[....] Starting enhanced syslogd: rsyslogd[ 12.044151] audit: type=1400 audit(1516524405.011:5): avc: denied { syslog } for pid=3496 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.563794] audit: type=1400 audit(1516524412.530:6): avc: denied { map } for pid=3637 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.47' (ECDSA) to the list of known hosts. 2018/01/21 08:46:58 fuzzer started [ 25.782792] audit: type=1400 audit(1516524418.749:7): avc: denied { map } for pid=3649 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/01/21 08:46:59 dialing manager at 10.128.0.26:40495 [ 29.397345] can: request_module (can-proto-0) failed. [ 29.406857] can: request_module (can-proto-0) failed. 2018/01/21 08:47:02 kcov=true, comps=true [ 29.939924] audit: type=1400 audit(1516524422.906:8): avc: denied { map } for pid=3649 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=8900 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/01/21 08:47:04 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000c3c000)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000001000-0xc)={0x1, 0x5, 0x19}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000)=0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000003000-0x4)=0x0, &(0x7f0000003000-0x4)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000003000)={&(0x7f0000003000-0x14)=[0x9, 0x90da, 0x8001, 0x800, 0x3], 0x5, 0x9, 0x101, 0xbe, 0x4, 0x7ff, {0x80000001, 0x2a, 0x5, 0x3000000000, 0x3ff, 0x7ff, 0x6, 0x20, 0x1, 0x9e, 0x1, 0x3, 0x8, 0x7ff, "7055381c90d63150915ee2abb916897e9bf500e8e703f210197397790406546e"}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001000)={0x2, 0xffff, 0x4, 0x3, 0x8}, 0x14) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000005000-0x44)={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40, {0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='bridge0\x00'}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$ipx(r0, &(0x7f0000005000)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000006000-0x4)=0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet(r0, &(0x7f0000006000)={0x0, 0xffffffffffffffff, @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000006000)=0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000003000)=0x0, &(0x7f0000007000)=0x4) socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f0000009000-0x60)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f0000008000)=0x60) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f000000a000-0x4)=0x10001, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000002000)=0x4, 0x4) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f000000a000)=""/120) 2018/01/21 08:47:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000496000)='/dev/ptmx\x00', 0x440800, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x5) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00008a9000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x27, &(0x7f0000ae0000-0x27)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x14}, [{[{0x9100, 0xfc7f, 0x9, 0x2}], {0x8100, 0x7fffffff, 0x2, 0x4}}], {@generic={0x0, "a9c94a5822a2211f93b0ed0fda0b6015d0"}}}, &(0x7f0000000000)={0x0, 0x4, [0x14a, 0x16a, 0x7ee, 0x19c]}) socketpair(0x1, 0x5, 0x7, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000001000-0x30)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x6) connect$l2tp(r2, &(0x7f0000001000-0x32)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x2, 0x4, {0xa, 0x1, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x20}}}, 0x32) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000002000-0x4)=0x80, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000001000-0x10)={0x6, [0x77, 0x2, 0xe3c, 0x1f, 0x9, 0x5f]}, &(0x7f0000003000-0x4)=0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f0000003000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x5, 0x6, &(0x7f0000003000-0x8)={0x1}, 0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000004000)='/dev/sg#\x00', 0x5, 0x440001) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xb) ioctl$TUNSETLINK(r1, 0x400454cd, &(0x7f0000002000)=0x6) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000005000)='/dev/vcs\x00', 0x43, 0x0) ioctl$TIOCNXCL(r2, 0x540d) gettid() socket$key(0xf, 0x3, 0x2) write$tun(r1, &(0x7f0000003000-0x9c)=@hdr={0x1, 0x84, 0x4, 0xff, 0x5, 0xecb4, @ipv4={{0xe, 0x4, 0x80000001, 0x6, 0x92, 0x2, 0x100, 0x3, 0x8, 0x0, @empty=0x0, @rand_addr=0x8, {[@rr={0x7, 0x23, 0x1, [@rand_addr=0x1, @multicast1=0xe0000001, @loopback=0x7f000001, @broadcast=0xffffffff, @loopback=0x7f000001, @empty=0x0, @loopback=0x7f000001, @dev={0xac, 0x14, 0x0, 0xa}]}]}}, @udp={0x1, 0x3, 0x5a, 0x0, "a84f24dbe01a5e19f3f6277228311d55670aa8649d03f314c1355d99a8ace6d46d42105cd052906b3fc468e91cfbb4e59ee1800648a9488b722d45ff4e30a30eafbda728721e5c9201adac52ca424b37757f"}}}, 0x9c) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000007000-0x4)=0x1, 0x4) r4 = syz_open_dev$admmidi(&(0x7f0000003000-0xe)='/dev/admmidi#\x00', 0xd99c, 0x101400) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x3) 2018/01/21 08:47:04 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001000)=[{&(0x7f0000000000)=""/218, 0xda}, {&(0x7f0000002000-0x72)=""/114, 0x72}, {&(0x7f0000000000)=""/254, 0xfe}, {&(0x7f0000002000-0xb)=""/11, 0xb}, {&(0x7f0000002000-0x99)=""/153, 0x99}, {&(0x7f0000000000)=""/4096, 0x1000}], 0x6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000000)={0x3, &(0x7f0000002000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={r1, 0x3}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000003000)=0x1f) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000003000-0xd8)=@pic={0x3, 0x200, 0x3, 0x0, 0x4, 0x7, 0x10001, 0x3, 0x439, 0x1ff, 0x7, 0x80, 0x0, 0x3, 0x7, 0x6}) getpeername$inet6(r0, &(0x7f0000003000)={0x0, 0xffffffffffffffff, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000002000)=0x1c) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000005000-0x4)=0xe8) r3 = getegid() lchown(&(0x7f0000005000-0x8)='./file0\x00', r2, r3) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000005000-0x10)={0x0, 0x101, 0xfffffffffffffffc, 0x6}, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000005000)=0x0, &(0x7f0000005000)=0x4) nanosleep(&(0x7f0000004000)={0x0, 0x0}, &(0x7f0000002000)={0x0, 0x0}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000005000)={0x7, 0x9e}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000003000+0xf12)=0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000007000-0x4)=0x0, 0x4) 2018/01/21 08:47:04 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)='/dev/cuse\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x1000}) close(r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000002000-0x18)={0x639, 0x6, 0x401, 0x4, 0x20, 0x3f}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001000-0x90)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000000)=""/80, 0x50}, {&(0x7f0000001000)=""/78, 0x4e}, {&(0x7f0000002000)=""/223, 0xdf}, {&(0x7f0000001000-0x9)=""/9, 0x9}, {&(0x7f0000003000-0x5)=""/5, 0x5}, {&(0x7f0000002000)=""/109, 0x6d}, {&(0x7f0000001000-0x69)=""/105, 0x69}, {&(0x7f0000003000-0x73)=""/115, 0x73}], 0x9) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f000015a000/0x5000)=nil, &(0x7f0000004000-0x8)=0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000001000-0x28)={0x5, 0x401, 0x200, 0xd77, 0x9}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x1004000, &(0x7f0000005000-0x3e)="8ef21b6e4cdbb46255c6c1f15f00788a9efce167a1a5627e89a1d03da22e2d237cd191838f14da9f3f790869264887c5c5c96e5fa24a224edce8653a9db6", &(0x7f0000001000)=0x0, &(0x7f0000004000)=0x0, &(0x7f0000005000-0x1d)="5aa3a69b482bb0e11b3df1ecbf9ddab00cdfdf6c685b3e59761eb52a61e58872ac3f53ce53bc2e1c83cb8ddfa1f8aed3a46a10db994674e75a205187e16855aaac9d55b15d542a66d8847fa9e2e70fee73151d3edd0e295f10b320be0e54a6fada7b2cabd157d5b3e40ecd8569d366474ff4d371793fdec073b839d0047d026031c829d1d2010b29aeb86736fb9ee582237ab7a12740c77af1b8573b9f9ce81d21aee9f6a5d7e1c32808be99833c0914cb62603dcd3aa50b1cd005a08ed91d37ccd6731228c459f1b593681d0912091d6eadc0c57b04d04b8501ace7ad8afa4a70776120a6faa63774576adea2491cdd1bfe1fc61d61f26c64") mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000005000)={0x0, 0x80000, r0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000006000-0x8)={r1, 0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$ax25(r0, &(0x7f0000003000-0x8f)="9f5106fb696e74de3de35781910c76767bca8d76411759f5dee697cada8b219d79a3d5046e17e58b853cef82409a74635259533d83534f11f19539a9130b866fe79aebc684a5881a6d2aa30d933eb5df3b3a6bffe700512939e0233e362ffcf496335557451842ef1186b44890499ceb301b00a645f952fb357823de3b9a59dcb66afc3d782da5d5d1e3168a84f629", 0x8f, 0x4008000, &(0x7f0000006000)={0x3, {"31d17675cc0d41"}, 0x1}, 0x10) userfaultfd(0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000008000-0x20)={0x2, 0x9, 0x20, 0x3, 0x4, 0x3}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001000)={0x3, &(0x7f0000005000-0xc)=[{0x7b, 0x5}, {0x0, 0x4}, {0x3, 0x5}]}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f0000008000)=0x60) 2018/01/21 08:47:04 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000307000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$ax25(0xffffffffffffff9c, &(0x7f00006b4000)={0x0, {""/7}, 0x0}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000-0x4)={r1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000002000-0x24)={0x7, 0x401, 0x3, 0x5bc9, 0xe60000, 0x81, 0x4, 0x1f, 0x81, 0x1ff, 0x1eb, 0x4}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000003000-0x4)=0x2) faccessat(r0, &(0x7f0000002000)='./file0\x00', 0x10, 0x400) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3e) r3 = fcntl$dupfd(r1, 0x406, r2) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000003000)=0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000000)='./file0\x00') r4 = openat(r3, &(0x7f0000003000)='./file0\x00', 0x10000, 0x80) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000001000)=0x0) mknodat(r0, &(0x7f0000001000-0x8)='./file0\x00', 0x100, 0x4) fanotify_mark(r0, 0x4, 0x20, r3, &(0x7f0000002000-0x8)='./file1\x00') mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) init_module(&(0x7f0000005000-0x3b)='ppp1:%-GPLppp1eth1(E-vboxnet0trustedeth0*[posix_acl_access\x00', 0x3b, &(0x7f0000004000)='/selinux/avc/hash_stats\x00') mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000006000-0x87)="7fef33db6c0290e1a9761a9bbdb2d0f88e859a2a2d7169c3aaaf2c1ead07ff4ecae6dd0b23786dc81b60bffd2dabbfe6573959752555bafafe770e783faa4eedd63f2f361d396997f7cb1dde40678b53de0492a003ee9c30ca60ce99d00e21043c99094cf4fc6f8d193505d7ee71bdeb80413e37623d5d049519c8a2b50b018a85e0e453e08d29") mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000007000-0x158)={0x7, 0x0, [{0x4, 0x7, 0x0, 0x0, @sint={0x9, 0xe6}}, {0x0, 0x0, 0x0, 0x0, @msi={0x9, 0x4, 0x7}}, {0x4d61, 0x3, 0x0, 0x0, @msi={0x1, 0x6, 0x8}}, {0x7fffffff, 0x2, 0x0, 0x0, @msi={0x1f, 0x80, 0x8}}, {0x0, 0x1, 0x0, 0x0, @msi={0x80000001, 0x1b4cb6f9, 0x9}}, {0x6, 0x3, 0x0, 0x0, @msi={0x473a, 0x2, 0x2}}, {0xffffffffffffffff, 0x1, 0x0, 0x0, @sint={0x1, 0x80000000}}]}) rt_sigaction(0x2f, &(0x7f0000005000-0x20)={0xc000000000, {0x7}, 0x8000003, 0x4}, &(0x7f0000007000-0x20)={0x0, {0x0}, 0x0, 0x0}, 0x8, &(0x7f0000002000-0x8)={0x0}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000008000-0xc)={0x2, [0x0, 0x0]}, &(0x7f0000007000)=0xc) 2018/01/21 08:47:04 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x450101) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001000)=0xe6d6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$urandom(&(0x7f0000003000-0xd)='/dev/urandom\x00', 0x0, 0x400080) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) faccessat(r0, &(0x7f0000003000)='./file0\x00', 0x1d, 0x100) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000004000)={0x400, 0x4f, 0x1, 0x6a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x8, 0x2, 0x1, "6d4e3cb8990368792740463d4f09c2c0", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat(r0, &(0x7f0000006000-0x8)='./file0\x00', 0x4400, 0x30) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000007000-0xa0)={0x0, @in6={{0xa, 0x0, 0x10000, @loopback={0x0, 0x1}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x2, 0x20, 0x6, 0x3}, &(0x7f0000003000)=0xa0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000003000-0x8)={r3, 0x0}, &(0x7f0000003000-0x4)=0x8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000002000-0x4)=0x0, &(0x7f0000008000-0x4)=0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000008000)={0x10001, 0x71a671b7, 0x25, 0x8001, 0x8, 0x1ff, 0x2, 0xfff}, &(0x7f0000007000-0x40)={0x3f, 0x9, 0x5, 0x2, 0x80000000, 0xb4, 0x8001, 0x0}, &(0x7f0000002000-0x40)={0x100000001, 0x1, 0x8, 0x7ff, 0x8, 0x7, 0x1, 0x4}, &(0x7f0000008000)={0x0, 0x0}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x7d2b55f8, &(0x7f0000009000)=0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_submit(r4, 0x5, &(0x7f0000009000)=[&(0x7f000000a000-0x40)={0x0, 0x0, 0x0, 0x8, 0x200, r1, &(0x7f0000009000)='(', 0x1, 0x80000000, 0x0, 0x0, r0}, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f000000a000-0xc8)="c1a4a2953457c3bac1a0e4558ac272dbafe2e34c996432be1755e19cb3a3fb80dfdea1627c3c953182ce7feab51c16b69c2dd55063fb64b17de6f7d93d5e1586f59eaa2ee47233904bf0ff553a04009e86548b4a20c2806b5ed009936c01bf38e219265dabeab25095f8a2124792488b379fe4ef87d4626229e515465320aeac02500b7172e9da39856e5cd84bd3e82b74cf3f400fcc19c9cef4f951a90e9aed9979652b7c467b1f06a11f3cb27b5986b980455527f83f507e68c1837da3aad6daa4e1a03ac3213e", 0xc8, 0x80000000, 0x0, 0x1, r2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x7, r2, &(0x7f0000005000)="c90ad804d5a18edfc97e67387dbe5765b9c27e3cd9a0ebc8af6d6d1ce1cabb9118297930ff47e4a16f05ecad60207ed0173c380b84196d15f4fd763c88e89067f5717452f577f6f04b5c35e717348b8ed178227769e4278cf1c78d067ed6c1dd846ec15d55531b8f95c77bb5649324a4a3a10b91ce6903308f3cc883a5e3b0cc4f5c3ff160a4050dce4a3f7cd9c2476013bf6aef16", 0x95, 0xef7, 0x0, 0x0, r0}, &(0x7f0000002000-0x40)={0x0, 0x0, 0x0, 0x8, 0xff, r1, &(0x7f000000a000-0xee)="09ec94f033a7c7b7a44e1d6c371d77aacca73f509f9638da871c87b0b9a323cecdac27e802b325c345e1e96c95ca3448f473730a49c48778277e3401220793ba0ccf019d9e5e53b26236b1f8dcd848a63ddb6977384cee4e588cb2ffde751f94614fe2534fc01c57741dbb3ef7099a29165c78b640c1a6d150c4da672dbfe46e0f44581f358cea11ee171cce6ce28a48cdea0d472657a611b8a80f76dfb6018000d155b9bffab96c55b2cf594eff4e9f82822604f5b5190ddd2f7a1d0677d66ed48787eda5f600271b8671d87b27a16390abf0bebb2ef5d688dc4d35f599ef78e48ee810ceea7a7d3a6789da940a", 0xee, 0x3473, 0x0, 0x0, r2}, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000003000)="174c9cf12fb3ca6502e26c8b2fd873f99b046d32ce04d952d0d01eb7995bec8d5e49b33ec2b768b360bcc4b3b31a15de50461c7885ab30a2805386342d1ae4da72b80456edab5831ce5fbe21bf9f318c3eccc14e357d8220f6", 0x59, 0xf36, 0x0, 0x1, r2}]) 2018/01/21 08:47:04 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000b44000)='/proc/self/net/pfkey\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000001000-0x8c)={0xff, 0x1, 0x4, 'queue1\x00', 0x7fffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x248000, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/enforce\x00', 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000002000)=0x0, &(0x7f0000001000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000004000-0x8)={0x0, 0x45b}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000002000)={r3, @in={{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000003000)=0x8c) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002000)={0x1, 0xffffffff, 0x4, 0x80, 0x44, 0x7ff}) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x0, 0x4) setsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000004000-0xad)="f50acd9fbcee62d7e436d67320d0ca5c71c351cbf3f6f70f423d1f6a034a915a6a41aebb9c58f7b3cd6e29bd86c859f70ee07464a9dafa4df4cc94e986de655f2df607b05269a3d77d651e2174fe533add54b79ea65a3f8bf33a90be070467389282e2272a7ef5c0ff609f777db4673f70325dca3931666a2fd8a8c23009610ddd95567f7488815da678fb3b4ef3cc62ac00ceab8f3a63ac47e3cfe5ebd631263176c464c1ff97c9ea556ad758", 0xad) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000001000)={0x10000, 0x0, [0x3ff, 0xfffffffffffffff8, 0x1, 0x0, 0x6a6be182, 0x1, 0x5, 0x101]}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$fuse(r2, &(0x7f0000004000)={0x30, 0x0, 0x9, @fuse_notify_retrieve_out={0x2, 0x10000, 0x80000000, 0x6b9a}}, 0x30) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000006000-0x10)={r2, r2, 0x6, 0x2}, 0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000007000-0x78)={0x7, {0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x260, 0xfff, 0x75, 0x81, 0xf47, &(0x7f0000006000)=@generic="4e1da00641d7d832ca76c2718eb57e14", 0x9, 0x88, 0x401}) signalfd(r0, &(0x7f0000004000-0x8)={0x6}, 0x8) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000007000)={"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"}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$packet(r1, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0]}, &(0x7f0000008000)=0x14, 0x80800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000005000-0x18)={r3, 0x5, 0x10, 0x1, 0x2}, &(0x7f0000002000)=0x18) acct(&(0x7f0000000000)='./file0\x00') 2018/01/21 08:47:04 executing program 6: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000a39000)='/selinux/policy\x00', 0x0, 0x0) mmap$binder(&(0x7f000018c000/0x3000)=nil, 0x3000, 0x1, 0x44113, r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000131000-0x14)={0x0, 0x6, 0x10001, 0x8, 0x99b, 0x5, 0x2, 0x100000000, 0x3, 0x5}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00002a9000)=0x0, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000001000-0xa)='syzkaller\x00', &(0x7f0000001000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000000000)='\'\x00', 0xfffffffffffffffc) keyctl$update(0x2, r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002000-0x96)={0x0, 0x8e, "34cd5a251847e0b6d2bae2995f50ea4dad0c046e8b756022254db57d2c2b32c53697bcb1f8ecf3f90ddf7e09d9dd9d7c067e56be026ed2fb9cbefdac900ce3ae819bf5cfe94eb2eedf95875724efc346b95db0c54f141488e4972a4b0b09e497583db18cd8c153bb181356c51f9a53e2f58fed5ac66b61af21ef8601b488429975cd430b08013cfd77b9513f59e8"}, &(0x7f0000002000-0x4)=0x96) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002000)={r2, 0xbed, 0xdc7, 0x8, 0x4, 0x8}, &(0x7f0000003000-0x4)=0x14) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000002000-0x8)=0x1) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = accept4$packet(r0, &(0x7f0000004000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000003000)=0x14, 0x80000) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000004000-0x18)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x215479ef, r4}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, r4}, 0x14) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x8916, &(0x7f0000002000-0x20)={"5d2ec2f1dd782e54171e64239ee4f19b", {0x4, 0xffffffffffffffff, 0x6, "fc889402b00f", 0x7fe00, 0x0}}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000005000-0x14)={0xc, 0x0, 0x6, 0x9, 0x6, 0x3ff, 0xa1, 0x3, 0x40000000000, 0x100000000}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r3, 0xcf2, &(0x7f0000006000-0xc2)="1670839324bca6983d836707b2685e0c738428eb87e681706208ff8b3e441bca0ba5e8f93dc6e1765826aadbc433e2e4defbbe1e7ea89e2ad929b9c0bd9f710f56186cee4184d3bc1846b89be9f9850e9950e76a03c641e1716dc617bc82c6b51982bb8be21840ba07d970a2bb2280a255d4c8b6331850479b3ae8182268ec4e9b750c4bd740b6e9e20cb70d366b1dc1624dc4ad44172925a77e34061a44b285a25276c7232739179d524aad3d0bbef63b29ce1dfc7186b306149617c380575c6ba5") ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000004000-0x58)={{0x3, 0xfffffffffffff000}, 0x0, 0x1, 0x4, {0x9b5, 0x1}, 0x90000000000, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000004000-0x8)=@assoc_value={r2, 0x2}, 0x8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000007000-0x4)=0x8000, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000005000-0x28)={@common='ifb0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x7, 0x8, 0x2, 0x100000000, 0x100000001, 0x6, 0x10000, 0x9, 0x3, [0x6, 0x2, 0x6c, 0x6, 0xfffffffffffffffe, 0x3f, 0x8, 0x6], [0x0, 0x52, 0x5, 0x9, 0xffffffffffff7fff, 0x9]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000008000-0x38)={0x87, 0x836, &(0x7f0000003000-0x35)="7b4afd43a986b24a9edd3520d3789f37bd63fb49ff38a12522e3e6482a514d6a3f90b14c54790df814f9f3f132be3f22723299f0c4", &(0x7f0000007000)="", 0x35, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 31.732746] audit: type=1400 audit(1516524424.699:9): avc: denied { map } for pid=3649 comm="syz-fuzzer" path="/root/syzkaller-shm963311123" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.670493] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.183863] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.387522] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.649967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.776953] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.801603] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.825985] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.096623] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.283116] audit: type=1400 audit(1516524428.248:10): avc: denied { sys_admin } for pid=3693 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.365454] audit: type=1400 audit(1516524428.309:11): avc: denied { sys_chroot } for pid=4514 comm="syz-executor7" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/21 08:47:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4e000-0xf)='/dev/sequencer\x00', 0xa202, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f000039d000)='/dev/cuse\x00', 0x280800, 0x0) write$sndseq(r0, &(0x7f000048c000)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {0x5, 0x0}, {0x0, 0x0}, @raw32={[0x0, 0x0, 0x0]}}], 0x30) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x9) 2018/01/21 08:47:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d81000-0x80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f000045d000)=@in={0x2, 0x3, @rand_addr=0x800, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) bind(r1, &(0x7f00005d9000-0x80)=@generic={0x1e, "0103000000000000e1ffffffffffffff09a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2030077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) socket(0x1e, 0x5, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00007f1000-0x8)=0x0, &(0x7f000095c000)=0x8) sendmsg(r2, &(0x7f0000871000)={&(0x7f0000373000)=@generic={0x10000000001e, "010000000000e34000000001af268c573c5bea6c483724541e14dd69f30008000000000000000011d79f00000000000004076c3f010039d8f986ff03000000000000e550d5fe32c400737bcbc7e3ad316a198300000047341c1fffffffff00000000ce70b08dcf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0xfffffffffffffdd6, &(0x7f000033c000)=[], 0x0, &(0x7f00002d4000)=[], 0x0, 0x0}, 0x0) 2018/01/21 08:47:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000065c000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000fe5000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000176000)={0x2, 0x20, 0x29, 0x3, 0x3ff, 0x80000001}) 2018/01/21 08:47:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000ea9000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000bcf000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f00007a9000-0x1)="", 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000bec000-0xa0)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80, 0x1, 0xe369, 0x2, 0x3}, &(0x7f0000908000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f000045d000)={r1, @in={{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80000001, 0x1ff}, 0x98) 2018/01/21 08:47:09 executing program 3: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) mmap(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000026000-0xd)='/dev/dmmidi#\x00', 0x80000000, 0x101000) mmap(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000025000)={{0x2, 0x9}, 'port1\x00', 0x0, 0x0, 0x4, 0x0, 0x8, 0x2, 0x6, 0x0, 0x3, 0x1000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockname(r0, &(0x7f0000021000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x0}, 0x0}}}, &(0x7f000001d000-0x4)=0x4d4) r3 = dup(r2) mmap(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000025000)={@generic="4beec3f78ee296a5e6ae28ce85773693", @ifru_ivalue=0xa20}) 2018/01/21 08:47:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00006c1000-0x12)='/dev/snd/pcmC#D#p\x00', 0x20, 0x10000) getpeername$netlink(r1, &(0x7f0000d38000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000a51000-0x4)=0xc) r2 = epoll_create(0x1000800000008) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000f6c000-0xc)={0x0, 0x0}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000344000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_pts(r0, 0x20000000a4400) 2018/01/21 08:47:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000380000-0x9)='/dev/vcs\x00', 0x100, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000cd4000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ac000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000403000)="9129cef7ef958655486c913d7e772b67db383cfbfb2fbec3605f747418b2a0483edc0423cd7567c39b16750398ac1ee5aeba6390c31f8beee7b8e5709e9e46d2ce2cd9467c4aa1d2c20f9c0262bb9e490361b8cdb4696fd4fa0d7f3bba974a3b7d025eb27a67a512452f1f1e3b7700150003ce13104deddfd35f9a9c6aa0eb75190b07796ceaab02308f38bf88c083bb", 0x90, 0x0, &(0x7f00008bd000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0}}, 0x26) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000f80000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f00009ab000)=[{&(0x7f0000f81000)=""/4096, 0x1000}], 0x1, &(0x7f0000f80000-0x36)=""/87, 0x57, 0x0}, 0x0) 2018/01/21 08:47:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000fe6000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f000098a000-0x1)=0x0) ftruncate(r0, 0x7fffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00003b6000)={0x0, 0x2, &(0x7f000005e000)=""/9, &(0x7f0000fb1000-0x80)=""/128, &(0x7f0000f8b000)=""/4, 0x0}) 2018/01/21 08:47:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c05, 0x0) r1 = open(&(0x7f0000eb4000)='./file0\x00', 0x127202, 0x40) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000ab6000)={0x5, 0xc9, 0x6b5, 0x100000001, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f000072e000)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000c9f000-0x8)={0x3, r2}) 2018/01/21 08:47:09 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000872000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000001000-0x10)={0x17b, 0x8001}) prctl$intptr(0x2f, 0x7) 2018/01/21 08:47:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000454000)=0x0, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000d39000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) connect$inet6(r0, &(0x7f00008a1000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) shutdown(r0, 0x1) 2018/01/21 08:47:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00002b0000)='/dev/audio\x00', 0x8000, 0x0) r1 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00004ba000)={{{@in=@multicast1=0x0, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00009ea000)=0xe8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000649000-0xc)={r1, r2, 0x0}, 0xc) mremap(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0xe000, 0x0, &(0x7f0000b18000/0xe000)=nil) r3 = syz_open_dev$sg(&(0x7f0000682000-0x9)='/dev/sg#\x00', 0xff, 0x4000) fremovexattr(r3, &(0x7f0000f1e000)=@known='security.selinux\x00') getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000d44000)=""/46, &(0x7f0000557000)=0x2e) 2018/01/21 08:47:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000089000-0x1d)='mime_typeproc^)vmnet1]system\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r3 = dup2(r2, r1) open(&(0x7f00002d0000)='./file0\x00', 0x200000, 0x48) flock(r1, 0x800000000000009) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000577000-0x8c)={0x2, 0xffffffffffffffff, 0x0, "98de7a8c5ae95ee8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91ee07007c7240f476c8d75dd000aa8faf8fb5740200a6dc4d", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x0) write$sndseq(r2, &(0x7f0000e70000-0x30)=[{0x1f, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @connect={{0x0, 0x0}, {0x0, 0x8000000000000000}}}], 0x30) ftruncate(r0, 0x3ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000623000-0x24)="9b6fe70906e10ad4b15e9aa3b283ab30714ee3af44d642112875e0b71053b2b1116f5d78b1c1597d627bde3f084ce544cc83d5a6", 0x34) 2018/01/21 08:47:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00001a3000)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00004b1000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x51, &(0x7f0000002000)=[{0xff1e, 0x10e, 0x0, ""}], 0x10, 0x0}, 0x0) inotify_init1(0x80804) ioctl(r1, 0xc0184900, &(0x7f0000002000)="") mmap$binder(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/01/21 08:47:09 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x81, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000001000-0x8)={0x0, 0x7fff}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000791000+0xc21)={r1, 0x0, 0x10, 0x1a, 0x0}, &(0x7f0000439000)=0x18) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000c24000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000bc0000)={0x79, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 2018/01/21 08:47:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0x0}]}, 0x10) chroot(&(0x7f00005e2000)='./file0\x00') sendto$inet(r0, &(0x7f0000fd0000)="", 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) close(r0) 2018/01/21 08:47:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000c0d000)='/dev/snd/midiC#D#\x00', 0x3, 0x0) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f000005b000-0x4)=0x0, &(0x7f0000cf3000)=0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) connect$vsock_stream(r1, &(0x7f0000d92000-0x10)={0x28, 0x0, 0x2710, @my=0x1, 0x0}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000d97000)=0x0, &(0x7f00004a7000)=0xfffffffffffffeee) [ 36.400109] x86/PAT: syz-executor7:4787 map pfn RAM range req write-combining for [mem 0x1c0a30000-0x1c0a31fff], got write-back 2018/01/21 08:47:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000aeb000-0x9)='/dev/kvm\x00', 0x0, 0x0) splice(r0, &(0x7f0000cca000)=0x0, r0, &(0x7f000036a000)=0x0, 0x2, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f0000950000-0x10)='/dev/input/mice\x00', 0x0, 0x2800) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000bd9000)={r3, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) dup2(r1, r3) 2018/01/21 08:47:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000260000)={0x0, 0x0}, 0x84800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000e5e000-0xc)={0x0, 0x0}) r1 = syz_open_dev$admmidi(&(0x7f000008f000-0xe)='/dev/admmidi#\x00', 0x7f, 0x100) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000c26000)={""/1024}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = creat(&(0x7f0000f55000)='./file0\x00', 0x10008) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x4, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000058000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00008fe000-0x390)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x0, []}, 0x90) getsockopt$inet_int(r3, 0x0, 0x0, &(0x7f00004cc000-0x4)=0x0, &(0x7f0000063000-0x4)=0x4) openat(r1, &(0x7f0000976000)='./file0\x00', 0xc0000, 0x80) 2018/01/21 08:47:09 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$setfpexc(0xc, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000002000-0x10)={0x5, 0xf000}) pipe(&(0x7f0000000000)={0x0, 0x0}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000001000-0x4)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000cd2000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a46000)=0xe8) setreuid(r3, r3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000002000-0x8)={0x0, 0x0}) 2018/01/21 08:47:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f000074e000)={0x0, 0x0}) futex(&(0x7f000000d000-0x4)=0x5, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, r0}, &(0x7f0000acb000-0x4)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2018/01/21 08:47:09 executing program 5: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000bb5000-0xd)='net/fib_trie\x00') fchmod(r1, 0x0) 2018/01/21 08:47:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8993, &(0x7f00002ef000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_data=&(0x7f0000feb000-0x20)="d87b092cef24cad30000010087ee8721e5828c3cff0700008fdcfeb43ef0c0b3"}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f000033d000-0x4)=0x5eec, 0x4) 2018/01/21 08:47:09 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f0000fd6000-0x8)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x1, &(0x7f0000fc9000)="") chown(&(0x7f0000fd9000)='./file0\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000824000)=0x0) ptrace(0x11, r0) r1 = syz_open_dev$mice(&(0x7f0000769000)='/dev/input/mice\x00', 0x0, 0x2c800) ptrace$peekuser(0x3, r0, 0x8) openat(r1, &(0x7f00003d9000-0x8)='./file0\x00', 0x0, 0x100) 2018/01/21 08:47:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000076e000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000000000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80000001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x0, 0x0}, 'port1\x00\x00\x00\x00\f\x00', 0x0, 0x4000000000000000, 0x0, 0x0, 0x3def, 0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00003a9000)='/dev/rtc\x00', 0x80000000010000, 0x0) r1 = perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001000)=0x0, 0x0, 0x0, &(0x7f0000191000)={0x0, 0x989680}, &(0x7f0000000000)=0x0, 0x0) r2 = socket(0x10, 0x100000802, 0x2fd) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000f87000)=0x3, 0x4) r3 = dup2(r2, 0xffffffffffffffff) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000930000-0xc)={0x7, r1, 0x73fddfb8c8f58469}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x408, r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000040000-0x8)={0x0, 0x0}) r7 = dup(r6) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000ec2000)={0x18, 0x0, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @common='erspan0\x00'}}) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000103000+0x648)=0x0, &(0x7f0000552000-0x4)=0x4) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000880000)=0x0) ptrace$getsig(0x4202, r8, 0xf14, &(0x7f00004da000-0x10)={0x0, 0x0, 0x0, 0x0}) ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) r9 = memfd_create(&(0x7f00005c6000-0xd)='/dev/net/tun\x00', 0x2) r10 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x802) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r10, 0x404c534a, &(0x7f0000031000-0x4c)={0x0, 0x1, 0x207, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40086410, &(0x7f000030e000-0x2)={0xd7, &(0x7f0000e8c000)="fab285e7be8aff2604bd34eefcbd47eb31b04e0baa1599f4aa3adff519ca5caef068fbb2ca844556d77abbddc5bd42dd05c0494e8ec3a74f28d2a3bb2901d57eef6772cf20f665c7b38bbbbab570c41c6bd0e78c8ad46698ab101acf33fb99fb7df3a8975516aafa5dc6b83aefcfffc4061d95239c42e06c2df59042f2a5b0d20a11e467ac46ccfa64faaf7f86649b08facccacbdf6f1103bd48744a8c8514a866092a4af7ea5c0fb9281d1a499ffe20f7e07f12a0a4c136bfcf3b4dafb580482a9efcb067475ba42dc0d07cb1e440fdeed6074d79db5a"}) dup2(r10, r9) write$sndseq(r9, &(0x7f0000001000-0x1b0)=[{0x5, 0x3f, 0x0, 0x0, @time={0x0, 0x989680}, {0x0, 0x0}, {0x0, 0x8}, @result={0x7ff, 0xffffffffffff7533}}, {0x9, 0x8, 0x0, 0x0, @tick=0x0, {0x7fc, 0x7f}, {0x100, 0xfff}, @queue={0x6, {0xc137, 0x10000}}}, {0x101, 0x7fff, 0x81, 0x7, @tick=0x8000, {0xffffffffffffffff, 0x5}, {0xa55, 0x4}, @ext={0x48, &(0x7f0000044000)="1e2d87e920bc80621bf2792b2b000000000000000254a881f9ba94de2c72795f64bb8427b1fb8e9099379106ec863be503713b2e338468e3036c6b79c066021605000000b537f687"}}, {0xffffffffffffffff, 0x6, 0x4, 0x100000000, @time={0x0, 0x989680}, {0xde58, 0x6}, {0xffe, 0x81}, @connect={{0x8, 0x4}, {0x6, 0xaa}}}, {0x2, 0xffffffff80000000, 0x4, 0x9, @time={0x0, 0x0}, {0x0, 0x48a}, {0x8000, 0x19}, @quote={{0x2, 0x7}, 0x3, &(0x7f0000897000)={0x7f, 0x0, 0x0, 0x8, @tick=0x0, {0x1, 0x0}, {0x0, 0x7}, @control={0x0, 0x0, 0x0}}}}, {0x0, 0x0, 0x0, 0x7fff, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x9}, @connect={{0x103, 0x700ea533}, {0xa7, 0x0}}}], 0x120) ioctl$sock_netrom_SIOCGSTAMP(r9, 0x8906, &(0x7f00001ad000)=0x0) [ 36.453496] x86/PAT: syz-executor7:4787 map pfn RAM range req write-combining for [mem 0x1c0a60000-0x1c0a61fff], got write-back 2018/01/21 08:47:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000274000-0x78)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000cb4000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000087000-0x4)='\x00', 0x4) ftruncate(r0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000106000)=0x0, &(0x7f0000ffa000-0x4)=0x4) r1 = getpid() fcntl$lock(r0, 0x5, &(0x7f0000441000)={0x1, 0x0, 0x80000001, 0x19, r1}) 2018/01/21 08:47:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000eea000)="617400000000000000046561746500") writev(r1, &(0x7f000032e000-0x50)=[{&(0x7f00003f1000)="", 0xc0}, {&(0x7f0000e0e000-0xb2)="d2", 0x1}], 0x2) 2018/01/21 08:47:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000dc3000-0x9)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000cbb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000934000-0x8)=0x6cf, 0x7fffffff, 0x1) sendfile(r1, r1, &(0x7f0000046000)=0x0, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000f4a000)={0x10002, 0x4000000000000001, 0x10000000000, 0x2000, &(0x7f000000a000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f000087b000)={0x20000000010002, 0x1, 0x1000000000, 0x2000, &(0x7f000000a000/0x2000)=nil}) 2018/01/21 08:47:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000bdf000-0x12)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x301082) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000278000-0x2f)={0x0, 0x27, "47aa7f36fc653c180952a650aa19872999ec13870a1611831af8c491dbcb4c769494a5b8fea518"}, &(0x7f0000fe6000-0x4)=0x2f) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000e8e000-0x10)={0x188c8baf, 0x0, 0x2, 0xa104, r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000872000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r5 = openat(0xffffffffffffffff, &(0x7f0000797000)='./file0\x00', 0x8100, 0x10) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000b83000)={0x2, &(0x7f0000688000-0x10)=[{0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000300000)={r6, 0x10}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00001ed000-0x11)='/selinux/enforce\x00', 0x121002, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000457000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) fchmod(r2, 0x79) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/01/21 08:47:09 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00003b6000)="c33ea439a6632ab77360054c43c906b167fcfc712713d4dd78361d33a24e3ebbd389d0cfa4fda5f3b2ef1cd35b9d390459799d1f381bf8e6b8ae9dbcabece7c22e4cd6f0a7d9c44561ebef1703359623c4e1ef469424b1d3f406ca194ab4403e2df4", 0x62, 0x4000005, &(0x7f0000b40000-0x1c)={0xa, 0x0, 0x7fff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xd6}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) sync() setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000337000)=@req={0x80000001, 0x0, 0x1, 0x0}, 0xc1) ioctl$TIOCNXCL(r0, 0x540d) sched_yield() getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000734000-0x10)=@common=""/16, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0x27e, &(0x7f0000016000-0x10)={&(0x7f000000b000-0x2c)={0x14, 0x21, 0xb01, 0xffffffffffffffff, 0xffffffffffffffff, {0x10, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/21 08:47:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00007e5000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92, 0x0}, {0xffffffb0, 0x0}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 36.566784] audit: type=1400 audit(1516524429.533:12): avc: denied { dac_override } for pid=4809 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/21 08:47:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000378000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x4}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [], {0x95, 0x0, 0x0, 0x0}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000955000-0x8)={r0, r1}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00004b7000)={@common='erspan0\x00', @ifru_addrs={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) sendmsg$kcm(r2, &(0x7f0000dc2000+0x953)={&(0x7f0000e3e000-0x9)=@rc={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f0000aa3000-0x60)=[{&(0x7f0000080000)='2', 0x1}], 0x1, &(0x7f0000b2e000)=[], 0x0, 0x0}, 0x0) [ 36.691152] audit: type=1400 audit(1516524429.658:13): avc: denied { create } for pid=4846 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 36.720481] audit: type=1400 audit(1516524429.685:14): avc: denied { write } for pid=4846 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 36.754536] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 36.860758] audit: type=1400 audit(1516524429.687:15): avc: denied { prog_load } for pid=4851 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 36.907103] audit: type=1400 audit(1516524429.716:16): avc: denied { prog_run } for pid=4851 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/01/21 08:47:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000007000-0x4)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000bc9000)={r1, 0x0, 0x364, ""}, 0x18) connect$inet6(r0, &(0x7f0000002000-0xe)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2018/01/21 08:47:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000836000-0x10)={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0xc}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000)="", 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0xd288bd32f0e3c1ff, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000249000-0x30)={@rand_addr=0x1e, @loopback=0x7f000001, 0x1, 0x8, [@local={0xac, 0x14, 0x0, 0xaa}, @loopback=0x7f000001, @remote={0xac, 0x14, 0x0, 0xbb}, @rand_addr=0x10000, @rand_addr=0x0, @rand_addr=0x200, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0xb}]}, 0x30) writev(r0, &(0x7f0000447000-0x40)=[{&(0x7f0000f63000)="87", 0x1}], 0x1) shutdown(r0, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000ab8000-0xb)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000f07000-0x9)='/dev/sg#\x00', 0x9, 0x80000) 2018/01/21 08:47:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4, 0x0) bind$inet(r0, &(0x7f0000ee5000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x245) sendto$inet(r0, &(0x7f0000fd0000)="", 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) shutdown(r0, 0x0) poll(&(0x7f0000853000-0x18)=[{r0, 0x0, 0x0}], 0x1, 0x0) 2018/01/21 08:47:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x8, 0x0) bind$inet(r0, &(0x7f0000fcc000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f00009eb000-0x10)='/dev/sequencer2\x00', 0xffffffffffbffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000adf000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmsg$alg(r0, &(0x7f0000877000)={0x0, 0x0, &(0x7f0000fd6000)=[{&(0x7f0000e83000)="44e712ab149fead1a13d7e60a09be62c40db5a9ed3cde749139824f35ce48ffc73352140ef81f1f5fcd0197f003f4d8bd43dea6f1994af3048482a68a1d5c4fd1a1087ae4ebbb2bba2cf52223b9382e96e909c5c5ee7175d41a822012e54995fd2a4cc46e2edb6f53d42f4f3ef9fc13a81c17c43389834f91460b1641d8c996e7132025e388f8c5996010e403eb290db484fc4454f3e8a6f21c10aad8cd805a31c9cafd0348608f2c7182357cad3b2c01552dc9114db2b956054dd3ced45960c61172ec4ba886412c4b919b14233eda9a571b2074455b8dba3e67c4b7736d2e2dfd71894d566fe6d173dda9d3da42eb9cd690708675773de37d42acb4a3a8bbf774d9ed6f633fabe1a55e843196e79387c195d92e34d9ab0b239b23f72266adc93b70ff825f2c44de16f29e99b16da29e3fd9d81e7e7c28b4fd269395d8bb2abe0a522b9728e8554c033650d1d6a8a9c9444969b9243c879b74bda7753cd425dc6b1d358f6106076b3e7312aed77e745d2a80489caf67a98550cfe3566aa850c34cb5ef6afb3cbfa9c9f74916ccec9e128ec1744b50c7779b2877f5c26ae3d4893154a2d88f8a991cebeb2d1147687dac419c62fd979cefa76c6292ed36ec0123f193deb595d0c46e865224c7afaba61dcc7693b55fa0c7d7e588541e096e91926c04632c0a36cf6267713d1e6de39cea5de30b8f4f19d34c7ab9a801642a933d5ad88fcf66c3a934b92b8e515dd4057f0e2f4c79061c15c9bacebc764e0830d39d13ce25a73b0aab74f4d66b87eec3106debbf96c54e478a838f8688c35c9a895200e65be40688f17f3e0edddd8b0641ed911c9f2a54c36ee22c25a531902cf84a7efab3a7d146ab735ab7b1339fa8238204fa626de59730ed7da8e0f7d735b7bf3e9f30abceb77696f8bfe75b43559491f3a788a5fe31442c608156630cbe4f2af7a650067c8194805aabaf0a998acd93072a9159f55eb39f0c0e126aed5597e905fa91d8f6f0c3d6bb919ce94a942d4bc5d75838d5721a799c93fd814682c93de26a1cae153a37f8d99c4f470723168ea0696714b128eb83024a0a9eb81566a55af643efde4644cea036554c802be85b23e9dd822029ae828cfa52baceaa16f1ea7af4ff4738516b55d2dfa518a297febd98137134f5391349ac59c8b60cc091e73905f6abafbb583d5360cbaee96129d2976bc321e9f6441be2a28689727b1bdaf07fded63678cd766dcc9cd517ee8e13ad2f9d52ec7a36a751ea17d168d3a47197499ea2b3be238c076a4e9a657581875d0dacd473b4ad2a8e88a285f16fe6cd9ac0710b3a347a7d32580f1cc6028884b0da9c8e07f65227dfd8832075e5dac8869b9751608d26b1aae580df4a70282192a9f9728c5183ca120c353a0dd0d32b30d284f88f3c01b2a350ea1f59018ab22dbae425a062afeeac07231b90547b3188f8e1bdde04d6a02391630c5456f318488de0df75a2b7619d6d315db42d8c29d98fbe568ea000a744aa0e50dc668d85afca95b72f2de9bf73ec4e36bb0e9c61e9924a40a76caa40580a3d65906ab39d76882fd9f81a74f03ec78b6edc4449b9920e2f7c66a321c27d40868c08809a5843f69bf49ff13779ecabd4ddb8a5025c39446a97fe516f0d12d9c8eae1c6cf54185c97d62d473dba04dab6d923c78677e3411435d5e2e2abf85c13a8c7df01035cc525347a1c60a02273e82c050081734858abe3298b5119d903782b5407fad53ae4713e925e0adf9292ccb686f9beb7524e68b0f9134a43a16d4f9ade9fd48aa3e6c0c63cabac9319166d986e74093102342775ca30cd4b9da6a0ade9335ba5d2d2ee40617d10e4b28e7ec8a44d5cfdaa1184d1a35c6e58fe86b7c57affe3638212652060f84c94a4d5e0911a1a58e7a24ddfdfff17f7760ebaf3615d49bf05c8fe53732c2a6ef45ae6c242dc45b5a9d16656761ec6caab458b47b74737683387142e592ae9202c15280f20a2fa7b155d334dd4460b471a4991b47765b7629a6fba895fd1019b1b66db9fd5ab73bdf85a1f084791757bf11ad089a04fdd9a1dd3a6630e2c1a0ed54e8ee59613d3aa01733b9b5bad3782ce6ccf59000a93242ea2e5ab885d5022a2f3f0e4d10ef879922ec99724ecb5da1239d12d222c18711bc50f12ec65963dc8cc53e340fac56d7f5b24e1fafab728eeeb183323aae708ba0b9e323f6c1c589d1420c71693c40be2317a345ecd982ebbca336db948cc6eff97939401233716706533b0b5a65e1b1436071ae46c72bafff58ef54992a4cc86a2866380329ef6938d21d683c5d88b37feaaac2188000a9285bdf326a9cf5e0e37b235dc18d628680876d90bd4d36141b3457abcf92b8074c61378db9720801adfe2fa7cf23fcabaf687d87f7602194c3ca9fb20cc7b51e325944120305f01247089e8f0620675b368a64f65e483f73c2bf312c9a15dec7c15d51aee16be3bfe080f203b5ce4b16f6a319d11b51cef6d731d8da9d9cc6d358cccebc6a7ce4c91fec6afb47c2a6feeece0ba40f9a280545cd934f8df48323614effcab2ffbc8ca3470596c176b574b62d33448342c6a5112b781dbcacd2631a08c4c2b1e9e9936d6a2a8c6acd867b14e96f9f4b30783c13e00448d146d7ac7ddb4ce8f557ad8cefaf6cd57801905c416532753cdabe5cebada0c3db0ffea944a2ddfcfc7217e5e1aecfb1d9e98e78d2104769763f6ccf82fbc83e928873f26eeb04c43fbb836f3641875dba545b0354ab6a492e5e0182258bfb2e984f9b5c975e9f925b92507e24a802d275b3b7facd9e7e71d65f608e28ad6f007b72cb1cb3ea05d86ad5cb78e504a5c4da2d179f1941505bde881c3892145e3763693fefb012ea8f2d917a74f17fc7d5ebb74d7c4111ca2874a65c6a6a0f71e4139e0cb8acf7690f49e93c0540acfd76112de2d70b4fa86008ed9fd4495cfcbf6a3aa39b41acbe34edb584b1d36ce3fdf3bfd602a32856d5b239820c8006dd7958c86ea91827bb9260d341348d050ecaa235226471bc0f5b954b2fa23e3ecf1c80ea8f7f0dc4986c24ad665f16d6d19684a199d0eb511447383c313afc84f3bc8a5bd44b1b09ecdcf63d2f6548bc3cda7103ef7945aaf75e2a216dc6cfa7efce24e6045b5c430004737b266cab8cc4ff5888b9d32fb5c7dbf0e346cf69ce6a1a52a25ce056add0e80ecb4043094c0a318eddf94ca4217bc326a1e9e7ac3caf75569335640151cf09cee689ca37c2bc2d5a6015ef582d99e2f04f263d3f9132d39da0d67fd68524ce2e65b8a473099e77057af9424310eec758885cfec572d8988beff5a3355cfe89ccebac7f55b260b18eb5519a3f5a7ed985bbac5ce3ac468199ba932fcf71e5c0519602a2f9eb02243cffc75d7824cccb2c88d8870220559bbf255884b27086c15b51d7d2ea44d59193355f46ac41081cafeb52778a8ef48d435705b3d9b013c53022d09ea527105d8911d7e9348ba8370c6e7a42454c050d2048b06c549193edb6d8ae5d763c7d68cfb54245c08fb93cdf31d811194b4fa00f5631fd760db1c34e08c8277d38804403e01a2ff09e1647287a9bc23fd18a9db901cf6738a8e6ba7fa9102028349a6ac9b297890f6c9afe67d068af5633f1547df6bcad4ef7c0f57540cd4ae64163a786559ba31e55f7fb2d8ff3e151e2091aead096ad2d48e9589d240142036a36b3c5a28f0fe585b7dc12e9243f94b3e9c31bcea501ad2aeaab6b00309ddbaa813238e737d440999a5966ae016db16acf15c249b77455e13315b4698e1933009666c9a1fd63d35ad18eaefb25972fe6043fcb37d1a0f26b75f6d2349d26e36d8ce74c1a5aa8db2f85c5ffb32e50a582a06826f7bbf011f01d080a4ea307485417a74243ac212864ed2839e57bed9b4659fd525f34500a59fbddea4590eee7eae2d441a8261c4f8a54ea007f43c4ab70f40a9fd82c3638dd7a0d8557dfe37e7bacfba1a87b15112f0610dbec6fe0c71702bf50cd0df3cd10710e798e3c143c1a3249dc37c9ec6316d3b0d8bb103619515bb64ae335f151ef3e05c76dd2fc2e5c1397f7e31c3acea80b0ff9860bae7eb2df8d46fa069160b48e86c39cb35b0150e1442431bdfe2e470ddafa923d6f2e0e7e1fd30f660e5a6567c9be1f52747650e1d58fbc8bfa8543a98c9e1168538b0c982256bf4532c0d2e49d7a5b7a7a498f9892f51cd110fb7045fbb17e9080d22aef26a2df49291ac1f0d75c0256283ca7a7dd68ed553314ddbb4a91e2d5a6289defd6cc9bc75e92af25487910b7653170d7ed33b2a5e1911375abc83cbc1b7ddc78252c465cffcc624f850cd01de8ecbcce7d1c76c160c1e114867cff9a25308389cd445115cfa6a41dbce88a49e61c4580d1749313ce82874c513f519f565f8cba42a00e353ff915d921b8a1e38e6e99955f976412268f6736677f623011ceb8facc99c74a55e2b4638bb90aa733e2191da93fde8416fefbb2f6562c4c098ef2a55e3ae0de0bf5ee3c821bc7dd24b092b605746eb3846351609558b201a357806acba52669b9436e9b46b0a0536bbec2bf5ec4e5ce2ab778aff7869e9a0f2e3253b4609a1d7e3ae61cb0fbe11b6c2b545c280dd9b48ac3b41a57855e6f07920cbd6a261f61aa1548f370b31ffc09a6bf04b978c9ff9bb9633ed4449fa7e64c36b0a2240453984c070948df6663a0880ac4c43f86ef382f52284f393b20c36b8c25f475d766d250deea1ed42007e379482bcc10f0733e3394cc56a16377e52c7642d331a8e31d287e653796d04087414260fcebc62b84c94effdaa0fb668eff62a43537c39b4b030975bbbf5f46ae8d7bb49b7514dc5c84e8c43e7728ea6f4be4d86d774dd152266f092c8493408824c13c829604cd4221c89e153e2bfef6750c4800e8a9600473a25627022aae2f006a1862afc26037614f7e95cdbb4ed21e9d4f0659cb762fde45fe73943afa9c600f7777e51e984cc648c1164339514a7aa973303773e70fef2a7dd976d7d3e65774e14d26b21ae7eebed492811b7388153fe15a78bdfbbf6d9e01b930bf1af175e5c8a5bff5144f089103bbc670e635ca783066a489b009f91f2985518f635d6b136a8de2ca0a7bb00c297b01aac62f80691ff767d74f05ee59dc466659c8a95604637685d68975309d2a2e7352ebbe63b9688d4247c6f7e719d30caabee4524bcde0c0abf9235c2c1790f1bb5a8476321648f9ed8be48301a2a5adc9c10f07b4cbb64c008a1b54d973c0497d24e9a014df04dc90cb43c657fbea57b621b96c900a6bdf65fbd0ef6caa0ad689323c7de8fa37b129fa1743ebc4da379f74ef30eb3b478ee4dee1742a913b549fe044898f056eb158c4298e3a02cadcde205d01dd31aee79eeaf84b614fbfd58b787b2a66c24086738f6b5e568a048432d587314ad59da53f47e8b3371d968758cbce4823c8992940dd744ff59d79453761f31750b760fd478ff6aa4bcc884e6d49048efe673b988a22efe5e461b90572c39980e302c2a12637186e0dbaac0e8ea5b1058df13bdd4926fd96fa8dfb64f4233e4bd5200601b51ccd84ebda7b18dc1d1ca896d935e73c7cc1c5d0d707af2e0c79f75440fe436296db6d4a2a6ac55889d40476065b10d516f47310736e26c3bdca02bd4bbcbf3d556bdbf7bc69fd2fb90277f5b1155f81ca2012b40d7d768cd59a1abdfa7cd4560db55de97b250e6a7a41e6d5590569948f68b39092dea0bfbe1318c56e2d7753d82fb780bbad48943e64e7f4e547d7357c7aa83021220bdc8b841d7414faa1e856fb", 0xff9}], 0x1, &(0x7f0000001000-0x172)=[], 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000b8b000-0x38)={0x0, 0x0, &(0x7f0000fd2000-0x20)=[], 0x0, &(0x7f0000fd2000-0xec)=""/236, 0xec, 0x0}, 0x0) 2018/01/21 08:47:10 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001000-0x4)=0x0) capset(&(0x7f000012e000)={0x20080522, r0}, &(0x7f00001db000-0x18)={0x8, 0x7c7, 0x8, 0xb63, 0x1, 0x4}) r1 = dup(0xffffffffffffff9c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000002000-0x23)=""/35, 0x23) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000000)={0x101, 0x3, 0x3, 'queue0\x00', 0xfffffffffffff800, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002000-0x20)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x200, 0x3, 0x1, 0x8, 0x1, 0x40000, 0x6}, 0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00008aa000)=""/171) syz_emit_ethernet(0x3e, &(0x7f0000cbc000-0xca)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffffffffe01, @dev={0xac, 0x14, 0x0, 0x200000000000a}, {[]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, ""}}}}}, &(0x7f000044f000-0x18)={0x0, 0x2, [0x0, 0xedb]}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x8) 2018/01/21 08:47:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000311000-0xa)='/dev/dsp#\x00', 0x6, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000af5000-0x20)=[{0x3, 0x345}, {0x8, 0x8}, {0x2, 0xbef}, {0x4, 0xb4}], 0x4) seccomp(0x1, 0x0, &(0x7f0000bd5000)={0x1, &(0x7f0000000000)=[{0x6, 0x1000000000, 0x0, 0x407fdc0003}]}) syz_extract_tcp_res$synack(&(0x7f000098d000)={0x0, 0x0}, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r1, &(0x7f000052d000-0x10)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000d97000-0x4)=0x10) 2018/01/21 08:47:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00003fe000+0xdcf)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005ff000-0x4)=0x0, 0x4) r2 = syz_open_dev$sg(&(0x7f0000c59000)='/dev/sg#\x00', 0x100000001, 0x400) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000fd0000-0x138)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) sendto$unix(r1, &(0x7f00004b9000)="", 0x0, 0x0, 0x0, 0x0) close(r0) 2018/01/21 08:47:10 executing program 6: r0 = socket(0x26, 0x80005, 0x80000001) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000eb3000)={r0}) 2018/01/21 08:47:10 executing program 6: mmap(&(0x7f0000000000/0xfdd000)=nil, 0xfdd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000fd8000)={0x0, 0x0}) pipe(&(0x7f0000db1000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f00007a9000)=0xffffffff) close(r1) tee(r0, r2, 0x6, 0x0) 2018/01/21 08:47:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x5420, 0xfffffffffffffffd) r1 = dup3(r0, r0, 0x80000) r2 = accept4$llc(0xffffffffffffff9c, &(0x7f0000997000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f00004aa000)=0x10, 0x800) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000bdd000-0xb)='/dev/mixer\x00', 0x402, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00008dd000-0x8)={r2, r3}) 2018/01/21 08:47:10 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000001000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0x0}, 0x1c) mmap(&(0x7f0000000000/0xf1e000)=nil, 0xf1e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000d4000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast1=0xe0000001}, 0x0}, 0x1c) r1 = syz_open_dev$sg(&(0x7f00005b1000)='/dev/sg#\x00', 0x2, 0x200400) getsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000e35000)=0x0, &(0x7f00009a4000)=0x4) socketpair$inet(0x2, 0x804, 0xc7, &(0x7f000070b000)={0x0, 0x0}) 2018/01/21 08:47:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082f000-0xf6)=""/246) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000fd8000)=""/81) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f000094e000)=""/174) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00004b0000)={0x0, 0x3f, 0x20, 0xfffffffffffffff7, 0x4}, &(0x7f0000c94000)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00003a4000)={r1, 0x9, 0x5, [0x40, 0x80, 0x1, 0x7eef, 0xe11d]}, &(0x7f0000ac9000-0x4)=0x12) 2018/01/21 08:47:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000bca000-0x90)={0xb, {{0x2, 0xffffffffffffffff, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/21 08:47:10 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) r2 = dup2(r0, r0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000004000-0x64)={&(0x7f0000003000)=[0x6, 0x100, 0x0, 0x7fff, 0x40], 0x5, 0x6, 0x2, 0xf59, 0x2f, 0xfe92, {0xfffffffffffffff8, 0x3, 0x0, 0x9, 0x1, 0x80000000, 0x5, 0x1cdd, 0x4, 0x8, 0xe2, 0xd3, 0x1, 0x5, "497ffc044cff27888aa0c784a1207258a530db44e06e59687b546719ca3db71b"}}) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000013000)=0x0, &(0x7f0000003000-0x4)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f0000289000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 37.356177] audit: type=1326 audit(1516524430.320:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4862 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x452ee9 code=0x7fdc0000 2018/01/21 08:47:10 executing program 7: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000758000)={0x0, 0x0}, &(0x7f000095d000)=0x8) 2018/01/21 08:47:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000233000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000e3d000-0xc)={0x7, r1, 0x0}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getresuid(&(0x7f000028b000)=0x0, &(0x7f0000775000)=0x0, &(0x7f000089d000)=0x0) quotactl(0x75e, &(0x7f0000b43000)='./file0\x00', r4, &(0x7f0000ac3000-0x1000)="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") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r5 = dup2(r3, r1) ioctl$TCSETS(r5, 0x5402, &(0x7f000007e000-0x24)={0x7, 0x4, 0xffffffffffffffff, 0xffff, 0x8, 0x1, 0x4, 0x20, 0x9, 0xffff, 0x10000, 0x100000000}) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f0000294000)=""/246) ftruncate(r2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f000026c000)=[@flat={0x77622a85, 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 37.435445] audit: type=1326 audit(1516524430.399:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4862 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x452ee9 code=0x7fdc0000 [ 37.485148] audit: type=1400 audit(1516524430.400:19): avc: denied { net_admin } for pid=4897 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 37.497206] binder: 4906:4913 ioctl 5402 2007dfdc returned -22 [ 37.497277] binder: 4906:4913 ioctl 81007702 20294000 returned -22 [ 37.520527] binder: BINDER_SET_CONTEXT_MGR already set [ 37.520544] binder: 4906:4915 ioctl 40046207 0 returned -16 [ 37.528866] binder: 4906:4915 ioctl 5402 2007dfdc returned -22 [ 37.534416] binder: 4906:4913 ioctl 81007702 20294000 returned -22 [ 37.550168] binder: release 4906:4913 transaction 2 out, still active [ 37.550183] binder: undelivered TRANSACTION_COMPLETE [ 37.550314] binder: send failed reply for transaction 2, target dead 2018/01/21 08:47:10 executing program 6: r0 = gettid() ioprio_set$pid(0x2, r0, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00009fc000)="1e2e8f219cc0fb4eff144fadefab7ad27059b65b344c580e8e2f0e714d65bc6b4a6f40c7d0151d890825347a8b13b31200") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000000)={0x0, 0xe2, 0x6, {0x77359400, 0x0}, 0x7, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000002000-0x8c)={0x2, 0x1, 0x0, 'queue1\x00', 0x1ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$setsig(r1, 0xa, 0xe) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname(r1, &(0x7f0000003000-0x10)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000001000)=0x10) 2018/01/21 08:47:10 executing program 7: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(r0, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000e000-0x1f8)=[{&(0x7f000000a000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f000000d000)=[], 0x22d, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x5, 0x1, 0x2, 0x0, 0x0, r1}], 0xa0, 0x0}], 0x1, 0x0) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000013000)='/selinux/enforce\x00', 0x400, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x8, 0x0}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)="") mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000013000)={0x5, 0x3, 0x9, 0x9, 0x30b40000000000}) 2018/01/21 08:47:10 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000001000-0x60)={0x0, 0x0, 0x2, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000001000-0x4)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000001000)=0x8, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000003000-0xa)='/dev/dsp#\x00', 0xdd1, 0x202) futimesat(r1, &(0x7f0000001000)='./file0\x00', &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) accept4$inet(r0, &(0x7f0000001000)={0x0, 0xffffffffffffffff, @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000+0xa09)=0x10, 0x800) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000001000-0x4)={0x0}, &(0x7f0000004000-0x4)=0x4) 2018/01/21 08:47:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000e40000-0x4)=0x2, 0x4) r1 = request_key(&(0x7f0000e59000-0xb)='cifs.idmap\x00', &(0x7f0000ed5000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f00000a9000-0x1)='\x00', 0xfffffffffffffff8) r2 = add_key(&(0x7f0000bf7000)='big_key\x00', &(0x7f0000aaa000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r2) 2018/01/21 08:47:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000bb4000-0x8)={0x0, 0x0}, 0x84000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00009ba000)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000022000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000421000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000da0000)=[{&(0x7f0000c9c000-0x5f)='i', 0x1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000a72000)={0x800, 0x1, 0x5, 0xff, 0x60e, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$setpipe(r4, 0x407, 0x0) writev(r4, &(0x7f000000b000)=[{&(0x7f0000c03000-0x106a)=',', 0x1}], 0x1) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000e09000-0x8)=&(0x7f0000488000+0x48d)=0x0) dup2(r1, r2) 2018/01/21 08:47:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000026f000-0x1)="0f", 0x1, 0x0, &(0x7f0000022000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) socket(0x1b, 0xa, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000d97000)='./file0\x00', 0x20000, 0x80) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00007d4000)={0xc1bd, {{0x2, 0x3, @rand_addr=0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x7, [{{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x16}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x450) r2 = creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) r3 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r2, &(0x7f00002c8000)=[{&(0x7f00007fc000-0xa1)="b7", 0x1}], 0x1) r4 = dup(r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r4, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000008000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) shutdown(r0, 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000f4c000)={0x2, 0x8, 0x4, 0x1f, 0x1f, 0xe59f000, 0x3, 0x0, 0x6, 0x80000000, 0x0, 0x9}) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f000015c000-0x4)=0x3) connect$inet(r2, &(0x7f0000869000-0x10)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000018000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000000)=0x8c) 2018/01/21 08:47:10 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000a93000)={0xcf4, 0xffffffffffffffff}, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000+0xab9)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @multicast1=0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@broadcast=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a95000)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001000)={{{@in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in=@loopback=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001000)={{{@in=@rand_addr=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) setresuid(r1, r2, r3) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000002000-0x11)=@known='security.selinux\x00') clone(0x0, &(0x7f000000c000)="", &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000001000)="") readahead(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000b23000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0xc) sched_getaffinity(r6, 0x8, &(0x7f0000b18000)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x4000009, 0x0, 0x0, &(0x7f0000001000/0x1000)=nil, 0x0}) mprotect(&(0x7f0000b1d000/0x1000)=nil, 0x1000, 0x9) mmap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x8, 0x13, r4, 0x0) mlock(&(0x7f0000b19000/0x4000)=nil, 0x4000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) vmsplice(r5, &(0x7f0000b1d000)=[{&(0x7f0000002000)="", 0x0}], 0x1, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003000)={0x0, r4, 0x4, 0x2, 0x0}, 0x14) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000a97000-0xe2)=""/226) 2018/01/21 08:47:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000d51000-0x10)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000562000)=[], 0x0, 0x0}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000b7b000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x0, 0x0, 0x0}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f000048b000)=0x401) [ 37.578055] audit: type=1400 audit(1516524430.459:20): avc: denied { map } for pid=4906 comm="syz-executor2" path="/dev/binder0" dev="devtmpfs" ino=8975 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 37.603968] audit: type=1400 audit(1516524430.461:21): avc: denied { set_context_mgr } for pid=4906 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/01/21 08:47:10 executing program 7: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$user(&(0x7f0000005000)='user\x00', &(0x7f0000007000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f0000010000)="3bc477c2f46c6ea2d364212bb3ca176c9e7ff49bce1ee0991d50d574b95aba", 0x1f, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f000000e000)=""/36, 0x24) sendmsg$nl_generic(r0, &(0x7f000000e000-0x38)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000001000)={&(0x7f000000e000)={0x20, 0x26, 0x100000829, 0xffffffffffffffff, 0xffffffffffffffff, {0x403, 0x0, 0x0}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary=""}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) r2 = dup3(r0, r0, 0x80000) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000013000-0x38)={&(0x7f0000005000)={0x2, 0x1, @rand_addr=0x56e7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000012000)=[{&(0x7f0000013000-0x27)=""/39, 0x27}, {&(0x7f0000012000)=""/49, 0x31}, {&(0x7f0000013000-0x8b)=""/139, 0x8b}, {&(0x7f0000013000-0xa7)=""/167, 0xa7}, {&(0x7f000000e000-0xd9)=""/217, 0xd9}, {&(0x7f0000004000)=""/173, 0xad}], 0x6, 0x0, 0x0, 0x20040000}, 0x44810) 2018/01/21 08:47:10 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00007b7000)='/dev/mixer\x00', 0x40, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000c53000-0x28)={@common='bcsh0\x00', 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x802, 0x10) write(r1, &(0x7f0000243000-0x26)="260000002500150485ffff78000036de03efffe7f340000f0e000100ff070000000000008700", 0x26) [ 37.629928] audit: type=1400 audit(1516524430.464:22): avc: denied { call } for pid=4906 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 37.662471] audit: type=1400 audit(1516524430.465:23): avc: denied { transfer } for pid=4906 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/01/21 08:47:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00007dd000)='/dev/audio\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000a43000-0x4)=0x17, 0x4) r1 = timerfd_create(0x0, 0x80800) readv(r1, &(0x7f00004aa000)=[{&(0x7f000010d000)=""/4096, 0x1000}], 0x1) [ 37.695194] audit: type=1400 audit(1516524430.596:24): avc: denied { setuid } for pid=4926 comm="syz-executor4" capability=7 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/21 08:47:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000274000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [], {0x95, 0x0, 0x0, 0x0}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000062000-0xb7)=""/183, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000a2c000-0x10)={0x1, 0x28, &(0x7f00006f9000-0x28)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00007db000-0xc)={r0, 0x77b, 0x18}, 0xc) 2018/01/21 08:47:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000acd000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x800000000000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9c000-0x138)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) 2018/01/21 08:47:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x78, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000cb7000)='/dev/vcsa#\x00', 0x2cd, 0x8000) name_to_handle_at(r0, &(0x7f0000cff000-0x8)='./file0\x00', &(0x7f0000b8b000-0x59)={0x59, 0x7, "a5ffccc8adb7843d437c7b81502a77d626cb5b20c5f1889aaff938717a3e2a408d4d0157edf11112e9abde98b9c551e040c3cde405782dc6791f7f475dfa094744d85496e1c7882267f8306d93eb0c7879"}, &(0x7f000072f000)=0x0, 0x1000) clock_gettime(0x0, &(0x7f0000c49000)={0x0, 0x0}) timer_create(0x0, &(0x7f0000ca4000)={0x0, 0x32, 0x0, @thr={&(0x7f000022f000)="", &(0x7f0000298000)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a7e000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000052000)={{0x0, 0x3}, {0x7ff, 0x4}}, &(0x7f00002a4000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) 2018/01/21 08:47:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00008f1000-0x4)=0x1, 0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000643000)='/dev/dmmidi#\x00', 0xfffffffffffffc01, 0x10000) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000e79000-0x8)={r0, 0x4}) bind$inet(r0, &(0x7f00007ec000)={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f000014a000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14, 0x0, 0x0, 0x0], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x19, 0x0, "0000000000000000000005e320194b016c"}}}}}, 0x0) 2018/01/21 08:47:10 executing program 0: mmap(&(0x7f0000000000/0xf7e000)=nil, 0xf7e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000f7e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000f7e000)={@common='teql0\x00', @ifru_addrs={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/01/21 08:47:10 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f000075c000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000001000-0x48)=[{r1, 0x2000, 0x0}, {r1, 0x2, 0x0}, {r0, 0x120, 0x0}, {r0, 0x8000, 0x0}, {r0, 0x2001, 0x0}, {r1, 0xe060, 0x0}, {0xffffffffffffffff, 0x404, 0x0}, {r0, 0x500, 0x0}, {r0, 0x0, 0x0}], 0x9, 0x8) 2018/01/21 08:47:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000039b000)='./file0\x00', 0x10) statx(r0, &(0x7f0000318000)='./file0\x00', 0x7000, 0x400, &(0x7f000061d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4002, &(0x7f0000f3c000-0x8)=0x4, 0x5) syz_fuse_mount(&(0x7f0000150000)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) 2018/01/21 08:47:10 executing program 4: mmap(&(0x7f0000000000/0xf1d000)=nil, 0xf1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80b, 0x7, &(0x7f0000f1d000)={0x0, 0x0}) mmap(&(0x7f0000f1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000f1d000)={0x0, 0xffffffff}, &(0x7f00004af000)=0x8) mmap(&(0x7f0000f1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000f1d000)={r1, 0xc9, 0x1, [0x20]}, &(0x7f0000f1e000-0x4)=0xa) r2 = socket(0x10, 0x8000000000802, 0x0) write(r2, &(0x7f0000f0e000)="200000001a00076f39ffffffffffff0e020d0d000000040000044f6a010085ff", 0x1c9) 2018/01/21 08:47:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000c55000-0x11)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000728000-0x34)={{0x0, 0x3, 0x20, 0x2, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) vmsplice(r1, &(0x7f0000fcd000-0x10)=[{&(0x7f0000012000-0x1)="b1", 0x1}], 0x1, 0x0) writev(r1, &(0x7f00008d6000)=[{&(0x7f0000fd0000-0x63)="e0", 0x1}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) tkill(r2, 0x1000000000016) vmsplice(r0, &(0x7f00004c1000-0x30)=[{&(0x7f0000cb3000-0x2d)="92", 0x1}], 0x1, 0x0) 2018/01/21 08:47:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f00009c3000-0x4)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000036000-0x6)=[{0x0, 0xbffffffffffffffd, 0x0}], 0x1) semget(0x3, 0x0, 0x200) r0 = semget(0x2, 0x2, 0x200) syz_open_dev$sg(&(0x7f0000e24000-0x9)='/dev/sg#\x00', 0x9, 0x4000) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/01/21 08:47:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00004d3000-0x24)="6e65742f70747970650005cfaefc7ab2cce65fd7a6a8ffd341c29c0fe477408313b3d847") rt_sigprocmask(0x0, &(0x7f00007f3000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)={0x0, 0x0}) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000a77000)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) ftruncate(r0, 0x3) 2018/01/21 08:47:10 executing program 3: mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) bind$inet6(r0, &(0x7f000063b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f000089b000-0x7e)="", 0x0, 0x8000, &(0x7f0000dee000)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f0000fc4000-0xf)='\'', 0x1, 0x0, &(0x7f0000fbb000)={0xa, 0x1, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x0}, 0x1c) 2018/01/21 08:47:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000c1c000-0x8)=0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000ee8000-0x11)='/dev/vga_arbiter\x00', 0xc4002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000282000)={0x0, @in={{0x2, 0x0, @rand_addr=0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x401, 0x5c4c, 0xffffffff, 0x4}, &(0x7f00007a5000)=0xa0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000266000)={r3, 0x3, 0x2, [0x400, 0xfffffffffffffc01]}, &(0x7f0000139000-0x4)=0xc) 2018/01/21 08:47:10 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000003000-0x8)={0x0, 0x0}) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000003000)={0x0, 0x4, 0x4, [0x100, 0x4, 0x4, 0x10001]}, &(0x7f0000004000-0x4)=0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000005000-0x4)=0x0, &(0x7f0000004000)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000003000)={r1, 0xffffffffffff8000, 0x2, 0x0}, 0x10) r2 = accept4(r0, &(0x7f0000002000-0x10)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000002000-0x4)=0x10, 0x80800) connect$ipx(r2, &(0x7f0000001000)={0x4, 0x3ff, 0x0, "50db6c3ccb94", 0x1, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001000-0x4)=@int=0x2, 0x4) accept4(r0, 0x0, &(0x7f0000000000)=0x0, 0x80800) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$netlink(r2, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000003000)=0xc) 2018/01/21 08:47:10 executing program 4: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000004000-0x9)='cgroupK\\\x00', 0x0) fallocate(r0, 0x8, 0x0, 0xfff8) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000002000-0x50)={0x0, 0x1, 0x100000001, 0x9, &(0x7f0000002000)=[{0x0, 0x0, 0x0, 0x0, ""/44, 0x0}], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3f9, 0x400002) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002000)={{{@in=@empty=0x0, @in=@broadcast=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000003000-0x4)=0xe8) 2018/01/21 08:47:10 executing program 0: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000020000)={0x0, 0x0}, 0x80800) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r1, &(0x7f000000b000)=""/59, 0x3b, 0x20, &(0x7f0000021000-0xa)=@file={0x1, './file0\x00'}, 0xa) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14, 0xffffffffffffffff, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) syz_open_dev$midi(&(0x7f000000e000)='/dev/midi#\x00', 0x7fff, 0x8000) 2018/01/21 08:47:10 executing program 4: prctl$setmm(0x23, 0x7, &(0x7f00004af000/0x3000)=nil) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000553000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00007db000)={0x0, 0x19, "dff336a1c5068e5f2514f0f218b9651e705654356ebda16773"}, &(0x7f00007f3000)=0x21) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x4}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = memfd_create(&(0x7f00002d3000)="9773797374656dba00", 0x2) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000e3000-0x98)={0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0xa, 0x5, "b631debcb13f7b4b13ddd302928b46e7622906f41df6a6c628325ae03627de103ff9a41c8290b15b7d430e6ca2b778567ba7aa6d31ad462beaf5c3a8babf5056", "11667276d8aa537a9c97d00294cc3c8a53ed6414fd0d30ddfd318984dbd77c0a", [0xfff, 0x7ff], 0x0}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f000070e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00009ff000)=0x14) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00008f1000-0x4)=0x9, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00004a7000-0x10)={0xffffffffffffffff, 0x0, 0x0, 0x0, r1}, &(0x7f0000838000-0x4)=0x10) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000708000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000446000)=0x0) fsync(r2) 2018/01/21 08:47:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000070b000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000014000)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syslog(0x9, &(0x7f0000284000-0xb6)=""/182, 0xb6) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000014000)={0x0, 0x0, []}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00004a0000)={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/21 08:47:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5b39, &(0x7f0000c38000-0x8)=0x1814, &(0x7f00002a1000)=0x1) r0 = syz_open_dev$sndpcmp(&(0x7f0000dce000-0x12)='/dev/snd/pcmC#D#p\x00', 0x5, 0x50000) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000e69000-0x5c)={{0xa, 0x0, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1000}, {0xa, 0x2, 0x20, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xffff}, 0xfffffffffffff001, [0x8001, 0x6, 0x7876bbb6, 0x200, 0x0, 0x1, 0x5, 0x1]}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) 2018/01/21 08:47:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000cf4000-0xb)='/dev/midi#\x00', 0xfffffffffffffffc, 0x288000) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r1, &(0x7f0000125000-0x68)=""/104, 0x68) perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/01/21 08:47:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f0000d34000)={0x0, 0x0}, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000e48000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, @broadcast=0xffffffff}, 0xc) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000a96000)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x2, 0x8, 0x400, 0x3, 0x2ea, 0x5, 0x2, 0x8000, 0xfffffffffffff000, 0x6, 0x3, 0x100, 0x1, 0xffffffffffffffc0, 0x1]}, &(0x7f0000a3f000-0x4)=0x108) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000280000-0x8)={r1, 0x4}, &(0x7f000004b000)=0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000f97000-0x20)={@generic="20d96bd334f7003165dea95fda6e150a", @ifru_addrs={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00009b2000-0xc)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, 0x0}, 0xc) r2 = fcntl$getown(r0, 0x9) sched_setaffinity(r2, 0x8, &(0x7f0000e4a000-0x8)=0x2) syz_emit_ethernet(0x2a, &(0x7f000037c000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14, 0x0, 0x0, 0x0], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x8, 0x0, ""}}}}}, 0x0) [ 37.975630] sctp: [Deprecated]: syz-executor7 (pid 5000) Use of int in max_burst socket option deprecated. [ 37.975630] Use struct sctp_assoc_value instead 2018/01/21 08:47:11 executing program 2: r0 = dup(0xffffffffffffff9c) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x20, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ee5000/0x2000)=nil, 0x2000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000e00000-0xd)='/dev/dmmidi#\x00', 0x100000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, {0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5c) 2018/01/21 08:47:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x1, 0x800000000006, 0x0, &(0x7f00003b7000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0xfffffffffffffffd, 0x8, 0x0, &(0x7f0000fd8000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) inotify_init() 2018/01/21 08:47:11 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000001000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000040c000)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000002000-0x4)=0xdc92) 2018/01/21 08:47:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000eff000)='./file0\x00', 0x200000, 0xc) sync_file_range(r0, 0xfff, 0x4b2a, 0x4) fcntl$getflags(r0, 0x40b) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000c4000-0x10)='/selinux/member\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000e0000-0x8)=0x2) syz_emit_ethernet(0x36, &(0x7f0000268000-0x4a)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0xffffffffffffffff, 0x0}, @dev={0xac, 0x14, 0xffffffffffffffff, 0x0}, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[@rand_addr=0x0], 0x0}]}]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [], ""}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], ""}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], ""}}}}}}, &(0x7f0000aab000-0x14)={0x0, 0x0, []}) r2 = dup3(r1, r1, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000297000)={0x80, 0x100000000, 0x3, 0x0, 0x101}, 0x14) [ 38.044616] sctp: [Deprecated]: syz-executor7 (pid 5006) Use of int in max_burst socket option deprecated. [ 38.044616] Use struct sctp_assoc_value instead 2018/01/21 08:47:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00003b1000-0xb)='/dev/mixer\x00', 0x200, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000f8f000-0x8)={0x0, 0x80}) bind$alg(r0, &(0x7f0000b48000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000b79000-0x10)="", 0x0) r3 = open(&(0x7f0000b63000-0x8)='./file0\x00', 0x40002, 0x1e) fallocate(r3, 0x0, 0x0, 0x1ff) sendfile(r2, r3, &(0x7f00007fa000-0x8)=0x0, 0x40000000000008) 2018/01/21 08:47:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00008ee000-0x20)={@common='gre0\x00', @ifru_flags=0x202}) connect$vsock_stream(r0, &(0x7f00001de000)={0x28, 0x0, 0x0, @host=0x2, 0x0}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000e2d000+0xcf9)=0x0) 2018/01/21 08:47:11 executing program 0: mmap(&(0x7f0000000000/0xf1d000)=nil, 0xf1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f1d000)='/dev/rtc\x00', 0x80, 0x0) mlock2(&(0x7f0000d3f000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000180000-0x30)={0x6, 0xfffffffffffffffc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f1e000-0x98)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, &(0x7f0000742000)=0x98) 2018/01/21 08:47:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f000043c000-0xc)={0x7, 0xffffffffffffffff, 0x1}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00007a6000)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000b5e000-0x98)={0x2, 0x0, [{0x8, 0x0, 0x0}, {0x0, 0x0, 0xfffffffffffffff9}]}) 2018/01/21 08:47:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000065c000)='/dev/dsp#\x00', 0x0, 0x109400) clock_gettime(0x0, &(0x7f0000f33000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00007d9000)={{0x0, 0x0}, {r1, r2+30000000}}, &(0x7f00004dc000)={{0x0, 0x0}, {0x0, 0x0}}) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x64, &(0x7f00001fc000-0x4)=0x100000000000002, 0x4) close(r3) 2018/01/21 08:47:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000063e000-0x11)='/selinux/enforce\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000dd2000-0x28)=""/174) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000c8d000-0xf6)=""/246) accept4$inet6(r1, &(0x7f00008e2000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f00000bc000-0x4)=0x1c, 0x800) 2018/01/21 08:47:11 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000013000-0x8)='./file0\x00', 0x0, &(0x7f0000013000-0x1)="04") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/01/21 08:47:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d57000-0x4)=0x10002, 0x4) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmsg(r0, &(0x7f0000f04000-0x38)={&(0x7f0000917000)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c, &(0x7f0000d8e000)=[], 0x0, &(0x7f000056d000-0x260)=[{0x28, 0x29, 0x2, "1d1a2d4ba2fe516e960800000000000000"}], 0x28, 0x0}, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00003eb000)={0x0, 0x0}) 2018/01/21 08:47:11 executing program 4: mmap(&(0x7f0000000000/0x5d000)=nil, 0x5d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f000005c000)=[{&(0x7f000005c000)="1b", 0x1}], 0x1, 0x0) ioctl$int_out(r0, 0x1, &(0x7f000005c000-0x8)=0x0) mmap(&(0x7f000005d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f000005e000-0x14)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000006000-0x4)=0x14) mmap(&(0x7f000005d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f000005e000-0x14)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, r1}, 0x14) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mmap(&(0x7f000005d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000010000-0x8)='./file0\x00', 0x1c4) r2 = inotify_add_watch(r0, &(0x7f0000045000)='./file0\x00', 0x80) inotify_rm_watch(r0, r2) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f000005e000)={0x0, 0x0}) 2018/01/21 08:47:11 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/hwrng\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000391000-0x4)=0x0, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00002be000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$setstatus(r1, 0x4, 0x800) utime(&(0x7f0000c83000)='./file0\x00', &(0x7f0000a98000)={0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000c9c000-0x138)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/01/21 08:47:11 executing program 2: mmap(&(0x7f0000000000/0xe79000)=nil, 0xe79000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f00007df000)={@common='sit0\x00', @ifru_data=&(0x7f0000519000)="01002e00faffffdf82030800f308eb000000000000000000100000eb7e000423"}) connect$inet6(r0, &(0x7f0000e76000)={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000e6f000)={0xa, 0x2, 0x1000000000000, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0x8000000000000001}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x0, 0x2, 0x0}}, 0x2e) sendmsg$nl_crypto(r2, &(0x7f0000380000-0x38)={&(0x7f00009dd000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00002cf000-0x10)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3, "", []}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x81) [ 38.304283] ================================================================== [ 38.311762] BUG: KASAN: slab-out-of-bounds in ip6_xmit+0x2048/0x2090 [ 38.318260] Read of size 8 at addr ffff8801c457f6d8 by task syz-executor2/5081 [ 38.325600] [ 38.327225] CPU: 1 PID: 5081 Comm: syz-executor2 Not tainted 4.15.0-rc8+ #271 [ 38.334474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.343821] Call Trace: [ 38.346409] dump_stack+0x194/0x257 [ 38.350037] ? arch_local_irq_restore+0x53/0x53 [ 38.354700] ? show_regs_print_info+0x18/0x18 [ 38.359194] ? ip6_xmit+0x2048/0x2090 [ 38.362986] print_address_description+0x73/0x250 [ 38.367815] ? ip6_xmit+0x2048/0x2090 [ 38.371614] kasan_report+0x25b/0x340 [ 38.375408] __asan_report_load8_noabort+0x14/0x20 [ 38.380318] ip6_xmit+0x2048/0x2090 [ 38.383957] ? ip6_finish_output2+0x23a0/0x23a0 [ 38.388618] ? fl6_update_dst+0x127/0x2b0 [ 38.392750] ? check_noncircular+0x20/0x20 [ 38.396966] ? inet6_csk_route_socket+0x691/0xe80 [ 38.401799] ? lock_acquire+0x1d5/0x580 [ 38.405749] ? lock_acquire+0x1d5/0x580 [ 38.409705] ? inet6_csk_xmit+0x114/0x580 [ 38.413851] ? lock_release+0xa40/0xa40 [ 38.417852] inet6_csk_xmit+0x2fc/0x580 [ 38.421817] ? inet6_csk_update_pmtu+0x160/0x160 [ 38.426556] ? __sk_dst_check+0x1a5/0x380 [ 38.430692] ? sk_wait_data+0x610/0x610 [ 38.434694] l2tp_xmit_skb+0x1068/0x1410 [ 38.438763] ? l2tp_session_create+0xc60/0xc60 [ 38.443330] ? sock_wmalloc+0x15d/0x1d0 [ 38.447301] ? iov_iter_advance+0x13f0/0x13f0 [ 38.451788] ? pppol2tp_sendmsg+0x41b/0x670 [ 38.456100] pppol2tp_sendmsg+0x470/0x670 [ 38.460236] ? selinux_socket_sendmsg+0x36/0x40 [ 38.464902] ? pppol2tp_session_ioctl+0xa90/0xa90 [ 38.469733] sock_sendmsg+0xca/0x110 [ 38.473445] ___sys_sendmsg+0x767/0x8b0 [ 38.477414] ? copy_msghdr_from_user+0x590/0x590 [ 38.482168] ? selinux_socket_connect+0x311/0x730 [ 38.487028] ? __fget_light+0x297/0x380 [ 38.490988] ? fget_raw+0x20/0x20 [ 38.494434] ? schedule+0xf5/0x430 [ 38.497958] ? __might_sleep+0x95/0x190 [ 38.501950] ? security_socket_connect+0x89/0xb0 [ 38.506696] ? __fdget+0x18/0x20 [ 38.510060] __sys_sendmsg+0xe5/0x210 [ 38.513837] ? __sys_sendmsg+0xe5/0x210 [ 38.517795] ? SyS_shutdown+0x290/0x290 [ 38.521750] ? selinux_capable+0x40/0x40 [ 38.525826] ? SyS_futex+0x269/0x390 [ 38.529556] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 38.534581] SyS_sendmsg+0x2d/0x50 [ 38.538118] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 38.542856] RIP: 0033:0x452ee9 [ 38.546027] RSP: 002b:00007f525a151c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 38.553719] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452ee9 [ 38.560968] RDX: 0000000000000081 RSI: 000000002037ffc8 RDI: 0000000000000016 [ 38.568215] RBP: 000000000000005c R08: 0000000000000000 R09: 0000000000000000 [ 38.575464] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ef940 [ 38.582713] R13: 00000000ffffffff R14: 00007f525a1526d4 R15: 0000000000000000 [ 38.590030] [ 38.591638] Allocated by task 0: [ 38.594980] (stack is not available) [ 38.598673] [ 38.600276] Freed by task 0: [ 38.603267] (stack is not available) [ 38.606953] [ 38.608562] The buggy address belongs to the object at ffff8801c457f6c0 [ 38.608562] which belongs to the cache ip_dst_cache of size 216 [ 38.621281] The buggy address is located 24 bytes inside of [ 38.621281] 216-byte region [ffff8801c457f6c0, ffff8801c457f798) [ 38.633044] The buggy address belongs to the page: [ 38.637950] page:ffffea0007115fc0 count:1 mapcount:0 mapping:ffff8801c457f080 index:0x0 [ 38.646078] flags: 0x2fffc0000000100(slab) [ 38.650294] raw: 02fffc0000000100 ffff8801c457f080 0000000000000000 000000010000000c [ 38.658153] raw: ffff8801d6f52848 ffffea0007357960 ffff8801d6f56800 0000000000000000 [ 38.666009] page dumped because: kasan: bad access detected [ 38.671698] [ 38.673302] Memory state around the buggy address: [ 38.678208] ffff8801c457f580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.685546] ffff8801c457f600: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 38.692891] >ffff8801c457f680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.700226] ^ [ 38.706432] ffff8801c457f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.713768] ffff8801c457f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.721098] ================================================================== [ 38.728434] Disabling lock debugging due to kernel taint [ 38.733925] Kernel panic - not syncing: panic_on_warn set ... [ 38.733925] [ 38.741283] CPU: 1 PID: 5081 Comm: syz-executor2 Tainted: G B 4.15.0-rc8+ #271 [ 38.749844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.759176] Call Trace: [ 38.761750] dump_stack+0x194/0x257 [ 38.765363] ? arch_local_irq_restore+0x53/0x53 [ 38.770010] ? kasan_end_report+0x32/0x50 [ 38.774146] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 38.778883] ? vsnprintf+0x1ed/0x1900 [ 38.782663] ? ip6_xmit+0x1fd0/0x2090 [ 38.786444] panic+0x1e4/0x41c [ 38.789616] ? refcount_error_report+0x214/0x214 [ 38.794359] ? add_taint+0x1c/0x50 [ 38.797879] ? add_taint+0x1c/0x50 [ 38.801401] ? ip6_xmit+0x2048/0x2090 [ 38.805179] kasan_end_report+0x50/0x50 [ 38.809134] kasan_report+0x144/0x340 [ 38.812925] __asan_report_load8_noabort+0x14/0x20 [ 38.817829] ip6_xmit+0x2048/0x2090 [ 38.821458] ? ip6_finish_output2+0x23a0/0x23a0 [ 38.826114] ? fl6_update_dst+0x127/0x2b0 [ 38.830245] ? check_noncircular+0x20/0x20 [ 38.834456] ? inet6_csk_route_socket+0x691/0xe80 [ 38.839284] ? lock_acquire+0x1d5/0x580 [ 38.843231] ? lock_acquire+0x1d5/0x580 [ 38.847206] ? inet6_csk_xmit+0x114/0x580 [ 38.851344] ? lock_release+0xa40/0xa40 [ 38.855332] inet6_csk_xmit+0x2fc/0x580 [ 38.859288] ? inet6_csk_update_pmtu+0x160/0x160 [ 38.864027] ? __sk_dst_check+0x1a5/0x380 [ 38.868159] ? sk_wait_data+0x610/0x610 [ 38.872145] l2tp_xmit_skb+0x1068/0x1410 [ 38.876208] ? l2tp_session_create+0xc60/0xc60 [ 38.880773] ? sock_wmalloc+0x15d/0x1d0 [ 38.884732] ? iov_iter_advance+0x13f0/0x13f0 [ 38.889216] ? pppol2tp_sendmsg+0x41b/0x670 [ 38.893523] pppol2tp_sendmsg+0x470/0x670 [ 38.897657] ? selinux_socket_sendmsg+0x36/0x40 [ 38.902307] ? pppol2tp_session_ioctl+0xa90/0xa90 [ 38.907140] sock_sendmsg+0xca/0x110 [ 38.910849] ___sys_sendmsg+0x767/0x8b0 [ 38.914813] ? copy_msghdr_from_user+0x590/0x590 [ 38.919561] ? selinux_socket_connect+0x311/0x730 [ 38.924404] ? __fget_light+0x297/0x380 [ 38.928358] ? fget_raw+0x20/0x20 [ 38.931804] ? schedule+0xf5/0x430 [ 38.935323] ? __might_sleep+0x95/0x190 [ 38.939299] ? security_socket_connect+0x89/0xb0 [ 38.944041] ? __fdget+0x18/0x20 [ 38.947398] __sys_sendmsg+0xe5/0x210 [ 38.951183] ? __sys_sendmsg+0xe5/0x210 [ 38.955139] ? SyS_shutdown+0x290/0x290 [ 38.959091] ? selinux_capable+0x40/0x40 [ 38.963143] ? SyS_futex+0x269/0x390 [ 38.966861] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 38.971880] SyS_sendmsg+0x2d/0x50 [ 38.975404] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 38.980139] RIP: 0033:0x452ee9 [ 38.983316] RSP: 002b:00007f525a151c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 38.991022] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452ee9 [ 38.998270] RDX: 0000000000000081 RSI: 000000002037ffc8 RDI: 0000000000000016 [ 39.005518] RBP: 000000000000005c R08: 0000000000000000 R09: 0000000000000000 [ 39.012762] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ef940 [ 39.020012] R13: 00000000ffffffff R14: 00007f525a1526d4 R15: 0000000000000000 [ 39.027751] Dumping ftrace buffer: [ 39.031266] (ftrace buffer empty) [ 39.034949] Kernel Offset: disabled [ 39.038555] Rebooting in 86400 seconds..