 0x7f) r1 = socket$inet6(0xa, 0x2, 0x800000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000e50000-0x32)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x2, 0x0, {0xa, 0x0, 0x3ff, @dev={0xfe, 0x80, [], 0x0, 0x12}}}}, 0x32) bind$inet6(r1, &(0x7f0000813000-0x1c)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xb}, 0x1c) syz_emit_ethernet(0x131, &(0x7f000005b000-0x131)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0xfb, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0xfb, 0x0, "366a20f1a2721ccf839874c4efa988f6475a9ce63822b3af3c1b2d7ad4adf42ae80199bc7c8887fe9284850d815f27d330d42dfa50c2d4c39e4c46a29f567eda30cc7bc9df2d80515c0500c9a201e2cde80d01f651c32668cc79b556a2e69f8d1976897fb06f9f15b00aa2f15832154e282901c6d52a460879a772f7decba59c481505593e953659bc8e8bd1e4a57a79a0cdfa87d81fa9ed0000000812509cb3163585d73470a194e0c4ba817f95dea977621ffc8631ac030974559c258c06916ed8fcf4bbcc04019a05b543249d2828c256b351ae40482db0f0c9b45201f6a0fe3ee2c958090000a45aa17f9b7bdaa7c3bd93"}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0xfffffffffffffffc]}) 2018/02/01 17:01:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000482, &(0x7f00008f3000)=""/24, &(0x7f00009f6000-0x4)=0x18) 2018/02/01 17:01:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x5) pipe2(&(0x7f0000865000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009b000-0x8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00003b3000)='./file0\x00') link(&(0x7f0000f3c000-0x8)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') ftruncate(r3, 0x0) dup2(r1, r2) 2018/02/01 17:01:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$peekuser(0x3, r0, 0x7f) r1 = socket$inet6(0xa, 0x2, 0x800000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000e50000-0x32)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x2, 0x0, {0xa, 0x0, 0x3ff, @dev={0xfe, 0x80, [], 0x0, 0x12}}}}, 0x32) bind$inet6(r1, &(0x7f0000813000-0x1c)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xb}, 0x1c) syz_emit_ethernet(0x131, &(0x7f000005b000-0x131)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0xfb, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0xfb, 0x0, "366a20f1a2721ccf839874c4efa988f6475a9ce63822b3af3c1b2d7ad4adf42ae80199bc7c8887fe9284850d815f27d330d42dfa50c2d4c39e4c46a29f567eda30cc7bc9df2d80515c0500c9a201e2cde80d01f651c32668cc79b556a2e69f8d1976897fb06f9f15b00aa2f15832154e282901c6d52a460879a772f7decba59c481505593e953659bc8e8bd1e4a57a79a0cdfa87d81fa9ed0000000812509cb3163585d73470a194e0c4ba817f95dea977621ffc8631ac030974559c258c06916ed8fcf4bbcc04019a05b543249d2828c256b351ae40482db0f0c9b45201f6a0fe3ee2c958090000a45aa17f9b7bdaa7c3bd93"}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0xfffffffffffffffc]}) [ 43.187591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.195109] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.202366] Stack: [ 43.204498] ffff8800bbb33838 ffff8800bbb33810 ffff8800b5deb7c0 ffff8801ccfbf5d8 [ 43.212539] ffffffff81d631bd ffff8800bbb33810 ffff8801ccfbf5f8 ffffffff832afade [ 43.220559] ffff8800aa8b1980 ffff8800bbb33810 ffff8801ccfbf618 ffffffff832cf033 [ 43.228545] Call Trace: [ 43.231118] [] list_del+0xd/0x70 [ 43.236115] [] xfrm_state_walk_done+0x6e/0xa0 [ 43.242239] [] xfrm_dump_sa_done+0x73/0xa0 [ 43.248115] [] ? xfrm_dump_policy_start+0x20/0x20 [ 43.254601] [] netlink_dump+0x871/0xb40 [ 43.260205] [] __netlink_dump_start+0x52e/0x7c0 [ 43.266496] [] ? __netlink_ns_capable+0xe1/0x120 [ 43.272874] [] xfrm_user_rcv_msg+0x5bd/0x6b0 [ 43.278902] [] ? xfrm_user_rcv_msg+0x6b0/0x6b0 [ 43.285104] [] ? xfrm_dump_sa_done+0xa0/0xa0 [ 43.291139] [] ? xfrm_user_rcv_msg+0x6b0/0x6b0 [ 43.297346] [] ? xfrm_dump_policy_start+0x20/0x20 [ 43.303814] [] ? avc_has_perm_noaudit+0x460/0x460 [ 43.310282] [] ? mark_held_locks+0xaf/0x100 [ 43.316242] [] ? mutex_lock_nested+0x5d4/0x850 [ 43.322465] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 43.329280] [] ? mutex_lock_nested+0x560/0x850 [ 43.335482] [] ? xfrm_netlink_rcv+0x60/0x90 [ 43.341424] [] ? netlink_lookup+0xee/0x740 [ 43.347282] [] netlink_rcv_skb+0x13e/0x370 [ 43.353137] [] ? xfrm_dump_sa_done+0xa0/0xa0 [ 43.359175] [] xfrm_netlink_rcv+0x6f/0x90 [ 43.364940] [] netlink_unicast+0x522/0x760 [ 43.370795] [] ? netlink_unicast+0x44f/0x760 [ 43.376836] [] ? netlink_attachskb+0x6c0/0x6c0 [ 43.383044] [] netlink_sendmsg+0x8e8/0xc50 [ 43.388907] [] ? netlink_unicast+0x760/0x760 [ 43.394933] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 43.401406] [] ? security_socket_sendmsg+0x89/0xb0 [ 43.407961] [] ? netlink_unicast+0x760/0x760 [ 43.413989] [] sock_sendmsg+0xca/0x110 [ 43.419502] [] ___sys_sendmsg+0x6c1/0x7c0 [ 43.425269] [] ? copy_msghdr_from_user+0x550/0x550 [ 43.431837] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 43.438825] [] ? __fget+0x232/0x3b0 [ 43.444070] [] ? __fget+0x47/0x3b0 [ 43.449236] [] ? __fget_light+0xa1/0x1e0 [ 43.454915] [] ? __fdget+0x18/0x20 [ 43.460075] [] __sys_sendmsg+0xd3/0x190 [ 43.465667] [] ? SyS_shutdown+0x1b0/0x1b0 [ 43.471436] [] ? SyS_futex+0x210/0x2c0 [ 43.476942] [] ? fd_install+0x4d/0x60 [ 43.482366] [] ? move_addr_to_kernel+0x50/0x50 [ 43.488572] [] SyS_sendmsg+0x2d/0x50 [ 43.493904] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 43.500450] Code: c4 0f 84 94 00 00 00 48 b8 00 02 00 00 00 00 ad de 48 39 c3 0f 84 a5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 e8 00 00 00 4c 8b 03 49 39 c8 0f 85 9b 00 00 [ 43.527100] RIP [] __list_del_entry+0x86/0x1d0 [ 43.533425] RSP [ 43.537084] ---[ end trace 5aade0aedafcc477 ]--- [ 43.541821] Kernel panic - not syncing: Fatal exception in interrupt [ 43.548793] Dumping ftrace buffer: [ 43.552343] (ftrace buffer empty) [ 43.556034] Kernel Offset: disabled [ 43.559628] Rebooting in 86400 seconds..