[....] Starting enhanced syslogd: rsyslogd[ 13.212772] audit: type=1400 audit(1515875320.836:5): avc: denied { syslog } for pid=3493 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.555216] audit: type=1400 audit(1515875326.179:6): avc: denied { map } for pid=3634 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.203' (ECDSA) to the list of known hosts. 2018/01/13 20:28:52 fuzzer started [ 24.736798] audit: type=1400 audit(1515875332.360:7): avc: denied { map } for pid=3645 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/01/13 20:28:52 dialing manager at 10.128.0.26:41203 [ 27.830114] can: request_module (can-proto-0) failed. [ 27.838749] can: request_module (can-proto-0) failed. 2018/01/13 20:28:55 kcov=true, comps=false 2018/01/13 20:28:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000435000-0x16b)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x8, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, ""}}}}, 0x3a) 2018/01/13 20:28:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00006d1000)={0x2, 0x78, 0xc31, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000397000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ce5000-0x8)='./file0\x00', 0x420) dup2(r1, r0) 2018/01/13 20:28:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000041000)="01800d05", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000-0xd)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000042000-0x8c)={0x0, 0x0, 0x0, 'queue1\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(r1, &(0x7f0000974000-0xf0)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {0x0, 0x0}, {0x0, 0x0}, @quote={{0x0, 0x0}, 0x800, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @result={0x0, 0x5}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x0, 0x0}, {0x0, 0x0}, @time=@time={0x0, 0x0}}, {0x0, 0x0, 0x1a, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @addr={0x0, 0x0}}], 0xc0) [ 29.970446] audit: type=1400 audit(1515875337.594:8): avc: denied { map } for pid=3645 comm="syz-fuzzer" path="/root/syzkaller-shm796560329" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2018/01/13 20:28:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) r0 = open(&(0x7f000043f000-0x8)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000e5b000-0x8)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000f25000)='./file1\x00', 0x0, 0x0) lseek(r0, 0x39, 0x0) 2018/01/13 20:28:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000)="", 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000f5e000)="0000000000000007237fc27c2d0ab7f36c0479a7af46fceddbc23ee1d1d718008d22e77f2bbf31235ba0c31eff191d77088db0a2fbff7365da648e167f8eba0d8f52e27824fb0486155bec2a8574d31632c8750fad4024605996a607bb67468bd38b1652b0a997931bfc8a33f484db1f287e286c00933529815bc93527e3ed919360", 0x82, 0x0, &(0x7f0000758000)={0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) close(r0) 2018/01/13 20:28:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x100000000000c8, &(0x7f0000ee1000)=0x0, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f00006ce000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000100002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r2, &(0x7f0000435000-0x16b)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x8, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, ""}}}}, 0x3a) 2018/01/13 20:28:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) poll(&(0x7f00005e0000)=[{r0, 0x0, 0x0}], 0x1, 0x0) 2018/01/13 20:28:57 executing program 7: mmap(&(0x7f0000000000/0xf8f000)=nil, 0xf8f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000aa5000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00005d6000-0xe)=[{&(0x7f00005d6000-0x1)=';', 0x1}], 0x1, 0x0) vmsplice(r1, &(0x7f0000f83000)=[{&(0x7f0000f82000)="a4", 0x1}], 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000ba8000)={0x0, 0x0}) read(r0, &(0x7f0000ebd000-0xb8)=""/184, 0xfffffda6) [ 30.013751] audit: type=1400 audit(1515875337.637:9): avc: denied { map } for pid=3688 comm="syz-executor0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=8899 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 32.118125] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.700272] audit: type=1400 audit(1515875342.323:10): avc: denied { sys_admin } for pid=3699 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/13 20:29:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000b85000)={0x0, 0x1c9c380}, &(0x7f0000443000)={0x0, 0x0}) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x80000000000012, 0x0, @tid=r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f000047b000-0xe)='/selinux/user\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 34.914460] audit: type=1400 audit(1515875342.538:11): avc: denied { sys_chroot } for pid=4782 comm="syz-executor6" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/13 20:29:02 executing program 6: 2018/01/13 20:29:02 executing program 6: 2018/01/13 20:29:02 executing program 6: 2018/01/13 20:29:02 executing program 6: 2018/01/13 20:29:02 executing program 6: 2018/01/13 20:29:02 executing program 6: 2018/01/13 20:29:02 executing program 6: [ 35.233624] audit: type=1400 audit(1515875342.856:12): avc: denied { net_admin } for pid=4811 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.237314] device eql entered promiscuous mode [ 35.275880] syz-executor0 (4813) used greatest stack depth: 15920 bytes left [ 35.446297] audit: type=1400 audit(1515875343.069:13): avc: denied { dac_read_search } for pid=4817 comm="syz-executor1" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.627513] audit: type=1400 audit(1515875343.250:14): avc: denied { dac_override } for pid=4820 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/13 20:29:03 executing program 0: 2018/01/13 20:29:03 executing program 7: 2018/01/13 20:29:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00006d1000)={0x2, 0x78, 0xc31, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000397000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ce5000-0x8)='./file0\x00', 0x420) dup2(r1, r0) 2018/01/13 20:29:03 executing program 3: 2018/01/13 20:29:03 executing program 4: 2018/01/13 20:29:03 executing program 5: 2018/01/13 20:29:03 executing program 6: 2018/01/13 20:29:03 executing program 2: [ 35.798621] audit: type=1400 audit(1515875343.421:15): avc: denied { net_raw } for pid=4823 comm="syz-executor5" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.804217] device eql entered promiscuous mode 2018/01/13 20:29:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe) listen(r0, 0x0) 2018/01/13 20:29:03 executing program 5: 2018/01/13 20:29:03 executing program 1: mmap(&(0x7f0000000000/0xfef000)=nil, 0xfef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00004fa000-0x1c)={0xc, 0x4, 0x4, 0x100002001, 0x0, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) 2018/01/13 20:29:03 executing program 3: 2018/01/13 20:29:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe) listen(r0, 0x0) 2018/01/13 20:29:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x7) setsockopt(r0, 0x107, 0x12, &(0x7f0000000000)="", 0x4) r1 = socket(0x11, 0x802, 0x7) setsockopt(r1, 0x107, 0x12, &(0x7f0000000000)="", 0x4) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 2018/01/13 20:29:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_l2cap(0x1f, 0x80000000005, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe) listen(r0, 0x0) 2018/01/13 20:29:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000fd1000-0x12)='/dev/input/mouse#\x00', 0x1, 0x282) read(r0, &(0x7f00006da000+0x54b)=""/115, 0x73) write$sndseq(r0, &(0x7f00001f7000)=[], 0x0) 2018/01/13 20:29:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x88) connect$inet6(r0, &(0x7f00006d5000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f000091b000)=0x0, &(0x7f0000ab2000)=0x4) 2018/01/13 20:29:03 executing program 5: 2018/01/13 20:29:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000f9c000-0x4)=0xa3f, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000558000-0x38)={&(0x7f0000e3b000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000b03000)=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2018/01/13 20:29:03 executing program 7: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x10, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000004000)=0x0, &(0x7f0000005000-0x4)=0x4) [ 35.914463] audit: type=1400 audit(1515875343.536:16): avc: denied { map_create } for pid=4846 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 35.938496] audit: type=1400 audit(1515875343.561:17): avc: denied { map_read map_write } for pid=4846 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/01/13 20:29:03 executing program 3: 2018/01/13 20:29:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00001b3000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000093a000-0xc)={0x7, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000051d000)={0x0, 0x0}) epoll_pwait(r1, &(0x7f0000dc8000-0x3c)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000dc7000)={0x0}, 0x8) 2018/01/13 20:29:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000a0000-0x90)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000d57000)={@common='lo\x00', @ifru_ivalue=0x0}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000b09000-0x28)={@common='lo\x00', @ifru_addrs=@rc={0x1f, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000a70000)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, []}, 0x98) 2018/01/13 20:29:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000054000-0xa)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000007000-0x8)=0x0) writev(r0, &(0x7f000000c000)=[{&(0x7f000000d000-0xcc)='A', 0x1}], 0x1) close(r0) 2018/01/13 20:29:03 executing program 7: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x3eab4a7e6d27e081, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000004000)=0x0, &(0x7f0000005000-0x4)=0x4) 2018/01/13 20:29:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000665000-0x40)={0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_getsetattr(r0, &(0x7f0000fb2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ded000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/13 20:29:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1ed, &(0x7f0000762000-0x223)={@remote={[0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff, 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff, 0x0}, [], {{0x86dd, @ipv6={0x0, 0x6, "f07007", 0x1b7, 0x29, 0x0, @remote={0xfe, 0x80, [0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[@hopopts={0x32, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@generic={0x9, 0x0, ""}]}, @dstopts={0x16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, @dstopts={0xff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, @dstopts={0x2b, 0x1c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@jumbo={0xc2, 0x4, 0xfffffffffffffff7}, @hao={0xc9, 0x10, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}}, @calipso={0x7, 0x28, {0x7, 0x8, 0x7f, 0x4, [0xb7, 0x6, 0x9, 0x7fffffff]}}, @generic={0x1, 0x85, "0c1a865cd685b2969d9cc155f11095b1b9878eca857590b95ad6f7c99eeeace08e32cce9983765da5c56272f689233b0596539cf2d170479ea3a6660a05201c65e89c076f9a3c3e85336f20b0494ed7f1e7fa7dc748f863a55977fd52a8f0c03e367e394ada2e011b21866e2adf1cdb7e0fdc23600f179d4dba3f96e08875c193b623dfb0c"}, @enc_lim={0x4, 0x1, 0x5}]}, @routing={0x3b, 0x2, 0x0, 0x9, 0x0, [@loopback={0x0, 0x1}]}], @dccp={{0x2, 0x1, 0x4, 0x1, 0x5, 0x0, 0x0, 0xf, 0xfffffffffffffffa, "115823", 0x800, "3e6a8c"}, "a3382b7483a6441cb54ea1b54230c9dd8ab783e58afe1a557a39e5ce0e305782dd8b0269821b4623b478f66bfe53d7ae74706f0b163612eda68a439be423e7d34b46e5affc5268f999c103c42558fe24cb489c0f69aebfe3325389f254d51c56960b65a281968b00cd15c30e797aa8ff1b26858023b84db1a79e7f01e0b93c44d39f07e0980c"}}}}}}, 0x0) 2018/01/13 20:29:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$bt_l2cap(0x1f, 0x1, 0x0) connect(r0, &(0x7f000041d000)=@hci={0x1f, 0x0, 0x0}, 0x6) 2018/01/13 20:29:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000bd7000)={0x6, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) bind$inet6(r0, &(0x7f0000011000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r2, &(0x7f0000d09000-0x62e)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x0, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x0, 0x8, 0x0, ""}}}, 0x26) 2018/01/13 20:29:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) connect$ax25(r0, &(0x7f00001c2000-0x10)={0x1e, {"03491f0800"}, 0x0}, 0x10) 2018/01/13 20:29:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004fa000-0x1c)={0x3, 0x4, 0x4, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000594000-0x18)={r0, &(0x7f0000eff000)="", &(0x7f0000eea000)=""/0}, 0x18) 2018/01/13 20:29:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_l2cap(0x1f, 0x80000000005, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe) listen(r0, 0x0) shutdown(r0, 0x0) 2018/01/13 20:29:03 executing program 6: mmap(&(0x7f0000340000/0xc00000)=nil, 0xc00000, 0x1000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@common='lo\x00', &(0x7f0000939000-0x5)=@ethtool_gfeatures={0x3a, 0x0, []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 36.073982] syz-executor3 uses obsolete (PF_INET,SOCK_PACKET) 2018/01/13 20:29:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x200000002) writev(r0, &(0x7f00005a5000)=[{&(0x7f0000844000-0x2c)=')', 0x1}], 0x1) close(r0) 2018/01/13 20:29:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000015a000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000085d000/0x18000)=nil, &(0x7f00009d7000-0x18)=[@text16={0x10, &(0x7f00000a7000)="bad004b80000ef673e360f11fe36650f015af80f01cb64c057f67c650f18de64f30f0f0b0c90ba420066b80050000066eff4", 0x32}], 0x1, 0x0, &(0x7f00001d2000)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/01/13 20:29:03 executing program 4: 2018/01/13 20:29:03 executing program 0: [ 36.117855] device eql entered promiscuous mode [ 36.177360] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu 2018/01/13 20:29:04 executing program 1: 2018/01/13 20:29:04 executing program 0: 2018/01/13 20:29:04 executing program 6: 2018/01/13 20:29:04 executing program 3: 2018/01/13 20:29:04 executing program 5: 2018/01/13 20:29:04 executing program 7: 2018/01/13 20:29:04 executing program 4: 2018/01/13 20:29:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000054000-0xa)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000007000-0x8)=0x0) writev(r0, &(0x7f000000c000)=[{&(0x7f000000d000-0xcc)='A', 0x1}], 0x1) close(r0) 2018/01/13 20:29:04 executing program 6: 2018/01/13 20:29:04 executing program 0: 2018/01/13 20:29:04 executing program 3: 2018/01/13 20:29:04 executing program 5: 2018/01/13 20:29:04 executing program 7: 2018/01/13 20:29:04 executing program 1: 2018/01/13 20:29:04 executing program 4: 2018/01/13 20:29:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000)=0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000fba000-0x4)=0x0, &(0x7f0000000000)=0x4) 2018/01/13 20:29:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f000072e000)={@random="efad070000a7", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @icmp=@dest_unreach={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @empty=0x0, @empty=0x0, {[]}}, "2300f2fd0a19331a"}}}}}, 0x0) 2018/01/13 20:29:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xc) r1 = dup2(r0, r0) write(r1, &(0x7f00006e0000)="1f0000000606fdde00368116ffff0cff8100fb000900018018000006030000", 0x1f) 2018/01/13 20:29:04 executing program 4: 2018/01/13 20:29:04 executing program 7: 2018/01/13 20:29:04 executing program 6: 2018/01/13 20:29:04 executing program 4: [ 36.710854] audit: type=1400 audit(1515875344.334:18): avc: denied { create } for pid=4933 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/01/13 20:29:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000f000-0xc)={0x10, 0x34000, 0x0, 0x0}, 0xc, &(0x7f0000008000-0x10)={&(0x7f0000017000-0x20)={0x18, 0x27, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/13 20:29:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000201000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)=""/0) write$evdev(0xffffffffffffffff, &(0x7f000011c000-0x90)=[], 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) close(r0) 2018/01/13 20:29:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x84, 0x20, &(0x7f000082c000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 2018/01/13 20:29:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000664000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff, 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x86dd, @ipv6={0x0, 0x6, "ff1a0b", 0x38, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "79eb33", 0x0, 0x2f, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x608, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, [], "38689af3d227a8f0"}}}}}}}, 0x0) 2018/01/13 20:29:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000ccc000-0x10)=[{&(0x7f0000972000)="390000001300090480000000000000e11800001f01000000000000010000001419001600110001000c0004000701d0000001010c00006fe422", 0x39}], 0x1) 2018/01/13 20:29:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000043000-0xa)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000002a000-0xa)='./control\x00', 0x86000006) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3b000-0xa)='./control\x00', 0x1000800) rmdir(&(0x7f00006e5000-0xa)='./control\x00') 2018/01/13 20:29:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00009e8000)={0x1, &(0x7f0000ef4000-0x8)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) quotactl(0x0, &(0x7f0000ef3000)='./file0\x00', 0x0, &(0x7f0000745000-0xf1)="") 2018/01/13 20:29:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0x9, 0x0, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2018/01/13 20:29:04 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xdf, &(0x7f0000fd2000-0x356)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0x0}, [], {{0x86dd, @ipv6={0x0, 0x6, '\x00', 0x30, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "92c7c2", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, [], ""}}}}}}}, 0x0) [ 36.735816] audit: type=1400 audit(1515875344.359:19): avc: denied { write } for pid=4933 comm="syz-executor1" path="socket:[13812]" dev="sockfs" ino=13812 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 36.735976] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 36.741085] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 36.800148] netlink: 1 bytes leftover after parsing attributes in process `syz-executor4'. 2018/01/13 20:29:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) [ 36.815892] audit: type=1400 audit(1515875344.438:21): avc: denied { create } for pid=4942 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/01/13 20:29:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000bd5000)={0x1, &(0x7f0000632000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) pread64(0xffffffffffffffff, &(0x7f0000724000-0x6)=""/6, 0x6, 0x0) 2018/01/13 20:29:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2287, &(0x7f0000001000)="") [ 36.818458] audit: type=1400 audit(1515875344.442:22): avc: denied { write } for pid=4942 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 36.883202] netlink: 1 bytes leftover after parsing attributes in process `syz-executor4'. 2018/01/13 20:29:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x800, 0x0, 0xff, 0x1000000001, 0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000d74000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000892000)={0xa, 0xffffffffffffffff, 0x800, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000df8000-0x20)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000851000)=0x20) 2018/01/13 20:29:04 executing program 7: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000000000/0x1000)=nil, 0x1000) recvmsg$netrom(0xffffffffffffff9c, &(0x7f0000000000)={&(0x7f0000000000)=@ax25={0x3, {"5c2f94064c50b1"}, 0x0}, 0x10, &(0x7f0000000000)=[{&(0x7f0000215000-0x1000)="", 0x0}], 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000002000-0x4)={0xffffffffffffff9c}) syz_open_dev$mouse(&(0x7f0000001000-0x12)='/dev/input/mouse#\x00', 0x2a44c0000000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001000)=0x0) syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nfc_raw(0x27, 0x0, 0x0) signalfd4(0xffffffffffffff9c, &(0x7f0000002000-0x8)={0x0}, 0x8, 0x80800) getresuid(&(0x7f0000001000-0x4)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000001000)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002000-0xe8)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @multicast1=0x0}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000002000-0x4)=0xe8) stat(&(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000002000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002000-0x4)=0x0) getresuid(&(0x7f0000002000-0x4)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000002000-0x4)=0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001000-0x4)=0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={&(0x7f0000000000)='./file0\x00', 0x0, 0x0}, 0x10) 2018/01/13 20:29:04 executing program 0: mmap(&(0x7f0000000000/0xd11000)=nil, 0xd11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) shutdown(r0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@common='sit0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) recvmmsg(r0, &(0x7f0000d10000)=[{{0x0, 0x0, &(0x7f0000891000-0x30)=[], 0x0, &(0x7f0000d0e000)=""/4096, 0x1000, 0x0}, 0x0}, {{&(0x7f0000d0e000)=@in={0x0, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000d10000)=[{&(0x7f0000d0f000-0x6e)=""/110, 0x6e}, {&(0x7f0000071000-0xea)=""/234, 0xea}, {&(0x7f0000d0f000-0x53)=""/178, 0xb2}, {&(0x7f0000d0f000-0x3a)=""/58, 0x3a}, {&(0x7f0000408000-0xd6)=""/214, 0xd6}, {&(0x7f0000d0e000)=""/48, 0x30}], 0x6, &(0x7f0000b13000-0x9c)=""/156, 0x9c, 0x0}, 0x0}], 0x2, 0x0, 0x0) 2018/01/13 20:29:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000821000)='/dev/dsp#\x00', 0x1, 0x2) write(r0, &(0x7f0000dad000-0x9e)="", 0x0) mmap(&(0x7f0000a4e000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) write(r0, &(0x7f00002da000)="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", 0x1000) 2018/01/13 20:29:04 executing program 1: mmap(&(0x7f0000000000/0xf89000)=nil, 0xf89000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f7f000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f76000-0x21)="3e244e7e87adeb0717edd8b867042a0d", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000f77000-0x30)=[{&(0x7f0000f85000)="b68c6e40550210df94f6383bf848684648147caaa5ec9d07641f052a3e60fd44dbc08e2e510d5023583a522049b970396a4f088d9344c6214304c75688b6479d7cdd33dc78e961c88c95b391164824788a2ef79cffbbb884945a6aba23e01f5b89ee081578c548e06bd9c5144cf3ee405b271f29c8142d5cce8794e6644db114", 0x80}], 0x1) 2018/01/13 20:29:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000466000-0x8)=0x8) futex(&(0x7f000000d000-0x4)=0x0, 0x0, 0x0, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) pipe2(&(0x7f00008df000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00004ac000-0xe5)="ae", 0x1) vmsplice(r2, &(0x7f0000cf8000-0x20)=[{&(0x7f00002a7000)='#', 0x1}], 0x1, 0x0) readv(r1, &(0x7f0000c9e000)=[{&(0x7f0000c26000-0xe7)=""/231, 0xe7}], 0x1) 2018/01/13 20:29:04 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x0, 0x0) shutdown(r0, 0x0) 2018/01/13 20:29:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000730000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0f85403, &(0x7f0000b5e000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/13 20:29:04 executing program 4: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000003000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0x0}, [], {{0x800, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@lsrr={0x83, 0x3, 0x0, []}]}}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001, ""}}}}}, 0x0) 2018/01/13 20:29:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000afe000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1, 0x0}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)=""/0, 0xfc13, 0x0}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) 2018/01/13 20:29:04 executing program 3: r0 = socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x8907, &(0x7f00002ee000-0x4)=0x0) 2018/01/13 20:29:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000030d000-0xb)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x40080000000002, 0x7c, 0x4) 2018/01/13 20:29:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000012000)=0x3fe, 0x4) bind$inet(r0, &(0x7f00002c1000)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6d000-0x10)=[@in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000583000-0x4)=0x0, 0x4) 2018/01/13 20:29:04 executing program 3: clone(0x0, &(0x7f0000d25000)="", &(0x7f0000d26000-0x4)=0x0, &(0x7f0000ad9000-0x2)=0x0, &(0x7f0000d25000)="") mq_timedreceive(0xffffffffffffffff, &(0x7f000033b000)=""/4096, 0x1000, 0x0, &(0x7f0000f36000)={0x0, 0x989680}) 2018/01/13 20:29:04 executing program 4: mmap(&(0x7f0000000000/0xfe2000)=nil, 0xfe2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000fce000-0x8)={0x4000019980330, 0x0}, &(0x7f0000002000-0x18)={0x800000, 0xfffffffffff7ffff, 0x0, 0x0, 0x0, 0x0}) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000022000-0x8)=0x0) 2018/01/13 20:29:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b9000-0x4)=0x51) ioctl$TCSETA(r0, 0x5406, &(0x7f0000f90000)={0x34d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/13 20:29:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000924000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000584000-0x48)={0x2, 0x0, [{0x40000000, 0x0, 0x0}, {0x40000001, 0x0, 0x0}]}) 2018/01/13 20:29:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000a3000)='./file0\x00', &(0x7f00007d0000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)="") mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)="") mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f00003d7000)='.', &(0x7f0000496000-0x8)='./file0\x00', &(0x7f0000e8e000)='bpf\x00', 0x28000, &(0x7f0000ce0000)="") mount(&(0x7f00005e1000-0x8)='./file0\x00', &(0x7f0000df5000-0x8)='.', &(0x7f0000df4000)='%&t3\x00', 0x2000, &(0x7f00003db000-0x23)="") 2018/01/13 20:29:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000008000-0x13)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00008fa000)=""/4096) [ 37.103715] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 2018/01/13 20:29:05 executing program 0: r0 = socket(0x2, 0x3, 0x6) getsockopt(r0, 0x0, 0xce, &(0x7f0000004000)=""/0, &(0x7f0000004000)=0x0) 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000f88000-0x4)='+\t', 0x2) sendfile(r0, r0, &(0x7f0000cd0000-0x8)=0x0, 0x6) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f00002ac000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000000060804000000fffc0c6565643b799365005f1b76"], 0x1000) 2018/01/13 20:29:05 executing program 5: mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x400000005, 0x0, &(0x7f0000027000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8942, &(0x7f0000029000)={@common='ip6tnl0\x00', &(0x7f000002d000-0xe)=@ethtool_sfeatures={0x3b, 0x0, []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/13 20:29:05 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) unlink(&(0x7f0000013000)='./file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/01/13 20:29:05 executing program 6: prctl$getreaper(0x28, &(0x7f0000d87000)=0x0) 2018/01/13 20:29:05 executing program 7: mmap(&(0x7f0000000000/0x417000)=nil, 0x417000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000329000-0x38)={&(0x7f00003a2000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000416000)={&(0x7f00001cb000-0x1180)=@allocspi={0x104, 0x16, 0x309, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x32}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xfff}, [@mark={0xc, 0x15, {0x1, 0x0}}]}, 0x104}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x10, &(0x7f000008e000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x10) 2018/01/13 20:29:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b18000-0x8)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)="") mkdir(&(0x7f0000025000-0x10)='./file0/control\x00', 0x0) mkdir(&(0x7f0000d70000-0xe)='./file0/file0\x00', 0x0) symlink(&(0x7f0000789000-0x8)='./file0\x00', &(0x7f0000a10000-0x16)='./file0/control/file0\x00') rename(&(0x7f0000b8f000)='./file0/file0\x00', &(0x7f000001c000)='./file0/control\x00') 2018/01/13 20:29:05 executing program 6: mmap(&(0x7f0000000000/0xfed000)=nil, 0xfed000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000081e000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000371000-0x14)={0x4c2b, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x8000000006) writev(r1, &(0x7f0000fac000)=[{&(0x7f00000c1000)="4775ace6acb5c61dc15cbe22cb55f9a57748cc23f4c0781541173b31c6d6664c81d0f8b60a8808", 0x27}, {&(0x7f0000fed000-0x6b)="f28a030c661e43a9abd8e25d9c4e7287c94891fb3af8e5fdc0d64e97ba398a09812b6c168fc984feb750e550d41c94087716a3851b5e420ae722c2d233e83e8e8afedc93df9e0257d6980d", 0x4b}], 0x2) 2018/01/13 20:29:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x1f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000a000)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) 2018/01/13 20:29:05 executing program 2: 2018/01/13 20:29:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f00005f0000-0x8)={0x20071026, r0}, &(0x7f0000562000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/13 20:29:05 executing program 7: mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x2, 0x400000000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000012000)={0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f000019a000-0x1f)="1f00000002031900000007000000068100ed1b8509000100010100ff3ffe58", 0x1f}], 0x1) 2018/01/13 20:29:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000695000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0481273, 0x0) 2018/01/13 20:29:05 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/13 20:29:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0xa00000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000843000-0x18)={0xaa, 0x2, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e90000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) clone(0x600, &(0x7f0000687000)="", &(0x7f0000b4c000)=0x0, &(0x7f0000553000-0x4)=0x0, &(0x7f00007a5000-0x8f)="") close(r0) 2018/01/13 20:29:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000015a000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000ae5000)={0x0, 0x20000001, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000306000/0x18000)=nil, &(0x7f0000c34000+0x6b8)=[@text32={0x20, &(0x7f0000209000)="660f3880541242a0b8780000aeb300aeb3000f21f8350000000c0f23f8f00fbaba0e71abf92bc4c10cc6c200669a61040f20c035200000000f22c06467360f237c2e0f01d10fc71ec7442400e3f10000c744240200900000c744240600000000b9be0300000f32", 0x67}], 0x1, 0x0, &(0x7f0000f6f000-0x10)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f000043b000-0x1fb)={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0x0}, [], {{0x8906, @ipv6={0x0, 0x6, "ebe139", 0x14, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}}, 0x0) 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) close(r0) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f000025f000-0xa)='/dev/vcs#\x00', 0x80000000004, 0x0) pread64(r0, &(0x7f0000003000)=""/136, 0x3ab, 0x100000000000000) 2018/01/13 20:29:05 executing program 4: r0 = socket$can_raw(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x79, &(0x7f0000588000)="", 0x0) 2018/01/13 20:29:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f000001f000)='./control\x00', 0x0, 0x0) r1 = inotify_init1(0x0) r2 = dup3(r0, r1, 0x0) lseek(r2, 0x0, 0x0) [ 37.675421] capability: warning: `syz-executor5' uses deprecated v2 capabilities in a way that may be insecure 2018/01/13 20:29:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000001000-0x6)='./bus\x00', 0x1000, 0x0) creat(&(0x7f00000b7000)='./bus\x00', 0x0) open(&(0x7f0000cc5000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000cbb000-0x6)='./bus\x00', 0x6042, 0x0) 2018/01/13 20:29:05 executing program 3: vmsplice(0xffffffffffffffff, &(0x7f000009f000-0x50)=[], 0x0, 0x44) 2018/01/13 20:29:05 executing program 0: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000008000)={&(0x7f000000c000-0x33c)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr=0x0, @in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x6c}, @in6=@mcast1={0xff, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x4, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0}, [@algo_comp={0x48, 0x3, {{"6465666c61746500000000000000000000000000000000000000000000000000000000000000000000f1ffffff00"}, 0x0, ""}}]}, 0x138}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/13 20:29:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [], {0x95, 0x0, 0x0, 0x0}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000062000-0xb7)=""/183, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000fd8000-0x8)={0x0, 0x0}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f000021e000)=0xc5b0, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000187000-0x8)={r0, r1}) sendmsg$kcm(r3, &(0x7f00002be000-0x38)={0x0, 0x0, &(0x7f0000dd2000-0x30)=[{&(0x7f0000627000)="ee", 0x1}], 0x1, &(0x7f0000a3b000-0x100)=[], 0x0, 0x0}, 0x0) 2018/01/13 20:29:05 executing program 4: clone(0x0, &(0x7f0000f42000-0xf5)="", &(0x7f0000ec4000-0x4)=0x0, &(0x7f0000200000)=0x0, &(0x7f0000f42000-0x6c)="") futimesat(0xffffffffffffffff, &(0x7f000089f000)='./file0\x00', &(0x7f0000c4f000-0x20)={{0x0, 0x7530}, {0x0, 0x2710}}) 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0xa, 0x3, 0x1) setsockopt(r0, 0xffffffff00000029, 0x48, &(0x7f0000001000-0x53)="9a06e3c2", 0x4) 2018/01/13 20:29:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f000021c000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000444000-0xa)='./control\x00', r0, &(0x7f000070e000-0x8)='./file0\x00') name_to_handle_at(r0, &(0x7f0000a44000-0x8)='./file0\x00', &(0x7f0000492000)={0x81, 0x0, "6efd18aa221a1402dd10d2e8d9ea08a800000100800000006456ce4e7c7462d8d2d0d71956a38ad3ef8544805ca01c76f1018cd86bd3e3a7159f06ddf3395b581ae5f8d7ce9fb04cd4f2ff38c7c8f974d149c7f8b2e334182158df2313f31880a061261a264c40d8c4f06e4e3e7972a2c2cd03f462e63eaefe"}, &(0x7f0000040000)=0x0, 0x0) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000616000-0x10)={0x2, &(0x7f0000617000)=[{0x2000000000025, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x0, 0x0}]}, 0x10) 2018/01/13 20:29:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x4000000000000801) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000d99000-0x28)={@syzn={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, @ifru_names=@syzn={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}}) 2018/01/13 20:29:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ae9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f000057b000-0x40)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001b7000/0x18000)=nil, &(0x7f00001ca000)=[@text32={0x20, &(0x7f00003f2000-0x3d)="66ba4300b0c6ee64814c2b980100000066baf80cb860f25689ef66bafc0cb800000000ef0f060f019b315000000f235e0f0059000f35f30f350f011cac", 0x2c}], 0x1, 0x0, &(0x7f0000442000)=[], 0x111b) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00003a0000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x4000000002, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000f81000-0x8)=0x3) write(r0, &(0x7f0000fcb000-0x74)="", 0x0) 2018/01/13 20:29:05 executing program 4: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000007000-0x15)='/proc/self/net/pfkey\x00', 0x2, 0x0) fallocate(r0, 0x0, 0x100000000, 0x8) 2018/01/13 20:29:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000bd2000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f000004d000)={0x4, 0x29, &(0x7f00000a9000-0xb5)="c89d1ecd793e36be39496ed4a1b4edcd1ab4a294da5961199533d57bfcc33abbacc0614dfe7a55fc0d"}) 2018/01/13 20:29:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000515000)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000de2000-0x1)="", 0x0, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000c24000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000bc0000)={0x79, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000fc7000-0x90)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x300}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/01/13 20:29:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000025000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000268000-0xa)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000018000+0x9a2)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f000001b000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000017000)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000fb0000-0xe)='./file0/file0\x00', 0x10240, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40049409, r2) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000003000-0x4)=0x0, &(0x7f0000003000-0x4)=0x2e3) 2018/01/13 20:29:05 executing program 7: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000002000)=0x6) recvmsg(r0, &(0x7f0000007000)={&(0x7f0000008000-0x1002)=@un=@file={0x0, ""/4096}, 0x1002, &(0x7f0000007000)=[], 0x0, &(0x7f0000006000-0xf7)=""/247, 0xf7, 0x0}, 0x0) 2018/01/13 20:29:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000ff9000-0x4)=0x0) write(r0, &(0x7f00004b9000)="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", 0xfc) 2018/01/13 20:29:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1, 0x3}, 0xbe) bind(r1, &(0x7f0000d02000-0x10)=@nfc={0x27, 0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1, 0x0}, 0x10) sendmsg$alg(r1, &(0x7f000007e000)={0x0, 0x0, &(0x7f0000577000-0x10)=[], 0x0, &(0x7f0000b62000)=[], 0x0, 0x0}, 0x8c0) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f000074e000-0x3f)="b63db85e1e8d2200000000000008afd61dcc436aed5ed2bc7018cebc9b97ae21914d872c678ce22c9b160e96aa1fae1a", 0x30) 2018/01/13 20:29:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000392000-0x10)=@req={0x3fc, 0x0, 0x1, 0x5b}, 0x10) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004ae000+0xb5c)=@generic={0x10000000001e, "0100000900000001e5260001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000448000-0x10)=[], 0x0, &(0x7f0000ecf000)=[], 0x0, 0x0}, 0x0) [ 37.932852] sctp: failed to load transform for md5: -4 [ 37.932856] sctp: failed to load transform for md5: -2 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000003000)='D', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00008bb000)=""/0, &(0x7f000064f000-0x4)=0x0) 2018/01/13 20:29:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x2) write$tun(r0, &(0x7f0000a33000-0x63)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x51, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x0, @multicast2=0xe0000002, {[@end={0x0}]}}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x181f, 0x0, 0x0, @multicast2=0xe0000002, @multicast2=0xe0000002, {[@rr={0x7, 0x17, 0x0, [@empty=0x0, @multicast2=0xe0000002, @empty=0x0, @multicast2=0xe0000002, @multicast1=0xe0000001]}]}}, "e56b50e203"}}}, 0x5b) 2018/01/13 20:29:05 executing program 0: mmap(&(0x7f0000000000/0x9ff000)=nil, 0x9ff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0xa, 0x3, 0x1) getsockopt(r0, 0x29, 0x4c, &(0x7f0000a7e000-0x10)=""/242, &(0x7f0000001000-0x4)=0xf2) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0045103, &(0x7f00007a3000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/13 20:29:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000089a000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ae8000)={0x3, 0x0, 0x11000, 0x2000, &(0x7f00003a8000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000584000/0x18000)=nil, &(0x7f0000218000)=[@text32={0x20, &(0x7f000057f000)="b8008000000f23c00f21f835030001000f23f8640f005105ab0f01d5f3650f209366ba400066b8060066efb9800000c00f3235004000000f30c744240000000080c7442402cb930000c7442406000000000f011c240f01d7d94306", 0x5b}], 0x1, 0x0, &(0x7f00003ef000-0x20)=[], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00008a3000/0x18000)=nil, &(0x7f0000fb2000)=[@text32={0x20, &(0x7f00000e7000)="1c71ea5300000026000f2302c4e2f1006d10660f38292a0f20d835200000000f22d80f01dfb9800000c00f3235000800000f300f01cb2e67f22e0f01c9", 0x3d}], 0x1, 0x0, &(0x7f0000856000-0x20)=[@flags={0x3, 0xa0104}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/01/13 20:29:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000ba4000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x3) 2018/01/13 20:29:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00006ba000)={0x2, &(0x7f0000193000-0x10)=[{0x84, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) 2018/01/13 20:29:05 executing program 5: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000508000)=""/197, &(0x7f0000ce7000-0x4)=0xc5) [ 37.938690] netlink: 40 bytes leftover after parsing attributes in process `syz-executor6'. 2018/01/13 20:29:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000711000-0x14)={0x2, 0x4, 0x4, 0x9, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c3c000)={r0, &(0x7f0000cb1000-0x75)="df", &(0x7f0000818000)=""/4096}, 0x18) 2018/01/13 20:29:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000dd1000-0x5)='.elf\x00', 0x40, 0x0, &(0x7f00009bb000-0x40)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/13 20:29:05 executing program 0: clone(0x0, &(0x7f0000002000-0xc9)="", &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000001000)="") mremap(&(0x7f0000909000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f000000a000/0x2000)=nil) 2018/01/13 20:29:05 executing program 4: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) connect(r0, &(0x7f0000002000-0xe)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe) r1 = dup(r0) getpeername$unix(r1, &(0x7f0000000000)=@file={0x0, ""/4096}, &(0x7f0000003000-0x4)=0x1002) 2018/01/13 20:29:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000b27000)='nv\x00', 0x3) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f00004dd000)="", 0x0, 0x800000020000000, &(0x7f0000aa9000-0x10)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff, 0x0}, 0x14) 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000220000-0x24)=""/36, 0x24, 0x0, &(0x7f00009f4000)={0x77359400, 0x0}) 2018/01/13 20:29:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x10d, 0xc, &(0x7f00001b0000-0xab)=""/4, &(0x7f00002be000-0x4)=0x4) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000bd5000)={0x1, &(0x7f0000632000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) readlinkat(0xffffffffffffffff, &(0x7f0000ea4000)='./file0\x00', &(0x7f00001c9000-0xdb)=""/219, 0xdb) 2018/01/13 20:29:05 executing program 0: mmap(&(0x7f0000000000/0x35e000)=nil, 0x35e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000035e000-0xe8)={{{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0xff}, 0x0, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000008000)={@common='ip6_vti0\x00', @ifru_data=&(0x7f000000a000)="00009e1908e8af7d6f1735df9846e4f13e566e2bd2d7b04d929d09000100f47b"}) 2018/01/13 20:29:05 executing program 1: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000004000)='/dev/urandom\x00', 0x0, 0x200000) fcntl$getownex(r0, 0x10, &(0x7f0000002000-0x8)={0x0, 0x0}) 2018/01/13 20:29:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000473000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000145000-0xb0)={{0x0, 0x20}, 'port1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/13 20:29:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000091000)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000dfa000/0x18000)=nil, &(0x7f00005aa000)=[@textreal={0x8, &(0x7f0000212000)="ba4300b09aee0f01ef0fe0824a000f2eb1005066b9a509000066b83e00000066ba000000000f300f00d136f30f2d9300800f01928997f30f019e0080baf80c66b88046cf8766efbafc0c66b84700000066ef", 0x52}], 0x1, 0x0, &(0x7f00003f0000)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/01/13 20:29:05 executing program 0: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000048000)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x4, 0x18011, r0, 0x0) writev(r0, &(0x7f0000029000-0x20)=[{&(0x7f000004a000-0x34)="cf420e6d0cd550e616dd86a7da4a6bb830959d076d1ef7f67d672a4c433b3b50f084c4ea", 0x24}], 0x1) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f00004bd000)='mqueue\x00') 2018/01/13 20:29:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000402000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2286, &(0x7f0000001000)="") 2018/01/13 20:29:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000e76000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000022e000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00003dd000)=""/246) close(r1) 2018/01/13 20:29:05 executing program 1: readlink(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000915000)=""/0, 0x0) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000e9f000)=0x0) io_cancel(r0, &(0x7f0000127000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000b56000)="", 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000ac7000)={0x0, 0x0, 0x0, 0x0}) 2018/01/13 20:29:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00009b8000)=""/0, &(0x7f0000369000)=0x0) 2018/01/13 20:29:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000928000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xae80, &(0x7f0000675000)={0x0, 0x0, []}) 2018/01/13 20:29:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000d9b000-0x4)=0x0, &(0x7f0000a5b000)=0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000dc5000-0x10)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000682000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000193000)={r2, 0x3}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00004fb000-0x118)={0x4, {{0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @rand_addr=0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) fstat(0xffffffffffffffff, &(0x7f00002e5000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r3) r4 = socket$inet_sctp(0x2, 0x80003, 0x84) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000f20000)=0x47, 0x4) sendto$inet(r3, &(0x7f0000b3e000)="", 0x0, 0xfffffffffffffffc, &(0x7f000078a000)={0x2, 0xffffffffffffffff, @loopback=0x7f000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/13 20:29:05 executing program 3: mmap(&(0x7f0000000000/0xeb7000)=nil, 0xeb7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000eb6000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f000002d000-0x6)='ramfs\x00', 0x1000818, &(0x7f000000a000)="") creat(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x0, 0x0) pread64(r0, &(0x7f0000eb7000)=""/107, 0x6b, 0x0) 2018/01/13 20:29:05 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) connect$ax25(r0, &(0x7f00001c2000-0x10)={0x1e, {"03491f0800"}, 0x0}, 0x10) 2018/01/13 20:29:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0xae78, &(0x7f0000c15000)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/13 20:29:05 executing program 2: mmap(&(0x7f0000000000/0xf21000)=nil, 0xf21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000f1f000-0x38)={&(0x7f0000f1e000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00007e0000-0x10)={&(0x7f00007c4000)=@report={0x4c, 0x20, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, {@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, []}, 0x4c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/13 20:29:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000369000)="", 0x0) 2018/01/13 20:29:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00007ed000)={0x0, 0x0, ""}, &(0x7f0000fe4000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000e5f000)=@assoc_value={r1, 0x0}, &(0x7f00007cf000)=0x8) 2018/01/13 20:29:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000032000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000057000)='/dev/usbmon#\x00', 0x1, 0x4000) 2018/01/13 20:29:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000079f000)='./file0\x00', 0x0) r0 = open(&(0x7f0000360000-0x8)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f000089c000-0x70)=[{&(0x7f0000bea000-0x86)=""/134, 0x86}], 0x1) 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000009000)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1, 0x0}) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) clone(0x0, &(0x7f0000015000)="", &(0x7f0000011000)=0x0, &(0x7f00005dc000-0x4)=0x0, &(0x7f0000001000-0x5d)="") ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f000000c000-0x10)={&(0x7f0000002000/0x4000)=nil, 0x4000}) 2018/01/13 20:29:06 executing program 0: mmap(&(0x7f0000000000/0xd38000)=nil, 0xd38000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00008df000-0x78)={0x0, {0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8d, 0x0, 0x0, 0x0, 0x0, &(0x7f00004cd000-0x10)=@common="6c6f3a000089000000009300", 0x0, 0x0, 0x0}) 2018/01/13 20:29:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000a2c000)="ff00040000ffff02ffffff78d60000d8144e00001902ff05", 0x18) 2018/01/13 20:29:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00004f2000)=@req={0x3fc, 0x0, 0x1, 0xff}, 0x10) poll(&(0x7f0000c51000-0x40)=[{r0, 0x0, 0x0}], 0x1, 0x0) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x40045532, &(0x7f000000a000-0x88)=""/136) 2018/01/13 20:29:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r0, r1, 0x0) r2 = open(&(0x7f0000adf000-0xa)='./control\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x100000) sendfile(r1, r2, &(0x7f0000af5000)=0x0, 0x10001) 2018/01/13 20:29:06 executing program 0: syz_open_dev$tun(&(0x7f0000126000-0xd)='/dev/net/tun\x00', 0x0, 0x610000) [ 38.390704] sctp: [Deprecated]: syz-executor3 (pid 5307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 38.390704] Use struct sctp_sack_info instead 2018/01/13 20:29:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000700000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) creat(&(0x7f000049d000)='./file0\x00', 0x0) 2018/01/13 20:29:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00009a2000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc05c5340, &(0x7f000000c000-0x5c)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/13 20:29:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f00007ed000)='rxrpc\x00', &(0x7f00007e2000)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f00004d6000)='\x00', 0xfffffffffffffff8) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f00009fa000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000bf8000/0xe000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) sched_setparam(0x0, &(0x7f00002ab000-0x4)=0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00001a5000)=0x0, 0x4) 2018/01/13 20:29:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x4, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000ffb000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0xa, 0x2, 0x88) connect$can_bcm(r0, &(0x7f0000004000)={0x2, 0x0, 0x0, 0x0}, 0x10) sendmsg(r0, &(0x7f0000004000-0x38)={&(0x7f0000005000)=@generic={0x0, "7ca87ec4e73afc6a2ff527eb8ae036d304ad185e615ef852a73abc7aa176c3373c0a5be65b5eb668e6737a57b898506bbacc5de046cdd673db29c4017dc0ee4157a69f74c6574b5f731bd15a55d97975ace204cad2bebfdefe10711e234de5a20a76698ef34c78128422704bab3cf479df80baa724be8bb49d075619be1a"}, 0x80, &(0x7f000000d000-0x50)=[], 0x0, &(0x7f0000004000)=[], 0x0, 0x0}, 0x0) 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000f67000-0x4)=0x20080000004) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000fdf000-0x8)=[{r0, 0x0, 0x0}], 0x1, 0xb92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x2) 2018/01/13 20:29:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000023b000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff, 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff, {[]}}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x0, @multicast1=0xe0000001, {[]}}, ""}}}}}, 0x0) 2018/01/13 20:29:06 executing program 4: unshare(0x28060400) syz_extract_tcp_res(&(0x7f0000001000-0x8)={0x0, 0x0}, 0x0, 0xffffffffffff9a64) r0 = syz_open_dev$tun(&(0x7f00001b3000-0xd)='/dev/net/tun\x00', 0x0, 0x22041) write(r0, &(0x7f0000004000-0x43)="", 0x0) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00007e6000)='/dev/input/event#\x00', 0x1, 0x80a02) write$evdev(r0, &(0x7f0000548000)=[{{0x2000, 0x0}, 0x1, 0x63, 0x2}, {{0x0, 0x2710}, 0x0, 0x0, 0x0}], 0x30) 2018/01/13 20:29:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4c, 0x0, &(0x7f0000452000-0x4c)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x10, &(0x7f000091b000)=[@ptr={0x70742a85, 0x0, &(0x7f0000802000)=0x0, 0x1, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x0, 0x1a}], &(0x7f0000788000-0x20)=[0x0, 0x28]}, 0x1000}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/13 20:29:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000011000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet(0x2, 0x100000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00006e4000)=0x9, 0x4) r2 = syz_open_dev$tun(&(0x7f000050b000)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r2, &(0x7f00003a1000-0xa1)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @udp={0xffffffffffffffff, 0x0, 0x8, 0x0, ""}}}, 0x26) 2018/01/13 20:29:06 executing program 0: r0 = add_key(&(0x7f00008cc000)='keyring\x00', &(0x7f0000c96000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x4, r0, 0xfffffffffffffffb) [ 38.493765] device eql entered promiscuous mode 2018/01/13 20:29:06 executing program 0: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001000-0x28)={@common='erspan0\x00', &(0x7f0000003000)=@ethtool_sfeatures={0x15, 0x0, []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001000-0x10)={0x0, 0x2, &(0x7f0000001000-0xd)=[@in={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}]}, &(0x7f0000003000)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0xc000800000000001, 0x10000, 0x1}, 0x10) r0 = socket(0x11, 0x802, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000fbc000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000)="", 0x47e) 2018/01/13 20:29:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f000082e000)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @quote={{0x0, 0x0}, 0x0, 0x0}}], 0x30) rename(&(0x7f00007e3000)='./file0\x00', &(0x7f0000ab4000-0x10)='./control/file0\x00') rename(&(0x7f0000f92000)='./control\x00', &(0x7f0000d53000-0x10)='./file0\x00') ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/01/13 20:29:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000974000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$binder(&(0x7f0000e37000/0x2000)=nil, 0x2000, 0x0, 0x41010, r2, 0x0) 2018/01/13 20:29:06 executing program 6: sync_file_range(0xffffffffffffffff, 0x200000000, 0xfffffffffffffffa, 0x0) 2018/01/13 20:29:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00004c4000-0x4)=0x9, 0x4) sendmsg(r0, &(0x7f00003d6000)={&(0x7f00000e7000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x0}, 0x168, &(0x7f0000c51000-0x20)=[], 0x0, &(0x7f0000eb1000-0x5a0)=[], 0x10, 0x0}, 0x0) [ 38.563981] binder: 5351:5358 not enough space to store 0 fds in buffer [ 38.576383] device eql entered promiscuous mode [ 38.591211] binder: 5351:5358 transaction failed 29201/-22, size 72-16 line 3045 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000d54000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 2018/01/13 20:29:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000023b000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff, 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0xfffffffffffff000, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x0, @multicast1=0xe0000001, {[]}}, ""}}}}}, 0x0) 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000ada000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) writev(r0, &(0x7f0000d66000)=[{&(0x7f00004f6000)="2900000018003109004a0001000c00070a0000000a00ff06800000020c000800040010006153f4ff01", 0x29}], 0x1) [ 38.610892] device eql entered promiscuous mode [ 38.642678] binder_alloc: binder_alloc_mmap_handler: 5351 20000000-20002000 already mapped failed -16 [ 38.643330] binder: BINDER_SET_CONTEXT_MGR already set [ 38.643346] binder: 5351:5380 ioctl 40046207 0 returned -16 [ 38.646854] binder_alloc: 5351: binder_alloc_buf, no vma 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00008e1000-0x10)=@common='lo\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000a97000)={@common='ip6_vti0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f000043d000)={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, r1}, 0xc) 2018/01/13 20:29:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00007cc000)=[{0x0, 0x0}], 0x1, 0x40) r1 = timerfd_create(0x0, 0x0) epoll_wait(r0, &(0x7f0000865000)=[{0x0, 0x0}], 0x1, 0x81) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000c1d000)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000001000-0x20)={{0x0, 0x0}, {0x0, 0x989680}}, &(0x7f0000037000)={{0x0, 0x0}, {0x0, 0x0}}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f000003d000-0xc)={0x7, 0x0}) 2018/01/13 20:29:06 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x2, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80000000000001, &(0x7f0000002000-0xe7)=""/231, &(0x7f0000000000)=0xe7) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0xa, 0x2, 0x11) getsockopt$bt_hci(r0, 0x88, 0x0, &(0x7f00004d0000)=""/140, &(0x7f0000001000-0x4)=0x8c) 2018/01/13 20:29:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f000019a000-0x1f)="1f00000002021900000007000000068100ed1b8509000100010100ff3ffe58", 0x1f}], 0x1) 2018/01/13 20:29:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[], 0x0, 0x0}, 0x0}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x26) ioctl$sock_SIOCOUTQ(r0, 0x80487436, &(0x7f0000006000)=0x0) 2018/01/13 20:29:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) [ 38.646883] binder: 5351:5380 transaction failed 29189/-3, size 72-16 line 2903 [ 38.677257] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 38.677268] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.723863] binder: undelivered TRANSACTION_ERROR: 29189 [ 38.729681] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/13 20:29:06 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getpeername$inet6(r0, &(0x7f0000003000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000004000-0x4)=0x1c) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000fd1000-0x12)='/dev/input/mouse#\x00', 0x1, 0x282) read(r0, &(0x7f00006da000+0x54b)=""/115, 0x73) write$sndseq(r0, &(0x7f00005ac000)=[{0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @queue={0x0, {0x0, 0x0}}}], 0x30) 2018/01/13 20:29:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) read(r0, &(0x7f00004ed000)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x0, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) memfd_create(&(0x7f0000363000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0) 2018/01/13 20:29:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x5}]}, &(0x7f0000f92000-0x4)=0xfffffffffffffd67) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@ldst={0xa, 0x3fd, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0x8000, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) [ 38.756092] netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'. [ 38.769376] device eql entered promiscuous mode [ 38.808982] netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'. 2018/01/13 20:29:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000935000)='./file0\x00', 0x0) mount(&(0x7f0000b84000-0x8)='./file0\x00', &(0x7f0000344000-0x8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f0000d15000)="") 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000784000-0x10)=[{&(0x7f0000b1b000)="2900000020001900013d0010000000060200001600000f00000000040d0014000022efffffff000008", 0x29}], 0x1) 2018/01/13 20:29:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fcc000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f00006c7000-0x7)=""/7, 0x7, 0x0, &(0x7f0000fd1000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) connect$inet(r0, &(0x7f0000adf000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmsg$alg(r0, &(0x7f000015a000-0x38)={0x0, 0x0, &(0x7f0000fce000)=[{&(0x7f0000e83000)="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", 0xff9}], 0x1, &(0x7f0000001000-0x172)=[], 0x0, 0x0}, 0x0) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003d000)="0013b48b", 0x5) lseek(r0, 0xffffffffffffffff, 0x2) 2018/01/13 20:29:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f00005d2000+0x37c)='./file0/file0\x00', &(0x7f0000c3c000-0x8)='./file0\x00', &(0x7f0000ec1000-0x2f)="007609499420218294075a978c742020598533660717b6c1377904ff4c1efefc8d615ffca2f8991b6b4025fbf6d699", 0x0, &(0x7f0000608000)="") pivot_root(&(0x7f00006c0000)='./file0\x00', &(0x7f00000fd000-0xe)='./file0/file0\x00') 2018/01/13 20:29:06 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0x1d000)=nil, 0x1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000f000-0xc)={0x10, 0x34000, 0x0, 0x0}, 0xc, &(0x7f0000008000-0x10)={&(0x7f0000017000-0x20)={0x14, 0x27, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/13 20:29:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f00005ab000)="0200080000000020ca005472fa01a55eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8264357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30acd2369300f6af7d07634832b8a5c0a94c070000000000000098fc74e81b1058d02f8001732017e2466a9fc43aea71261b35760415800000f9575da602000013001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed23f7e60a3649f93ea0c8263f863802a602fa698807ef14a4a1813e976be1d00000006bdc05ea1309163d6a4830de8391f2e00b7bbfbcb", 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000629000)={{{{0x2, 0xffffffffffffffff, @rand_addr=0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x0, 0x0, "5f389e591f3b2e67b740144fda8715295ff962c13e9cf946905696ab3d12746aaacc0fd3a280a904568fbd664692d764ad312e1474d6538fe72c301360b5ef28c45afacffead263f1321234a2af023fe"}, 0x160) 2018/01/13 20:29:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:06 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x2, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0xffffffff0000006c, &(0x7f0000003000-0xe7)=""/231, &(0x7f0000002000-0x4)=0xe7) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0x740000)=nil, 0x740000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f000006e000-0x38)={&(0x7f00001f4000-0x10)=@in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000146000)=[], 0x0, &(0x7f00004ff000-0x400)=[{0x10, 0x0, 0x8, ""}], 0x10, 0x0}, 0x0) 2018/01/13 20:29:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000086000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000def000)={0x1, 0x0, 0x4, 0x0, 0x0}) fcntl$lock(r0, 0x7, &(0x7f00001bf000)={0x1, 0x0, 0x0, 0x2, 0x0}) [ 39.011105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 39.027336] netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'. [ 39.036792] device eql entered promiscuous mode [ 39.048711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0xb03000)=nil, 0xb03000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000afc000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000b02000)={0x1, 0x0, [{0xc0000103, 0x0, 0xfffffffffffffffc}]}) 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) execveat(r0, &(0x7f0000006000)='./file0\x00', &(0x7f0000006000-0x28)=[], &(0x7f0000006000)=[&(0x7f0000005000)='$\x00'], 0x1000) 2018/01/13 20:29:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00005f3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00004ae000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000062000)=0xc) sched_setaffinity(r1, 0x8, &(0x7f00004c4000)=0x2) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r3 = creat(&(0x7f0000ceb000-0x8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @note={0x0, 0x0, 0x0, 0x0, 0x0}}], 0x30) rename(&(0x7f00007e3000)='./file0\x00', &(0x7f0000ab4000-0x10)='./control/file0\x00') fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f000002a000)=0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/01/13 20:29:06 executing program 2: r0 = socket$can_raw(0x10, 0x3, 0xa) setsockopt(r0, 0x10e, 0x1, &(0x7f0000002000-0x4)="", 0x0) 2018/01/13 20:29:06 executing program 5: epoll_wait(0xffffffffffffffff, &(0x7f000058d000)=[{0x0, 0x0}], 0x1, 0x0) 2018/01/13 20:29:06 executing program 1: r0 = inotify_init1(0x0) ioctl$int_in(r0, 0x0, &(0x7f0000044000-0x8)=0x0) 2018/01/13 20:29:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:06 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) [ 39.104951] netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'. 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x2, 0x5, 0x84) connect$can_bcm(r0, &(0x7f0000005000)={0x1d, 0x0, 0x0, 0x0}, 0x10) 2018/01/13 20:29:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000962000-0x1c)=[@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x100000001}], 0x1c) r1 = gettid() poll(&(0x7f0000999000-0x20)=[], 0x0, 0xf8d4) r2 = gettid() socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f000020e000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r4, &(0x7f000004c000-0x5e)=""/1, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) tkill(r1, 0x16) 2018/01/13 20:29:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000001000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x80}, 0x1c) 2018/01/13 20:29:06 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000109000-0x68)={0x7b, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000354000)={0x1, 0x0, [{0x4000009f, 0x0, 0xfffffffffffffffd}]}) 2018/01/13 20:29:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ef1000-0xc)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000001000)=[{&(0x7f0000002000)=""/135, 0x87}], 0x1) 2018/01/13 20:29:06 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) [ 39.192588] device eql entered promiscuous mode 2018/01/13 20:29:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) write$tun(r0, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:06 executing program 2: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x3, 0x4d031, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f000069f000)={0x0, 0x0, &(0x7f0000481000-0x78)="", &(0x7f0000d53000-0xff)="", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/01/13 20:29:06 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ae9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000b22000+0x56f)={0x0, 0x0, 0x0}) 2018/01/13 20:29:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) write$tun(r0, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000109000-0x68)={0x7b, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000354000)={0x1, 0x0, [{0x4000009f, 0x0, 0xfffffffffffffffd}]}) 2018/01/13 20:29:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x84, 0xff, 0x400000001, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000758000)={r0, &(0x7f000000e000-0x1000)="", &(0x7f000081c000-0x60)="", 0x0}, 0x20) 2018/01/13 20:29:07 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) write$tun(r0, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:07 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x2, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0xffffffff00000066, &(0x7f0000003000-0xe7)=""/231, &(0x7f0000002000-0x4)=0xe7) 2018/01/13 20:29:07 executing program 1: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000001000-0x4)=0x0, 0x4) 2018/01/13 20:29:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x10000000000a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000c01000-0x28)={@common='lo\x00', &(0x7f0000133000)=@ethtool_link_settings={0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/13 20:29:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000109000-0x68)={0x7b, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000354000)={0x1, 0x0, [{0x4000009f, 0x0, 0xfffffffffffffffd}]}) 2018/01/13 20:29:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000fbe000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f000035c000-0x4)=0x80000000008) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000ae5000)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) write$sndseq(r0, &(0x7f000021b000-0x180)=[{0x0, 0x0, 0x0, 0xcae, @time={0x0, 0x989680}, {0x322, 0x1}, {0x2, 0x0}, @connect={{0x8000, 0x0}, {0xfffffffffffffff9, 0xf2d}}}, {0x0, 0x5, 0x0, 0x0, @time={0x77359400, 0x0}, {0x3, 0x0}, {0x0, 0x0}, @queue={0x0, {0xda90, 0xa0dc}}}, {0x81, 0x56, 0x40, 0xea, @time={0x0, 0x0}, {0x0, 0x7}, {0xfffffffffffffff8, 0x6}, @note={0x0, 0x101, 0x0, 0x3, 0x0}}, {0x3, 0x0, 0x0, 0x8000, @time={0x77359400, 0x0}, {0x0, 0x0}, {0x0, 0x3}, @control={0x0, 0x4000000000000, 0x0}}, {0xe460, 0x0, 0x7, 0x0, @tick=0x0, {0x4, 0x8}, {0x3ff, 0x0}, @raw8={"d37d4872e0ebb32cfe882248"}}], 0xf0) 2018/01/13 20:29:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00009ec000)={0x0, 0x0, 0x0}, 0x4) close(r0) 2018/01/13 20:29:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000aa4000-0x44)={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="00fe50018afffffffff800c600000006"}) 2018/01/13 20:29:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f000052c000-0xc)='/dev/amidi#\x00', 0x34, 0x1) write$evdev(r0, &(0x7f0000a37000)=[{{0x0, 0x2710}, 0x0, 0x0, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x36a) 2018/01/13 20:29:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000109000-0x68)={0x7b, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000354000)={0x1, 0x0, [{0x4000009f, 0x0, 0xfffffffffffffffd}]}) 2018/01/13 20:29:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053c000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000db1000-0x8)='./file0\x00', &(0x7f000038f000)='proc\x00', 0x0, &(0x7f0000cde000)="") r0 = open(&(0x7f000019a000)='./file0/bus\x00', 0x0, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000070a000)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000002d000)="") getdents(r0, &(0x7f0000394000-0xd5)=""/68, 0x44) 2018/01/13 20:29:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000f9d000-0x9)='/dev/sg#\x00', 0x0, 0x105000) 2018/01/13 20:29:07 executing program 6: r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000509000)={r0, &(0x7f00004e6000-0x1)="", &(0x7f000045a000-0x3)="", 0x0}, 0x20) 2018/01/13 20:29:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000109000-0x68)={0x7b, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000354000)={0x1, 0x0, [{0x4000009f, 0x0, 0xfffffffffffffffd}]}) 2018/01/13 20:29:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f03000)={0xa, 0xffffffffffffffff, 0x800, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) 2018/01/13 20:29:07 executing program 0: mmap(&(0x7f0000000000/0xdf3000)=nil, 0xdf3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$getreaper(0x29, &(0x7f0000acb000-0x8)=0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00006d2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ab6000)=0xb8) mmap(&(0x7f0000df2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/01/13 20:29:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000584000)={0x1, &(0x7f00004f5000-0x8)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) modify_ldt$read_default(0x2, &(0x7f0000a47000-0xe1)=""/225, 0xe1) 2018/01/13 20:29:07 executing program 6: r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(0xffffffffffffffff, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f000001e000)=0x5, 0x4) dup2(r0, r1) 2018/01/13 20:29:07 executing program 6: r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 1: clone(0x0, &(0x7f0000003000-0x9a)="", &(0x7f00000be000)=0x0, &(0x7f0000bd2000)=0x0, &(0x7f00002c8000)="") set_robust_list(&(0x7f0000a7b000)={&(0x7f00006af000/0x1000)=nil, 0x0, &(0x7f0000255000/0x2000)=nil}, 0x18) 2018/01/13 20:29:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000095d000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(xts-twofish-3way)\x00'}, 0x58) bind$alg(r0, &(0x7f0000262000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) 2018/01/13 20:29:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(0xffffffffffffffff, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:07 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 0: r0 = socket$can_raw(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x4, &(0x7f0000007000)=""/238, &(0x7f0000003000-0x4)=0xee) 2018/01/13 20:29:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000109000-0x68)={0x7b, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000354000)={0x1, 0x0, [{0x4000009f, 0x0, 0xfffffffffffffffd}]}) 2018/01/13 20:29:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a35000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@generic="983f727d1cf4378e33f9c9f8f259f2b4", @ifru_mtu=0x1}) io_setup(0x1, &(0x7f00005a2000)=0x0) io_submit(r1, 0x1, &(0x7f000063e000-0x10)=[&(0x7f00002d4000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000a2e000)="", 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/01/13 20:29:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x10000000004, &(0x7f0000168000)="441109ff0000000000ffff7b0010000013", 0x11) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000073a000-0xf)=""/15, &(0x7f0000004000-0x4)=0xf) 2018/01/13 20:29:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000543000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000089a000-0x8)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000170000-0x2)='..', 0x0) 2018/01/13 20:29:07 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000008e000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x10) 2018/01/13 20:29:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000505000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f0000632000)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000f18000-0x40)=[], &(0x7f0000219000-0x40)=[]}, 0x0}}], 0x0, 0x0, &(0x7f0000477000-0x1)=""}) 2018/01/13 20:29:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000354000)={0x1, 0x0, [{0x4000009f, 0x0, 0xfffffffffffffffd}]}) 2018/01/13 20:29:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(0xffffffffffffffff, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r0, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:07 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x10000000003) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000097e000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0}, 0x20) 2018/01/13 20:29:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00005d1000)=0xcb1, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) recvfrom$inet6(r0, &(0x7f00008f5000-0x15)=""/21, 0x15, 0x0, &(0x7f0000c13000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x0}, 0x1c) 2018/01/13 20:29:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 2: mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000008000-0x20)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000008000)={{0x0, 0x0, 0x0, 0x1, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000008000-0x4)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 39.807219] binder: 5655:5664 got transaction to invalid handle [ 39.813480] binder: 5655:5664 transaction failed 29201/-22, size 0-0 line 2788 2018/01/13 20:29:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000354000)={0x1, 0x0, [{0x4000009f, 0x0, 0xfffffffffffffffd}]}) 2018/01/13 20:29:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002000-0x48)={0x1, 0x2, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) 2018/01/13 20:29:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000c000-0xa)='/dev/dsp#\x00', 0x1, 0x2) writev(r0, &(0x7f000000c000)=[{&(0x7f000000d000-0xcc)='A', 0x1}], 0x1) 2018/01/13 20:29:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r0, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00001df000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f000023c000-0x4)={0xe, 0x3, 0x0, 0x0}) 2018/01/13 20:29:07 executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x2, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000001000-0xe7)=""/231, &(0x7f0000000000)=0x7) [ 39.880202] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.889845] device eql entered promiscuous mode 2018/01/13 20:29:07 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:07 executing program 2: mmap(&(0x7f0000000000/0xd11000)=nil, 0xd11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000d11000-0x4)=0x0, &(0x7f000068d000)=0x4) 2018/01/13 20:29:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:08 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x2, 0x2, 0x11) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000000)={&(0x7f0000002000-0x14)=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "545878b6a36c797db2f7f2d08640d061f614665bfa53947e30ca19fd22995722"}}) bind$can_raw(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}, 0x10) r1 = socket$can_raw(0xa, 0x2, 0x11) recvmsg(0xffffffffffffffff, &(0x7f0000004000-0x38)={&(0x7f0000003000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, 0x14, &(0x7f0000004000-0x40)=[{&(0x7f0000001000-0x42)=""/66, 0x42}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000-0xec)=""/236, 0xec}, {&(0x7f0000006000)=""/235, 0xeb}], 0x4, &(0x7f0000007000-0x25)=""/37, 0x25, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000003000-0x4)=0x8000, 0x4) bind$can_raw(r1, &(0x7f0000004000-0x10)={0xa, 0x0, 0x0, 0x0}, 0x67) 2018/01/13 20:29:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000a9d000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000a99000)={{0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/13 20:29:08 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:08 executing program 2: mmap(&(0x7f0000000000/0x41f000)=nil, 0x41f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000417000-0x38)={&(0x7f000020e000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00003d1000)={&(0x7f0000416000)=@acquire={0x128, 0x17, 0xe001b1def71634b, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, []}, 0x128}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/13 20:29:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r0, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000354000)={0x1, 0x0, [{0x4000009f, 0x0, 0xfffffffffffffffd}]}) 2018/01/13 20:29:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000765000-0x10)=[{&(0x7f0000de7000-0x2a)="2900000021001980013d541524020c200a00000b00f000000f00000405000300000000000006ec006e", 0x29}], 0x1) 2018/01/13 20:29:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f000002d000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)="") r0 = creat(&(0x7f000002d000-0xc)='./file0/bus\x00', 0x0) r1 = creat(&(0x7f0000fec000-0xc)='./file0/bus\x00', 0x0) write(r1, &(0x7f0000aeb000-0xe2)="e0", 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xff000) truncate(&(0x7f0000dfd000)='./file0/bus\x00', 0x6) 2018/01/13 20:29:08 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b99000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000e7f000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x26, &(0x7f00000fc000-0x8)=0x0) io_submit(r1, 0x1, &(0x7f0000b58000-0x8)=[&(0x7f00004aa000)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000b10000)="000000000108000000", 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/01/13 20:29:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00005d6000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000928000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) readv(r0, &(0x7f0000295000-0x10)=[{&(0x7f0000071000-0x97)=""/151, 0x97}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000a72000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x303}) 2018/01/13 20:29:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[], 0x0) 2018/01/13 20:29:08 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:08 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) 2018/01/13 20:29:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@call={0x85, 0x0, 0x0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) [ 40.573793] kauditd_printk_skb: 63 callbacks suppressed [ 40.573801] audit: type=1400 audit(1515875348.197:84): avc: denied { net_bind_service } for pid=5720 comm="syz-executor0" capability=10 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 40.691050] device syz1 entered promiscuous mode 2018/01/13 20:29:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000765000-0x10)=[], 0x0) 2018/01/13 20:29:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000109000-0x68)={0x7b, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000354000)={0x1, 0x0, [{0x4000009f, 0x0, 0xfffffffffffffffd}]}) 2018/01/13 20:29:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000d3000)="1f00000052001f0014b25107000604000200071008000100feffffff080000", 0x1f) 2018/01/13 20:29:08 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x1000000802, 0x0) write(r0, &(0x7f0000f11000-0x25)="24000000190025f4001809180000fd0e0a0000000002000000000000000000ffffffff7e", 0x24) 2018/01/13 20:29:08 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x30, 0x2c, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0xec8, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], ""}}}}}, 0x62) 2018/01/13 20:29:08 executing program 2: syz_extract_tcp_res(&(0x7f0000bb4000)={0x0, 0x0}, 0x0, 0x8) r0 = syz_open_dev$tun(&(0x7f00001b3000-0xd)='/dev/net/tun\x00', 0x0, 0x22041) pwrite64(r0, &(0x7f0000003000)='O', 0x1, 0x7fffffffffffffff) 2018/01/13 20:29:08 executing program 5: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000061d000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000dbb000-0x20)={0x0, 0x0, 0x0, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/13 20:29:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009ff000-0xa)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f000025f000-0x9)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f000042b000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e, 0x80f, ""}], 0x10, 0x0}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)="") ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f000071b000)=0x2) [ 40.754374] WARNING: CPU: 1 PID: 5767 at mm/page_alloc.c:3926 __alloc_pages_slowpath+0x1ffc/0x2d00 [ 40.763531] Kernel panic - not syncing: panic_on_warn set ... [ 40.763531] [ 40.770876] CPU: 1 PID: 5767 Comm: syz-executor1 Not tainted 4.15.0-rc7+ #170 [ 40.778120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.787448] Call Trace: [ 40.790021] dump_stack+0x194/0x257 [ 40.793630] ? arch_local_irq_restore+0x53/0x53 [ 40.798283] ? vsnprintf+0x1ed/0x1900 [ 40.802067] panic+0x1e4/0x41c [ 40.805238] ? refcount_error_report+0x214/0x214 [ 40.809976] ? show_regs_print_info+0x18/0x18 [ 40.814454] ? __warn+0x1c1/0x200 [ 40.817890] ? __alloc_pages_slowpath+0x1ffc/0x2d00 [ 40.822881] __warn+0x1dc/0x200 [ 40.826137] ? __alloc_pages_slowpath+0x1ffc/0x2d00 [ 40.831130] report_bug+0x211/0x2d0 [ 40.834739] fixup_bug.part.11+0x37/0x80 [ 40.838777] do_error_trap+0x2d7/0x3e0 [ 40.842645] ? math_error+0x400/0x400 [ 40.846430] ? print_irqtrace_events+0x270/0x270 [ 40.851170] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.855994] do_invalid_op+0x1b/0x20 [ 40.859708] invalid_op+0x22/0x40 [ 40.863139] RIP: 0010:__alloc_pages_slowpath+0x1ffc/0x2d00 [ 40.868745] RSP: 0018:ffff8801d6df73e0 EFLAGS: 00010246 [ 40.874112] RAX: ffffed003adbee9d RBX: 1ffff1003adbee9d RCX: 0000000000000000 [ 40.881360] RDX: ffff8801d6df7a38 RSI: 000000000000001d RDI: 0000000000000000 [ 40.888605] RBP: ffff8801d6df78d0 R08: 0000000000000000 R09: ffffffffe0000f8a [ 40.895849] R10: 0000000000000033 R11: 000000000000001d R12: 0000000000000000 [ 40.903107] R13: ffff8801d6df7a98 R14: 00000000014280c2 R15: ffff8801d6df7a38 [ 40.910381] ? __lock_acquire+0x664/0x3e00 [ 40.914600] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 40.919766] ? check_noncircular+0x19/0x20 [ 40.923992] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 40.929162] ? check_noncircular+0x20/0x20 [ 40.933377] ? warn_alloc+0x2b0/0x2b0 [ 40.937162] ? __is_insn_slot_addr+0x1fc/0x330 [ 40.941724] ? lock_downgrade+0x980/0x980 [ 40.945858] ? find_held_lock+0x35/0x1d0 [ 40.949910] ? is_bpf_text_address+0x7b/0x120 [ 40.954384] ? check_noncircular+0x20/0x20 [ 40.958602] ? check_noncircular+0x20/0x20 [ 40.962812] ? __free_insn_slot+0x5c0/0x5c0 [ 40.967122] ? rcutorture_record_progress+0x10/0x10 [ 40.972132] ? find_held_lock+0x35/0x1d0 [ 40.976177] ? __lock_is_held+0xb6/0x140 [ 40.980230] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 40.986103] ? rcu_note_context_switch+0x710/0x710 [ 40.991018] ? __might_sleep+0x95/0x190 [ 40.994984] __alloc_pages_nodemask+0x9fb/0xd80 [ 40.999630] ? save_stack+0x43/0xd0 [ 41.003231] ? kasan_slab_free+0x71/0xc0 [ 41.007283] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 41.012273] ? check_noncircular+0x20/0x20 [ 41.016486] ? print_irqtrace_events+0x270/0x270 [ 41.021242] ? __lock_is_held+0xb6/0x140 [ 41.025296] alloc_pages_current+0xb6/0x1e0 [ 41.029609] ion_system_contig_heap_allocate+0x40/0x2c0 [ 41.034956] ion_alloc+0x2c1/0x9e0 [ 41.038486] ? ion_dma_buf_release+0x50/0x50 [ 41.042875] ? __might_sleep+0x95/0x190 [ 41.046832] ? kasan_check_write+0x14/0x20 [ 41.051045] ? _copy_from_user+0x99/0x110 [ 41.055175] ion_ioctl+0x26d/0x380 [ 41.058695] ? ion_query_heaps+0x490/0x490 [ 41.062913] ? security_file_ioctl+0x7d/0xb0 [ 41.067296] ? security_file_ioctl+0x89/0xb0 [ 41.071687] compat_SyS_ioctl+0x151/0x2a30 [ 41.075901] ? do_fast_syscall_32+0x156/0xf9d [ 41.080389] ? ion_query_heaps+0x490/0x490 [ 41.084603] ? do_ioctl+0x60/0x60 [ 41.088034] do_fast_syscall_32+0x3ee/0xf9d [ 41.092340] ? do_int80_syscall_32+0x9d0/0x9d0 [ 41.096909] ? syscall_return_slowpath+0x2ad/0x550 [ 41.101825] ? prepare_exit_to_usermode+0x340/0x340 [ 41.106820] ? sysret32_from_system_call+0x5/0x3b [ 41.111646] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.116473] entry_SYSENTER_compat+0x54/0x63 [ 41.120855] RIP: 0023:0xf7fbec79 [ 41.124197] RSP: 002b:00000000f77ba08c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 41.131891] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00000000c0184900 [ 41.139135] RDX: 0000000020002000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.146382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 41.153628] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 41.160872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.168904] Dumping ftrace buffer: [ 41.172530] (ftrace buffer empty) [ 41.176217] Kernel Offset: disabled [ 41.179822] Rebooting in 86400 seconds..