[....] Starting enhanced syslogd: rsyslogd[ 16.775096] audit: type=1400 audit(1518814931.812:5): avc: denied { syslog } for pid=4008 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.634680] audit: type=1400 audit(1518814937.672:6): avc: denied { map } for pid=4149 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.223' (ECDSA) to the list of known hosts. 2018/02/16 21:02:23 fuzzer started [ 28.873605] audit: type=1400 audit(1518814943.911:7): avc: denied { map } for pid=4160 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/16 21:02:24 dialing manager at 10.128.0.26:42897 [ 32.569347] can: request_module (can-proto-0) failed. [ 32.578493] can: request_module (can-proto-0) failed. 2018/02/16 21:02:28 kcov=true, comps=true [ 33.107330] audit: type=1400 audit(1518814948.145:8): avc: denied { map } for pid=4160 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9138 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/16 21:02:30 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101800, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000-0x57)={0x0, 0x4f, "22625f3e975b306a00a01f8cf73d912eeff00fbe824bf127a342a4e8d243182783572afd2626f2e84f448b2a7ae8cb70708eedc64684986e0bacc92126151bb5ab2c8a62f1200ff7caa8d1f95946ac"}, &(0x7f0000002000-0x4)=0x57) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001000)={r1}, 0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000003000-0xa)='/dev/dsp#\x00', 0x5, 0x802) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000001000), &(0x7f0000001000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000003000)=[{r0, 0x20}, {r2, 0x1}], 0x2, 0x7fffffff) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000005000-0x3e)={r1, 0x36, "43b61b452c0b60c1e5935676ed9875461f038e1512d3635e16baa150911bfef22a838d00945b704e418f1f76f70a7203c8bb524434c7"}, &(0x7f0000004000)=0x3e) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000005000)=0x3, 0x4) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000006000)={{{@in=@multicast1, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000002000-0x4)=0xe8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000006000)={&(0x7f0000007000-0xc)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000007000-0x10)={&(0x7f0000001000-0x42c)={0x42c, 0x2d, 0x100, 0x0, 0x2, {0x1d}, [@generic="b16e16ece6672eb06547c3c5a467ddd096fd4633b9ae263c9e18af883fc9f32f5eef08838886b4a214f3717f82e61fdce9dc3322ed09befac21a3adc6af19e48c40c8aab75914c84", @nested={0x350, 0x30, [@generic="795c1f0b24c0f7cc7a4d", @generic="6b6e8ab465fb16e186ac98b84c00aaf6450565094379ad172930ca17bda16a52449502d80b59bacd77916a66595b5409b879ec2ed5fbba2817ed96986dd387fb8075d4466170ed9bf0d8cee4ff47f9ccaf33ca57df7df9ca657532d697cbaeabc6eac68e7607ac6507375f019a2f449ebb08211c413aac84a9293213f7ffe9679797a0acc041f61a70c231aa7edda16721486d5b6878c655ada72c50621363db45c48790b05465d340b045c6489a032c67c88d45ee07d98bf87eeb8fec9acd8c653ee38dfe1b0781a04d3d95043cc9920fc3f9431a28d4d9e41761a30abd6ff6188748d783d38bc051ddb325b0", @typed={0xc, 0x70, @str='I\x00'}, @generic="393f97719ab03a14b0078afd98b83e90ae137387a8143d65ddd696de73f3924689918f842b441e87b71e915e4139d85ef05e24ff21746f79a41ccc587a6b4cd3604ae5881ba725f903b888923627cdf5b144fcee1e10a5ba427bc2a9f3810ebfcea543539bc001c51b30ce623ac863fc5827e70d9b2c46d4d96e5cd33b5b2b6d", @typed={0xc, 0x71, @uid=r3}, @generic="027b31a7c401f5cb39dc686871ea7d8b9ab80bbee6f2b3a57ed938ef0b1eb0e9c1438ef2d4e6be920e9e6a914897333ca1f531560753ff3ea0eccc105788c6a36517a1827f6b05fb8fe7dbd1e52f561ecfbdfe0f7840defeba9d0d4da9d5a5d5a48310e7506e6197be7d961f35", @generic="f67a0a5baa191634392c3ae766d40fb25fc2547afbba5c88c0c11835c7159b9c85bde8c4f672c84f26b53393508947467ffaf2a9bdd9224ec384d382aba8656506dc848cf88ee7fa036cdedaa7059440681cc57d064fa923933c8066a9f70400965253fbc7c354e9c71424d7e8bc00b3e9319033ee70cd8d0cf8ff313341c768a4d83e40c8b7284513a559e3e85698ddd554672e07edf58215e17b143cc7b6a15eda4915a70bfbc27a6ca7c048eee348f00febe255b2a15f6b699fc66513ca16f0", @generic="8d042a5d4e16c087d28243b8e6ca28444d063c67d5378d79d0987fe01328484c015d0c6c1dd75437395ef6abcc77ea4f728ba4b9447f259dfdfe3a781555c9d62fea718dff870adb0e3daf34ba75669a4744e6a299770fc8e681db9053ac00e97e3783ee9783ba5b50efea75809c1f8cceb4e2be67aefe0a16231507985dae1759e682b3fe7b8af8c525db1acafaa9"]}, @nested={0x80, 0x17, [@typed={0xc, 0x25, @uid=r4}, @generic="0b42667328e9da3bb6e72f50a6b45b14011f3aa04f21912fa9a5ebfc57233055b637e148f40a984323741874ef3f6c04febdd6d90cf0c13d15c377c72678025ad75b5ca0560cbf9a8d0a824811eb13e3aee4", @typed={0xc, 0x2f, @uid=r6}, @typed={0x10, 0x2f, @u64=0x7}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x40}, 0x40010) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000002000)) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000008000-0x14)={@mcast2={0xff, 0x2, [], 0x1}, r5}, 0x14) 2018/02/16 21:02:30 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000740000)=[{&(0x7f0000001000-0x53)=""/83, 0x53}, {&(0x7f0000001000-0x88)=""/136, 0x88}, {&(0x7f0000845000-0x94)=""/148, 0x94}, {&(0x7f00005ce000)=""/172, 0xac}, {&(0x7f0000018000-0xa2)=""/162, 0xa2}, {&(0x7f0000b76000)=""/178, 0xb2}, {&(0x7f0000cde000)=""/91, 0x5b}, {&(0x7f0000713000-0xb7)=""/183, 0xb7}, {&(0x7f0000001000-0x4f)=""/79, 0x4f}], 0x9, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002000-0xb)='/dev/hwrng\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000001000-0x68)={0x200, 0xffffffffffff7fff, 0x5, {r2, r3+10000000}, 0x4, 0x6}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000002000)='net/icmp6\x00') r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x8e, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x444000, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000002000-0x400)={"9b27c06cee86df7c56a2a8e3f292036bbc8b635fe7c7145a86ffad4760e23000cfaf65a95950bf0052d1c32e5e18993f76aca170b4d1bf24dbf1c76a140c22dd364fb2bcaf9af4ed996e56e17e15cf74008cfb78947f91884b9190e2fd0e954634b3f6a8666cea570f202949d720de78d4cfb32d9f1133b8949e6364adcc3145391a2f52e6ed315be7c355e8635bddac919dea4d88468c95db275bdcbbac2e38ab474788761fb98e9dcdbdae349d51f4d9e51bddcd75d2b0731e40dbcdd00acd281f79edf5453e8bfa14dc06e50335dc77f515bb562c7551f4547c196d834c2f130825f8f932a98785a3b2c0ea805eb0c75bff4448f2eef4be9f132fa7115aed62171b4a0a6325d803fc313ff8db3f40f53b4d40da5456cba064aa8eae9445750973e8c8cdc6390d228eefd56ac917b158a5d83a1f171bbb97dba36505f3bcab0028d90f4afd90463a27a10cacca28b7bdd27d7b1b8cd74b7ae926dbf20ad1a0318fd5cde7ab12e522820bd849ce12012a40e20ec95cd5634d34ed4eed48031f99259c36a41ee42a594cdb4418b8cc64c65771755af1bcae6254a0931adcd3e90c94cc562a650b80d067d10b4142830e9190d7c6af7673ed2fdfbe45b39aeed188ce9a11057a222ee69fa7e2c37a35372bdbed69b25ea140574d489311117ca6a3c6c7e9438e5943807dc936438774e13aefeae8de053441999591b4ad15d8d39e26eb9499262c35ad0ead9da6aee51f3e34f00331ec99cbd974471dfe5c057641da261251bae025755a1ba876b4c52ce1fb5588a5beb34772932f50e9917f516f1e5d4608b5d664d4344da9ff5de184e8f0bc8b76a261d18d6530d90ed75ac3de7d3e6c01fa092eee23cd186ef5758d2c94efbc94fc0598e5cfca6cba79cfe2b08fe93c5e895d273511624b67868779cc3b9550076343c01c20b6ef513a9602b47814210f4fdf561cb9361ea9ea51d475070d61d6bced5712604ace1ad788b7c188393e3399cd830d582895659213c3a13cfb3a223932b6cd490454aef4c06e525b2dd456e3ba8804ac35acefeebd0d448e144f2fcf24346adb5a84e371bf2028817861089894d10f5644c551fe09b1b8b904b90a6cd79f54ede97a6db07c0e3eb822e6496f7894e0b57b2c2034397c6c57957c3ec70bd479f274882bc2e4d83507f44ebb4e4638ea255419d0484146ad6e62a539f7a99403e864f5bb594b439b033bc6ee9c7a64cebfa528b54e184ffe2cbe19c058c5a99298b27badb36b7f00145dbd82cd0a2827d4a43436d22b278889ca09547a45f402d876683f243187a2a54ae04e98aa7de7bd2d63ba79f154d431f32fade79a5940429428297a8b82644ad4f50de8a10fd91e39939c2dd8b3f7a496039a08fc1bb7faa715dd68b1ace83d739f5807648c02a98e1d0d7a5986c6c4d088c512911ddda4405088c3d8c9"}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000003000)={0x80000001}) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000004000-0x8)=0x3f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000005000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000002000)={0x1, 0x1, 0x4, 0x0, 0x87, 0x9, 0x80, 0xfffffffffffffff8, 0x9, 0x8, 0x3, 0x4, 0x0, 0x8, 0x1, 0x401, 0x1ff, 0x0, 0x9}) syz_open_dev$dspn(&(0x7f0000004000)='/dev/dsp#\x00', 0xfffffffffffffffc, 0x40000) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = add_key$user(&(0x7f0000006000-0x5)='user\x00', &(0x7f0000005000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001000)="3dd0d1139df52ab715887d0d5b021e9f08b71653", 0x14, 0xfffffffffffffffc) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$read(0xb, r8, &(0x7f0000005000)=""/137, 0x89) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000007000-0x70)={[{0x3, 0xfffffffffffffffd, 0xff, 0x4, 0x6, 0x5, 0x3, 0xa1c, 0x7, 0x400, 0x80, 0x7, 0x7}, {0x100000000, 0x8, 0x5, 0x0, 0x800, 0x7, 0x7, 0x80, 0x560, 0x6, 0xffffffff7fffffff, 0x0, 0x1}, {0x7, 0x80000001, 0x3ff, 0x5, 0x7, 0x81, 0x4, 0x7, 0x7fffffff, 0xff, 0xfffffffffffff2bb, 0x6, 0x40}], 0x8}) 2018/02/16 21:02:30 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000001000-0x20)={0x3f, 0x18, [0x9, 0xfffffffffffffff5, 0x1f, 0x3ff, 0x3, 0x1]}) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000000)=@pic) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @loopback}, &(0x7f0000000000)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', r1}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) uselib(&(0x7f0000001000-0x8)='./file0\x00') ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001000-0x18)={@loopback={0x0, 0x1}, 0x853, r1}) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001000)={0x7, 0x1a, 0x0, 0xc981, "d8cd5db17d2b74e56806f29a88fb1f05d570226d151f77f7f2d7b54feeddc916"}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000001000)={{0x2, 0x0, 0x2, 0x3, 0x451d4727}, 0x7, 0x8}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000003000-0x20)={0x8, 0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000002000-0x10)={r2, 0x81}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000004000-0xe2)=""/226, 0xe2) writev(r0, &(0x7f0000004000-0x10)=[{&(0x7f0000003000-0xc4)="15a031cd74ce9ef7c745830d647943f2e37a3e2deffb47b600544d222bbe0a2852b179e37368859b092b3c99712563708e6093bd2faf2eb4741b21d28dd104dd000a02cef9972bab7dadc8a7ab4cab1eae216627a1e084767c234d37f4d35181a03ac6c74dea8c7b9cbb10cc83660164e53a6c1c9a6ff811a185a12a35d7cc1ce23b4898fe8310cddb80da510a395a9da5c2aa6d76a47e0df558b1c0e42bc543823ebc6ba2442a14e37e837bac35fc2cfb23ef28364b10a27a2d888c2c5e44018e5fa8be", 0xc4}], 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000004000-0x10)=@generic, 0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000004000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000005000)={0x200, 0xcd9e5b171f3935f7, 0xa000}, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000005000)={0x0, 0x80000, r3}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000007000-0x8)={0x0, 0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000006000)={r4, r5}) 2018/02/16 21:02:30 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000b87000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000449000)={0x3, [0x9, 0x5, 0x6]}, 0xa) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000e15000)={0x0, 0xca, "d5bd76e34a85f5001689dc486853fe9ae5eb07e80be7b6461b108504932af318745efbd5bb4eec925858683bbc29e87a08fff750e0ec272dd6975c4194441a2b81cd5d70053ac545fd0b5035f672aded62497f55f0be7ab74103984cc35a8858bcc54fdc348d3720493e566c11484717c757d3ea20a5bf716eeb1ba3927d0f42b4c118abcef0e7c6dc90d5c21a5e9b54616869383844c8669a88d25d0a8d44327dd8bf654cce0ba0d0593e45ec5b9e945cbb70544777c6b297bc7aa11f444e9bdac830bf9e5a46061794"}, &(0x7f0000f98000-0x4)=0xd2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001000-0x8)={r1, 0x2}, &(0x7f000025a000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000002000-0x44)) fcntl$getflags(r0, 0x40b) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000003000-0x8)={r1, 0x8001}, &(0x7f0000000000+0x855)=0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000003000)={0x10001, 0x9, 0x20, 0x8}, 0x10) r3 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000001000-0x8c)={r2, @in6={{0xa, 0x2, 0x6, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x7}}}, 0x8c) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstatfs(r3, &(0x7f0000005000-0x8b)=""/139) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000003000)=0x90) socket$pptp(0x18, 0x1, 0x2) getrandom(&(0x7f0000005000-0x13)=""/19, 0x13, 0x2) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000006000-0x10)={0x0, &(0x7f0000001000)=[]}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffffff7) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) time(&(0x7f0000007000-0x8)) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) kexec_load(0x1, 0x3, &(0x7f0000007000)=[{&(0x7f0000007000)="69082ef70f46800828080dd8a344c2547f978a9ab14b7e9f80817e17e48ad1c3e7aae5c1cccbc1d3fc5f0f86727a391ef4956a1b8eea52186818b8605421cd8a3fc07a89a640505ed3d10cdf3ab863cc438d3967d1a2fb12fcb946", 0x5b, 0x1, 0xf67}, {&(0x7f0000008000-0x40)="ad460727c2d923fb3dcf8fd0fd176de2358ba13c599c6dfd719f218ae63c5e4d6430a6f6ec27835cb3fced5726480973b95fa30056f25af832111aa5bfefd102", 0x40, 0x3, 0x3}, {&(0x7f0000007000)="a07d381bc7c3005454367b60302873372d6b13775bdc22aa206d61ae182350377531bf1aff0bc8cf333ea88e9300f784dcc93b0d77ed79d8eadae6b52338c84a4636c10dc79bb60e3c6c60a97962d70affe6b1f6f97b72114fe3c1c4f347ec7b0d4049524c2f0f550a9b975fe26d9b6c245ef1f06a33881d4fd22a", 0x7b, 0x9, 0x80}], 0x1f0000) mkdir(&(0x7f0000007000)='./file0\x00', 0x14) 2018/02/16 21:02:30 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001000-0x8)={0x0, 0x0}, 0x84800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/4096) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000002000-0xc)={@empty, @local, 0x0}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000002000-0x18)={@dev={0xfe, 0x80, [], 0x0, 0xb}, 0x0, r2}) r3 = socket(0x5, 0x800, 0x7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000001000-0x8c)=""/140, &(0x7f0000002000)=0x8c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001000-0x4)) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000001000-0x4)=0x1f, 0x4) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000003000-0x50)={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x7, 0xdcf, 0x200000, 0x100, 0x5, 0x4080288, r2}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000001000)={0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000001000-0xb)='proc,\'eth0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000003000-0x10)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000003000)={@rand_addr=0xffffffffffffffff, @rand_addr, r2}, 0xc) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000001000-0x40)={0x7fff, 0x3, 0x6139, 0x101, 0x9, 0x4, 0xff, 0x6}, &(0x7f0000005000-0x40)={0x7, 0x3, 0x7, 0x3, 0x100, 0xffffffff, 0x5, 0x5}, &(0x7f0000005000-0x40)={0x2, 0x4bc, 0x3a, 0x7ff, 0x1f, 0x7, 0x2, 0x81}, &(0x7f0000001000)={r6, r7+30000000}, &(0x7f0000004000)={&(0x7f0000004000)={0x6}, 0x8}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000006000-0x8)='./file0\x00', &(0x7f0000006000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r8, 0x1) fadvise64(r5, 0x0, 0x8, 0x4) 2018/02/16 21:02:30 executing program 6: timerfd_create(0x7, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x12040, 0x80) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000001000)={0x0, 0x0}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000001000)=0x1, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000003000-0x2)=0x4, 0x2) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000003000)='trusted\x00', &(0x7f0000003000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001000-0x96)="e251c045c0bd52cd98b320f47426079a5c39e30226e7f1de53e1ec6d5cd9858370e9282a4a734f7f35c246ac8ce6c448683c53cfd9c8f2a924f239d03ca3ca180324c6b8962492b07b87d6a244d109d016d33f301ae97b5358829e220ba3a882e11102b0cf13abcf612b7a44ca4759be5eae8ec6078dce8c99590138f5c1697ea42646d9c71e022c549a66f3e87efe24a8a0598bec5b", 0x96, 0xffffffffffffffff) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$update(0x2, r3, &(0x7f0000004000-0x33)="fc6df4ed19faf4061ed89534c49e63ded2445f53224d5046a77c515ad1f7b3e95f68e720217f4d3381b8ae01b2385cef01ad47", 0x33) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$unix(r1, &(0x7f0000004000)=@abs, &(0x7f0000005000-0x4)=0x8, 0x800) write(r1, &(0x7f0000001000)="e1892fe7d54c222fe59d296e1cc5ab32f7f1ef04f2161c09f9ab33892cea76fdeb7b3151649b593ef79c5ec30c11744c22fbc1ac12ab8531a126e51c42951782a0bd026f6fbca68d2d3c44a5a1f98a424ce3bcdafa9fc0c6f0fbffb1be3b5a578cb7b1e345bab5e82c28671479ef6b12a153cdc5cda3c2f747ccaa11378d271425d4e98533818969824e195d881d2d42fafcf3c0d8cf2f4b7d860322eb1d751181a9bf5fa8ce2fb3c844cfdcdf5d53478f96f51bca", 0xb5) ioctl$KDSETLED(r1, 0x4b32, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000006000-0x10)={0x7, &(0x7f0000005000)=[{}, {}, {}, {}, {}, {}, {}]}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstatfs(r2, &(0x7f0000006000)=""/117) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000008000-0x8)={0x1, 0x10001}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000007000-0x4)=0x101, 0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000009000-0x108)={0x0, @in={{0x2, 0x2, @empty}}, [0xeda, 0x7e, 0xaf7, 0x7, 0x10ba, 0x800, 0x8, 0x401, 0x5, 0x9d, 0x4, 0x6671, 0x9, 0xffffffffffffff23, 0x7ff]}, &(0x7f0000008000-0x4)=0x108) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000007000)={r4, 0x38, "046844d0150f35dda5f0598012d3c4e669fcc1681bba29ce3aee413bca17ce5210235606550d15d8adf6309377aa80706f2383f1a6166278"}, &(0x7f0000003000)=0x40) 2018/02/16 21:02:30 executing program 2: r0 = getgid() setgid(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x139d9d2507ca3b6, &(0x7f00001a6000)="a89a3103a389a3b823c5ff3a90d8d0f64c7f734fb381cfcf028e7ef16baaa0a8304a9b75b56fa59b181716a7dc83d7b2c6fdf90a6102565b560fc924a398d2a7e25064484708d130c6eb6af2b1055bf90a2f8b53ff19cf91efde1d940a73e138081968c55e850f310f9e4c8607f88486651e18e29af669ae05f3a313a32f962aa1de3d66ad5f08e08d860da2d7506dea09da3a3e1cd5b84f949f5b8b683ca5de45c6b8a2054fe5d63bed931b4046", 0xae) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$llc(r1, &(0x7f0000002000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002000-0x4)=0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$unix(r1, &(0x7f0000002000)=@file={0x0, ""/66}, &(0x7f0000001000)=0x44) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000003000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0xd}) truncate(&(0x7f0000003000)='./file0\x00', 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000003000-0x8)) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000004000)={'vcan0\x00', 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r1, &(0x7f0000002000)={&(0x7f0000003000-0x10)={0x1d, r2}, 0x10, &(0x7f0000005000-0x10)={&(0x7f0000004000+0x93f)={0x0, 0x124, 0x58, {}, {0x77359400}, {0x0, 0x8, 0x1, 0xffffffffffffff47}, 0x1, @canfd={{0x4, 0xfff, 0x3f, 0x1}, 0x3e, 0x2, 0x0, 0x0, "0d9920460b46529b2d6f88bd0dc2e4f52bc5662089aa4c673ea1bbfcfac7cee2c50122779e0647de840665e821f8e6c7e2dd750f76a54c30611fcdce7ab8efb1"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000006000-0x4c)={0x200, 0x3f4, 0x8de878e}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000006000)={0x0, r1, 0x6, 0x1}, 0x14) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000007000)={0x0, 0x1, 0x40, 0x2, 0x400000000000, 0xfffffffffffffffe, 0x20, 0x75d, {0x0, @in6={{0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0xcea7}}, 0x2, 0x3, 0x3, 0xc2b, 0x800}}, &(0x7f0000007000)=0xb8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002000)={r3, @in={{0x2, 0x0, @multicast1=0xe0000001}}}, 0x8c) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003000)={0x4, &(0x7f0000009000-0x20)=[{0x7fffffff, 0x1f, 0x567, 0x3}, {0x3, 0x0, 0xffffffffffffffc1, 0x7fffffff}, {0x800, 0x800, 0xb4, 0x701}, {0x449, 0x80000001, 0x10000, 0x7}]}, 0x10) 2018/02/16 21:02:30 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001000-0x12)='/dev/snd/pcmC#D#p\x00', 0xda, 0x8401) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000002000-0x874)="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", 0x1000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x2, 0x6, 0x5b2231be]}, 0xa) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000003000-0x10)={0x0, 0x97, &(0x7f0000003000-0x97)="ac034524988a05e7630adf0d77afde1100cc48ecc421cd63cfd1582332b0fcbdc347ef054e293f9ccfe559ca047a6dbd103d3ab3cbb0d251c03eea796e37262b00911f014a4c1c6b147ba2c9b5257e774c6d442a7cc0334f4a59bd55b1cf445299e1339d50d679a69c86c6f739a8ba297b64de6a04d92ea9cbea1b4e098d58b2179ddec15fdd79ef4530a7b8a06a4e386623fc207819cb"}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000001000-0x4)=0x7fff, &(0x7f0000000000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000003000)={0x3, &(0x7f0000003000)=[{}, {}, {}]}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000004000)='/dev/snd/controlC#\x00', 0x10001, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000004000-0x4)=0x6c2, 0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000003000-0x8)=0x1) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000006000-0x8)=0x5) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x3, 0xffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000004000-0x2b)={0x0, 0x23, "0cd862516610f6301e23dd7f634fe7c4d88c910dd4b4c23bab43c9544d5ab99d403335"}, &(0x7f0000006000-0x4)=0x2b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001000-0xa0)={r2, @in6={{0xa, 0x3, 0xffff, @loopback={0x0, 0x1}, 0x8bf2}}, 0x1, 0x80000001, 0x1, 0xf8, 0x1}, 0xa0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000007000-0xc)='/dev/autofs\x00', 0x10000, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000007000)={0x0}, &(0x7f0000000000)=0xc) fcntl$setownex(r3, 0xf, &(0x7f0000002000)={0x2, r4}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$llc(r0, &(0x7f0000009000-0x10)="e9356035ad240df7c9675b5f5b9864da", 0x10, 0x4000051, &(0x7f0000008000)={0x1a, 0x7, 0x2, 0x0, 0x2, 0x9, @random="c66ff7a42a8f"}, 0x10) [ 35.229377] audit: type=1400 audit(1518814950.267:9): avc: denied { map } for pid=4160 comm="syz-fuzzer" path="/root/syzkaller-shm913753754" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 35.272825] audit: type=1400 audit(1518814950.310:10): avc: denied { sys_admin } for pid=4204 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.295729] IPVS: ftp: loaded support on port[0] = 21 [ 35.321121] audit: type=1400 audit(1518814950.358:11): avc: denied { net_admin } for pid=4207 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.328763] IPVS: ftp: loaded support on port[0] = 21 [ 35.425977] IPVS: ftp: loaded support on port[0] = 21 [ 35.473286] IPVS: ftp: loaded support on port[0] = 21 [ 35.549265] IPVS: ftp: loaded support on port[0] = 21 [ 35.638404] ip (4260) used greatest stack depth: 16256 bytes left [ 35.638664] IPVS: ftp: loaded support on port[0] = 21 [ 35.746926] IPVS: ftp: loaded support on port[0] = 21 [ 35.866890] IPVS: ftp: loaded support on port[0] = 21 [ 36.626944] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 36.733806] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 36.764950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 36.911195] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.021263] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.121672] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.237098] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.433764] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 39.202523] audit: type=1400 audit(1518814954.240:12): avc: denied { sys_chroot } for pid=4207 comm="syz-executor1" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 21:02:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) fallocate(r0, 0x1, 0x0, 0x9) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r2) r3 = memfd_create(&(0x7f0000a98000)='y#\x00W', 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000c35000)=0x1) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f00002a8000)=@known='system.posix_acl_default\x00') write(r2, &(0x7f000014d000), 0x0) close(r1) inotify_init() [ 39.309190] audit: type=1400 audit(1518814954.343:13): avc: denied { dac_read_search } for pid=4207 comm="syz-executor1" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 21:02:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000ee7000-0x470)=@mangle={'mangle\x00', 0x1f, 0x6, 0x410, 0x180, 0x98, 0x180, 0x180, 0x180, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, &(0x7f00009ca000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x3}}}, {{@ip={@local={0xac, 0x14, 0x0, 0xaa}, @broadcast=0xffffffff, 0xffffffff, 0xffffff00, @generic="a6464323d3ac842abad6ae7ca37232d9", @generic="a1a3c37a5de6730debb1be85c4bbd302", {}, {}, 0xec, 0x1, 0x40}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xd8f, 0x40}}}, {{@ip={@dev={0xac, 0x14, 0x0, 0xb}, @rand_addr=0x7693, 0xffffff00, 0xff, @syzn={0x73, 0x79, 0x7a, 0x0}, @generic="661cc9f2442e306e1c8d4444947f3a90", {0xff}, {0xff}, 0x67, 0x1, 0x4}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x1, 0x400}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x6, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xa0, 0x0, {}, []}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0x13}, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x470) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006c9000-0xf)='/dev/sequencer\x00', 0x1, 0x0) writev(r1, &(0x7f00006cd000-0x50)=[{&(0x7f000083a000)="d2955f47bfdc81eb50301399855b9d74d78e4d62d30c77a61f30efc41c6e59a463cdb173aaa232ee793698e055523440cf78d323a739eb8652a086eb39aea5d4734898d974b12cf7ed521d82253500d59341b4b200d735c6", 0x58}], 0x1) write$evdev(r1, &(0x7f0000885000-0x90)=[{{0x0, 0x2710}, 0x8, 0x400, 0xffff}, {{}, 0x100000001, 0x5, 0x8}, {{0x0, 0x2710}, 0xeaac, 0xfff, 0xa58}, {{0x77359400}, 0x2, 0x7, 0x3d4cd074}, {{}, 0x0, 0x1, 0x401}, {{0x0, 0x2710}, 0x80, 0x1ff, 0x10001}], 0x90) 2018/02/16 21:02:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000bbe000-0x17d)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@mpls_uc={0x8847, {[], @ipv6={0x0, 0x6, "e1a273", 0x14, 0x0, 0x0, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}}}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f000071f000-0x12)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffeff, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x8d, &(0x7f00003c1000)=""/167, &(0x7f00002f6000)=0xa7) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00009d6000-0x7)) connect$l2tp(r0, &(0x7f000003b000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @rand_addr=0x7ff}, 0x1, 0x1, 0x4, 0x4}}, 0x2e) [ 39.617737] audit: type=1400 audit(1518814954.655:14): avc: denied { setgid } for pid=5255 comm="syz-executor2" capability=6 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 21:02:34 executing program 7: prctl$setmm(0x23, 0x20004, &(0x7f0000c66000/0x4000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000e2b000-0xb)='/dev/hwrng\x00', 0x480, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000517000-0x4)) 2018/02/16 21:02:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000002000-0x18)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f000047e000)='/dev/autofs\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00005e0000-0x18)={0x0, 0x1, 0x0, 0x100000000, 0x4d}, &(0x7f0000c1d000)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00008e4000-0x18)={r1, 0x6, 0x30, 0x6, 0x2}, &(0x7f0000bd2000-0x4)=0x18) r2 = syz_open_procfs(0x0, &(0x7f0000ee2000-0xa)='setgroups\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000cfe000), &(0x7f00003a0000)=0x4) 2018/02/16 21:02:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$pokeuser(0x6, r0, 0x7f, 0x8) r1 = socket(0x10, 0x200000000803, 0x0) write(r1, &(0x7f00007c4000)="2600000022004701050007008980c5ff0200000800000000c0e9ff094a51f10101c71f3500b0", 0x26) recvmsg$netrom(r1, &(0x7f000088e000-0x38)={&(0x7f000023c000)=@ax25={0x3, {"8434321a3329b5"}}, 0x10, &(0x7f0000e12000-0x30)=[], 0x0, &(0x7f000071f000)=[]}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readahead(r1, 0x6, 0x3f) syz_emit_ethernet(0x32, &(0x7f00006f2000-0x74)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14}, @broadcast=0xffffffff, {[]}}, @igmp={0xffffffbe, 0x0, 0x0, @multicast1=0xe0000001, "0000000233dcfe70"}}}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/16 21:02:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r2, &(0x7f0000bce000)=[], 0xffffff36) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000734000-0x108)={0xbd5e, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x100}}, {{0xa, 0x0, 0x9, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0xf2}}}, 0x108) 2018/02/16 21:02:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f000057b000-0xb)='/dev/vcsa#\x00', 0x80000001, 0x1c5001) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$evdev(r0, &(0x7f0000ccf000-0xf0)=[{}, {}], 0x30) ioctl(r0, 0x227c, &(0x7f00005f8000)) 2018/02/16 21:02:34 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00009d5000)='/dev/vcs#\x00', 0x803, 0x40) ioctl$TIOCSTI(r0, 0x5412, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000e92000)="1e09cc74108837fc3aa85b83d8c0c5389398120dea356fd2ec310aa3828532ceec8423325fdd13ad19af3dd91d53594af7523ef20b92c772ffa9f16b3cec65c55cfc97a5a57fa59cb16d818f79a62e4b0314e770eed984bdc0b68dc3ef3f693b20ecaf421be6f5a7f2e51196615cf9f93bd8ffd29ec68b491d5059be675dfc53c44d2f519637acf82568", 0x8a) r1 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 2018/02/16 21:02:34 executing program 6: r0 = dup(0xffffffffffffff9c) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000763000-0x18)={0x1, 0x0, 0x5, 0x8001, 0x9}) r1 = syz_open_dev$binder(&(0x7f00001ab000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000095f000)={0x8, 0x5, &(0x7f00007b8000)=@framed={{0x18}, [@ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}], {0x95}}, &(0x7f0000434000)='GPL\x00', 0x20, 0xbc, &(0x7f000008f000-0xbc)=""/188}, 0x48) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r3 = perf_event_open(&(0x7f000023e000)={0x0, 0x78, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000d22000)}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000053c000/0x4000)=nil, 0x4000, 0x3000004, 0x1010, r1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = dup2(r1, r3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000f14000-0x18)) mmap$binder(&(0x7f0000661000/0x1000)=nil, 0x1000, 0x0, 0x21013, r1, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000154000-0x8)=0x4000) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000004000-0xb8)=""/184) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r4, 0x89e3, &(0x7f00005a6000)=0xbc) fcntl$setsig(r3, 0xa, 0x11) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000394000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x1, @broadcast=0xffffffff}}) lseek(r2, 0x7, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000001000)={{0x9, 0x7, 0x1ff, 0x200, "8fc71808d2e7446f4e13311acabe51289a052d44a080f455ef2e65ceead0e51d1c98530a674691de41058e7a", 0x101}, 0x9, [0x7, 0x80000000000000, 0x200, 0xfc00, 0x3, 0x100000001, 0x4, 0xb0, 0x6, 0x6, 0xe52e, 0x10001, 0x7, 0x100000000, 0x4, 0x2, 0x9, 0xd668, 0x7fffffff, 0x0, 0xca6, 0x101, 0x0, 0x8, 0x3b, 0x400, 0x0, 0x7000000, 0x7, 0xe9bc, 0x2, 0x6, 0x88, 0x400, 0x7, 0xfffffffffffffff8, 0x0, 0x100000001, 0x7, 0x4, 0x8, 0x7, 0x0, 0x8, 0x1, 0x8, 0x1, 0x3, 0x6, 0x9, 0xb692, 0x5, 0x4, 0xfffffffffffffffb, 0x7, 0x9, 0x4, 0x3, 0x5, 0x7, 0x5, 0x0, 0xffffffffffffffc0, 0x2b, 0x20, 0x9, 0x81, 0x39, 0xbd, 0x8, 0x80, 0x2, 0xb20f, 0x100000000, 0x54c71542, 0x0, 0x4, 0xfffffffffffffff9, 0x3f, 0x742, 0x3, 0x6, 0x7, 0x0, 0x7, 0x1, 0x1, 0xfffffffffffff460, 0x6, 0x7fffffff, 0x6, 0x2, 0xffff, 0x8, 0x100000001, 0x401, 0x8001000000000, 0x1, 0x4, 0x10001, 0x32, 0x3ff, 0x7, 0xffffffff, 0x6, 0x8ab, 0x7, 0xffffffffffffff3f, 0x1, 0x3, 0x8, 0x7ff, 0x10000, 0x0, 0x400, 0x400, 0x7, 0x2, 0x41da, 0xdbd, 0x8, 0x5, 0x6, 0x4, 0x5, 0x1, 0x751, 0xffffffffffffff80], {0x77359400}}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_getres(0x7, &(0x7f0000004000)) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00009fa000-0xb), &(0x7f00005b0000-0x4)=0xb) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000344000)=0x81, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000aa7000-0x20)={0x9, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000e6c000)={r5, 0x4}) sendmsg$nl_generic(r4, &(0x7f0000110000-0x38)={&(0x7f00005d7000-0xc)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00009d7000-0x10)={&(0x7f0000943000)={0x18c, 0x26, 0x34, 0x7, 0x2, {0x10}, [@generic="f62028441566482aa12366aecf8b7c80c1e1c8cdf7ac1a8996beb6e9a956df9daa7be294f968a05012a122261613fab8f8aee0f109c62991168ae91bdccad0a80c4cfbd5f0dae72507f5e2eb09efe9b49a25a098db4560e0bc57a6eb263410ab42f9e701d339ee69bdd590c81ed115dd2d8aaa3c0b993ea2afa872db6006468bd39d4048a81442e7e0594b8ee968d5d2932c29a41f477caa98f69c765124f2b5d07032be1e3128bc7f143982d1ff6a07dc31cd4b3e08", @generic="86f8880fbd56e662cb8c2374f885c5e0bdc58af65de506db9580bdb2dd7d76dacce973621f212ef54e6c1df1539a32b7fda25a2ffa4e79a40c3cab47fc31937d2548cf478797601295a3e1d2a11d639bf2a0cc7ab0b0f4655aa08cbd0acf08b8d98121ea09ef02db2bd1311deb2bc9977e2255480529428d7dd52267d3cd137c267d085d1d731d4558a9564eb7c464c6affc132b227b8bea2c0308b6fefd6efeb4e96927bbe4f92307626258930d8f2d04c11581b0fb002a64fe37e615779d"]}, 0x18c}, 0x1, 0x0, 0x0, 0x90}, 0x8c0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000f80000-0xbc)={0x4, 0x0, 'client0\x00', 0x5, "e8a0abe48ec00d53", "173689fe34be9f7896ce9fd9a00a1b65723b645b8023214b4ad6744d69295226", 0x0, 0x7}) 2018/02/16 21:02:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000eac000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000022000-0x10)={0x2, &(0x7f0000daa000+0x5eb)=[{0x28, 0x0, 0x0, 0xfffffffffffff014}, {0x6, 0x20000000000000}]}, 0x10) write(r1, &(0x7f0000384000), 0x0) [ 39.701086] audit: type=1400 audit(1518814954.738:15): avc: denied { dac_override } for pid=5267 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 39.763870] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) [ 39.778500] audit: type=1400 audit(1518814954.816:16): avc: denied { prog_load } for pid=5277 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/16 21:02:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000ce8000-0xd)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6e000-0x30)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000009000-0xc9)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000ea000)={0x8, 0x0, &(0x7f0000007000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000011000)}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000621000)='/dev/vcs\x00', 0x103000, 0x0) syncfs(r0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000918000)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000237000-0x8)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000957000-0x8)={r3, 0x4}) 2018/02/16 21:02:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00004d3000)={0x0, []}, &(0x7f00009ad000)=0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000dd6000/0x18000)=nil, &(0x7f0000a7f000-0x18)=[@textreal={0x8, &(0x7f00008ad000)="f081950e480200339f7d0066f08221e4d07900660f7fc7f30f01c90f090fd21066b9480a000066b80000000066ba000000800f300fb35e3a", 0x38}], 0x1, 0x68, &(0x7f0000efa000-0x20)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 39.801241] audit: type=1400 audit(1518814954.816:17): avc: denied { create } for pid=5277 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 39.825169] audit: type=1400 audit(1518814954.839:18): avc: denied { map } for pid=5277 comm="syz-executor6" path="/dev/binder0" dev="devtmpfs" ino=1092 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 39.830010] binder_alloc: binder_alloc_mmap_handler: 5277 20661000-20662000 already mapped failed -16 [ 39.891734] binder: BINDER_SET_CONTEXT_MGR already set [ 39.904536] binder: 5295:5302 ioctl 40046207 0 returned -16 [ 39.908322] binder: 5277:5285 ioctl 80dc5521 20003f48 returned -22 2018/02/16 21:02:35 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x69032, 0xffffffffffffffff, 0xc700000000000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00002de000)='/dev/autofs\x00', 0x101100, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000ff6000-0x7)=@random={'btrfs.', '\x00'}) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000ff8000-0x8)='./file0\x00', 0x8) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$netrom(r1, &(0x7f0000ff7000)=@ax25, &(0x7f0000639000)=0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000ff6000)=[{0x3, 0x5}, {0xa, 0x3}, {0x0, 0x9}], 0x3) rt_sigpending(&(0x7f0000a24000-0x8), 0xfffffea5) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000ff5000+0xb46)='/selinux/enforce\x00', 0x20000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000ba1000-0x4)=0x7fffffff, 0x4) 2018/02/16 21:02:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000e19000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000c57000-0x9)='children\x00') exit(0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000377000-0x9)='/dev/dsp\x00', 0x80, 0x0) writev(r1, &(0x7f0000f49000)=[{&(0x7f000062f000-0x3d)="a5", 0x1}], 0x1) 2018/02/16 21:02:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000d73000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x200004, &(0x7f000002c000)) mknod(&(0x7f0000fa0000)='./file0/file0\x00', 0x0, 0x0) statfs(&(0x7f00008ee000-0xe)='./file0/file0\x00', &(0x7f0000ef3000)=""/198) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000f9f000)='/dev/rfkill\x00', 0x2200, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000e5a000-0x20)={@generic="2e9250f1c46bbe567b45875e786aa83b", @ifru_flags=0xc00}) 2018/02/16 21:02:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000068f000)='/selinux/enforce\x00', 0x81, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000f5000)={0xfe00000000000000, 0xd79, 0x8, 0x3f, 0x4, 0x3, 0x8, 0x5, 0x4, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000023000)={0x14, 0x1e, 0xafb, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, []}, 0x14}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000001b000-0x50)={0x0, @tick=0x100000001, 0x401, {0x5, 0x7fff}, 0x8f1, 0x3, 0x7}) 2018/02/16 21:02:35 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000001000-0x8)={0x0}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000130000)={0x80000001, 0x2, 0xc6b}) mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xef) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f000000a000-0x4)=0x6, 0x4) read(r1, &(0x7f000000a000-0xbb)=""/187, 0x329) fsync(r1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f000000c000)) sendto$inet6(r1, &(0x7f0000002000-0x2), 0x21f, 0x0, &(0x7f0000003000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/16 21:02:35 executing program 6: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) munmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000b18000)=0x43e, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000001000-0x80)=""/128) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000006000-0x1d)}], 0x1, 0x0) 2018/02/16 21:02:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000cca000)={0x10005, 0x1, 0x0, 0x2000, &(0x7f00007cd000/0x2000)=nil}) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000525000)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fstatfs(r1, &(0x7f0000e43000)=""/232) 2018/02/16 21:02:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000c4c000)=0x8, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000a4d000)={@common="730100ff006c6cff7f00", @ifru_flags}) r1 = syz_open_dev$vcsa(&(0x7f0000d84000-0xb)='/dev/vcsa#\x00', 0x78, 0x20000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000af6000-0x10)={0x6, &(0x7f0000133000-0x30)=[{0x4, 0x3, 0x3ff}, {0x3, 0x2cae, 0xffffffff, 0x8000}, {0x80000001, 0x1000, 0x0, 0x9}, {0x1, 0x4, 0x3, 0x100}, {0x4, 0xffffffffffffff56, 0x9, 0xfff}, {0x8, 0x3, 0x22, 0x7ff}]}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000665000-0x8)={0x0, 0x9}, &(0x7f0000c12000)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000a83000-0x4)=r2, 0x4) socketpair$packet(0x11, 0x2, 0x300, &(0x7f000019e000-0x8)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00001d8000)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000f11000)={0x0, 0x3, 0x0, 0x7, r3}) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f000066a000-0x1000)="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", 0x1000) [ 40.388989] kauditd_printk_skb: 1 callbacks suppressed [ 40.388996] audit: type=1400 audit(1518814955.426:20): avc: denied { net_raw } for pid=5310 comm="syz-executor7" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 40.418552] audit: type=1400 audit(1518814955.432:21): avc: denied { create } for pid=5308 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 40.450843] audit: type=1400 audit(1518814955.484:22): avc: denied { write } for pid=5308 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/16 21:02:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000083c000)={&(0x7f00002cb000)=@l2={0x1f}, 0xe, &(0x7f0000ae1000)=[{&(0x7f0000d4c000)="f8cea972bf474a9df6af73509e349f0e0225ce0c3ae7a63039d0304d41d0", 0x1e}], 0x1, &(0x7f0000959000-0x2428)=[], 0x17c}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000004000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000002000-0x30)=[{r1}], 0x1, &(0x7f0000001000-0x10), &(0x7f0000000000), 0x8) write$sndseq(0xffffffffffffffff, &(0x7f0000006000)=[], 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da12}) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000bb7000-0x4)=@int=0xc4, 0x4) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00005b8000)=""/25) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000a44000-0x5c)={0x800, 0x2, {0x1, 0x2, 0x0, 0x3, 0xfffffffffffff73a}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000e6b000-0x18)={0x9, 0x9, 0x236, 0xffff, 0x8}) r2 = msgget$private(0x0, 0x6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00009ea000-0x8)={0x0, 0xd4}, &(0x7f00001db000)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f000036b000-0x14)={r3, 0x2, 0x1, 0x180000, 0x4}, &(0x7f0000121000)=0x14) ioctl(r0, 0x2285, &(0x7f00005ce000-0x1)='S') msgrcv(r2, &(0x7f000064c000)={0x0, ""/63}, 0x47, 0x3, 0x1000) 2018/02/16 21:02:35 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000001000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=""/113, &(0x7f0000002000-0x4)=0x71) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000002000)=[{&(0x7f0000002000)=""/67, 0x43}, {&(0x7f0000003000-0x1000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000-0xdc)=""/220, 0xdc}], 0x4, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x13, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000002000)={r3}) fsetxattr(r0, &(0x7f0000001000-0xc)=@known='trusted.syz\x00', &(0x7f00002f7000-0x1)='\x00', 0x1, 0x0) 2018/02/16 21:02:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000046d000-0xa)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000811000)={0x0, 0x8, 0x5037, 0x6, 0x5, 0x362, 0xfffffffffffffcdd, 0x800, 0x4, 0x10001, 0x1, 0x6}) getpeername(r0, &(0x7f0000123000)=@in={0x0, 0xffffffffffffffff, @loopback}, &(0x7f0000d96000)=0x10) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e8f000)={0x1, &(0x7f000026e000-0x8)=[{0x6}]}, 0x10) syz_emit_ethernet(0x56, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@x25={0x805, {0xfffffffffffffffe, 0x3, 0xf1, "3a3bb3227039357195a3db23512e5fcb6d9ae1b0bd6fdbfb5878560e55df6bbd3543bd109b007bd4a0ed33cb3599bae10b6273aa48b2edbff1c054a16e0583944387aa4330"}}}}, 0x0) [ 40.474680] audit: type=1400 audit(1518814955.488:23): avc: denied { map } for pid=5314 comm="syz-executor3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14639 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 2018/02/16 21:02:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00008c3000-0xb)='/dev/vcsa#\x00', 0x43bae374, 0x4000) write$tun(r0, &(0x7f0000c62000-0x185)=@pi={0x0, 0x9200, @ipv6={0x0, 0x6, "c7ed16", 0x78, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {"442e490b9e3d908a67d9148a71f25e7f29237abf658c46fdf7558281a6cb96387a098297d0f6eb64d9b12d56cb1443613575e10118e7cfecf87f08fe51dd53cc645cd960459f099a25c6ccd4b9c728f3c6ab7ae672f33d29e0c10833fb55565eff0725f2"}}}}}, 0xa4) 2018/02/16 21:02:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000a18000-0xb)='/dev/mixer\x00', 0x402842, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000024e000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f7000)={0x1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x2000000000000003, r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000532000)=0x19) ppoll(&(0x7f0000183000-0x18)=[{r2}], 0x1, &(0x7f000053d000-0x10), &(0x7f0000f49000-0x8)={0x40}, 0x8) 2018/02/16 21:02:35 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') pipe(&(0x7f00008e3000)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000000)='\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f000000b000-0x8)={0x3, 0x7f}) mbind(&(0x7f0000634000/0x1000)=nil, 0x1000, 0xc002, &(0x7f0000886000-0x8), 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f000080d000)=@l2, &(0x7f0000001000-0x2)=0xe, 0x800) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f000008b000)=0x1ff, 0x4) 2018/02/16 21:02:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000091000-0xd1)=""/209, 0xd1) r0 = socket$inet(0x2, 0x200000000000003, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000158000-0x280)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000162000-0x30), {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @common='gretap0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000736000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000e96000)={0xfffffffffffffffe, 0x800000000000}, 0x2) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0xa}}, 0x10, &(0x7f00000b8000-0xa0)=[{&(0x7f0000040000-0x2c)="b08947c758225200", 0x8}], 0x1, &(0x7f000023d000-0x3d0)=[]}, 0x0) 2018/02/16 21:02:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x7, 0x3, 0x5, &(0x7f00005ee000-0x8)={0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b33000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x5) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000fb7000-0x28)={0x1a9, 0x0, [{0xc001103d, 0x0, 0x449}, {0x632, 0x0, 0x1f8}]}) 2018/02/16 21:02:35 executing program 6: prctl$getreaper(0x4, &(0x7f0000356000-0x8)) 2018/02/16 21:02:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000252000-0x8)) r0 = socket(0x1e, 0x2, 0x0) ppoll(&(0x7f0000ac2000-0x18)=[{r0}], 0x1, &(0x7f0000579000)={0x77359400}, &(0x7f0000abf000), 0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000304000), 0x4) [ 40.594483] audit: type=1400 audit(1518814955.630:24): avc: denied { ipc_owner } for pid=5328 comm="syz-executor4" capability=15 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 40.608216] QAT: Invalid ioctl [ 40.662034] QAT: Invalid ioctl 2018/02/16 21:02:35 executing program 3: capset(&(0x7f00000f5000)={0x19980330}, &(0x7f000030d000)) r0 = syz_open_procfs(0x0, &(0x7f0000001000-0x7)='ns/ipc\x00') r1 = semget(0x3, 0x3, 0x400) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000000)=""/189) setns(r0, 0x0) 2018/02/16 21:02:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000079c000-0xc)={0x0}, &(0x7f00000e2000)=0xc) r1 = syz_open_procfs(r0, &(0x7f00003df000-0xb)='clear_refs\x00') getpeername$ipx(r1, &(0x7f000048d000-0x10), &(0x7f00000a8000)=0x10) r2 = syz_open_procfs(0x0, &(0x7f0000d2d000-0x11)='net/fib_triestat\x00') sendfile(r1, r2, &(0x7f0000cd3000-0x8), 0xff) sendfile(r2, r2, &(0x7f0000bac000-0x8)=0xffffffffffffffff, 0xb7) 2018/02/16 21:02:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000530000)='/dev/mixer\x00', 0x10080, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f000020f000-0x28)={0x9953, 0x5}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000297000-0x40)={0x3e90, 0x1, 0x4fa, 0x99, "11225e5eecfb55443e65b05f8aa46cd8a209dd82faeddcb0a8410f684f9d94e06054e7b95a5a08e9857e1f08", 0xfffffffffffffffe}) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000609000)) r2 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000cb5000)={{{@in6=@mcast1, @in6=@loopback, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000eb8000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00004d0000)={{{@in=@empty, @in6=@remote, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000fab000-0x4)=0xe8) setresuid(r2, r3, r4) 2018/02/16 21:02:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000ae3000-0x2)='&\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000974000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000230000)) 2018/02/16 21:02:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000791000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000da9000)='/dev/snd/midiC#D#\x00', 0x0, 0x545402) getsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000da9000), &(0x7f0000259000)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000c7c000-0x28)={0x1, 0x0, [{0x17b}]}) 2018/02/16 21:02:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x20000000, &(0x7f0000536000)="364cfca5e55153522ac40dff95897f084689685c7a6c87614de431adb4a8d818506e0dd3dcd11332278dfbe18985ba89f8f97c2ed5cdbed41cad19c6caa5bf0c0afd65dab0ab7cbb39a76d9cd5c6d104700401bbbab07eba4d2159473869a275b3d9409a844993f2b2595ebc13113287e965722e144493e1e60e5639ffebc1de14bc45746666e790", &(0x7f0000caf000), &(0x7f0000c14000-0x4), &(0x7f00003fd000-0xa5)="0cb83aeda7680d721a51878e3c04a6d8de8728dc5dc93b7cbf168d74be8cbfc8c504b0a7affe6ac62a74a415e9e74ed7ee7d0867036ba9fdf6f8c69026fdc211a0ac19e1a6cc1a25cefadecc36c3c33836fd6b654c99f6dcc0747beb50372a55c24c70e7a8da329bda98f23877dd731c390a9eebc780ced4d513ee984b21091cd928a4e2e28f4fcd416979d2c4db55a7bcee725b0c830e902c35a96476f7a0a8a24e6589bf") r0 = socket$inet6(0xa, 0x80003, 0xb6) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000bbe000)=@dstopts={0x8328438aae79970f, 0x0, [], [@generic={0x5, 0x0, "6b2ea768f06ba0fe933950968123202da78f7e2fb0b43c5982eb8fbac733f994b30b26381b035c48f661f7126085544678c394a1a5e224"}, @hao={0xc9, 0x0, @empty}, @padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x0, @loopback={0x0, 0x1}}, @enc_lim={0x4, 0x1, 0x1ff}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x0, {0x101, 0x0, 0x4, 0x3, [0xf8b, 0x87bb, 0x4, 0x6, 0x4, 0x7]}}, @padn={0x1, 0x0, [0x0]}]}, 0x60) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000873000-0x4)='bic\x00', 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000037d000-0x1100)=@dstopts={0x89, 0x21f, [], [@enc_lim={0x4, 0x1, 0xdb3}, @hao={0xc9, 0x10, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1={0x0, 0x1}, @generic={0x9, 0x83, "e7dbea8a1e847e7c4eb8993f97e5b3d1777af9a2b12bf47bbcc148cf3cae1945109bfda4b2625dcd15b684704b52346e061ef3e5b9af424c000073e127231e07bf07d22bd40f1de826d22e8f1ba9fe1ab2d761f2265a4f663a24155fc64b0f1e34987103cdb8525df6a78edf695bc2d8f965c89882b1294f53895029e023143e72eea2"}, @pad1={0x0, 0x1}, @generic={0x0, 0x1000, "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"}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x48, {0x6, 0x10, 0xffffffff00000000, 0x80000000, [0x8, 0x1f, 0x1, 0xa0, 0x7, 0x10000, 0x7, 0x2]}}]}, 0x1100) r1 = getpgid(0xffffffffffffffff) ptrace$peekuser(0x3, r1, 0x80000000) 2018/02/16 21:02:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) sendfile(r0, r1, &(0x7f00000de000-0x8), 0x100000001) ioctl$TIOCNXCL(r1, 0x540d) 2018/02/16 21:02:35 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000041d000)='/dev/vcs\x00', 0x4080, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x81, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00005d0000-0x5)='user\x00', &(0x7f00007b6000-0x5)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00005e7000-0xb6)="034a302b5ac1d5281e4004ebf1618f630793e13bffcacb74f2e22909b01554ac6c3bb8260a28ac37edf794c5fe4057b8a0a4f67d0b4e82b5512dfb6ae663224bb31c0761490c10d19a2aa9473e38a7cac1ab9c9c31f98d7227d1dca015b03510c67e27bfc3374f7f9cdf9d77259627df5e2640aa5f922413f4bb2031feb811ffcf25109a0038cdbfa45ac1934cccb8b92756e44e23466d018f2845cecea7b3b2eb38dfe6f442ecbc181952cd5fab72c16c53aec5d52b", 0xb6, 0xfffffffffffffffa) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000f77000-0x2)=0x9cd, 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00003e7000-0xb), &(0x7f0000bce000-0x4)=0xb) keyctl$setperm(0x5, r1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00001e1000)='/dev/rtc\x00', 0x20500, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 2018/02/16 21:02:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000cf9000)='keyring\x00', &(0x7f00005cd000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000ada000+0x9e4)='\x00', 0xfffffffffffffffa) add_key(&(0x7f0000068000)='cifs.idmap\x00', &(0x7f000000a000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f000051f000)="dc8608219fadcbd2185a933a3525ab861bac415624e4a97849e760274794cdcf7e14e9cd48bfa6d6e653e0fdd54cbfe5fa905259045991d0dd3aca1bd0cc9c6d6578bdfdd004f8c9452dbf777ae86a9eea5f9f080e679390393ba322b32d8aadde0ac7637d06e1a4d36b4ae6e9e8bf2a108b3c0e3cd0365cf1db719c4766de027d00eb288dd31080de9c4daa6870d6ff9a387ca488b14092015a691e0f3803490b21be8fd405364029bebd13b29e907eedaa5a6114", 0xb5, r0) r1 = add_key$keyring(&(0x7f00007d5000-0x8)='keyring\x00', &(0x7f0000bbd000-0x5)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00002b1000-0x8)='keyring\x00', &(0x7f0000ca7000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) keyctl$search(0xa, r2, &(0x7f0000850000)='asymmetric\x00', &(0x7f00008ad000-0x5)={0x73, 0x79, 0x7a}, 0x0) add_key$user(&(0x7f00007ec000-0x5)='user\x00', &(0x7f0000423000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f000052e000-0x63)="1ca9a13794a196fea20e91d9405c7b4ebc4fbbde8fecfa5c0c652aff7383c84cced3941670419956b551bfec1d6b6989cc93d9d5a7dfc9aee4dd26b8af407914468c5d7b44d109d2e76340dde159d37601615a15ce5bd554b93dade30b81d84fbea811", 0x63, r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000eb7000)='/dev/ppp\x00', 0x20080, 0x0) 2018/02/16 21:02:35 executing program 1: mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002000-0x28)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000008000-0x10)={0x1d, r1}, 0x10, &(0x7f0000003000-0x10)={&(0x7f000000b000-0x48)={0x1, 0x3, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) dup3(r2, r0, 0x0) 2018/02/16 21:02:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') setitimer(0x0, &(0x7f0000530000)={{}, {0x0, 0x7530}}, 0x0) openat(r0, &(0x7f000037f000-0x8)='./file0\x00', 0x200, 0x1) syz_open_procfs(0x0, &(0x7f0000876000-0x9)='net/rpc\b\t') getitimer(0x2, &(0x7f0000689000)) 2018/02/16 21:02:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000037e000)={0xa, 0x0, 0x7ff, @dev={0xfe, 0x80, [], 0x0, 0xc}, 0xa7a}, 0x1c) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000134000-0x50)={@common='ip6tnl0\x00\x00\x00C\x00', @ifru_data=&(0x7f00008e8000-0x20)="0100000009000200000306000000eb00ecff0000000003000449faf502007e23"}) [ 40.764232] audit: type=1400 audit(1518814955.801:25): avc: denied { setuid } for pid=5372 comm="syz-executor6" capability=7 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 21:02:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000623000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sync_file_range(r0, 0xffffffff, 0x8, 0x3) syz_open_dev$midi(&(0x7f000061e000+0x866)='/dev/midi#\x00', 0x2, 0x2000800000001) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f00005fd000-0x18)=[@textreal={0x8, &(0x7f0000447000)="66b91b0000000f32f26c0f060f00c50f35baf80c66b8a246938866efbafc0cb80080eff2672666f7e9660f3835800000b835048ee0440f20c066350b000000440f22c0", 0xffa0}], 0x1, 0x0, &(0x7f00002ca000)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/16 21:02:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f000006e000-0x8)=0x8000000075) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00007e9000-0x20)={{&(0x7f000056e000/0x2000)=nil, 0x2000}, 0x1}) clone(0x0, &(0x7f00000a5000), &(0x7f0000002000-0x4), &(0x7f0000001000), &(0x7f00001ec000)) read(r0, &(0x7f0000783000)=""/100, 0x64) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e9f000)='/dev/autofs\x00', 0x803, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000255000-0x1)=0x6) 2018/02/16 21:02:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000948000)='/dev/ppp\x00', 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x1c) r2 = add_key$keyring(&(0x7f0000363000-0x8)='keyring\x00', &(0x7f0000de1000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r3 = geteuid() keyctl$update(0x2, r2, &(0x7f000030f000)="47eb36b6993513c14d16a2250da4c860942b6971985dc198af7b198cedaf0e1758aef3373f3874c53b7f70c1e6d13527428f764ce907eb57eac4d25012ef057e10b384d3dfbe7b58a81a3a808c43f4ecadd277fbadbc2ad61ad72e379fdb6254a8dd5fce642f8a546bd3bcf519de04344c2273cf6f245884c6a4e9ad86d6a3e917c0d671a5564179885f17daf2fc42f276667a1c9a3464fc9864bfa339daff5fd0e3295df1897ac72d5d8c7c5eec4c2338608ce4e5", 0xb5) r4 = getegid() keyctl$chown(0x4, r2, r3, r4) close(r1) ioctl$TCSETS(r0, 0x5402, &(0x7f00002c5000-0x24)={0x99f, 0x8, 0x33, 0x80000001, 0x20, 0x0, 0x3, 0x8, 0x101, 0x30000, 0x8, 0x5}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000ef8000-0xdd)={0x1000, 0xd5, "99bb51b2dd102e9881a29921346f7a33c41e8c8006fabc5c911159a82775fa8ae2f0e75829531cf73eeeeab5c1c23f116276014e1f5abe481520760fb3c277bfbe71cd3e385bde66e66957a63579a2e21a6cc2f889593f4612fcd44400b33519b999fe231bd8b1c3b451cb9ecc55cb2e9c97a5cfc80cb093c820b18b2574de46f1a18be0b1130da555fa59eb89b44e3a143d6ddb42cd990e5fe7cd5a8a38348d46174931e1d0e88463939ace6a805c450b4eab3d6f49b908995af7f85f766a3a27e6f984037188ff014d21284b491ef20a1be49e2e"}) 2018/02/16 21:02:36 executing program 0: syz_open_dev$midi(&(0x7f0000408000-0xb)='/dev/midi#\x00', 0xff, 0x20000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40046103, &(0x7f000065c000)) 2018/02/16 21:02:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000321000-0x8)='keyring\x00', &(0x7f0000b16000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f000097c000), 0x0) write(r0, &(0x7f0000c88000-0x26)="2400000026007f000000000000007701000000ff0100000000050000ffffffff0100ff10", 0x24) getpeername(r0, &(0x7f0000d90000-0x32)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f00006ab000-0x4)=0x32) socket(0x3, 0x807, 0xe6) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000f52000)={0x2, "a631"}, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000d32000-0x4)) 2018/02/16 21:02:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000740000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000609000)=@nl=@proc, &(0x7f0000ae6000)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000dd0000-0xe8)={{{@in=@empty, @in=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000ec8000-0x4)=0xe8) getpeername$packet(r2, &(0x7f0000d2d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000b2e000-0x4)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000fb7000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000284000)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00007cd000-0xe8)={{{@in6=@ipv4={[], [], @local}, @in=@multicast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@dev}}, &(0x7f0000be2000-0x4)=0xe8) sendmsg$nl_route(r3, &(0x7f000012f000-0x38)={&(0x7f0000899000-0xc)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000ea2000)={&(0x7f0000878000)=@ipv6_delroute={0x68, 0x19, 0x421, 0x1, 0x3, {0xa, 0x80, 0x80, 0x2, 0xff, 0x2, 0x0, 0xd, 0x200}, [@RTA_PREF={0x8, 0x14, 0x1}, @RTA_ENCAP={0x10, 0x16, @nested={0xc, 0x10, [@typed={0x8, 0x6b}]}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_PREF={0x8, 0x14, 0x80000000}, @RTA_OIF={0x8, 0x4, r4}, @RTA_MULTIPATH={0x1c, 0x9, [{0x400, 0x7, 0x4, r5}, {0x100000000, 0x200, 0x10000, r6}, {0x100000001, 0x2b, 0x20000000000000, r7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48044}, 0x8000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000478000)=0x8000000000a) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000c6a000-0x70)={[{0xd566, 0x8, 0xfff, 0x92, 0xfff, 0x7fffffff, 0x400, 0x1, 0x6, 0x100000000, 0x7f, 0x4, 0x200}, {0x101, 0x200, 0xffffffffffffff8d, 0x1, 0xcd, 0xae, 0x800, 0x10000, 0x0, 0x3, 0x2000000000000, 0x2, 0x101}, {0x1f, 0x39, 0x1, 0xfffffffffffffffe, 0x6, 0xffffffff, 0x60000, 0x8, 0x9c07, 0x5, 0x9, 0x10000, 0x7}], 0xffffffffffffff36}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000fc7000-0x90)={[], 0x0, 0x300}) ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f0000475000)="1091a7d60b607f3e8d7f9e67b9530ab4da") r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00005e4000-0x11)='/dev/vga_arbiter\x00', 0x40002, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x3f, &(0x7f0000311000-0x1ab)=@dstopts={0x0, 0x34, [], [@generic={0x0, 0x7e, "24e1400eb1220a34d411974fae484183a245241b0754f92f45474bc53e0f6c1df7077ef41bdf0a62a32a2bdc0321a9e02c7fcd27414607994d9ca1b715e0b14550762f9c8c3851d7eaae0ea4cebc74b5858c59c12b47e78f0d3c05b444369d31ae39a336b9e7e3d02bb77a751cbedca7784e43628a9eeaa89222fcc801ca"}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x1f}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1={0x0, 0x1}, @pad1={0x0, 0x1}, @ra={0x5, 0x2, 0x3f}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x90000000, 0xfb, "8f3f3b88b25d4058774604a082517b00d143e036826c4608243e02de720b1ceb77c3114895d6ae5a3709b70993774b66f77e876550821b9b9ed1fe12c1bd7644863cbc9f0b63c9d20d8946b5ec3180362aacee52fcb50503fedcc0ed06131d378f3cf58f88e36c1d60d87c37af8f94e9721e4a99f27c7953bc44f811bc90cfed6fe43886d52e4b8541a97d9e21fe72f33287ed45ddb70666da626140bb7eb541f90c7fe08193b41e9e42726c398d6e3f02c3c79beb92a399e5aef398cbde320068c71af9d859b380a3ac25e00c94aa50c4d11aaf95aaeb84b5db181085bf76c9fa467a6ecf8c681441d5effbcebf74a7b46109fdfa5557af8335a5"}]}, 0x1ab) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000bed000)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f00003e0000)=0x0) ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000eea000)=r10) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00007d9000)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00001c5000-0xc)={r11, 0x0, r8}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000b89000-0x4)=0xffffffff7fffffff, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00004d2000-0x8)={0x0, 0x7}) 2018/02/16 21:02:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007cc000-0x1)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000da7000-0xa)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000b6d000)='./control\x00', 0x20) inotify_rm_watch(r0, r1) pipe(&(0x7f00002ce000)={0x0, 0x0}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000385000)={0x7, {{0xa, 0x1, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x1c}}, {{0xa, 0x1, 0x101, @loopback={0x0, 0x1}, 0x7}}}, 0x108) read(r0, &(0x7f0000b12000)=""/205, 0xcd) 2018/02/16 21:02:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd7d000)=nil, 0xd7d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000010, 0x2, 0x9) write(r0, &(0x7f0000d7c000)="1f000000f90300ff14001d0120ceb600070009000000e1ff000100000101016e9e0000000000bbffff74dd677293e251", 0x30) getpeername$inet6(r0, &(0x7f0000df5000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @remote}, &(0x7f000048c000-0x4)=0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f00006d3000-0x4)=0xffeffffffffff403, 0x4) 2018/02/16 21:02:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000bca000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvfrom$llc(r1, &(0x7f0000c67000)=""/15, 0xf, 0x0, &(0x7f0000618000-0x1)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, 0x10) [ 41.042646] audit: type=1400 audit(1518814956.080:26): avc: denied { map_create } for pid=5414 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 41.077754] QAT: failed to copy from user. 2018/02/16 21:02:36 executing program 6: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000c44000)={0x2, 0xc, 0x8, 0x82, 0x0}, &(0x7f00007e8000-0x4)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f00004a6000)={r1, 0x6a, "c4c69521ee368071d2b82cac9354404c0d6717176cfb880f52d3c8f0cc4cc47f52dc3f16cd67a0e7f7e99912f2aba2f5e44ce0d6a09e905f7ab6bae48c9398fe139c3a76c05a70ce057747f743b9e57e2111d73a0284d6d4ae1b87e8d4843fe2a3a6ff2167d3f34dedb9"}, &(0x7f0000686000-0x4)=0x72) 2018/02/16 21:02:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000e2000-0x10)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f000021a000)=[{{&(0x7f000036d000-0x10)=@ipx, 0x10, &(0x7f0000304000-0x10)=[{&(0x7f0000b34000-0x68)=""/104, 0x68}], 0x1, &(0x7f0000cbe000-0x3d)=""/61, 0x3d, 0x3}, 0x8}, {{&(0x7f00009da000-0x10)=@nfc, 0x10, &(0x7f000008c000)=[{&(0x7f0000fad000-0xd2)=""/210, 0xd2}, {&(0x7f00000dc000-0xba)=""/186, 0xba}, {&(0x7f00000d3000-0x38)=""/56, 0x38}, {&(0x7f0000e10000-0x3f)=""/63, 0x3f}, {&(0x7f00005bc000-0xb0)=""/176, 0xb0}, {&(0x7f00008bd000)=""/251, 0xfb}, {&(0x7f00008c6000-0x89)=""/137, 0x89}, {&(0x7f0000bf0000)=""/4096, 0x1000}, {&(0x7f00002d2000)=""/205, 0xcd}], 0x9, &(0x7f00006b8000)=""/167, 0xa7, 0x5}, 0x8001}, {{&(0x7f00007bc000-0x60)=@nfc_llcp, 0x60, &(0x7f0000528000-0x60)=[{&(0x7f00003f2000)=""/157, 0x9d}, {&(0x7f0000440000-0x7b)=""/123, 0x7b}, {&(0x7f0000ca6000-0x34)=""/52, 0x34}, {&(0x7f0000190000-0x9e)=""/158, 0x9e}, {&(0x7f0000aa2000-0x7b)=""/123, 0x7b}, {&(0x7f00005b1000-0x6e)=""/110, 0x6e}], 0x6, &(0x7f00004b8000-0x49)=""/73, 0x49, 0x2}, 0xfffffffffffff5d8}, {{&(0x7f0000bab000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @multicast2}}}, 0x26, &(0x7f0000592000)=[{&(0x7f000092c000)=""/186, 0xba}], 0x1, &(0x7f0000002000-0x8c)=""/140, 0x8c, 0x6}, 0x7cb}, {{0x0, 0x0, &(0x7f00001d3000)=[{&(0x7f0000860000-0x33)=""/51, 0x33}, {&(0x7f0000023000)=""/4096, 0x1000}, {&(0x7f00005e9000)=""/133, 0x85}, {&(0x7f0000265000)=""/214, 0xd6}, {&(0x7f0000d79000-0xb9)=""/185, 0xb9}, {&(0x7f0000e54000)=""/134, 0x86}], 0x6, 0x0, 0x0, 0x400}, 0x80000001}, {{&(0x7f0000734000-0x60)=@nfc_llcp, 0x60, &(0x7f00006eb000)=[{&(0x7f0000e9e000-0xc7)=""/199, 0xc7}, {&(0x7f0000d5b000)=""/212, 0xd4}, {&(0x7f00005ea000-0xf4)=""/244, 0xf4}, {&(0x7f0000da8000-0xae)=""/174, 0xae}, {&(0x7f0000e48000-0xe1)=""/225, 0xe1}, {&(0x7f00009de000-0x7a)=""/122, 0x7a}], 0x6, 0x0, 0x0, 0x44e}, 0x4}], 0x6, 0x12043, &(0x7f0000edb000)={r0, r1+10000000}) sendmsg$nl_crypto(r2, &(0x7f00008b3000)={&(0x7f0000e99000-0xc)={0x10}, 0xc, &(0x7f0000c60000-0x10)={&(0x7f0000e2d000)=@delrng={0x10, 0x14, 0x222, 0x2, 0x1, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = syz_open_dev$dspn(&(0x7f000000c000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000f1f000-0x28)={@common}) ioctl$int_in(r3, 0x800000c0045007, &(0x7f000006c000-0x8)=0x272b66c3) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000971000-0x2), 0x2) bind$bt_rfcomm(r3, &(0x7f00006a7000)={0x1f, {0xf2, 0x4, 0x3f, 0x7, 0xfbd, 0x4}, 0x4}, 0x9) close(r3) vmsplice(r3, &(0x7f0000f65000-0x10)=[{&(0x7f0000969000)="15ae45549c8947e26d97401883b46dfd38396d5661db029533c9877a6bc1f7", 0x1f}], 0x1, 0x4) 2018/02/16 21:02:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000f95000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f000060b000)={0x2, r0, 0x1}) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000f46000)=0x7f, 0x2) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000948000)=0x8000, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00007a3000/0x18000)=nil, &(0x7f0000a86000-0x18)=[@text32={0x20, &(0x7f0000720000-0x3b)="670f2210b805000000b9f7ffffff0f01c10f060f21e566b85c000f00d866bad004b8a5000000ef0f08260f3566b830000f00d8363e660f38806743", 0x3b}], 0x1, 0x38, &(0x7f00001e0000-0x20)=[], 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0xc00000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/16 21:02:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000901000-0xa)='/dev/dsp#\x00', 0x6, 0x20a00) fgetxattr(r0, &(0x7f0000e11000)=@random={'os2.', "a06367726f75706d643573756d2a7b00"}, &(0x7f0000065000)=""/199, 0xc7) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000385000-0x9)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082f000-0xf6)=""/246) pwritev(r1, &(0x7f000056f000)=[{&(0x7f0000b20000)="80fdb100196f", 0x6}], 0x1, 0x0) 2018/02/16 21:02:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000010, 0x2, 0x0) recvmsg(r0, &(0x7f00008ac000-0x38)={&(0x7f0000d0e000-0x1002)=@un=@file={0x0, ""/4096}, 0x1002, &(0x7f0000d70000)=[], 0x0, &(0x7f0000ec1000)=""/85, 0x55}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000073b000-0x11)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x10000) write(r0, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) [ 41.083174] audit: type=1400 audit(1518814956.120:27): avc: denied { map_read map_write } for pid=5414 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/16 21:02:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x40000000000002, 0x0) connect$inet6(r0, &(0x7f000064f000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000f75000-0x8)={0x0, 0x6}, &(0x7f0000171000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000843000)={r1, 0x10001, 0x6}, &(0x7f0000026000-0x4)=0x8) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000b43000), 0x4) sendmsg$inet_sctp(r0, &(0x7f00003e9000-0x38)={&(0x7f0000e09000)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f00006fe000)=[]}, 0x0) sysfs$1(0x1, &(0x7f0000f0f000-0x1)='\x00') 2018/02/16 21:02:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000528000-0x8), 0x1b, 0x0) get_mempolicy(&(0x7f0000b41000-0x4), &(0x7f00003e8000), 0x1000000000005c, &(0x7f0000be7000/0x4000)=nil, 0x2) 2018/02/16 21:02:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000a83000)=@file={0x0, './file0\x00'}, 0x9ff8bb4d) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@abs, 0x8, &(0x7f00009bd000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) listen(r3, 0x0) dup2(r1, r2) connect$unix(r0, &(0x7f0000331000-0x2)=@abs={0x1}, 0x8) 2018/02/16 21:02:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0xfffffffffffffffe, 0x300) msync(&(0x7f0000828000/0x4000)=nil, 0x4000, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000939000-0x28)={@common='bridge0\x00', 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000c3d000)=0x3, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f000008c000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000cd4000)="008100000009002700f4877d7b2eb897004f6f3bcb7dc500", 0x18, 0x0, &(0x7f0000e72000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) 2018/02/16 21:02:36 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$getname(0x10, &(0x7f0000004000)=""/4096) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5b4bef99eb940ea9}, 0x4) 2018/02/16 21:02:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x4c) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000201000)=""/161) 2018/02/16 21:02:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000ad9000-0x11)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000443000-0x38)={&(0x7f000064f000-0xc)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000094000)={0x14, 0x1d, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0x1f}, []}, 0x14}, 0x1}, 0x0) r1 = syz_open_dev$midi(&(0x7f00007a2000-0xb)='/dev/midi#\x00', 0x3, 0x50000) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000b76000)=0x8, &(0x7f0000e82000-0x8)=0x2) vmsplice(r0, &(0x7f0000350000)=[{&(0x7f0000c2b000-0xc6)="5d4969296d3c07a96ba3960b83203fe643656cee20f66af204f23c94de295f750010e4bd7fb3d036a9bff49c2db215b830c6f76bbf7aaec99d70e9d6936362d628cc4777dc1ef663c27dc3d506b765a25f8fb670f28a644759259c23154caafa71fca258fe8776aff7abfeb114903a0e866c5a00ece1117c6ea3c66ec914eceb4d569f867d01e6aaaccb071fa7197fd32e91ad3e2afcb80f823bad4d57b5914c2ad79d965e074d2a494aec983c4f8dce9f701ac7bc5bfd7a733f7d1bd276177d528ff7f21875", 0xc6}, {&(0x7f00008ad000)="375f09b104c22efe0dcb384af1c39445bd14ed96c7ece6b9d34b38c229a8ed711386cadccc416f74ed9512568ba6665a33027cfb7032d73a1c92544e89d6212273de351d32e47bebbded14313623cccf1f8007f7ea7b90096622546e80303a012edfcc28ca70ed879c9870048ed359f43da3a39e49bb680b5ec5599d8b20a1a1c21a902eb0ab479f8fa440d5b5fa623237ecd1b7f7a6b1ba26205a1f7551b54465637d472ccdb686383266c35a24a75185239f77549768dfe536e8a1b6d448718b099a676faaaa65d2855629ba1cf201921fc4229c80f43c2d132c88e2b4cb5397a8d649", 0xe4}, {&(0x7f0000bba000)="e9a216f835d7a07399d18ed5a180e5b3de3aec8f846b18d235603114c14adc8e9a85e8808d26a979897eacedc5ace5823d9e7a53a65ba712377b7c09f19ae2e8a10360ded81d73cedaae2da4372d0e21ba86aaf5ecac7036a044e2b3ec7962a77a28581ff58eabe97438b1d1fa3d8b15b58532184786a0b99fe8d3863649b539d99e60a3240ebfeb48e967cee03fab673cf750dac1e9305d593a341531d2fad025d3327b9a21cb6130e0ee7819d5b5db974dac784c06e65377d3141d6395d2b091125f12b1e5946dc4d87e58118b353a09690f824ec0d5039bdbd03d4b02285993ff8612a0aadbd5ede0c334b7218684c8e918a67df2f9b8f7c223b252f1e7c6915a85ae7fd8e19f41a34746efabd9d625999ac2f7e7ec31aea758fb2fa26cc6c55ba88f55f2342dbe21ae87b347c8de754531b487adcec2f95dad3d9a03d6e23b4d21b601f4b35ca384a653a688f9e936cc4daaca7159c25ba94e9ebfffe9691f34f9ea72077ee64d1d9671aade92d72e4f66fb04d9c50bf2263d73fff84b564d0077f6ac8d43b4a735afbf6cf01d00719cc80991962145b525b5a93d542c40799282f6401c1d32da55ab66ec6bee8c25745d089dbd95a9964d13d2f30493a2f0c883cf451b25665b6ebd8fae6dfbf40500928f4cb314743aeda3ee459928ceaa0df7e3dc43fd79a739248ba55660edb3318ba7b4416df5661c906f7c56b12bc49e9e1309b02ae58aafb9ca640d170721b1d0d763c33e451d89d015fc76e40b3de9f3bf6a486c0fd025fcef630f87a3af67117cd8c77e3ec82691593119194d349eff4ea7893fed861cf92d32d730ea0ec430d581548c5b32ecd1f92ef637e38c4dc583826ae4f394ea7eef1fa4b3c8a40cc37e568adab4477f3257bc876d2d5c17cff421ad534f899e130220e57b89f4c7541e52549f7a30233ea15a4ed9bf04d17aa0260564fcf3e3caedd64c76e7c624876fa2b152bd76bd0998df4e1369b57d94529649a60ae2481f0d107e1a482822e0cb56e5d4c44f2ef5f3d963a6d59366a3b79e0b9e5d5da1bb832df10164c5fbe8b9cd0ca057b4db4f565da02786c1e5ad26c97fa29dd65495a944323248787017ea19ef04a1b89ecd1d5f36bda81980c382bdf831021e9be1e2a131b0ed744d6b417f404c07eaa06248f28b691aa3367ab227b39c6c1e8b5b487ab89ee2364c457d41a04137b0a9cf4c1e199ec2459472afae63f4ceff7a32c0a507cd5c7c270fbc6a6e9c929bede5ae928c6b78234c9c19718ab798d6f507e59f8565e2728ecc57a1ef6f4dad36dbae06f7c8b7d6157d561205b042ffd676e5295338108b527c45127fc8bfa5418189ecc0b6961cc00ffa762197a0db0d2eb377722642b81b78982c5c5499301fbc1f065cd567499f198d589a9a7bfaffed61e3f76417725b6f354dc0515482124af9d75a327af748f228d5ea3f7bad5f413bc24c2d4cfb1eee4ae45e2939ebe92788aed7d52211fc405c063f565f0f762e7b8a5b2bc3a8ac101035d26c6bf0c18a277bc9ff5bfa6c3148857db9f3410f2c089f53791c4c2fdd2ef494a90388aefad79e2ce36381d55f4e2d6b86cce7697334593621bf74156cd672eca81157cf902f3689130a456fe67a05d67e6cb897dd48bd192f1bdf35c974e0efc97fbf674f39ffb9d3998071dc73e0e0ddf669a6640e8537e2d77c07ebffaa9e61e32ed0d0a5db6037c55d50d5feaff6725ca92431a02da0885aa2e03f658450d6df1f0d64eb3ae49f8259880f9a457fabdd374422dc0582e5ca2f9ebd6be2f715cb9f39a048b0bdb669e9edfc953ab1bc45374c0021454e41f99f7fb794d928a8b638b6f8208ad5b5e2ca8f7085938b690c810af73707c820fd45f2c79742da04a68d046908de3130be2a4c63ae1bd42fc90cac44b8187c2ec556e225fe5426d56dcf906589a9c6d93a01f955a7ad973180571d573f09d1755cd398c0793e310c3f6ab487d36a17df3a40379829cea4efc6ad39b13161e7768758b1b166ba51de680d1bdfcfd42734d35159e7f0287d5be70b1bafc9f19e9c0ae6c6ee1e1322178da039f3832723fa276befb699629e6c615e619075ada8bdb3ed6d0c3f6d4c890d4a8ed2c32c9918aba63ef9b1f03ce9add427f20470a0c7111126dfb089b5cd581413f229d4cd3abcdfacf4d071933914a1151eca9be9cd41bb65320e1503716287b8d6ece2fbe45ebaae792eb671c883c3676a6f93b1176efd43279ce1e724992c3d2afe94dd30699d5f7f2031dd56fea57b664dff4249a31a9982b06e6d28b2dc57a51c124bf7250e480bfae994a183cd10cc27d5d613d458f0433906d7d01d6a7ea60616def4865814f4c6b895911bb5992f112e96da87e65047cdfc3b0fdf8737602dfb604271f389f936e473451f7839237f224d4380022f87db85d180e49506f24ef6d4011ddf45141c899aeefef7146d4cb948e36e3dd8c529850bb0c430ef91c7ffc0b30323d3e71216ebb842a527d790dd5cb4f8e070b3daa0b9bca9142360f2bd44394883ed99c09067ab36ff79217860b6a4b6c3cbac9e6fd37668e472bbf92bd2ae2b929064e20588601b86b959038c6a55863ef914fe7f8d50e8902853a554323371f60ddd6d1c8dc55bde4e1a2f807aa75f085bca621747a8f53746c3160ab5ab3290172fbd622bb25fffdc79eb6a544497a5c6dde523914ada3ac63157fd8bb8de64c875d7c46fe3522761b6aece37dc3a7820ac37a1bc3b1f201fa10d425f5404d44aff63a22b041c8bcbef79aa2926985419884e5dbae114b0ddc3cc46fc88457a58d63572b752d702ed45fc206b30d5b5a0bf534e95d959b27ee7d863988324a5d50294cd74d15dfde221f2ae75480cb4d53aa263f454c65d85f6abb7112f0651c861db57fca1c7c4c4ed5190594e1f0e720bade2a8f54b70f3fc499c5ade10a57a640f3ddb34d5ca75e868a2e9869b989fd0d22e8f96aaaa597d869da516fcc537aa053a693a250f832dc4451b444597d6bd6722e9e6da6fd078effcba36870bfc2b3cf5515b4a0b55115f00d7f76697c22645c0d38d3a18d5c95be64eb2fe461ef59457eb140e42a435c40814f9b6218b6556bfe909108f525f4a8bfea17a99f841dd14f8bbe19b866ca1508b036f9e57fb6dd0cadee17431e802c4a14f35e15f1471e2fe3daf257d0598a359d1e035be92dc0d43d4bc56a8f35cdb15f189e9aa6777e8e0b18ff2e290166e3e206a75eda3fecfdc5459945d101c53f1e73c95ae0c1e16a914ccff810419f9fb913135d9a4e6add7e136cdb712e42691772d65238f9547d1a7ec60dd3fb5917fc91be86ba3ea1aed9f64c45b3ce72956eca96f80b1e6bde7d23bd181ea5ae2529df76c78124bbef7134f497075ea087f63c83231964ecece20e6549049d8a5a171fa52b89a9b0f6cba40bcc64f3c32ae0389f7fba42bcd20ef14f372d956c63cd5f1f75a1c7421a7d4a437954a89f73c86f0c3fff882e48544e75faa81e0c4325da9d5645a5824bceef2285e9d7757fbbe9386ce145d99832addbeed1c52570838f4fbbe4537032dd9777557d402245b3835a9aa95574bf095fc1e0d57c293b84f6aaa95e2083423ffd1ae94f0d275c343f5b47451452ad4f9df2584d7ba4679893b551efd69d8f7bec5aac34e4a1681400b890c0f169dffafe32413b4334f57672dce2476de2b212a596b47b6a34e15a36ff1ebff705fec4b9d47e54deb5d7162a17ea92214db12ad2fc1c82da16b1158efc0ce5369485fbed71337c10644569f713a3ede79f7c41a90d950d9e53384b11774b7c7d876434184b5a52ff226b84a9b29c8cdd3bb64ca996e70f876fbdc389a28a25f57de5ccde428645990a43b811dc680661b6bca60b3b7d7997d9bfbba69a501a050aa8006f94839be9d4f4f625556ac13d53126be43b3874802a10a077e13f0539c23173c1b1cab1bdd161e1159c10f0155405401244e7e58e2c03432e962eb73f601ef049a581a35405e7832e14cafe2220f08b56d100d879b5c96ae6b9b6a90df6816a7e342af5cf1a4e86276c91ce91c5971bc068c176f904841e050d8359c5ebedcb01d3cfb5d24e16e7f185c94e9cf4db345e0fb5802a0dc44aef84f8bc838bef0dfadb1c5e2269dfd438ec864b4004129968c8f251be898bc840594cad4254b9eb07a6e19066b64fc9f9a8218a2e1c616a806dff28c58481262ba1cdaaf8bba8d9f9c1b58cbdac999d4a5133aed1e4ef1ab17549e4f610f0803b44e5dcf35e98cb1b44400b03f1e0cf60c21409cb0bc64c0c3c09776f04c52d85a51fad8e0f5203bb1b58cde0e3e76fbfed930657544f7bc73b1673413199d0ed458ba91e6da843b60cfcf5e1d151ede074dbd4498b3efe12cf9f5928d3c1c0cb8af610d7ba53ae6745a2c5fdea4948baa2ae0a1930d418e1d3a16b1804ddc1d0c215f73340dee6eda14e3d9024897ab8be6ba3ed081bdae5fb12cced3e72463338dadd914a447936a64d2124819667f03174cf4a1307cb58970ff10f8a8de09cd9ad87a5200f10dba9f43586a3fffe9522a0aa8ff4776f71bc124bc5480086c9185828901cd11b4f0eb2cdee9caabb4e1643eef8a9e67bd606548fa36ec2188947367a4367e0dc8be4e15a493b7af7a3ef32dd6c6f9041d8a051de5e3c3d0246bc4e91813f3fee87668f08a9ca997ed02221fce9344c0baa922ad03d9eb771123a1398743d112dbe5d80af7d94e9bbbd455bfd5fdb03b38f337684dfa18cf888309ee0dee18bae82966b793e1dc9e726264c3363ea2637d99fba22f00e8ab139e9a7d7dc4ab4a5daac856f3c89e5e36de1b23b4b3890e13bc586cc69a377a810e765ab13fbf86580779e76c2c4c1a06b0e36fcfe91c5ab4a378ec6d6edfc8d11b6ea72c5cb7d85ff739ccf1b4e00a54d2e983f4d4c4bcf899d20ed3a1ac2050c188c66966dcf89334171f499dc3ff21c8256e51d7b413f1af48edcdba2e78a4036c2d77ad7b7d156e26476f973330af51f82868e65f159958e46afe3c4f3cb40e08c7532264aa7e8ba30b894ae0636aa68366cade2a9c04c869f549d2af0b5109dcd1ab8821e45dd501ed88cc73bf1d255e8f57d6347d292f83276c07e2524f0a3224f4bf8962f07cf4e7a86b070fdcaac4a69eca52d97ea9c1dca8df33b5f9c45d3da32c5fdd153226d9b16e77e3aaedcf00f2c2bc68bd0e11fd690d66ad338f98ad098f37c56ee28cb789dbb91682cecbbbf3642ea1b351fd0b74a84958d2b611f0eb752403ce0fd0d7cb12036a73fbfc0f3b3a9e45f59a0eeb4d3e91fe1676325cb801c332970c7dac111c3957ab367cc697ea248b574560e5f330c22733ae76ff82f61e477e56815a36e721ae7cbb5060cea8293007866e363f17753dfd4929737a68d76cd0399b3dd53d3c398ede19b0c79a985cc640b05f6009524cf4ef290c6898f0de8ceff447df137e63ecb648cb5c49f0df45c21efb2474eefb54908c03c5d5e3fd3b774527ba23b65c90433709ebeec3a6ecf59adacb6b3c2b7aa193dcb992c83b50e69a4b79517620b71be32bd1e8ed198737e02ab39ce689074b265743c3d4974d951909d7b8a82182884e6eaabacb70b9a64bd9b1a2ab41998cbdd9a90b1f17cb190990ed5047bcbb3779472f8dd9a19dc9b200d8b3bd17090d7879d4e684fbf0bdf002b3ec9dc8dd3299e7104210d7eef07843474996ba6522912d0557717c92d12ccc123f4ac8d7171d46e99f50d3ebf642efc915aff3c9ea627dbd8680892840535feb2022ca10e7cd1d483e25cf06a2476fde815e8cfa16", 0x1000}, {&(0x7f0000902000-0x92)="2b90dd5ff9fd240973151a5e7be41dace28dd5ddc1020d8c226759e3c079d7c6054e6c098d9358a59d4d4db8f4e924ea7d5520e143640a606b6b990b8a2b4f99413290012324abcfa6d1fd075ebbe32fcc03b9dbe31e285dc82a93ec8eb3f2cd4aef892568f6275c03ae66db7d2d7840fec7d1bd8511b90af82bb4ad432e331cbbedad8df345b8b188ec5e325ca3fce59dc1", 0x92}, {&(0x7f0000870000-0x5)="408018741d", 0x5}], 0x5, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00007b6000)={0x0, 0x2b}, &(0x7f0000044000-0x4)=0x8) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000f45000-0x8)) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000d12000-0x1a0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000afa000-0x8)={r2, 0x27a0}, &(0x7f0000033000)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000583000)={r2, 0x7, 0x200, 0x1, 0x2}, 0x14) 2018/02/16 21:02:36 executing program 6: mmap(&(0x7f0000000000/0x39000)=nil, 0x39000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x6) sendmsg(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000007000-0x10)=[{&(0x7f0000005000)="10000000150061dd18c84c16290c729b", 0x10}], 0x1, &(0x7f0000002000-0x78)=[]}, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000017000), &(0x7f0000012000)=0x4) [ 41.255772] QAT: Invalid ioctl 2018/02/16 21:02:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000f0f000)='/dev/dsp#\x00', 0xb4, 0x50002) connect$llc(r0, &(0x7f0000d74000-0x10)={0x1a, 0xb, 0x7f, 0x8, 0x401, 0x100000000, @random="979e023d16ce"}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f000084e000)={0x0, 0x20, 0x6, &(0x7f000019c000-0x8)}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082f000-0xf6)=""/246) ioctl$EVIOCGREP(r1, 0x4010744d, &(0x7f0000d1e000-0xae)=""/174) 2018/02/16 21:02:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00001e1000)='/dev/cuse\x00', 0x220000, 0x0) bind$inet(r0, &(0x7f00002d6000-0x10)={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00008d8000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0xffffffffffffffff, 0x200, @loopback={0x0, 0x1}}}]}, 0x110) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$adsp(&(0x7f0000483000-0xb)='/dev/adsp#\x00', 0x8, 0x10000) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00005d4000-0xe)='vmnet0vmnet1{\x00') mprotect(&(0x7f0000a73000/0x2000)=nil, 0x2000, 0x1) sendmsg$nl_xfrm(r1, &(0x7f00003cf000)={&(0x7f0000f4e000-0xc)={0x10}, 0x37b, &(0x7f00005ad000)={&(0x7f00008d8000)=@migrate={0x15c, 0x21, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @in6=@dev={0xfe, 0x80}}}, [@migrate={0x10c, 0x11, []}]}, 0x15c}, 0x1}, 0x0) 2018/02/16 21:02:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7ff, 0x4) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000b8a000-0x1c)=@req3={0x10001}, 0x1c) 2018/02/16 21:02:36 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x10000000000007) r1 = dup(r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001000)={{{@in6=@local, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001000-0x4)=0xe8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000002000)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000003000-0xef)=""/239, &(0x7f0000000000)=0xef) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000d7f000), &(0x7f0000000000)=0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000004000-0x18)={0x400, 0x28, 0x1, r1}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000001000-0x8)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001000)='./file0\x00', 0x80) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0}) io_getevents(r2, 0x1879, 0x7, &(0x7f0000002000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000002000)={0x77359400, r3}) signalfd(r0, &(0x7f0000004000-0x8)={0x5}, 0x8) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000002000)={0x2714, 0x0, &(0x7f0000000000/0x4000)=nil}) 2018/02/16 21:02:36 executing program 4: r0 = add_key$user(&(0x7f0000001000-0x5)='user\x00', &(0x7f000000c000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000001000-0x40), 0x0, 0xfffffffffffffffe) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f000005c000)={0x2}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f000021c000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x0, r2}, &(0x7f0000001000-0x18)={0x8001, 0x4, 0x7f, 0x9, 0x7, 0x5}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000548000-0x44)) keyctl$reject(0x17, r0, 0x0, 0x7ff, 0x0) 2018/02/16 21:02:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cc8000)={0x0, 0x0, &(0x7f000080f000-0x10)={&(0x7f0000f98000-0xb0)={0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000ed1000)='/dev/dsp\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000500000-0x8)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000097000)={{0xa, 0x2, 0x1, @dev={0xfe, 0x80, [], 0x0, 0xe}, 0x2}, {0xa, 0x3, 0x20, @dev={0xfe, 0x80, [], 0x0}}}, 0x5c) r2 = socket$inet6(0xa, 0x3, 0x80000000000087) ioctl$KDSETLED(r0, 0x4b32, 0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@empty, 0xffffffffffffffff, 0x6c}, 0x0, @in=@loopback=0x7f000001}}, 0xe8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) llistxattr(&(0x7f000080d000)='./file0\x00', &(0x7f0000a33000-0x10)=""/16, 0x10) connect$inet6(r2, &(0x7f000088c000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) 2018/02/16 21:02:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000aed000-0x9)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000134000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f000029e000-0x4)={0xffffffffffffff9c}) getsockopt(r2, 0x3, 0x0, &(0x7f00002da000-0xdd)=""/221, &(0x7f000078d000)=0xdd) 2018/02/16 21:02:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00006bf000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x1276, &(0x7f000035c000-0x44)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @empty}, 0x0, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @generic="980edbe34139704e389db349f728ad25"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000b9d000)='/dev/sg#\x00') 2018/02/16 21:02:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000589000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$midi(&(0x7f00000e8000-0x2)='/dev/midi#\x00', 0x40, 0x400000) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f00000ab000-0x10)={0x1, 0x400, 0x100000001}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x5, &(0x7f00006fa000-0x20)) 2018/02/16 21:02:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) getsockopt$sock_int(r2, 0x1, 0x3, &(0x7f00009a5000), &(0x7f0000621000-0x4)=0x4) ftruncate(r2, 0x40001) sendfile(r1, r2, &(0x7f000000a000), 0x420000000fee) memfd_create(&(0x7f0000764000)='dev ', 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00007b6000)=0x2, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00009b9000-0xc)=@sack_info={0x0, 0x7fffffff, 0x3f}, &(0x7f0000027000)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00009bf000-0x6)={r3, 0xe56}, &(0x7f0000a13000-0x4)=0x6) sendfile(r0, r2, &(0x7f000000e000-0x8), 0xa) r4 = eventfd2(0x0, 0x0) ppoll(&(0x7f0000f1e000-0x38)=[{r1, 0x40}, {r4}], 0x2, &(0x7f00006e4000)={0x77359400}, &(0x7f0000070000-0x8), 0x8) 2018/02/16 21:02:36 executing program 2: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f00006bb000-0x10), &(0x7f0000cd8000-0x4)=0x10, 0x80800) fadvise64(r0, 0x42, 0x5, 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pause() r1 = socket(0x400020000000010, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00001f1000)='/dev/autofs\x00', 0x40, 0x0) sendto$ipx(r1, &(0x7f0000faa000-0xf1)="08afbe5470cd4474cce996dc05098f8a57bc586a84aad20a7d436ffea00e05a6f7a18c3a5b2ae57743f80ccf3b01a7067d069684a7b632aeff583950e04cc46b7e0ad5571f9241255eb5172e7a2bda98ad67303ac7064f218bd50e27c56dd32a7cc01569b452be93b2f1b582d9afa97350d75bae78e243643bd1a8d85e72f409e74499b981eaac9ff36831093cca0dbcaf66f43eb9f283e29536159d6e7401421d56b96ca84c987876e2c5ed01c66d0a5f47adf964468f2702a72dd76028c52b97bbfa16caed021ce9c53fb57cfa79770cd24f9196a8165d5a17789cbb76197b42fc4eb56e6b0f5c7358419ab29a59276a", 0xf1, 0x4010, 0x0, 0x0) write(r1, &(0x7f0000b82000-0x9a)="1400000055000dbcff000000000203f50730ef21", 0x14) 2018/02/16 21:02:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000a09000)='./file0\x00', 0x160) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) chroot(&(0x7f0000c94000)='./file0\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000968000-0x4)=0x0) prlimit64(r0, 0x5, &(0x7f0000228000-0x10)={0x0, 0x2}, 0x0) 2018/02/16 21:02:36 executing program 3: mmap(&(0x7f0000000000/0xb45000)=nil, 0xb45000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000471000-0x8)=0x72) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect(r1, &(0x7f0000932000-0xc)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) accept$unix(r1, 0x0, &(0x7f0000b3f000)) 2018/02/16 21:02:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = epoll_create1(0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000a6a000-0xc)='/dev/rfkill\x00', 0x400, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000ab4000)) timerfd_settime(r4, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001b000-0xc)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000022000-0xc)={0x2001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000019000)) 2018/02/16 21:02:36 executing program 6: mmap(&(0x7f0000000000/0x2e000)=nil, 0x2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f000002f000-0x15)='/proc/self/net/pfkey\x00', 0x100, 0x0) mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000030000-0xc)={0x0}, &(0x7f0000030000-0x4)=0xc) perf_event_open(&(0x7f0000030000-0x78)={0x4, 0x78, 0x2, 0x9, 0x766, 0x7f, 0x0, 0x6, 0x28004, 0xf, 0x8, 0x8, 0x6a, 0x5, 0x70, 0x4, 0x5, 0x1, 0x7, 0x2, 0x20, 0x800, 0x8, 0xc0000, 0xfffffffffffffffe, 0x8000, 0x8001, 0x560, 0x4, 0x81, 0x60, 0x9, 0x14b, 0x9, 0x2, 0xfff, 0xffffffff00000000, 0x2, 0x0, 0x12e7, 0x4, @perf_config_ext={0x0, 0x1}, 0x800, 0x8, 0x8, 0x7, 0x924a, 0x2, 0xcc8}, r1, 0x4, r0, 0x1) mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f000002f000-0x6)={0x1, [0x3]}, &(0x7f000002e000)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = getpid() mmap(&(0x7f000002f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, &(0x7f000002f000)={0x0, r3}) mmap(&(0x7f0000030000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000030000)='/selinux/policy\x00', 0x0, 0x0) sync_file_range(r2, 0xfffffffffffffff8, 0x3, 0x3) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000029000-0x11)='/selinux/enforce\x00', 0x800, 0x0) shutdown(r2, 0x0) mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r5, 0x89ff, &(0x7f000000b000-0x50)={@generic="cf5f36f53f8eb57f789f4ec5bd356607", @ifru_settings={0xa7, 0x400, @sync=&(0x7f0000003000)={0x1000, 0x8e, 0x80}}}) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f000002e000)={0x1}) sendmsg$nl_route(r2, &(0x7f000001c000-0x38)={&(0x7f000000d000-0xc)={0x10}, 0xc, &(0x7f0000019000)={&(0x7f000002d000-0x10d4)=@ipv6_delroute={0x28, 0x19, 0x60d, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, [{0x101}]}]}, 0x28}, 0x1}, 0x0) mmap(&(0x7f0000031000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000031000)) 2018/02/16 21:02:36 executing program 5: socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000013000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x3}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000012000)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/16 21:02:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000f79000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000ff0000)={0x5, 0x6, 0x0, 0x1, 0x7dd28df8}) fcntl$setpipe(r1, 0x407, 0x1000020) fcntl$setpipe(r0, 0x407, 0x6) fsync(r0) 2018/02/16 21:02:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00006ae000)={0xe, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x0, []}, 0x90) r1 = syz_open_dev$vcsn(&(0x7f0000aa1000)='/dev/vcs#\x00', 0x9, 0xb41345db6c0734cf) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000039000)=0x4, 0x4) bind$bt_sco(r1, &(0x7f0000289000)={0x1f, {0x3, 0xa599, 0x0, 0x800, 0x6, 0x1}}, 0x8) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000a80000-0x1), 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00007b7000-0x4)=0x81, 0x4) 2018/02/16 21:02:36 executing program 1: r0 = creat(&(0x7f00009ef000-0x8)='./file0\x00', 0x4) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000a3e000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fchdir(r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000cc1000-0x14)={0x0, 0x9, 0xe6, 0x7793, 0x4, 0x1}, &(0x7f00005f7000)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000633000-0xa0)={r2, @in6={{0xa, 0x0, 0x3ff, @loopback={0x0, 0x1}, 0x4}}, 0x9, 0x0, 0x4, 0x9, 0x8000}, &(0x7f00001ee000-0x4)=0xa0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004af000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x1000000000}) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000020000)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000efc000)=0x9) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f000098d000-0xc)={0x6, 0x9, 0xffffffff, 0x400, 0x6, 0x8000}) 2018/02/16 21:02:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00005c8000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x7) getpgrp(r1) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00002cb000)={0x0, r1}) recvmsg(r3, &(0x7f000070c000-0x38)={&(0x7f00001d7000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r3) tkill(r1, 0x16) 2018/02/16 21:02:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00005de000-0xb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @empty}}}}, &(0x7f0000e7c000-0x4)=0xb8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000e11000-0x12)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x5c0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001ee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000356000-0x4)=0x1, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000ebc000), &(0x7f00005dc000-0x4)=0x5) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000e69000)=0x306e, 0x7236) connect$inet(r2, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000f01000-0x44)={{0x2, 0x1, @multicast1=0xe0000001}, {0x307, @random="17f61c17f5bb"}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, @generic="a56aaeee461c88d84d9dc9a982ec43a4"}) sendto$inet(r2, &(0x7f0000c96000-0x3), 0x0, 0x0, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvfrom$inet(r2, &(0x7f000046a000)=""/225, 0xe1, 0x0, &(0x7f0000503000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f000030e000-0xc)={0x0, 0x5, 0x7d2e997db0429812}, &(0x7f00000a3000)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000ee9000-0x8)={r3, 0xc6}, &(0x7f00001d3000)=0x8) [ 41.583254] [ 41.584925] ====================================================== [ 41.591225] WARNING: possible circular locking dependency detected [ 41.597529] 4.16.0-rc1+ #315 Not tainted [ 41.601575] ------------------------------------------------------ [ 41.607883] syz-executor4/5578 is trying to acquire lock: [ 41.613402] (sk_lock-AF_INET6){+.+.}, at: [<000000007eeebcc9>] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 41.622868] [ 41.622868] but task is already holding lock: [ 41.628828] (rtnl_mutex){+.+.}, at: [<00000000c2229c3c>] rtnl_lock+0x17/0x20 [ 41.636110] [ 41.636110] which lock already depends on the new lock. [ 41.636110] [ 41.644415] [ 41.644415] the existing dependency chain (in reverse order) is: [ 41.652009] [ 41.652009] -> #2 (rtnl_mutex){+.+.}: [ 41.657273] __mutex_lock+0x16f/0x1a80 [ 41.661655] mutex_lock_nested+0x16/0x20 [ 41.666210] rtnl_lock+0x17/0x20 [ 41.670074] unregister_netdevice_notifier+0x91/0x4e0 [ 41.675760] tee_tg_destroy+0x61/0xc0 [ 41.680068] cleanup_entry+0x218/0x350 [ 41.684448] __do_replace+0x79d/0xa50 [ 41.688748] do_ipt_set_ctl+0x40f/0x5f0 [ 41.693219] nf_setsockopt+0x67/0xc0 [ 41.697427] ip_setsockopt+0x97/0xa0 [ 41.701636] raw_setsockopt+0xb7/0xd0 [ 41.705929] sock_common_setsockopt+0x95/0xd0 [ 41.710919] SyS_setsockopt+0x189/0x360 [ 41.715392] do_syscall_64+0x280/0x940 [ 41.719864] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.725551] [ 41.725551] -> #1 (&xt[i].mutex){+.+.}: [ 41.730988] __mutex_lock+0x16f/0x1a80 [ 41.735373] mutex_lock_nested+0x16/0x20 [ 41.739930] xt_find_table_lock+0x3e/0x3e0 [ 41.744655] xt_request_find_table_lock+0x28/0xc0 [ 41.749991] get_info+0x154/0x690 [ 41.753939] do_ip6t_get_ctl+0x159/0xaf0 [ 41.758492] nf_getsockopt+0x6a/0xc0 [ 41.762698] ipv6_getsockopt+0x1df/0x2e0 [ 41.767259] tcp_getsockopt+0x82/0xd0 [ 41.771553] sock_common_getsockopt+0x95/0xd0 [ 41.776540] SyS_getsockopt+0x178/0x340 [ 41.781009] do_syscall_64+0x280/0x940 [ 41.785391] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.791069] [ 41.791069] -> #0 (sk_lock-AF_INET6){+.+.}: [ 41.796850] lock_acquire+0x1d5/0x580 [ 41.801228] lock_sock_nested+0xc2/0x110 [ 41.805781] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 41.811290] ipv6_setsockopt+0xd7/0x130 [ 41.815760] dccp_setsockopt+0x85/0xd0 [ 41.820138] sock_common_setsockopt+0x95/0xd0 [ 41.825125] SyS_setsockopt+0x189/0x360 [ 41.829595] do_syscall_64+0x280/0x940 [ 41.833977] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.839655] [ 41.839655] other info that might help us debug this: [ 41.839655] [ 41.847775] Chain exists of: [ 41.847775] sk_lock-AF_INET6 --> &xt[i].mutex --> rtnl_mutex [ 41.847775] [ 41.858067] Possible unsafe locking scenario: [ 41.858067] [ 41.864094] CPU0 CPU1 [ 41.868730] ---- ---- [ 41.873368] lock(rtnl_mutex); [ 41.876620] lock(&xt[i].mutex); [ 41.882564] lock(rtnl_mutex); [ 41.888427] lock(sk_lock-AF_INET6); [ 41.892200] [ 41.892200] *** DEADLOCK *** [ 41.892200] [ 41.898238] 1 lock held by syz-executor4/5578: [ 41.902786] #0: (rtnl_mutex){+.+.}, at: [<00000000c2229c3c>] rtnl_lock+0x17/0x20 [ 41.910475] [ 41.910475] stack backtrace: [ 41.914944] CPU: 1 PID: 5578 Comm: syz-executor4 Not tainted 4.16.0-rc1+ #315 [ 41.922184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.931508] Call Trace: [ 41.934076] dump_stack+0x194/0x257 [ 41.937677] ? arch_local_irq_restore+0x53/0x53 [ 41.942322] print_circular_bug.isra.38+0x2cd/0x2dc [ 41.947310] ? save_trace+0xe0/0x2b0 [ 41.950997] __lock_acquire+0x30a8/0x3e00 [ 41.955124] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 41.960283] ? rtnl_lock+0x17/0x20 [ 41.963802] ? __mutex_lock+0x16f/0x1a80 [ 41.967835] ? rtnl_lock+0x17/0x20 [ 41.971349] ? rtnl_lock+0x17/0x20 [ 41.974863] ? mutex_lock_io_nested+0x1900/0x1900 [ 41.979677] ? find_held_lock+0x35/0x1d0 [ 41.983713] ? print_irqtrace_events+0x270/0x270 [ 41.988442] ? lock_downgrade+0x980/0x980 [ 41.992564] ? lock_downgrade+0x980/0x980 [ 41.996684] ? print_irqtrace_events+0x270/0x270 [ 42.001411] ? __lock_acquire+0x664/0x3e00 [ 42.005620] ? do_raw_spin_trylock+0x190/0x190 [ 42.010174] ? check_noncircular+0x20/0x20 [ 42.014381] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 42.019457] ? __lock_acquire+0x664/0x3e00 [ 42.023664] ? find_held_lock+0x35/0x1d0 [ 42.027703] lock_acquire+0x1d5/0x580 [ 42.031477] ? lock_sock_nested+0xa3/0x110 [ 42.035683] ? lock_acquire+0x1d5/0x580 [ 42.039633] ? do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 42.044796] ? lock_release+0xa40/0xa40 [ 42.048745] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 42.054600] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 42.060455] ? do_raw_spin_trylock+0x190/0x190 [ 42.065010] ? lock_sock_nested+0x44/0x110 [ 42.069221] lock_sock_nested+0xc2/0x110 [ 42.073255] ? do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 42.078417] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 42.083406] ? ipv6_update_options+0x330/0x330 [ 42.087961] ? check_noncircular+0x20/0x20 [ 42.092168] ? check_noncircular+0x20/0x20 [ 42.096375] ? finish_task_switch+0x1c0/0x860 [ 42.100843] ? lock_downgrade+0x980/0x980 [ 42.104965] ? find_held_lock+0x35/0x1d0 [ 42.109005] ? avc_has_perm+0x35e/0x680 [ 42.112953] ? lock_downgrade+0x980/0x980 [ 42.117074] ? lock_release+0xa40/0xa40 [ 42.121024] ? lock_downgrade+0x980/0x980 [ 42.125146] ? lock_release+0xa40/0xa40 [ 42.129091] ? __lock_is_held+0xb6/0x140 [ 42.133128] ? avc_has_perm+0x43e/0x680 [ 42.137074] ? avc_has_perm_noaudit+0x520/0x520 [ 42.141719] ? iterate_fd+0x3f0/0x3f0 [ 42.145490] ? __sched_text_start+0x8/0x8 [ 42.149612] ? __lock_is_held+0xb6/0x140 [ 42.153649] ? sock_has_perm+0x2a4/0x420 [ 42.157683] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 42.163022] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 42.168702] ? selinux_netlbl_sock_rcv_skb+0x730/0x730 [ 42.173956] ipv6_setsockopt+0xd7/0x130 [ 42.177903] ? ipv6_setsockopt+0xd7/0x130 [ 42.182028] dccp_setsockopt+0x85/0xd0 [ 42.185892] sock_common_setsockopt+0x95/0xd0 [ 42.190362] SyS_setsockopt+0x189/0x360 [ 42.194310] ? SyS_recv+0x40/0x40 [ 42.197737] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 42.203245] ? do_syscall_64+0xb6/0x940 [ 42.207190] ? SyS_recv+0x40/0x40 [ 42.210614] do_syscall_64+0x280/0x940 [ 42.214475] ? __do_page_fault+0xc90/0xc90 [ 42.218683] ? finish_task_switch+0x1c0/0x860 [ 42.223150] ? finish_task_switch+0x181/0x860 [ 42.227616] ? syscall_return_slowpath+0x550/0x550 [ 42.232518] ? syscall_return_slowpath+0x2ac/0x550 [ 42.237422] ? prepare_exit_to_usermode+0x350/0x350 [ 42.242409] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 42.247744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.252559] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 42.257727] RIP: 0033:0x453a59 [ 42.260890] RSP: 002b:00007fc7795d7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 42.268568] RAX: ffffffffffffffda RBX: 00007fc7795d86d4 RCX: 0000000000453a59 [ 42.275810] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000013 2018/02/16 21:02:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000049000-0x8)='./file0\x00', 0x80) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000403000-0x11)='/selinux/enforce\x00', 0x111000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000e1e000)={@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast=0xffffffff}, 0x2, 0x1, 0x4, 0x3}}, {&(0x7f0000de8000)=""/12, 0xc}, &(0x7f000073b000), 0x10}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f00006f5000-0x48)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@jmp={0x5}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f000000a000)=""/195}, 0x48) 2018/02/16 21:02:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f000038d000)='/dev/amidi#\x00', 0x8, 0x121000) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00005c6000-0x18)={0x3, 0x3, 0x6, 0x4, 0x101, 0x3ff}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mprotect(&(0x7f0000cf8000/0x3000)=nil, 0x3000, 0x1000001) 2018/02/16 21:02:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x3, 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000577000)='/dev/admmidi#\x00', 0x7fff, 0x44940) sendfile(r1, r1, &(0x7f0000d1d000), 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000289000)={0x1, 0x0, 0x400, 'queue1\x00', 0x3f}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f000010b000)='/dev/dsp\x00', 0x80, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00009b5000-0x2)=0x8000, 0x2) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000f1e000-0x8)) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000034000)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f0000dd2000)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_TXQLEN={0x8, 0xd}]}, 0x3c}, 0x1}, 0x0) 2018/02/16 21:02:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000d48000-0x6e)={@random="cd3997030f00", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x38, 0x40000000003a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a2a7c8", 0x0, 0x11, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], "363296a27dd13d80"}}}}}}}, 0x0) 2018/02/16 21:02:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000ef8000)='/dev/snd/pcmC#D#p\x00', 0xb44, 0x2140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000015d000)={{0xffffffffffffffff, 0x1, 0x4, 0x1, 0xffffffffffff8001}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000c47000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) pwrite64(r6, &(0x7f0000840000-0x3f)="d30281c1d650207bfef92a581684f440357738e82c310edf1c8f6ac8d3a58ab49408718290975dfe603c37df2d3f05ee076276b7ee3c3de1dced8636eb0ede", 0x3f, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000028000-0x8)={0x0, 0x4}, &(0x7f0000b1a000-0x4)=0x8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000e07000)={0x0, @multicast2, @empty}, &(0x7f0000518000)=0xc) sendmsg$nl_route(r3, &(0x7f0000c0e000-0x38)={&(0x7f000029a000-0xc)={0x10, 0x0, 0x0, 0x400009}, 0xc, &(0x7f000006a000)={&(0x7f0000cf5000-0x30)=@ipv4_newaddr={0x30, 0x14, 0x0, 0x7, 0x1, {0x2, 0x40, 0x4d2, 0xff, r8}, [@IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_ADDRESS={0x8, 0x1, @broadcast=0xffffffff}, @IFA_FLAGS={0x8, 0x8, 0x590}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8811) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000b6f000-0x8)={r7, 0x7fff, 0x7ff}, 0x8) connect$netlink(r6, &(0x7f0000992000)=@unspec, 0xc) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000d10000-0x38)={0x13c, 0x0, [{0x0, 0xdef, 0x20000000000007, 0x0, 0x3}, {0x6, 0x455a8eca, 0x6, 0x0, 0xe732cc9}]}) [ 42.283052] RBP: 000000000071bea0 R08: 0000000000000090 R09: 0000000000000000 [ 42.290293] R10: 00000000206ae000 R11: 0000000000000246 R12: 00000000ffffffff [ 42.297536] R13: 00000000000004fd R14: 00000000006f7858 R15: 0000000000000000 2018/02/16 21:02:37 executing program 5: mmap(&(0x7f0000000000/0xd11000)=nil, 0xd11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) mmap(&(0x7f0000d11000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000c95000-0xa)='/dev/vcs#\x00', 0x401, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cc7000)={0x20002000}) socketpair(0x2, 0x807, 0xb3f4, &(0x7f0000d12000-0x8)={0x0, 0x0}) sendfile(r1, r1, &(0x7f00000a6000), 0x0) mmap(&(0x7f0000d11000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000d12000-0x78)={0x4, 0x78, 0x7, 0x2, 0x1, 0x730, 0x0, 0x2, 0x60200, 0x2, 0x9, 0x3, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x100, 0x8, 0x0, 0x7, 0xd9a, 0x80000001, 0x4, 0x2, 0x5, 0x10000, 0x401, 0x0, 0x9, 0x2, 0xfff, 0x6, 0x7fffffff, 0xaef0, 0x7ff, 0x1, 0x6, 0x4, 0x0, 0x10001, 0x0, @perf_config_ext={0xfffffffffffffeff, 0x1}, 0x80, 0x9, 0x80, 0x6, 0xb4b6, 0x2, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a}, @ifru_addrs={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}}) mmap(&(0x7f0000d12000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0x4, &(0x7f0000d12000)="4d54b927e56453dab74324ba1ff534be4297f9ee10c264c85e5137f2d999b6ef4335ecb70b9d88db2a1b050b80f5f58e7683456030723fc92b8c96b45c7717aeccafe47c7e23996d810982e19c6b6b43a8fe8f4832e6ab1435866234322c24094aafa3efa6d90ea43175f766f4d414640f") recvmmsg(r0, &(0x7f0000d10000)=[{{0x0, 0x0, &(0x7f0000891000-0x30)=[], 0x0, &(0x7f0000d0e000)=""/4096, 0x1000}}, {{&(0x7f0000d0e000)=@in={0x0, 0xffffffffffffffff, @rand_addr}, 0x10, &(0x7f0000d10000)=[{&(0x7f0000d0f000-0x6e)=""/110, 0x6e}, {&(0x7f0000071000-0xea)=""/234, 0xea}, {&(0x7f0000d0f000-0x53)=""/178, 0xb2}, {&(0x7f0000d0f000-0x3a)=""/58, 0x3a}, {&(0x7f0000408000-0xd6)=""/214, 0xd6}, {&(0x7f0000d0e000)=""/48, 0x30}], 0x6, &(0x7f0000b13000-0x9c)=""/156, 0x9c}}], 0x2, 0x10020, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2018/02/16 21:02:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00003ae000-0xa)='net/icmp6\x00') ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00006dc000)={@syzn={0x73, 0x79, 0x7a, 0x0}}) r1 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') lseek(r1, 0x0, 0x0) 2018/02/16 21:02:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!\t', 0x3) write$fuse(r0, &(0x7f0000ca3000)={0x20, 0x0, 0x0, @fuse_ioctl_out}, 0x20) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000e56000)=[], &(0x7f0000d4e000-0x8)=[&(0x7f0000ff7000)="00000000000000060804000000ff1b0c6565643b799365005ffc76"], 0x1000) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000024a000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 2018/02/16 21:02:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) mkdir(&(0x7f0000025000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000068000-0xa)='./control\x00', 0x0, 0x0) splice(r0, &(0x7f0000c71000), r0, &(0x7f0000a1a000), 0x400, 0x0) 2018/02/16 21:02:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = semget$private(0x0, 0x0, 0x40) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000906000-0x10)=[0x2, 0x7, 0xeba6, 0x1, 0x1ff, 0x85d, 0xbbc, 0x4]) r2 = syz_open_dev$dmmidi(&(0x7f0000880000)='/dev/dmmidi#\x00', 0xfd, 0x400000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00007d7000-0x4)=0x3a9, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x9, &(0x7f0000ee4000-0x98)={0xffffffffffff19f8, @in6={{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}, 0x1, 0xfffffffffffffff7}, 0x98) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000ec6000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000f6a000-0x4)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000b4f000-0xa)='sessionid\x00') 2018/02/16 21:02:37 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x101800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000df7000-0xc)={0x0, @empty, @dev}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0x3ad000)=nil, 0x3ad000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast2=0xe0000002, @empty, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r1, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/16 21:02:37 executing program 3: socket$inet(0x2, 0x800, 0x1) mmap(&(0x7f0000000000/0xf66000)=nil, 0xf66000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty}], 0x1c) sendto$inet(r0, &(0x7f0000ac1000-0x45)="c4", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f000056f000-0x4), 0x4) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000f65000)=""/20, 0x14, 0x0, &(0x7f0000f65000)=@abs, 0x8) 2018/02/16 21:02:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000199000), &(0x7f0000ad9000-0x4), &(0x7f0000f58000-0x4), &(0x7f000025e000)) mknod(&(0x7f0000433000)='./file0\x00', 0x1001, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f000080c000)=[], &(0x7f0000868000)=[]) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000535000)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000b04000)='io\x00') readv(r1, &(0x7f0000bf5000)=[{&(0x7f0000176000-0x48)=""/72, 0x48}], 0x1) sendfile(r1, r1, &(0x7f00003dc000-0x8), 0x8) creat(&(0x7f0000b7a000)='./file0\x00', 0x0) 2018/02/16 21:02:37 executing program 6: mmap(&(0x7f0000000000/0x938000)=nil, 0x938000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00002c3000)="440d5d0d010000ff03000000ec", 0xd) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00001c0000)={{0x2, 0x3, @empty}, {0x307, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}}, 0x6a, {0x2, 0x3, @empty}, @common='eql\x00'}) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001000-0x8d)=""/141, &(0x7f000015b000-0x4)=0x8d) 2018/02/16 21:02:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f57000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f000091d000)='/dev/cuse\x00', 0x100, 0x0) getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000ce3000-0xae)=""/174, &(0x7f0000ab1000)=0xae) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00002f7000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDENABIO(r2, 0x4b36) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76), 0x1}], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000fe000-0x18)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x58, 0x0, &(0x7f00000d6000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000a0a000-0x50)=[], &(0x7f0000711000)=[]}}}, @free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000f98000-0x22)}) 2018/02/16 21:02:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000ab6000), &(0x7f0000f61000)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00009d7000)={0x0}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000479000)=0x1a, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000382000-0x9)='stack\x00') pread64(r2, &(0x7f0000e4d000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000713000-0x10)={0x0, 0xb6, 0x2d, 0x7}, &(0x7f0000936000)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f000080e000)={r3, @in6={{0xa, 0x3, 0x5, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x1}}, [0x0, 0x2eaa, 0x3, 0x4800000000000000, 0x6, 0x5, 0xfffffffffffffffe, 0x2, 0x38d, 0x7, 0x1, 0x8001, 0x3f, 0x5c5, 0x80]}, &(0x7f0000042000-0x4)=0x108) 2018/02/16 21:02:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) semget$private(0x0, 0x2, 0x0) semtimedop(0x0, &(0x7f00004be000)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000249000-0x10)) unshare(0xc000000) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000c59000-0x4)=0x0) ioprio_set$pid(0x2, r0, 0x8f9) r1 = memfd_create(&(0x7f00006b1000)='\x00', 0x3) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000dd0000)) pipe2(&(0x7f0000d51000)={0x0, 0x0}, 0x800) sched_yield() setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f000012c000)=0xffffffff, 0x4) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000044000)=""/79, &(0x7f0000fa3000-0x4)=0x4f) dup(r2) 2018/02/16 21:02:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000363000)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000e4d000-0x128)={0x6, 0x0, [{0x9, 0x3, 0x0, 0x0, @sint={0x0, 0x100000000}}, {0x7fff, 0x3, 0x0, 0x0, @msi={0x7, 0x8}}, {0x1, 0x3, 0x0, 0x0, @sint={0x6, 0x1000}}, {0xfffffffffffffffa, 0x7, 0x0, 0x0, @irqchip={0x2, 0x80}}, {0x80000000, 0x3, 0x0, 0x0, @sint={0x0, 0x2}}, {0x8, 0x1, 0x0, 0x0, @irqchip={0x2, 0x3ff}}]}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x12e7, &(0x7f00009be000)) 2018/02/16 21:02:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f000028c000)='./file0\x00', 0x80000, 0x18) connect$nfc_llcp(r1, &(0x7f0000857000)={0x27, 0x80000000, 0xb5, 0x7, 0x2, 0x7, "88edc38a43c15f48b31fac19a96aaf8fd9b016d9e1ab592a1cb3a3d143c3b3076df272f6ccf2202cb75ff5556c650b51e72d9623ae310d61d8cc6599e6d8eb", 0x81}, 0x60) iopl(0x82c9) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000da3000-0x8)=0x7) [ 42.457270] audit: type=1400 audit(1518814957.494:28): avc: denied { call } for pid=5639 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 42.480779] audit: type=1400 audit(1518814957.518:29): avc: denied { transfer } for pid=5639 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/02/16 21:02:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a2c000)='/dev/ptmx\x00', 0x0, 0x0) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x0, &(0x7f000045e000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TCXONC(r0, 0x540a, 0x2) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) 2018/02/16 21:02:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000218000+0x245)={0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000654000-0xe5)=""/229, 0xe5, 0x22, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x688b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r1, 0x2000000000010d, 0x2, &(0x7f0000000000)=""/4, &(0x7f00009d7000-0x4)=0x4) 2018/02/16 21:02:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000c91000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @empty, {[]}}, @udp={0x0, 0x1, 0x8}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000e8f000-0xb)='/dev/audio\x00', 0x8000, 0x0) bind$ipx(r0, &(0x7f0000875000-0x10)={0x4, 0xfffffffffffffff7, 0x20, "b5ec90bde3e5", 0x6}, 0xfd7b) ioctl$TCFLSH(r0, 0x540b, 0xfff) openat$autofs(0xffffffffffffff9c, &(0x7f0000e13000-0xc)='/dev/autofs\x00', 0x880, 0x0) [ 42.506358] binder: 5639:5642 BC_FREE_BUFFER u00000000204edf8a no match [ 42.531662] binder_alloc: binder_alloc_mmap_handler: 5639 20000000-20002000 already mapped failed -16 [ 42.550190] binder: BINDER_SET_CONTEXT_MGR already set [ 42.557522] binder: 5639:5642 ioctl 40046207 0 returned -16 [ 42.575518] binder_alloc: 5639: binder_alloc_buf, no vma [ 42.581081] binder: 5639:5662 transaction failed 29189/-3, size 40-8 line 2957 2018/02/16 21:02:37 executing program 4: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1ff, &(0x7f0000a95000)=0x2) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) munmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000006000-0x1d)}], 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000001000-0x14)={0x0, 0x2, 0x4, 0x3, 0xad2}) 2018/02/16 21:02:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f0000e0e000-0x1c)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) sendto$inet6(r0, &(0x7f0000585000-0xee)='M', 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000140000)=""/106, 0xffffff60, 0x400000000002000, 0x0, 0x0) 2018/02/16 21:02:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00005a1000-0x1)='8', 0x1, 0x0, &(0x7f00007bd000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000b11000-0x5e)='>', 0x1, 0x0, &(0x7f000030e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$packet(0x11, 0xa, 0x300) r1 = syz_open_dev$sg(&(0x7f0000a17000-0x9)='/dev/sg#\x00', 0x10000, 0x12000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000176000)='/dev/hwrng\x00', 0x220000, 0x0) linkat(r1, &(0x7f00004fd000-0x8)='./file0\x00', r2, &(0x7f00004d0000)='./file0\x00', 0x1000) syz_emit_ethernet(0xe7f, &(0x7f00006bd000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [{[{0x9100}], {0x8100}}], {@ipv6={0x86dd, {0x0, 0x6, "44ca87", 0xe41, 0x0, 0x0, @dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "486603f4ffdd52b0b3e57ff17b3fe7b761089af7a6075bdc514f4822d07f6654aee1cbeb4ea0d7ba40319e4f399d89068e449b3e57ebec1704e5e64f8f06397b40081e9c773d37efbb284551e231919165930fe7ff759e25256952d6401a1948f147e0faea628bb0738c75f8a9031935cf1849118d00dba0ab9609d2b1a5c621a24c012b812453e97e216d95d24a409102aecec071cc62262c0b36b2d66735a4438a937048b7cb80d94a1af8a88081c7fe5f3c1e1b86e4c9de2a981963e8118f713360cb377921c73fe0a55b4b325a09d5fcc2417ef22703cac588558cb3c1a3d178d7b06755a9ccbeea32a41406d7e79e419fefe78fd9fe4e1e5be080370651569d4defe21affc5132930ae8f5ddc6a82ae71f59bfb53a8795005427ecb60d47ab9e04b2ab2e50bb244624616a2c896d2390301f4fd2b71ce6a66fcedd03015312f82a69750d827abdf9a6aa67ff298e9919bde511333ded5c9d8b2691f037b8ccd6d63fe17b6863dcf6281974ff663d2d775b077f38b7599bd14ead43a829de7168319721e35cb97a39832da43992b660243f0c6779fa8b35e0849a1517e33756e6f503c8494aae5ff26ed2a7a3cd216d642b13171d8f86a9c8c93b932b519f95d6f825e5f125914e9fe85f4823b6cd05587347a32688354d551aed37967a27b2f3c1dc59a8946d60a39f439ce82ff446f853f374e0d51f6039f674902cfd556ac5b2d36c7e015c994b6c1237d035d689f904be7c9d570224bb1a5e877f48292570f79c3df5b85076281d0fb24fee89e5520cac0ace09e6123044eb358ee7932481715ac50cf6c8dc9414d3acd16de02aeb0f7f5a3e8dae8d759a31df0a93affed859abba3c3e6c355bb54f251d6658327c4136a59f307d585f13301fda4a4459dc2c3514fadcca6380c4d875d4010e18255db045e353ab07ef3273814bfd934849ebb2efd665ad0f9b0ea7b32e2e3c685566ec5dba9b91337d5660743c32e19f6d12d14bc224c85df953696d2678532426efd823a00bef01dbbaf2bbaa3ddb8d1810958ce1ce7a4c16a23f8140b69504af0aeea27c1b6510dbd105b6e72c68ad8dfcdf603cfe69c10fc47e8cbc9cd3493cb77b41a91bf4062ae1aaa350c7490c86bc7c508911551c7a7fcd74380ca7f54988d6cebe2254b8fb70e83bdc7d0607605881f6a799e8893c818548b408dbad138fea5864f1d8be8aac285401f6c7b4f9e9212f569fb041886e900fa5b2be970e321960f4b3d37c897391f5326511e6373efc64f65a64c38cc08d6c99476dd489eb7c17cc17b360d34f91eb773713f6428ec2cdc85e1194be999a62aaca96bd062f0ce62dc3c24a9ac1a097fad6fb034e854857c61e78976b96db6fda795058ea749209f32bb0999ca697019704f9bb55be01cb8059862884f95f3c4e60ae0fcc24780f776cf46ac0b0b75774780d8c09a2c327ed2a6b578fae78b9841889ccc89113ecffc3a8328a3b57a9ee5c32ba4152ad6c774a5a93ee8a29ce5a2ddca17fce5fa2e8be5eaa2767b763ee5fbf9bc725e28f531b9308584f1dc06bc0c3fe6b53dd62dbc6fa228fb111b2460963916ff6ec6869c19b141aace3f889d880c0c9b855ce7668b47b6be6e60f47cee83f8e9a600f194539fb999935e1e3bc5a63f2e339ca6eec6c950868061c542c6bff45e4b0890e94e45775b6ec734967520f05c1e9014b76eb973ee078a5065ab97f16b1e939248a091dffd9e6ce0e43197754852ae7984376d7aaaba6b5aa2ec32c852f898cd6cd8f315e752c7b02951d1f091603f52f2b51655b088aab39e1a8f7eb7f145e75246c9f696873e575a0e062e2e6008dc38e5de8bdf012a4ec65a7f6ef99dcd601b8119185e3a88e12317069aa29764d78565c364ee135d40c35bae4b2055b316152fa755c66f8f81a83646e96a5d86e9ab83c6ed95df5f4ecc47e41fb3ab40a614587f9e6fe4dde5f29429048db4895745dc7b605c54034cfd2e5078d3608eeefdb853eeb295b1e1befc431c865692e317dfe257c71d5125ee9c3bacc74d9e1544775a9268db0ba152fd98f7f303d158ad7437ef3ae0afe6a112c5be836e14f910bb863f5cee01e67c4e1b7a12012ddfd0806829191df2923103950a640ea2141fd06f3a838184ffd18035d18014755949a2e6280f060a3b2269b5faddbd3dc4330c0100ef56b2565d09ebf16e8653212477f07510a006ecc70b42ee83b4dc6ac3c15c97f895ffd1e4cce926b71a3dff1c241be482ce53f831bfcd627bbe4f6970e7ee13fae2d8434aa3577193a14d29e65bdcb3613be6d60280f7e0169cdc588f61fcc1d52178a0d769136d30f27a3ce098802354ea82c2a81d393f2e647bfdfdee1b6403f839a629c7464d5dcd8e19d3e75ac96929d497dcb8b8b67aaf4bc49c48656748a3230e322e82f0e99e7b5a85e69f56a383ff6c388c139865ba896e715fb5e1bd79684d6ead1e6044e0567a84577144aebde37dd4ff47052113f3c2326f3901bd773c2d57d743c33d01b491dae920f6bae447c7c69074931c89a45ea88f1a4197d63aa0b1425a11186dd2f433ed7fef077aa71801f4fa561002199cc1b656ed147c80ea1e5e808a41312d61a1303b065263f0a2be16953c1f4fe8a9d8103a02364a7f7d4902af5ec2ba10421f873d9e9ba496765eda220e62d9899f70af52733a9f9340e408af26411f78143d6decdbc3ff703ffb56d70d0bfe5296bdfab1df5ddccca5d9afb7dbd7933c0063c1530a786039fd01d81367a211e4a4497b3c2138f8ab7cce22a122130098f7486335fb47a7f2f055164d359c2a4490b204850f3a8068f1016291a14cee12cf4bedc01235c1c5657bbf25f1c0d2ce5332d84624da609ea27a181bcd5bb3f60aa115c6001f0f9d2ac993830b11dc16f908357b88d2c6869ac45f876897eee152d3df7e552146bcdbb27601dd7f2c66e3b0b92cdcde086023661d6e0d573de1e91c2adf700b060fb1eeb368e599e4454d31116abf88d663c122f3e7165094a9314cbe3849094086a2e7fffc8d1cff7f444e20872df54efaf38049cc9195b6faad1660256213408c5a4b27f732da1e893cd59a05e471c3d1540be57d8e2748fd6fbbd8de34adb1d5fd64a611329927fcace851d44dec50a484a05849a608ef3bca00262e9e5d1ecfadfcc503b8bfef59285844240b1cbf48ca5a68847e27166624283328d9f9bd42110f3aa2c005c8ec10be6651c30a6f67ef2cc20c83bf4feca13a8da1b04eaef77b5a32ce967da7789252077c0fa4421dcf594b836da98d369bdfa88c1e0cd232bf26d8f8ed23215c52b289c03cce8a932b89d0d645bed5a7eb3b22fedb9ac2863523ad238f204bff1358552c9de7473367893177a6e64d752036510825a3cf9d29529787049ff5f351c06700cf2043e137e4411015fbeff3b231cd108ea79c66fce77a9fdc93ae52bc636d4e39df942baab9ccb23863087f2a6d11a0584861658f6ba1219cde0ff2d67ff5db147e2d2e1fff1405d3eda9691c3326ef6ff182c6025ec367ac80928fac7a5299693df05fb3b6abeb45d7380497964520e70a8cfe43213275907c7aad241fda1285b6c5621cc0c715795341c94fd11170c924446c68c74029af95a4f3351d77aed9a9f92ac69efc54e297159ec0f58802c3b7973372e6a6811f97ee1de9a064b7c69f74c43421b87945dc35f1a740729bf5fd94ef0feaafc296178c28d9c38147d93b3864004d3e7b7e431656a1291f564bac8472fdfa0d3c8882fd467d56b1dadaeb2a696288daff1ef28047c6303fbc2115dd1f93ade61f904261d2a46c5daaef9607c0cd1a5688f71a74976ee743dd5a3fef45195e22b24b1ca955b03cd7d0282fab23878252b7723188403f95b83fe45505cf161efca221d26cedb73cba53e4beec75464b2a54fc627a3fa60c9fb5aca9ca4baadaaeddc6636074d9319c2991aadce00a289ec19cd97ae968fdfd0ec0378bc2c7c3d1faaea04fedb1a1a55e5d19c8c80dc110e7329fd16ef45c4b150bf878a6268ba2b514d1f03ef7051a931e83ff628edb6a25a836fe13461cc83eb183e286d36ec3787f0dc945af0e9136a66464831cd1f73282e6032e63676532958733b3bf321cd4f826bba9a8a8a52ffb8eca54cc487e7be615b9992626e2d0e6ac1ee9903a81c723404fd3fa4ff07b8baba908a964832bdd66e94d0dc76a3844b11d3de37a3de6a8421a88f0c413e0c5a27357cf4bd5c8999992c98b0244fd74f8cdd4761e0957566824d901a695875f28363cb4582f119d11c61e1e854d49fa8124e85dc1eb06e8aab437a2135bd99540d57404778ce741cfe28be1ebd2f471f30f6b4bab4a3a9faccb50695dd9128dee66aac2dcc8a5e758096b21d7901550dfe0cb26d128bd67c42f7de946f5b453fc572c5dd277e78c4cd687d43c25029eab824383c051fba123e32332202f4ef477e6ff469a843ccbc0d61917c07f5b5aead1cd4a5cfba6c826da394bda163edb8eb1f952bb87fe6b0ec57c9f31ab69e693c23d3a73ca9d12d433a2398bdea86f5b70530a48b4c6a45831f7136deae6781f9bb9f358271a436a8fc3118f0e44747d161d8a22f6bb29bf98bbb10f1b5f8d4a147051dd875e4b96e0101f3ddc1fe99e612f5d501e284ad7b0eb0a4063b79d3c48caea9a77bf53ffe36b8a7c303ddf0241f202b349e2205d41231ee5f1b5198586efd3272ad804ea2493c8b9bcfb231d1697ee9e63bc6c27ec0be5229cbe6892bd7cc8be7eea785345c1a8dc2b75d33d5526175025241fe203d58a88fca25e1d4802070baf3d4aedc0b0b87166b6ac7a8c8c6b2181eed41b0d4c202f2ef0857f39aec2189432dd1bae88babc1fdc7523b2df8e5b442d469995ce9597f022365435d884f4719bd05c4cbc81b9c5c9ece6f65018a59873d411e879bf02c98f2c52e144c1cec033d36d9ee006a5a3914bdda3b78aea8ba9014798f22a76c1a3cba731d64fa6f6efe1e56941"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0], "703e52ddaa1bff5bee811a80aba04db7fe8b2f7c3f8a58ddd5fa36f9a857468a2ef5148ada3c7fb706ea04968f7d219826d4a2de6168cfdcf296eb2302675e576901240ab35043de6a5192f108f3c05e0e6368de8d8ee1574e1389797ae74d09cd6d5598594b755dcd43"}}}}}}}, &(0x7f0000384000)={0x0, 0x1, [0x0]}) 2018/02/16 21:02:37 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001000), &(0x7f0000002000-0x4)=0x4) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000005000-0x16)='/selinux/checkreqprot\x00', 0x181800, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000008000)) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000009000-0x12)='/dev/snd/midiC#D#\x00', 0xffffffff00000000, 0x100) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000008000-0x1)=0x5, &(0x7f0000009000)=0xea) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000003000)={0x81, 0xfffffffffffffff8, 0x1, 0x1, 0x3, 0x8}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept(r1, &(0x7f0000005000)=@nfc, &(0x7f000000b000-0x4)=0x10) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f000000b000)={0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f000000a000)={0x0, 0x0}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f000000c000-0x8)={r3, r4}) socketpair(0x5, 0x5, 0x101, &(0x7f000000a000)) 2018/02/16 21:02:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034b000-0x5c)=""/1, 0x1}], 0x1, &(0x7f0000c23000-0x60)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) close(r0) 2018/02/16 21:02:37 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0x3)='ns\x00') fstat(r0, &(0x7f0000003000-0x44)) fchmodat(r0, &(0x7f0000002000-0x8)='./file0\x00', 0x0) 2018/02/16 21:02:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r0 = syz_open_dev$sndpcmp(&(0x7f00001b9000-0x12)='/dev/snd/pcmC#D#p\x00', 0x4, 0x214000) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00007f0000-0x10)={0x13, 0x12, &(0x7f000039a000)="fac42bff517d510dd5cc3bcdc0e165be7de4"}) 2018/02/16 21:02:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000e83000)='/dev/ashmem\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000a10000-0x50)=""/80) 2018/02/16 21:02:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xfffffffffffffef5) setsockopt$inet_tcp_int(r0, 0x6, 0x8000000014, &(0x7f0000bef000-0x4)=0xfffffffffffffffd, 0x4) sendto$inet(r0, &(0x7f0000a2d000), 0xffffffffffffff8e, 0x20000000, &(0x7f00007f4000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000d75000)={0x0, 0x400, 0x2}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000fb2000-0x4)=0x297, 0x4) r1 = dup2(r0, r0) ioctl$TIOCSBRK(r1, 0x5427) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f000023e000)='bic\x00', 0x4) getsockopt$ax25_buf(r1, 0x101, 0x0, &(0x7f0000e12000)=""/244, &(0x7f00009eb000)=0xf4) 2018/02/16 21:02:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000236000)='/dev/autofs\x00', 0x420000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000341000)='/dev/dsp\x00', 0x72042, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f000087f000)={0x2, r1}) r2 = socket$inet(0x2, 0x3, 0xec) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000a79000-0x44)={{0x2, 0xffffffffffffffff, @empty}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0xc, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, @syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/16 21:02:37 executing program 5: mmap(&(0x7f0000000000/0xb0e000)=nil, 0xb0e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xff06, &(0x7f0000ae9000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, @dev={0xac, 0x14}, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "fba762", 0x0, "e8b33e"}}}}}}, &(0x7f00003b5000)={0x0, 0x0, []}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f000029a000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00004dd000), &(0x7f0000aab000-0x4)=0xc) r1 = getpgid(0x0) mmap(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00004c8000)={0x0, 0xff}, &(0x7f0000b0e000)=0x6) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00003bb000-0x4)=@assoc_id=r2, 0x4) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000b0d000), &(0x7f0000b0e000-0x4)=0x4) tkill(r1, 0x40) [ 42.605670] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.611361] binder: release 5639:5642 transaction 5 out, still active [ 42.617972] binder: unexpected work type, 4, not freed [ 42.623254] binder: undelivered TRANSACTION_COMPLETE [ 42.628382] binder: undelivered TRANSACTION_COMPLETE [ 42.633537] binder: send failed reply for transaction 5, target dead [ 42.640055] binder: undelivered transaction 8, process died. 2018/02/16 21:02:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r0 = syz_open_dev$sndpcmp(&(0x7f00001b9000-0x12)='/dev/snd/pcmC#D#p\x00', 0x4, 0x214000) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00007f0000-0x10)={0x13, 0x12, &(0x7f000039a000)="fac42bff517d510dd5cc3bcdc0e165be7de4"}) 2018/02/16 21:02:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000fd7000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept4$unix(r0, 0x0, &(0x7f0000e63000-0x4), 0x80000) getsockopt(r0, 0x3ff, 0x80000000, &(0x7f0000f66000-0x1)=""/1, &(0x7f0000484000)=0x1) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f000045e000-0x1c)={0x15cd, 0x1, 0x4, 0x0, 0x3d0a, 0x1f, 0x7f6, 0x8, 0x8, 0x8, 0x100000001, 0xfff, 0x0, 0x6, 0x9, 0x9, 0x1, 0x1, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f000075e000-0x12)='net/ip6_flowlabel\x00') pipe2(&(0x7f00001e0000-0x8), 0x80000) connect$netrom(r0, &(0x7f0000566000-0x10)=@ax25={0x3, {"3a6aec1fc9367a"}, 0x51}, 0x10) prctl$seccomp(0x16, 0x3, &(0x7f000057f000-0x10)={0x6, &(0x7f0000c44000-0x30)=[{0x8, 0x100, 0x8001, 0x2}, {0xffffffff80000001, 0x1, 0x400, 0x942}, {0x9, 0x7129, 0x7, 0x2}, {0x836, 0x100000001, 0xc234e08, 0x2}, {0x1f, 0x3, 0x101, 0x4}, {0x6, 0x9, 0xffffffffffffff80, 0x4}]}) 2018/02/16 21:02:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000f87000-0xa)='syzkaller\x00', &(0x7f0000629000-0x5)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000bbc000-0xf)="6370757365743a2e776c616e30cc00", 0xfffffffffffffffe) add_key$user(&(0x7f000077d000)='user\x00', &(0x7f0000eac000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000c4c000-0xf9)="da149090018d86715785cb8081023443664256d5dae45590d4a22faffbb2d9fce1a1799269e8644f435e716130ef4a80e7ff3e93df26bd64c74fc9954bbeac32ac6c89bc632b29c29065a2180df752856ded112402e4f741ecc2e243fa0d264e15455ac6be5456675cfdebd6c87b35f6c74c6df956a8c743ee425dbbd8bb3c0780dee0d44c84a85a7b15f9b2cb08f4dbb01f7ac7f00ea5ed57421d3846b02c05fe6b0de18fca9bd16896cb789b0f0f0bd1b226222e7831e26c8eedf1e3b953164f8f1288b26b462b67d13f18367c4c120a39f3c3f43afb0b8adc4cc58f5c18e2ee33b67789e637a51d61d9a4108842acaaad8b8994b051f89a", 0xf9, r0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000f25000-0xa)='/dev/cuse\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000454000-0x8)={0x0, 0x1}, &(0x7f00009ed000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000361000-0x10)={0x5, 0xe, 0x5, 0x101, r2}, &(0x7f0000c6f000-0x4)=0x10) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000701000-0x11)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000741000)=[0x2, 0x9]) rt_sigpending(&(0x7f000052e000), 0x8) 2018/02/16 21:02:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x98) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000aef000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f000014d000)='./file0\x00', 0x2) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000bf7000)=0x2, 0x4) write(r2, &(0x7f0000e3b000-0x62), 0x0) r4 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000082000)={0x0, @in6={{0xa, 0x0, 0x8, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x401}}, 0x8, 0xfffffffffffffffb}, &(0x7f0000294000)=0x98) r6 = getpgid(0x0) fcntl$lock(r1, 0x6, &(0x7f00001bf000)={0x1, 0x3, 0x0, 0xc148, r6}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000cbb000)=@assoc_value={r5, 0x6d}, &(0x7f00004ba000)=0x8) write(r2, &(0x7f0000e87000-0x1), 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000002000-0x4)=0x90) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f000069d000-0x14)={@empty}, &(0x7f00004da000-0x4)=0x14) 2018/02/16 21:02:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00005e4000)={0x14, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, []}, 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f00003f6000-0x38)={&(0x7f000017f000)={0x10, 0x0, 0x0, 0x280001}, 0xc, &(0x7f0000926000)={&(0x7f00007f5000-0x34)={0x34, 0x14, 0x29, 0x7, 0x2, {0x4}, [@typed={0x20, 0x69, @binary="6bb9a9fe89cfa53553587f8f5a6962cbd98228bb3cb6b1ca"}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4) 2018/02/16 21:02:37 executing program 3: io_getevents(0x0, 0x0, 0x0, &(0x7f0000036000-0x60)=[], &(0x7f0000036000-0x10)={0x0, 0x1c9c380}) r0 = syz_open_dev$sg(&(0x7f0000b96000)='/dev/sg#\x00', 0x16b5, 0x100) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$ipx(r0, &(0x7f0000001000-0x10), &(0x7f0000311000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000001000)='nodevprocGPL,keyring(proc\x00', 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001000)=0x3f54) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001000-0x10)={0x8, &(0x7f0000858000-0x20)=[{}, {}, {}, {}, {}, {}, {}, {}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000462000-0x4)=0x3, 0x4, 0x10000, &(0x7f00004fa000), &(0x7f0000000000)=0x3, 0x9) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000001000)=0x9) socket(0x0, 0xe, 0x5) 2018/02/16 21:02:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000002000-0x12)='dns_resolver\x00', &(0x7f00000f0000)={0x73, 0x79, 0x7a}, &(0x7f0000f04000)='^}./\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00006b2000-0x15)='/proc/self/net/pfkey\x00', 0x300, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000b28000-0xc)={{0x8, 0x10001, 0x2, 0x5, 0x4, 0x9}, 0x9}) 2018/02/16 21:02:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000e50000)={0xffffffffffffff9c}) getsockname$packet(r0, &(0x7f0000d92000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f000006f000)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000898000-0xc)={0x10}, 0xc9, &(0x7f0000023000)={&(0x7f0000011000-0x204)={0x14, 0x5, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 42.712791] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 2018/02/16 21:02:37 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000055000-0x18)={0x4, 0x4, 0x1, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00005d9000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a1000-0x48)={0x1, 0x3, &(0x7f00005e3000-0x18)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x5}, [], {0x95}}, &(0x7f00009ed000)="91504c00", 0xffffffffffff8342, 0x99, &(0x7f0000d70000-0x7f)=""/153}, 0x48) 2018/02/16 21:02:37 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f00007ac000-0x12)='/dev/snd/midiC#D#\x00', 0x82f, 0x4c8000) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000682000-0x4)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000d00000)='mounts\x00') ioperm(0x4, 0x8637, 0x2) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) fallocate(r1, 0x1, 0x9, 0x3) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000a4a000)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000449000-0x40)={r2, 0x4, &(0x7f000022e000)=[0x8, 0x7c000, 0x3, 0x6], &(0x7f0000901000)=[0x7, 0x10000, 0xe45, 0x9, 0xfffffffffffffc00, 0x6, 0x100000001, 0xfffffffffffffffa, 0xf069], 0x2, 0x3, 0x3ff, &(0x7f0000c35000-0xc)=[0x8001, 0xffffffffffffffff, 0x9], &(0x7f0000643000)=[]}) ftruncate(r1, 0x3d) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000d5c000-0x4)=r1) fcntl$getownex(r0, 0x10, &(0x7f0000cf8000-0x6)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000382000)=r3) 2018/02/16 21:02:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000490000)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f00002ca000-0x10)={&(0x7f000083f000-0x68)=@ipv4_newroute={0x24, 0x18, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_FLOW={0x8, 0xb, 0x400}]}, 0x24}, 0x1}, 0x0) 2018/02/16 21:02:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000bc6000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f000011f000)=@assoc_value, &(0x7f000041a000-0x4)=0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000d2d000)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x2}) r2 = syz_open_pts(r1, 0x1) r3 = syz_open_dev$sg(&(0x7f00008fe000)='/dev/sg#\x00', 0x8, 0x10000) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000c5d000-0x8)={0x6, 0xfffffffffffffff8, 0xffffffffffffffdd, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f000091c000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f000023e000)={@multicast1=0xe0000001, @empty, r4}, 0xc) write(r2, &(0x7f0000d31000)='\f\b', 0x2) 2018/02/16 21:02:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r0, &(0x7f0000fa9000-0x1c)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000ab5000-0x72)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000cf7000)={0x0, 0xe19, 0x7, [0x2, 0xfff, 0x6, 0x3, 0x80, 0xeb, 0x7]}, &(0x7f000067a000-0x1)=0x16) sendto$inet6(r1, &(0x7f000083f000)="9dc131ebc6d45877593743755e9ebfaa247b4192a1a803114dff55ef46786a314e8f4597166267374bf0147cb4fa2a2137b3887a429a9c3c2b566d0d5274f63b42b57523c7df4fd11973171c2eb5e3aedb2b20fad113735d66cea4ac10d978f5d4a35b12d31439d4e9489516b2a5af6216a755d7d69cc9f8eb3f944d5a634a6914c2dfb6db63343a9fe9160c546ec7cfa282f033ac365492023cfd892e4851d57390a88e7e378b82e4be32cff05c5201f650dd94beef7983602010c2d8194db283007dd85e09f7d3197b31970a77eadf893de6278b7d3f3ee888c4caec166ffe", 0xe0, 0xc000, &(0x7f0000639000)={0xa, 0x3, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00004f1000-0x14)={0x0, 0xfffffffffffffffd, 0x0, 0x754, 0x5, 0x800}, &(0x7f00007db000-0x4)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000c8a000-0x10)={r2, 0x58fd}, 0xfffffffffffffe23) 2018/02/16 21:02:37 executing program 2: r0 = socket(0x15, 0x80005, 0x0) getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f00000a8000), &(0x7f0000d94000)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/dsp\x00', 0x801, 0x0) r2 = syz_open_dev$mice(&(0x7f0000362000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) mmap(&(0x7f00002a3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x114, 0x2710, &(0x7f0000102000-0x4), &(0x7f00002a4000-0x8)=0x4) sendto$unix(r0, &(0x7f00002a3000)="65cece149e145d74cba3cfdc0bc4707c49ecc9d07ab002789f23a27ae928a028be4b82de0bc2dcfb06020535b4012e6ea3fded723c2a3f03ee0328f67f3e04f3a8c54a13c77848", 0x47, 0x11, &(0x7f00002a3000)=@file={0xb9acb9299ba61174, './file0\x00'}, 0xa) 2018/02/16 21:02:37 executing program 3: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000)={0xaa, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000005000-0x10)={&(0x7f00000ea000/0x4000)=nil, 0x4000}) 2018/02/16 21:02:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00003d7000-0x12)='/dev/snd/pcmC#D#c\x00', 0x81, 0x8000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00005f3000)={0x0, @in6={{0xa, 0x1, 0x2, @loopback={0x0, 0x1}, 0x100000000}}, [0x462, 0xe2d, 0x0, 0xfffffffffffffffa, 0x7, 0x200, 0x9, 0x4, 0x1f, 0xa1e, 0xb3a, 0x9, 0x10000000, 0x100, 0x2]}, &(0x7f0000a68000)=0x108) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000f71000)={r1, @in6={{0xa, 0x0, 0x9, @empty}}, [0x7, 0x6, 0x4, 0x32, 0x8, 0xa08f, 0xfffffffffffffb29, 0x80, 0xc04, 0x7, 0x40, 0x7, 0xfffffffffffffff7, 0x3, 0x2]}, &(0x7f00001c7000)=0x108) nanosleep(&(0x7f0000f53000)={0x0, 0x1c9c380}, &(0x7f0000fde000)) syz_extract_tcp_res(&(0x7f00004a3000), 0xd16, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) r2 = syz_open_dev$mouse(&(0x7f0000e47000-0x12)='/dev/input/mouse#\x00', 0x200, 0x100) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000e24000)={0x2, 0x9}) clock_gettime(0x0, &(0x7f000080e000)) 2018/02/16 21:02:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f45000)={0x0, 0x0, &(0x7f00003c0000)={&(0x7f000015a000-0x50)={0x2, 0x15, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xd, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @in=@multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/02/16 21:02:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00004a1000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00007b2000-0x4), &(0x7f0000869000)=0x4) capset(&(0x7f0000595000-0x8)={0x19980330}, &(0x7f0000244000)) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000684000)={0x10, 0x0, 0xffffffffffffffff, 0x400001}, 0xc) 2018/02/16 21:02:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000b29000-0x10)='/dev/input/mice\x00', 0x0, 0x2c0000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00001ef000)={0x0, 0xffffffffffffffff, 0x2, 0x4, 0xf386, 0x1, 0x6, 0x50, 0x0}, &(0x7f0000c0b000)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000a32000-0x10)={r1, 0x58, &(0x7f00009f8000-0x58)=[@in6={0xa, 0x3, 0x370b3dfa, @empty, 0x1}, @in={0x2, 0x2, @multicast1=0xe0000001}, @in={0x2, 0x0, @multicast2=0xe0000002}, @in6={0xa, 0x2, 0x80, @loopback={0x0, 0x1}, 0x3}]}, &(0x7f00000b5000)=0x10) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9}, {0x3, 0x4000003}], 0x2, &(0x7f0000efe000)={0x2000}) 2018/02/16 21:02:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000022000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) writev(r2, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)=',', 0x1}], 0x1) vmsplice(r2, &(0x7f0000c57000)=[{&(0x7f0000071000-0x5c)}], 0x1, 0x0) write$fuse(r2, &(0x7f0000044000)={0x20, 0x0, 0x0, @fuse_ioctl_out}, 0x20) dup2(r0, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00006a6000-0x4)=0x3, 0x4) sendto$inet(r3, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000eea000-0x10)={0x2, 0x0, @empty}, 0x10) 2018/02/16 21:02:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x77622a85, 0x0, &(0x7f0000008000-0x8e), 0x1}], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000505000+0x3cd)={0x8, 0x0, &(0x7f0000dcf000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000c50000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000cf7000)={0x8, 0x0, &(0x7f0000f2f000)=[@decrefs={0x40046307}], 0x0, 0x0, &(0x7f0000466000-0x47)}) syz_open_dev$binder(&(0x7f00007b3000-0xd)='/dev/binder#\x00', 0x0, 0x2) 2018/02/16 21:02:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00003ea000-0x20)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) ioctl(r0, 0x5, &(0x7f000013d000-0x1000)="8b22ec652b067a107e41b5f294c776045f47c33d29ad3fd2a7b2d7d5be44d206fb9a2e06b0e76fa2e5c5a722abb9c8b2bc0eeb6a3c5dc6087bf32da244f1574b1719d15863a2bb2399e8fd562c5dc3578dd175e58911bc0e0643db6614ea96bb094001b85d9e5b0984cae178d7b2fa52bc392c5d4045ebb88727ae24d9ad4cca0cb596bc80c3b192ee0f7da3cc6376ec93d9546fcc3a13be57d8941019e266fd085eddef0a182e29737cb3643b71ffd89489e3bfd3d922f52f880aeff3f3de6fa4646c15c50f21fba4a41b43235cfe92302edff137c097e5ec8452aecc335d978cea3f568c4f29689b2d9f6a2dcd1a33b7d96fb3cb9d0d95c2d8cc5ee85a29e29d75f59a0a506ec28a57d0bb255893954a368390a3f89f0b7df341dc5153477decf6472e4d8f963e9eeebf030e8695388cf64af14c167f29f3c3b1791de6941f44634520f6da0710e01fe867bce69adecd11012fd5e5d9cbf2e0678f45cf88d7eda7f1d775b8c9c90ccd5deec4237f3c15fb8cd967b135791fda8ec9a623659a5025801837a14ccc935ce17c13df71a266a5b4d1be6e859902df3d53505f44b87fb184eb8e56e207455d2a6b9de9f6c91abcbf7810a710440abf26d459bfeea9e59a62a894e7d041aa2fd89f266ce3543dee014aa7430ba204a59521374cbe28d5a26bc9def69cf07b0689f16e1e4b845ef02e8fd324343850c0049f92242cd468b97b1fb3a2099381b1ca5db4aec2886a8369aa78ab75022ff7dbb233517325256616a17778bf25adadcc09620249bb5e6f4337dd93e1374909bfa75b6354f21e07e5882b15c17713b7e16876a4b724d24d212922325d2ed8db5d4a23e00a2600b9772d364ff5570da8d3fc56bcd3e71fb1e41b85b48a707be3a21b33962a7bd744013dc1d6531a3ec7fc3a826fd521a93b8fbc76fea9c7bfc1ff266e6b2b88bb37fe187479911e81ff3669b113b6d289f4970dfd4a64e84b21c43e5533a400091b751c176bb0940eec38fe875412aae311f7a3ee7fa057685853b24d7337ef0ad3ab820d59d5fab182496284ad39510129113703f1b5f3c80f16a2d3d51c54e33bdf39a7024da7b403243f1091fcc15d4b784ef8d598381b8ba0be51921d67edd7982fba9aa719a74b3aff0e31e3a35405574e620f5dacaa005b993dbf9ad5a59dc6cf8606fb7d64e874ec7476960bcb8dbab12538aa8350e015cac29f86559ac8e72c7a91f5e885a89782a3b675545c844a1b26d55b734b4e85254f9e39c0dd66df32aa1bf3295f3be7b1a2c9cfb77122364d53400047def0401921168e1984ee5c86977e0e89e6a728bc0c0949f89abd67d3fd4d4584ffe98e7c3939eba4797acc0dc6c61470b5a8108862d570b9fb96f5dcce4ce5d06e9db5df21ecee62cf642a2f443b4b33b449d56791be169d94bea569f092f3d8d9eed599c1c965b80385149f8ee6f9fa51f37bb48bca9e3611a3b4efe0b8465867dbd87dffff3be25bbff40c36c8164367f42bc62a34e75b55ee214072c53cabbf3d6c714bcc5ab845bfce3644ffffd9b233f1c9b78944f8c5d32c99f4bb3e4c3d69870711a14afec546ac6d542ecb2c341b3ec9788528f1d8037260d7ef9324df615acad316db9bbb7325c293e5fb09201858e7289959972f219ebcc58c533c331ee34315f6bbedbe57aa616214b813fec059b6bed83b6067a6177fb9f4ace76543f24b9c162f4ab212ea9e23f3a5522cd2e6e5380c200a555e9652c150378f5458c4431f8d5048fefdd3b6b3216724976bd8374ef70e979e5f20a02dee020bf5b46f44d2bc47d1d592d719e382b175d70f5886ad789cefad9b9312eaf3ce441b1532d1e82fcba85286c0cb5b914c5444a0da5fd212a91ff35363e38cd6207e9cbba6793a6224f12f01712f9a48bfee2e089ff11f841e5be257f7d228f9f3c8e9c9d6c59fd4de2734a50cd49b4263f34f62a898990e63a74a3d95a442ed67e7b8d5d98f5c96ec15c971332dfa7f093b70196069fcb7ba30a012c188d1f191a6097cb195a6c26ffe35f5f124c3c10ab724a80b58b9ab02877b7908d09a0d9808f4138a1c56452dd5284ed29210aedd318ffcc69502126a8ccefc2d10747f67f0a1b1f8358371cdfe713490406db47a97cb3b0a660dee44c16a344a27f7b3684515d885f94edc119385fae5b71e3c77e9b31d707c4d1cb4e28f3d66d5662806b05f668b91bf991c166a7aa859d9fe6484ec2b9e95a658e9c63f48638e184061bbf2fa7ffc4cc07578841e83a71ed80ad4c8722338385000b9b0d46b61c28e2099dc03a260bb853d21e1f7f685b821f444bb647d62903d0befcae894ec8ce19bcacf28e0a897d5f0bf673e4acc6d5930cfdce49c04c443f14203ebb2a5f2372bc878dd8bab35567000f06f490687d0ca44dafb45691eebbb34d2628fe5df020d4820acaf1cf904aac8ce28e65dff653acd2432dd03a17e3706d99baeaa81a4d3bc92eac69aabddad26fff4bec0f66f888809f99920cedc09fd1f0ff156cdc1f0adb6ae7e1f5dc9dc02191596ad3bafc666056e8f43d2893d78399d7a9eaccb24dd2da5690d927c6666f479db89c90b7b3383454bc39ee0a3717400cc6aaa118eb8ddb16fbe22f6a1e7c312fe16af7f65f927cb31cdf45b5813d8a4bfb19521e3ff8838b6f6f47f22d54c87ee4fe37303f7a8358a50d85774eabd7509e1798765105aed3565915be65e768ab4ef7ed936df6ba987b2ba41f4e413ca22d6a28dd8cd8a825dd667e8352144751a4deeb22559d117ceaa3053b25257e74271007a98b40db0c0e43efc13f0dadf362b2842f55dabc944482a5cacf50564cd294a664df2a2fdc239998e9300780cc8a9298adf43d6f353c352660e4e39c17c90b288169204ba8f40e33ddb3ef31134b418d8781555c20638cb6050577c22e630bbd4b8ba7a8f8be688ff5e66c70b2f8a4d89fcb3d9f43a6b1ffd083463218a500930fc1de57b7ace356cdf15a605413a1f24a85af3e7177dad67b80b1c0e39f5c918c47bd2adc57faa06eedd0ebe5cdeed0d0a961df9b40312a962b113b25d5578ea24625e34c64ae9f56ede6465cee2e0dd0c523bf982dcbe7b2125a6d919cd30df9529d9eaa6d4732fb97902967240aead61a03faebb962667a2e5f5afd6dddb0e4b025d737889306d7593494e6dfb92f4bf54198a12512249ecddd96eccc30dc30dc5858b71dc1d1b1c133450303a827b3629d73e02867d8bd197eb2ab2bbe054525720619f8919c266febe82c704607cccf08d4a24ae2b9e72ada083f614b6252099c105de003c76281f7f627fe596f6a1dced57922c65bf06370275b6b12e20468f9ea08ee649cd23082822e281c091b805167e9c49ab3e69ff25985c0ffb10d15f08720675468969d221b3bc75a5907fcaea61f09708e77e287b885d09a911ea383c87064780780f562bee3c2661f31ea8a7a9f7652b8d67e2df30d079f36e95e903abb7a5d35f63e538a5efc84c96d8bcf50bb89a2fcb43921dc247076192acead9f6a4af15483dee6de4feba51de06f437e7c351e1a55832095230e682f80419424ff0a4ac09a762688d5d4a9d44a2786f0d3e2c1d12ff2fde5627d3c75a48c0ac3515696fb2ac150c0678a06d06ad236fef0ccfdccb14bee500f3c77ef931daa04e2f62ab3e8f4c8cd7ae1e56ac83cb63064d095de86b2e834d8cc94ce4e843daaf912cbbf9c07e44ca1edf3b0d631c83f163e04c581c5cc9a5b29409d623bdc0a6be7f87867d5d10594c74e7732527210faad1d597e1e6f407e378495d4af95a75487997674e4534ab12aa93a6c5c42c76f3264589ad7378b53f45575d10032322772dd10aa20de8206aef9d9bc889d11b28640c8c6a80f4729bb8e11111ab69ba8a63a01ea951507aa035156c29cae48efab65878fa50a0ca3976a475416428fe32ad465083bc98d73410c38f4b4013c52bae20ce2f4e3b815a8e29326e7c6315e1b15bd78b01c55196d58129fb886e67cb3cd11197a2c5e3e453aeb9080b97e8793c3d525f5e0d53fc86bc3e4e4a64b39f51ac971c68bb589bbce164710857d5e36b2479fc9f7eb4870e44820dc082dc360eb88c91aca9f686ff338e65847d227b7da3b356dbdf91a91311d6c6b007e554ea1ef9341ee0076d039a080de72c0010e648fdb6614873ed7a6eea393851eda2ad399d9f50bbea5c41cad9356465ba5c3df46991d6955b37ffd710632782c06b236c3b0ac7a5442f65006ffbd1fbd7906fee765e8c33b0e7404860dbfb0d5a51934b1f4625daad844947ffa46551ebd57a2f68ce253fddf09b6ac21ee80d20645d3aad3263ed6851287e59794fecca6afe0d83b467f32b4aa72402ef63871caf117d9f69a9c40d58f8682e14d47f1317e1850e000486c49d3532b4ad40f25b395be1958468b13d3a7e7fc158909954574b5b53fa85f518a2380084dde0169501017d24a9dbf5a5874f698d43baf59746a6c165a29eb32196f405e1b2d5738af25748b8713cdbd259280d42b067ff3647ff29ad46c1f58f26c4b01dd471ee7a0a6ecfb32b3aaed43c395e572e13e7e2195da6f91be31bdac9974e2ef5b856c89ba99511c65b7b48f040d5fbcd24cd403ff2aae9991a21f2b916d926971ce1a5a96506cf5c52931729319d935a367155d3e8fb99657ad0ed5717f00dc4d0db44121b03dddb47db7e2347f97bc6420b854d3567ddbb1b835858eec447e34a6a142f768a7703a8d98fe42cb835ad581d127f502f27f0b92464426e6491f8f86279ca70597f5ea0cfc03b42ab7319d53e25087fab65521c40e64dfe0eca026b55c40278198aa1360750a7cc6b6f0141f6f7475dd809266e2c8c7b09786415b221c0d317b759076881977545ad0eed49bdedc72fa9a8167e8fd75916665b8d151b9e88f3974515011a914c072922262b46d1e52fe8cc52a9ee35e381bc6c17b0f01ef1d2ea37a6c5daa1d9fd26b4b373dbd1463e5cebeca5ec245b01179cacd409222b5eecde077a218ef6541fe70dc31df28cf163bc30a5c68091971cd7ccab2313030d869aea20642d2e22f02571298b3882068495b371a2127dfa585ca2480276a9b97172a46160b3be585ebf19de21fb831dede8043759c1cf2d8c9431bab36fa6cb6f754ccb67a8ae8a6d09f64ae438f4f9d828a59d7ec05ba505c95c27f5a282432ddec84085910ecc578719ee36bfc310fbcdf1956151f7cbce5ad2895da509c4fc42b2ea7c8584e3378d3994c538a15825b75e8e2c1fcca7f95a4ee0a5f648a8c52e10c7bbca56d8d7beeb266a73e9e34791cb0b1abdc94d8c06033cc147d3635391a7474f76844c0eff260c4837c4b3378dd659e67095dfdfd88927fecd298ef6cd28c878464c6944c704ab0b5122540c32a0fd094753a672f358fc3e27605ca58ef7df7902baf0ee4aebb48e3d71a907a17e05fa2dc47d50e6dec7f226e117184af02eb9935353f525817089426953a20b8cc65419ca987ef5dcfa84cb608aec493b974e82f26dc0e7caa3108658a165d4f01cb8bebf9e9732d9d28ff653f8d7b46f811ba1085420cb0b67ad42d8ea20e8f94c98de80d2133ad1830365364d87ff76cb24457db0017cb2ef9cddf538ebedfcd64ebff3e8752f869c0e8fa8fad884582d4f6761781a132f8d05ad76f30e174b50ad09c865a2da2940eb6ceb036de9c7d25cc18934bc8e48f93408a5ab6c7900d4d3ca7ffdb124b247cc1c4f7b0c3ef557f05bb543eecc214714c5fdd3360d4cb8a0d15cb2c4d2dd1f499345b99a2134ba8e564f7cc9981f9ece23574828f738e5") connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0xffffffffffffff7f, @empty}, 0x1c) [ 42.879185] binder: 5768 invalid dec weak, ref 14 desc 0 s 1 w 0 [ 42.895333] binder_alloc: binder_alloc_mmap_handler: 5768 20000000-20002000 already mapped failed -16 [ 42.910618] binder: BINDER_SET_CONTEXT_MGR already set [ 42.916154] binder: 5768:5769 ioctl 40046207 0 returned -16 [ 42.922801] binder_alloc: 5768: binder_alloc_buf, no vma [ 42.928295] binder: 5768:5776 transaction failed 29189/-3, size 40-8 line 2957 [ 42.948439] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.956542] binder: release 5768:5769 transaction 11 out, still active [ 42.963256] binder: unexpected work type, 4, not freed [ 42.968563] binder: undelivered TRANSACTION_COMPLETE [ 42.973676] binder: send failed reply for transaction 11, target dead 2018/02/16 21:02:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000d46000)={0x1, 0x400}) sendmsg$nl_generic(r0, &(0x7f000037a000)={&(0x7f0000df8000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f0000405000-0x14)={0x14, 0x23, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x8}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 21:02:38 executing program 3: sysfs$2(0x2, 0x5, &(0x7f00007b5000-0x61)=""/97) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ax25(0x3, 0x2, 0xcf, &(0x7f0000002000-0x8)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x602, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001000-0x10)={0x7, &(0x7f00009bd000-0x1c)=[{0x7f, 0x1}, {0x6, 0x6}, {0x8000000000000000, 0x26f}, {0x3, 0x5}, {0x1000, 0x4}, {0x401, 0x6}, {0x80, 0x3}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x52) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000685000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x6, 0x4) r2 = socket$inet(0x10, 0x3, 0x2) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000fcb000)) sendmsg(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000011000-0x24)="2300000024009115460000000000001201000000000000270c41000000000014007352", 0x51}], 0x4, 0x0, 0x0, 0x4}, 0x0) fremovexattr(r2, &(0x7f00003cc000-0x1b)=@random={'security.', 'em0nodevproc$ppp0\x00'}) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000cb3000-0x18)={0x1f, 0x773, 0x9}) 2018/02/16 21:02:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00003c7000-0xf)='/dev/vhost-net\x00', 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000e65000-0x10)='/dev/input/mice\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 2018/02/16 21:02:38 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000001000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000c6f000-0x8)={0x200000004, 0x81, 0x800}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000001000-0x48)={{0x3, 0x3, 0x3, 0x2, 0xd9}, 0x8, 0x8000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x9, 0x400) sched_setaffinity(0x0, 0x8, &(0x7f0000410000)=0x6) semtimedop(r2, &(0x7f000093b000)=[], 0x0, &(0x7f0000efe000)={0x0, 0x989680}) semctl$IPC_RMID(r2, 0x0, 0x0) 2018/02/16 21:02:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000b39000-0x10)='/selinux/access\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f000025a000-0xd)='/dev/dmmidi#\x00', 0x4, 0x20003e) fstat(r1, &(0x7f0000ee6000-0x44)) getgroups(0x0, &(0x7f000057c000)=[]) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000daf000-0x8)) sendmsg$nl_generic(r1, &(0x7f0000a2f000-0x38)={&(0x7f0000f74000)={0x10}, 0xc, &(0x7f0000f9e000-0x10)={&(0x7f0000481000)={0x28, 0x1d, 0x10b, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@nested={0x14, 0x3, [@typed={0x10, 0x0, @str=')-+,}\x00'}]}]}, 0x28}, 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000451000)={0x0, 0x0}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000b87000-0x68)={0x7b, 0x0, [0x1, 0xa3, 0x623d, 0x8]}) get_robust_list(r3, &(0x7f0000bd5000)=&(0x7f0000258000), &(0x7f0000146000-0x8)=0x18) 2018/02/16 21:02:38 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000be8000)='./file0\x00', 0x800, 0x15) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00005dc000-0x44)={{0x2, 0x1, @dev={0xac, 0x14, 0x0, 0x10}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xc, {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0xe}}, @common='teql0\x00'}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00004c8000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001000-0x1)='\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host=0x2}, 0x10, 0x80800) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f000017d000-0x4)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000bad000-0x58)={0x5, 0x1, 0x2, 0x7fffffff, 0x1, [{0x0, 0x8, 0x1, 0x0, 0x0, 0x2}]}) perf_event_open(&(0x7f0000fcb000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000e85000-0x16)='/selinux/checkreqprot\x00', 0x109001, 0x0) write$selinux_load(r3, &(0x7f000009d000-0xcd)={0xf97cff8c, 0x8, 'SE Linux'}, 0x10) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000a26000-0x28)={0x5, 0x80000000, 0xff, 0x1, 0x3}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000013000)='/selinux/load\x00', 0x2, 0x0) 2018/02/16 21:02:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000cc2000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00007b5000-0x8)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000d9b000)={r1, &(0x7f0000771000)=""/76}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000d57000-0x94)=""/148) syz_emit_ethernet(0x32, &(0x7f0000372000-0x42)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x6c, 0x0, @dev={0xac, 0x14}, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, "fba762", 0x0, "e8df1c"}}}}}}, &(0x7f00003b5000)={0x0, 0x0, []}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000f8c000)={0x1, 0xd55, 0x3}) 2018/02/16 21:02:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x0, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031b000-0x8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000647000)={r0}) r4 = getpgid(0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00002d2000-0x4)=r4) socket$pppoe(0x18, 0x1, 0x0) sendto$inet(r3, &(0x7f0000d0a000)='^', 0x1, 0x9895985f7765d4c7, &(0x7f0000918000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) sendto$inet(r3, &(0x7f00009d4000-0x297)='R', 0x1, 0xc880, &(0x7f0000657000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00001e8000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x1}) 2018/02/16 21:02:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f00006e0000)='user\x00', &(0x7f00009d6000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000e8a000-0x1)="fa", 0x1, r0) r2 = add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000bee000)="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", 0x11c, r0) keyctl$dh_compute(0x17, &(0x7f00005db000)={r1, r2, r2}, &(0x7f0000e9d000-0x1)=""/1, 0x1, &(0x7f00004e5000-0x38)={&(0x7f00009a5000-0xc)={'sha3-224\x00'}, &(0x7f00005ca000)}) 2018/02/16 21:02:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) io_setup(0x4, &(0x7f00000d6000-0x8)=0x0) socketpair(0x1b, 0x1, 0x100000000, &(0x7f00004c8000)={0x0, 0x0}) io_cancel(r1, &(0x7f0000738000-0x40)={0x0, 0x0, 0x0, 0x7, 0xffff, r0, &(0x7f000074d000-0x2f)="6fdccbfbfe2f77f1d99dd43d08b534edeb8ca641323948a841026ed4968880207428ff5789c9d886f283eba7a243ef", 0x2f, 0x33, 0x0, 0x1, r3}, &(0x7f000038c000)) r4 = syz_open_pts(r0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000fa9000-0x8)={0x0, 0x8001}, &(0x7f000046f000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000026000)={0x0, 0x3}, &(0x7f00006ae000)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000406000-0xb8)={r5, 0x2, 0x3ff, 0x200, 0x0, 0x72, 0xb525, 0xffffffff, {r6, @in6={{0xa, 0x1, 0x10000, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0x7}}, 0x9, 0x1, 0x2, 0x50}}, &(0x7f0000ca2000-0x4)=0xb8) socket$inet6_udp(0xa, 0x2, 0x0) dup2(r4, r0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/16 21:02:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00001ab000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) perf_event_open(&(0x7f000023e000)={0x0, 0x78, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000d22000)}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000f14000-0x18)) r1 = syz_open_dev$adsp(&(0x7f00005fc000)='/dev/adsp#\x00', 0x1, 0x5c7141) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000090000-0x4)=0x2, 0x4) mmap$binder(&(0x7f0000661000/0x1000)=nil, 0x1000, 0x0, 0x21013, r0, 0x0) 2018/02/16 21:02:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000965000)='/selinux/mls\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r2, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2000000000000009, &(0x7f0000535000-0x4)=0x20000004, 0x0) 2018/02/16 21:02:38 executing program 4: mmap(&(0x7f0000000000/0x75d000)=nil, 0x75d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000736000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f000074d000)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000456000+0xf17)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f000085b000-0x36)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@arp={0x806, @generic={0x1, 0x0, 0x6, 0x4, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, "155a010a", @empty, "c6431b9a67d43d97039aff13005d2a44"}}}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r2, 0x80000) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000f7b000-0x8)={0x8000, 0x40, 0x1, 0x100}, 0x8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f000044f000-0x20)={0x7f, 0x3e98fdeb, 0x4, 0x5, 0x7, 0x100000001, 0x80000001, 0x8, 0x0}, &(0x7f000098f000)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000b33000)={r5, @in6={{0xa, 0x2, 0x3, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x1}}, 0x7f, 0x8, 0x9, 0x4, 0x7e64}, &(0x7f000073f000-0x4)=0xa0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$bt_sco(r4, &(0x7f0000ccb000)={0x1f, {0x0, 0x10000, 0x3, 0x1, 0x5, 0x6}}, 0x8) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00009b5000-0x50)={@empty, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000001000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x1}) [ 43.052476] QAT: Invalid ioctl [ 43.057097] QAT: Invalid ioctl [ 43.067621] netlink: 'syz-executor7': attribute type 3 has an invalid length. [ 43.083933] QAT: Invalid ioctl [ 43.097445] QAT: Invalid ioctl 2018/02/16 21:02:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f000018a000)={0x100007}, 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000dd6000)={0x7fffffff}, &(0x7f000083a000-0x8), 0x8) r1 = getpid() r2 = gettid() perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/128, 0x80) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000295000-0x10)='/dev/sequencer2\x00', 0x9a39e1925bc32e8e, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mlock2(&(0x7f0000295000/0x1000)=nil, 0x1000, 0x1) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000101000-0x4), 0x4) getresgid(&(0x7f0000620000), &(0x7f0000ca4000+0xfea), &(0x7f0000dfb000-0x4)) tgkill(r1, r2, 0x1) 2018/02/16 21:02:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0x2, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xfffffffffffffd1f, 0x800000120000001, &(0x7f0000172000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0xa}}, 0x10) mmap(&(0x7f0000000000/0xfcd000)=nil, 0xfcd000, 0x0, 0x32, 0xffffffffffffffff, 0x0) flock(r0, 0x8) recvfrom$inet(r0, &(0x7f0000f84000-0xc2)=""/194, 0xc2, 0x2, &(0x7f0000a3b000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) [ 43.120229] netlink: 'syz-executor7': attribute type 3 has an invalid length. [ 43.133965] binder_alloc: binder_alloc_mmap_handler: 5815 20661000-20662000 already mapped failed -16 [ 43.148650] binder_alloc: binder_alloc_mmap_handler: 5815 20000000-20002000 already mapped failed -16 2018/02/16 21:02:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000132000-0xc)={0x0}, &(0x7f0000655000-0x4)=0xc) setpriority(0x1, r1, 0x1f) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000ed8000)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f000066d000)={r2}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000014000)={0x77359400}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000cc7000), &(0x7f0000255000)=0x10) r3 = syz_open_dev$mouse(&(0x7f000035d000)='/dev/input/mouse#\x00', 0x100000000, 0x400000) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000be8000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x11, 0x8, "a980d453bcf0f09bb5146eee178a38f9e037fc642aeb0752f9a1c91c6cbaa45c138d92b7de20b29cd5426a4163a90ed19bea84a17d46416063fa12cee3035905", "97b2095129458af319b09d27243bf4f7b8835e2868656fc0cd5bea1da5148777f4182c15b583a30d9266eb57bc224ba34cf3b583cad2220dda81458e4b01961a", "e3ee8443088a10f2d1d55651239ba33fb852fa4790b8f5c5e534d3c6ed1f893f", [0x6, 0x7]}) 2018/02/16 21:02:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000bbd000)='/dev/audio\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000303000)={0x0}, &(0x7f0000609000+0xccb)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000a8c000-0x8)={r1, 0x40000000081}, &(0x7f0000abd000-0x4)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a08000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000023000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000006000-0x48)={{0x1, 0x0, 0x0, 0x3}}) 2018/02/16 21:02:38 executing program 7: mmap(&(0x7f0000000000/0xfcb000)=nil, 0xfcb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f000047d000-0x1b)="1b0000005e0005580000ffffa103000073eb00000000b100000480", 0x1b) mmap(&(0x7f0000fcb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000842000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f000039b000-0x14)={0x17, 0x5, 0xffffffffffff8000, 0x401, 0x3, 0x5d27, 0x9, 0x3}) 2018/02/16 21:02:38 executing program 1: mmap(&(0x7f0000000000/0xf72000)=nil, 0xf72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}], 0x10) connect$inet(r0, &(0x7f0000f70000-0x10)={0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000f71000-0x31)='P', 0x1, 0x0, &(0x7f0000ef7000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0x100000000009) socketpair(0x1, 0x6, 0x4, &(0x7f0000d5c000)={0x0}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f000088d000)) accept(r0, &(0x7f0000317000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, &(0x7f0000123000)=0x26) r2 = accept$inet(r0, &(0x7f00001cb000)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f0000001000-0x4)=0x10) listen(r0, 0x0) sendto$inet(r0, &(0x7f0000f6b000-0x3)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000a68000)={0x0, @in={{0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000450000-0x4)=0xa0) 2018/02/16 21:02:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f000018a000)={0x100007}, 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000dd6000)={0x7fffffff}, &(0x7f000083a000-0x8), 0x8) r1 = getpid() r2 = gettid() perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/128, 0x80) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000295000-0x10)='/dev/sequencer2\x00', 0x9a39e1925bc32e8e, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mlock2(&(0x7f0000295000/0x1000)=nil, 0x1000, 0x1) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000101000-0x4), 0x4) getresgid(&(0x7f0000620000), &(0x7f0000ca4000+0xfea), &(0x7f0000dfb000-0x4)) tgkill(r1, r2, 0x1) 2018/02/16 21:02:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003de000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000eb6000-0x14)={0xffffffffffffffff}) socketpair$inet6(0xa, 0x8000e, 0x1, &(0x7f0000a4e000)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000a4c000-0x4)={r1}) accept$inet6(r2, &(0x7f0000219000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @empty}, &(0x7f0000c24000-0x4)=0x1c) 2018/02/16 21:02:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000001000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000-0x4)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r0, &(0x7f0000009000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) listen(r0, 0x0) listen(r1, 0x6) r2 = syz_open_dev$sndpcmp(&(0x7f00003f5000)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x401) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000a0000)={r0, r0, 0xffff, 0x8001, &(0x7f0000b02000)="2324a24be5c097c682c52f737b4e3618e7a06bd1ce58a0d250f6573279fc25a1ec78", 0x7f, 0x7, 0x9, 0xfff, 0x3ff, 0x80000001, 0x8, "0248728a3048be8c38e57cb7b62691224717d0aded491574ab7021d963a1be54f68dedd902"}) 2018/02/16 21:02:38 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={r0, 0x3, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001000-0x18)=@add_del={0x2, &(0x7f0000002000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0xd7}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)='/dev/cuse\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00008be000)={0x2, &(0x7f0000001000-0x10)=[{0x0}, {}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000002000-0x102)={0x0, 0xfa, "82306eee1591779cc4bea19f587d51d067ff90f7b3e65df5906c89166f352d8bd1f09532a99103bc01f84721b308a07dca499f6ebaa35e991fabcc946bd94693728e445b4fedb5f6c723a4b3abcc787a18473cc08457ebffbddf566d4fc4a6b56efb189166ecf203220e6727e519621eb15eb4d56ef5b9544814b92383df8d3a8359f292d87bb64fd388dbeab9e8fea88b68c586aa6641d09be75ab19fcb49addff7eea5f6a103b796fe79bdd37cd4c021bfda8b2f3ae027ba49ca2c147c62de923e9ef1388d52d7b3e73041f97a73cbc58bdffe4e3878e7798585508a6e4cb91dac4f6150fa2497cb4017349cc45a44ef5514dfa2d103cc1818"}, &(0x7f0000001000)=0x102) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r3, @in={{0x2, 0x2, @empty}}}, &(0x7f0000001000)=0x8c) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000939000)={r2, 0x3}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000c04000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f000070f000)={{0x8000, 0x7}, 'port1\x00', 0x80, 0xfd2bde28b35581a3, 0x2, 0x4, 0xfffffffffffffed8, 0x9, 0x9, 0x0, 0x5, 0x9aff}) mmap(&(0x7f0000000000/0x21000)=nil, 0x21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000011000+0x703)={@random="cd3997030f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x19, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, []}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f000001f000-0x10)={0x0, 0x2c, &(0x7f000000c000)=[@in6={0xa, 0x0, 0x7fff, @dev={0xfe, 0x80, [], 0x0, 0x17}, 0x4}, @in={0x2, 0x3, @broadcast=0xffffffff}]}, &(0x7f0000012000-0x4)=0x10) mmap(&(0x7f0000021000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000022000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000023000-0x8)={0x3, 0xf261}) mmap(&(0x7f0000022000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000005000)={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [{[], {0x8100, 0x3, 0x8, 0x2}}], {@canfd={0xd, {{0x2, 0x3, 0x100000000, 0x2}, 0x16, 0x1, 0x0, 0x0, "aa76233d9bdecf7787097ed75a5a4af3299f26182d41b8f7204376330e445a6be613d95ab68c8f64aed8a2b6162df2c1cc2c05f460f091ae913e06f658ae0a44"}}}}, &(0x7f0000023000-0x14)={0x1, 0x3, [0x5c2, 0xd5f, 0x2e3]}) mmap(&(0x7f0000021000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000022000-0x4)=@assoc_id=r5, &(0x7f0000022000-0x4)=0x4) mmap(&(0x7f0000023000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000023000)=0x5, 0x4) write(r4, &(0x7f0000022000)="d8c0a786728b52430f2c7ce817f312a339a13ba6717c2ea19a826851dc90f24178912c9538e07eb23598816a42e4f573481c44f262352c80ecd40c1f7c37394c48b4c149234b73395c2b982f312ee8a67c69ec28716fc90c2ca38e08fcb30f742916833ff458b4ae4caa8813c8d38d659fbcfbfbe3da3e692156615bcccb42df7058790dd276ce6a2e9b405c3e43e63800bd7f7f6f9478ec7bb1e6b55d701dd235890c7340077523c5b021a57b6e064c23f505a40f486d58bea684", 0xbb) 2018/02/16 21:02:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x60002000) r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000027a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000b3b000)='/dev/input/event#\x00', 0x0, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) fcntl$setsig(r0, 0xa, 0x1c) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000301000-0x10)={0x1, 0x8, &(0x7f0000f78000-0x8)="3cf95d3be82ac76b"}) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/16 21:02:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000ba4000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000fa7000)=@un=@abs, &(0x7f0000d1d000-0x4)=0x8, 0x80000) getpeername$llc(r1, &(0x7f00006b9000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f000020f000-0x4)=0x10) 2018/02/16 21:02:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) fallocate(r0, 0x0, 0x0, 0x9) r1 = syz_open_dev$sg(&(0x7f0000251000-0x9)='/dev/sg#\x00', 0x1a, 0x480480) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00009c9000)={0x0, r0, 0x1}) 2018/02/16 21:02:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) exit(0x7ff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000024e000-0x9)='/dev/vcs\x00', 0x200102, 0x0) ioctl$TCXONC(r0, 0x540a, 0xeb28) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000750000-0x10)={r0, &(0x7f0000bbd000-0x3f)}, 0x10) syz_open_dev$midi(&(0x7f0000903000-0xb)='/dev/midi#\x00', 0x2, 0x101000) 2018/02/16 21:02:38 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) unshare(0x400) r1 = fcntl$dupfd(r0, 0x0, r0) fstat(r1, &(0x7f0000001000-0x44)) 2018/02/16 21:02:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8000+0xcfd)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000848000-0x1)='X', 0x1, 0x0, &(0x7f0000060000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000d4e000-0xcc)="22124bf925ec60bc402db4e285e249a6e42d34c8a7524db79e26ae4dab68a90d7c7c7295e66188b7d8c504fdbfd3b5fb8a090f91ed904a11c87b2fdfc115a82522a214c0334c8ee833b89ba73dbedd8b8c2de75d266ca55afc2d7c008b1f9fecdc23b3d385e31292f23f2285a453fbf003241fe4c0fb8ff32584c1fc86457bf0aa229a9a42383c059fa25b4fe4c1537e914eca2800321936869cfa80ac06f1c746c86f09d317d14768a86500b0cff148cc1dda060df6dfc26d313dcbd92989dc1b175613075222dfd889e6d2", 0xcc, 0x80, &(0x7f000025d000-0x1c)={0xa, 0x1, 0xffff, @mcast2={0xff, 0x2, [], 0x1}, 0xfff}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00008d4000-0x10)={0x1, &(0x7f0000a7e000-0x8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) close(r0) shutdown(r1, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000054a000-0x10)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0xffff) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000aef000)) 2018/02/16 21:02:38 executing program 7: unshare(0x8000000) r0 = mq_open(&(0x7f000084e000-0x10)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x1, 0x5}) setpriority(0x0, 0x0, 0x1) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6f000-0x8)={0x77359400}) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6c000-0x10)) 2018/02/16 21:02:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000000a000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000f11000-0xc)='/dev/audio#\x00', 0x10000, 0x204002) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f000085c000-0xc)={0x5, 0x5, 0x8000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00002e8000-0x40)) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000e13000)) 2018/02/16 21:02:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000789000+0x1e3)='/dev/mixer\x00', 0x86000, 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000f32000), 0x800) r1 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) 2018/02/16 21:02:38 executing program 6: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000000c000-0x10)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000f75000-0x1c)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000b61000)={0x0, 0xb}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000c9f000-0x4), 0x2f2) sendto$inet6(r2, &(0x7f0000857000-0x8f)='1', 0x1, 0x0, &(0x7f00004b0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r2, 0x0) write(r2, &(0x7f00005f0000-0x5f2)="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", 0x5dc) connect$bt_rfcomm(r1, &(0x7f0000026000-0x9)={0x1f, {0x2, 0x8, 0x4, 0x80, 0x8, 0x5}, 0x9}, 0x9) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000021000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000023000)={@syzn={0x73, 0x79, 0x7a}, 0x0}) mmap(&(0x7f0000026000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_getsetattr(r3, &(0x7f0000aaf000-0x40)={0x8, 0x5, 0x1, 0x2, 0x2, 0x401, 0x29d, 0x10001}, &(0x7f0000805000)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000026000)={r0, r3, 0x7, 0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000b000)={&(0x7f0000022000)=@delneigh={0x24, 0x1d, 0x513, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, r4}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) mmap(&(0x7f0000026000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000027000-0x18)={@dev={0xfe, 0x80, [], 0x0, 0x15}, 0x2, r4}) 2018/02/16 21:02:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000267000)='/selinux/status\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f000040a000-0x8)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000d1d000)=0x8) 2018/02/16 21:02:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8000+0xcfd)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000848000-0x1)='X', 0x1, 0x0, &(0x7f0000060000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000d4e000-0xcc)="22124bf925ec60bc402db4e285e249a6e42d34c8a7524db79e26ae4dab68a90d7c7c7295e66188b7d8c504fdbfd3b5fb8a090f91ed904a11c87b2fdfc115a82522a214c0334c8ee833b89ba73dbedd8b8c2de75d266ca55afc2d7c008b1f9fecdc23b3d385e31292f23f2285a453fbf003241fe4c0fb8ff32584c1fc86457bf0aa229a9a42383c059fa25b4fe4c1537e914eca2800321936869cfa80ac06f1c746c86f09d317d14768a86500b0cff148cc1dda060df6dfc26d313dcbd92989dc1b175613075222dfd889e6d2", 0xcc, 0x80, &(0x7f000025d000-0x1c)={0xa, 0x1, 0xffff, @mcast2={0xff, 0x2, [], 0x1}, 0xfff}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00008d4000-0x10)={0x1, &(0x7f0000a7e000-0x8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) close(r0) shutdown(r1, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000054a000-0x10)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0xffff) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000aef000)) 2018/02/16 21:02:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000ca000)='/selinux/status\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000019a000-0x10)={r0, &(0x7f0000de0000)="116f6e712385527e6233f10fd647ecb7e30e399e5570223f9be193cb3e086027fa603692ff3d78f5ff2e334ddee7670972118cca23f0ae628ee95abe3fcbc436fc04e6472aa36ea1048ed5417eb3839576b98febf6b13b4d4124e61187c70829694df98c971c89d9351dc3cdcbb275b44f7cda4c9883114a5c4c0e9af0e4b47d36e4761337890f028c5f6acbc509e98c4df323d9a31352da975cb629cade5f63124085df0ff7a97f80a2d7e5023f1d8495fe6a57e36c39805343ab0f139699216fa2cebc8d35e44525ba78fc77561a7995955a8b2311c688492d0d530d13a23a"}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r1, &(0x7f0000ee3000-0xd)=@known='security.ima\x00', &(0x7f0000daf000)=""/52, 0x34) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000e02000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r1, &(0x7f00009e7000)={&(0x7f000077a000)={0x10}, 0xc, &(0x7f0000746000)={&(0x7f000036a000-0x58)=@newneigh={0x1c, 0x1c, 0x509, 0x6, 0xffffffffffffffff, {0x2, 0x0, 0x0, r2, 0x0, 0x1}, []}, 0x1c}, 0x1}, 0x0) 2018/02/16 21:02:38 executing program 4: mmap(&(0x7f0000000000/0x33000)=nil, 0x33000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000023000)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000033000-0x40), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={0x150, 'hashlimit\x00', 0x2, {'bcsh0\x00', {0x0, 0x1f, 0x5, 0x0, 0x0, 0x3f, 0x4, 0x8, 0x18}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @common='dummy0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) connect$inet(r0, &(0x7f0000004000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) r1 = syz_open_dev$mouse(&(0x7f000000e000-0x12)='/dev/input/mouse#\x00', 0xa523, 0x1) mmap(&(0x7f0000033000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000033000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000034000-0x10)={r1, 0x28, &(0x7f0000034000-0x28)}, 0x10) 2018/02/16 21:02:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000fd000)='/dev/ppp\x00', 0x4000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000505000)='/proc/self/net/pfkey\x00', 0x6000, 0x0) recvfrom$llc(r0, &(0x7f0000456000-0xed)=""/237, 0xed, 0x1, &(0x7f0000fdb000-0x10)={0x1a, 0x17, 0x0, 0x8, 0x6, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x20, 0x7, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x200000001, @u32}]}, 0x20}, 0x1}, 0x0) 2018/02/16 21:02:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) fallocate(r0, 0x41, 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000001000+0xced)={0x2ac9}, 0x8) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000002000-0x2)=0x2, &(0x7f0000001000-0x8)=0x2) bind$alg(r0, &(0x7f0000001000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) 2018/02/16 21:02:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000dc4000)='./file0\x00', 0x4040, 0x0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) socket$bt_l2cap(0x1f, 0x0, 0x0) 2018/02/16 21:02:38 executing program 7: mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa, 0x200000000004}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x2}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002000-0x9)='/dev/vcs\x00', 0x400, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0xfffffffffffffffc, 0x4) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000002000-0x18)={0x1, 0x9, [{0x80, 0x0, 0x5}]}) 2018/02/16 21:02:38 executing program 4: mmap(&(0x7f0000001000/0x56000)=nil, 0x56000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000054000-0xd)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) write$sndseq(r0, &(0x7f0000045000-0x30)=[{0xffffffffffffffff, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x236, &(0x7f0000051000)}}], 0x30) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000057000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000042f000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}}}}}}, &(0x7f0000ea3000)={0x0, 0x0, []}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f000000d000-0x78)={0x80, {0x2, 0x2, @loopback=0x7f000001}, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, {0x2, 0x0, @rand_addr=0x300000000000000}, 0x10c, 0x7, 0xf4d, 0x1, 0x0, &(0x7f0000006000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x590a87, 0x0, 0x80000001}) openat$mixer(0xffffffffffffff9c, &(0x7f0000057000)='/dev/mixer\x00', 0x200000, 0x0) mmap(&(0x7f0000057000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000057000)=0x7fffffff) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000057000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000039000)={0x1, 0x1ff}) open_by_handle_at(r0, &(0x7f0000058000-0xec)={0xec, 0x8, "43c9cb02a2c4a4c7c0dc0ccf50fdd4bf2da9dd70eeb7240bcc89060cc8edeb23129bded0d57973bd4139ca18d8ff48e6e941de53594383ee8ed743cb3840425fe419974f935be3158c974e5959ea9e8130b0746251f7ba9d0f4ccd5a7b0feee6894ac3774576791477485a63ff93aacdce2a0c62264b30005107efe854743965e020d58511c012c757edab29dd7f6be7a94e54164efbe474dd8a6bd086026e8d4cbea66d08d4bebe4ff74188ee6c1c0634265e6da3db69074ec41c102ab10bdedf75c706a6981d13af4d48054cac1a33d4168cdb3517421965b6290bd5d72e23df85cc44"}, 0x90080) fcntl$lock(r1, 0x0, &(0x7f0000035000-0x20)={0x0, 0x4, 0x5, 0x1, r3}) 2018/02/16 21:02:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000002000-0x18)={0x0, 0x100000, 0x0, 0x9, 0x0, 0x200000000}) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d7f000-0xc)={0x0}, &(0x7f0000fc6000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000b02000-0x8)={0x0, 0x0}) move_pages(r2, 0x0, &(0x7f00007ff000)=[], &(0x7f0000896000)=[], &(0x7f00003db000)=[], 0x0) 2018/02/16 21:02:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00008ac000)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000989000)=0x6) r1 = socket(0x40000000015, 0x5, 0x0) close(r1) 2018/02/16 21:02:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000330000-0xd)='/dev/net/tun\x00', 0x0, 0x60040) syz_open_dev$sndseq(&(0x7f0000768000)='/dev/snd/seq\x00', 0x0, 0x80040) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000916000)={0x7, &(0x7f0000933000-0x38)=[{0x7f, 0x1, 0x5, 0x4}, {0x8, 0x9, 0x1, 0x1}, {0x0, 0x20, 0x9, 0x8}, {0xffffffff7fffffff, 0x7f, 0x9, 0x2}, {0x9, 0x2, 0xac, 0x20}, {0x7, 0x9, 0x3b, 0x7fff}, {0x1ff, 0x0, 0x9, 0x80}]}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/16 21:02:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000481000)='/dev/rfkill\x00', 0x8000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000621000)='net/rt_cache\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20000400) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00002c8000)) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) getsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f000039d000)=""/208, &(0x7f00004dd000-0x4)=0xd0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000489000-0x10)={0x0, &(0x7f0000f58000)=[]}) 2018/02/16 21:02:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000548000-0x11)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000d96000-0xb)='/dev/vcsa#\x00', 0x2003ff, 0x102) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000d69000-0x4)=r2) r3 = getpgrp(0xffffffffffffffff) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000108000-0x4)=r3) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) 2018/02/16 21:02:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000f13000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f000091e000-0x4)=0x4, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000308000-0x9)='/dev/kvm\x00', 0x0, 0x0) dup3(r1, r0, 0x80000) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00005ea000-0x20)={0xd000, &(0x7f000002d000), 0x2, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000683000)={0x0, &(0x7f000002d000), 0x2, r4, 0x7}) 2018/02/16 21:02:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000b7e000)='attr/exec\x00') 2018/02/16 21:02:38 executing program 1: syz_open_dev$sndmidi(&(0x7f000055d000)='/dev/snd/midiC#D#\x00', 0x1, 0x8000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000aff000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x108) preadv(r0, &(0x7f000072d000)=[{&(0x7f000099a000)=""/151, 0x97}, {&(0x7f000009b000-0xfa)=""/250, 0xfa}, {&(0x7f0000f1f000-0xce)=""/206, 0xce}, {&(0x7f0000de7000-0xc0)=""/192, 0xc0}, {&(0x7f0000d73000)=""/136, 0x88}], 0x5, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00002eb000-0xd)='/selinux/mls\x00', 0x0, 0x0) connect$bt_sco(r0, &(0x7f000028a000)={0x1f, {0xfff, 0x7, 0x100, 0x10001, 0x7, 0x101}}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000b14000)) 2018/02/16 21:02:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_dev$vcsn(&(0x7f0000faa000)='/dev/vcs#\x00', 0x9, 0x0) splice(r0, &(0x7f000067d000), r0, &(0x7f000026e000), 0xfe, 0x7) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000fcd000)={0x7, 0x80000001, 0x6}) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f000068c000)={r1}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000601000-0x2), 0x2) r2 = fcntl$getown(r0, 0x9) ptrace$getregs(0xe, r2, 0xdd04, &(0x7f00005ba000-0x71)=""/113) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r4, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000e06000-0x12)='/dev/loop-control\x00', 0x2040, 0x0) r6 = fcntl$dupfd(r3, 0x0, r3) connect$unix(r5, &(0x7f00004ce000)=@abs={0x1, 0x0, 0x1}, 0x8) shutdown(r6, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, &(0x7f0000fd0000)=0x200) connect$unix(r3, &(0x7f0000fce000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) r7 = accept(r4, &(0x7f00004e4000)=@hci, &(0x7f00003ea000-0x4)=0x6) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000118000)) sendto$inet6(r7, &(0x7f0000bb5000)="ce", 0x1, 0xc840, 0x0, 0x0) connect$unix(r4, &(0x7f000078a000)=@abs={0x0, 0x0, 0x3}, 0x8) 2018/02/16 21:02:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000043f000-0x8)={0x0}) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00003c1000)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tun(&(0x7f0000150000-0xa)='/dev/net/tun\x00', 0x0, 0x200141) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f000017c000)='.request_key_auth\x00', &(0x7f00003c0000)={0x73, 0x79, 0x7a}, &(0x7f00008c7000-0x1)='\x00', 0xfffffffffffffff8) r4 = add_key(&(0x7f0000c4d000-0x8)='big_key\x00', &(0x7f0000dfe000-0x5)={0x73, 0x79, 0x7a}, &(0x7f00002ab000)="c6", 0x1, r3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000915000-0xc)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000689000)={0x0}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f00007a1000-0x40)={r6, 0x4, &(0x7f0000659000)=[0x8, 0x81, 0xb04, 0x401], &(0x7f0000f48000-0xc)=[0x2, 0x3ff, 0x80], 0x1, 0x1, 0x6, &(0x7f0000df5000-0x4)=[0xcf7], &(0x7f0000198000-0x20)=[0x5, 0x3, 0x1ff, 0x6, 0x60bc, 0xfff, 0x0, 0x6c]}) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000009000)='user\x00', &(0x7f0000e95000)="8600") setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00009b4000)=0x1, 0x4) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000546000-0xc)={0x3, r1}) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f000087e000)=r7) connect$ax25(r7, &(0x7f000013e000)={0x3, {"5a483b55148b7a"}, 0x9}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a47000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_ivalue=0x91}) dup2(r1, r2) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000e10000-0x4)={0x3000000}, 0x4) 2018/02/16 21:02:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000331000)={0x1, 0x80, 0x83, 0x1}, 0x2c) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000453000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000594000-0x8)={0x0, 0x40}) flistxattr(r0, &(0x7f00006b6000)=""/54, 0x36) r2 = syz_open_dev$vcsa(&(0x7f0000f42000)='/dev/vcsa#\x00', 0x400, 0x18000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00002eb000-0xe8)={{{@in=@local, @in6=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00009ca000-0x4)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f00003c6000)={&(0x7f0000df2000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000811000)={&(0x7f0000bb5000)={0x130, 0x10, 0x25c09fa4bb4228b3, 0x608, 0x4, 0x0, {0xa, 0x0, 0x9}, [@generic="5b32901d17b698e1ac48c10ca7ddf62cfa25f1474e75ae84ae33905f7c5bc992aa8ccb1b6384c896407794fef2fb3966582153321d7a3ee66a4908d6f9f09331640743f43c5bdd", @typed={0x38, 0x26, @binary="3b128755fd6b019122476fa14a4dd4d846aa520186b4ac2e1edf84ac409c8a4696453f5f6564e2b4c4f3a456a5"}, @nested={0x3c, 0x42, [@typed={0x2c, 0x63, @binary="6f6499127fab701abfaf1f9720a9d6816f575034db3977b8bd506048e32c4c4e3556e6"}, @typed={0xc, 0x16, @uid=r3}]}, @nested={0x1c, 0x5c, [@typed={0x18, 0x37, @ipv6=@remote={0xf