[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.670397] audit: type=1400 audit(1518802515.731:6): avc: denied { map } for pid=4156 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.201' (ECDSA) to the list of known hosts. 2018/02/16 17:35:21 fuzzer started syzkaller login: [ 24.903588] audit: type=1400 audit(1518802521.964:7): avc: denied { map } for pid=4167 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/16 17:35:22 dialing manager at 10.128.0.26:42897 [ 28.347848] can: request_module (can-proto-0) failed. [ 28.357564] can: request_module (can-proto-0) failed. 2018/02/16 17:35:25 kcov=true, comps=true [ 28.909878] audit: type=1400 audit(1518802525.970:8): avc: denied { map } for pid=4167 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9074 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/16 17:35:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000aeb000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000034c000-0x20)={r3, 0x0, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000fc2000-0x20)={r3, 0x0, 0x100000100000002, r2}) 2018/02/16 17:35:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000236000-0x60), &(0x7f0000913000), &(0x7f0000f8b000), &(0x7f0000aac000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom$unix(r2, &(0x7f0000962000), 0x0, 0x0, &(0x7f0000834000-0xa)=@abs, 0x8) fcntl$setown(r1, 0x8, r0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000926000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f0000364000-0x8)='./file0\x00', 0x401, 0x0) 2018/02/16 17:35:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000308000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f000009f000-0x20)={0x0, &(0x7f000002d000), 0x2, r2, 0x2}) 2018/02/16 17:35:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000711000-0x1c)={0xa, 0x1, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000b6e000)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x8}}}}}, 0x0) 2018/02/16 17:35:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000df5000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pread64(r0, &(0x7f00003d9000)=""/127, 0x7f, 0x0) vmsplice(r1, &(0x7f00007f1000-0x10)=[{&(0x7f000000b000)='\a', 0x1}], 0x1, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000002000-0x8), 0x1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000ff3000)={0x0, 0x0, 0x7}, &(0x7f0000c16000)=0x10) 2018/02/16 17:35:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000f2a000)=0x0) fcntl$setown(r0, 0x8, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000001b000)={0x0, 0x0}) process_vm_readv(r2, &(0x7f000032a000)=[{&(0x7f0000b1d000-0xeb)=""/235, 0xeb}], 0x1, &(0x7f0000596000-0x20)=[{&(0x7f0000e68000)=""/64, 0x40}], 0x1, 0x0) 2018/02/16 17:35:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00009a4000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00001c9000)={@mcast1={0xff, 0x1, [], 0x1}, @empty, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000020007, r1}) 2018/02/16 17:35:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008d1000-0xd)='/dev/usbmon#\x00', 0x0, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000590000-0x4)=0x5, &(0x7f0000df5000-0x8)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000f63000)='./file0\x00', 0x0, 0x1) sendmsg$nl_generic(r1, &(0x7f0000017000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d000+0x379)={&(0x7f0000017000-0x30)={0x2c, 0x26, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x18, 0x0, @ipv6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}]}, 0x2c}, 0x1}, 0x0) [ 30.771524] audit: type=1400 audit(1518802527.832:9): avc: denied { map } for pid=4167 comm="syz-fuzzer" path="/root/syzkaller-shm892327568" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 30.813480] audit: type=1400 audit(1518802527.874:10): avc: denied { sys_admin } for pid=4210 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 30.827118] IPVS: ftp: loaded support on port[0] = 21 [ 30.917090] audit: type=1400 audit(1518802527.975:11): avc: denied { net_admin } for pid=4213 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 30.920447] IPVS: ftp: loaded support on port[0] = 21 [ 30.979704] IPVS: ftp: loaded support on port[0] = 21 [ 31.039043] IPVS: ftp: loaded support on port[0] = 21 [ 31.099340] IPVS: ftp: loaded support on port[0] = 21 [ 31.164463] IPVS: ftp: loaded support on port[0] = 21 [ 31.261247] IPVS: ftp: loaded support on port[0] = 21 [ 31.366084] IPVS: ftp: loaded support on port[0] = 21 [ 32.195642] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.348482] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.388621] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.600537] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.619643] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.687126] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.758416] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.998986] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.846788] audit: type=1400 audit(1518802531.907:12): avc: denied { sys_chroot } for pid=4213 comm="syz-executor2" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000df5000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pread64(r0, &(0x7f00003d9000)=""/127, 0x7f, 0x0) vmsplice(r1, &(0x7f00007f1000-0x10)=[{&(0x7f000000b000)='\a', 0x1}], 0x1, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000002000-0x8), 0x1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000ff3000)={0x0, 0x0, 0x7}, &(0x7f0000c16000)=0x10) 2018/02/16 17:35:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000308000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f000009f000-0x20)={0x0, &(0x7f000002d000), 0x2, r2, 0x2}) 2018/02/16 17:35:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000df5000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pread64(r0, &(0x7f00003d9000)=""/127, 0x7f, 0x0) vmsplice(r1, &(0x7f00007f1000-0x10)=[{&(0x7f000000b000)='\a', 0x1}], 0x1, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000002000-0x8), 0x1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000ff3000)={0x0, 0x0, 0x7}, &(0x7f0000c16000)=0x10) 2018/02/16 17:35:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000df5000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pread64(r0, &(0x7f00003d9000)=""/127, 0x7f, 0x0) vmsplice(r1, &(0x7f00007f1000-0x10)=[{&(0x7f000000b000)='\a', 0x1}], 0x1, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000002000-0x8), 0x1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000ff3000)={0x0, 0x0, 0x7}, &(0x7f0000c16000)=0x10) 2018/02/16 17:35:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000308000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f000009f000-0x20)={0x0, &(0x7f000002d000), 0x2, r2, 0x2}) 2018/02/16 17:35:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000754000)="92", 0x1, 0x0) 2018/02/16 17:35:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000308000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f000009f000-0x20)={0x0, &(0x7f000002d000), 0x2, r2, 0x2}) [ 35.184294] audit: type=1400 audit(1518802532.244:13): avc: denied { dac_override } for pid=5227 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x400000000000003, 0x87) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000a27000-0xe8)={{{@in=@rand_addr, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10002}, {}, {}, 0x0, 0xffffffffffffffff, 0x8000000000000001}, {{@in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x100000932}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) sendto$inet(r0, &(0x7f000009e000), 0x0, 0x0, &(0x7f0000de5000)={0x2, 0xffffffffffffffff, @empty}, 0x10) [ 35.208994] audit: type=1400 audit(1518802532.247:14): avc: denied { map } for pid=5227 comm="syz-executor2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14034 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 35.275483] audit: type=1400 audit(1518802532.317:15): avc: denied { net_raw } for pid=5241 comm="syz-executor2" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.341687] ptrace attach of "/root/syz-executor4"[4221] was attempted by "/root/syz-executor4"[5249] [ 35.381350] ptrace attach of "/root/syz-executor4"[4221] was attempted by "/root/syz-executor4"[5249] [ 35.464577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/16 17:35:33 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000fce000-0x16)='wlan0mime_typemd5sum,\x00', 0xfffffffffffffff9) 2018/02/16 17:35:33 executing program 2: prctl$intptr(0x2c, 0xff) 2018/02/16 17:35:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f00007ee000-0x1000)="a5", 0x1) recvfrom(r0, &(0x7f00001b5000-0xe2)=""/226, 0xfffffffffffffe49, 0x0, 0x0, 0x0) 2018/02/16 17:35:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000f2a000)=0x0) fcntl$setown(r0, 0x8, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000001b000)={0x0, 0x0}) process_vm_readv(r2, &(0x7f000032a000)=[{&(0x7f0000b1d000-0xeb)=""/235, 0xeb}], 0x1, &(0x7f0000596000-0x20)=[{&(0x7f0000e68000)=""/64, 0x40}], 0x1, 0x0) 2018/02/16 17:35:33 executing program 6: mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f000001a000-0x78)={0x0, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @rand_addr}, 0x24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019000)=@common='bridge0\x00'}) 2018/02/16 17:35:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000236000-0x60), &(0x7f0000913000), &(0x7f0000f8b000), &(0x7f0000aac000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom$unix(r2, &(0x7f0000962000), 0x0, 0x0, &(0x7f0000834000-0xa)=@abs, 0x8) fcntl$setown(r1, 0x8, r0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000926000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f0000364000-0x8)='./file0\x00', 0x401, 0x0) 2018/02/16 17:35:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) perf_event_open(&(0x7f0000274000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00006c4000-0x4)={0xffffffffffffffff}) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00009d4000-0xe8)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@multicast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000fe0000)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f000052b000)={@loopback={0x0, 0x1}, r1}, 0x14) sendmsg(r0, &(0x7f0000f04000-0x38)={&(0x7f0000917000)=@in6={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000d8e000)=[], 0x0, &(0x7f000056d000-0x260)=[{0x28, 0x29, 0x2, "1d1a2d4ba2fe516e960800000000000000e7"}], 0x28}, 0x0) [ 36.005863] ptrace attach of "/root/syz-executor4"[4221] was attempted by "/root/syz-executor4"[5291] 2018/02/16 17:35:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f00007ee000-0x1000)="a5", 0x1) recvfrom(r0, &(0x7f00001b5000-0xe2)=""/226, 0xfffffffffffffe49, 0x0, 0x0, 0x0) 2018/02/16 17:35:33 executing program 2: mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000003000-0x10)={&(0x7f000000b000-0x48)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000013000-0x38)={&(0x7f0000011000-0x10)={0x1d, r1}, 0x10, &(0x7f000000f000-0x10)={&(0x7f0000007000)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0xffffffffffffffff, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) 2018/02/16 17:35:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000017000)={0x0, 0x0, 0x0, 0x1}, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000006000-0x38)={0x0, 0x0, &(0x7f0000011000-0x30)=[], 0x0, &(0x7f0000003000-0x1000)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000f000-0x24)="240000005200910307fffd946fa200000200000000000000031d8568791ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/02/16 17:35:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000f2a000)=0x0) fcntl$setown(r0, 0x8, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000001b000)={0x0, 0x0}) process_vm_readv(r2, &(0x7f000032a000)=[{&(0x7f0000b1d000-0xeb)=""/235, 0xeb}], 0x1, &(0x7f0000596000-0x20)=[{&(0x7f0000e68000)=""/64, 0x40}], 0x1, 0x0) 2018/02/16 17:35:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) perf_event_open(&(0x7f0000274000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00006c4000-0x4)={0xffffffffffffffff}) 2018/02/16 17:35:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f00007ee000-0x1000)="a5", 0x1) recvfrom(r0, &(0x7f00001b5000-0xe2)=""/226, 0xfffffffffffffe49, 0x0, 0x0, 0x0) 2018/02/16 17:35:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000236000-0x60), &(0x7f0000913000), &(0x7f0000f8b000), &(0x7f0000aac000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom$unix(r2, &(0x7f0000962000), 0x0, 0x0, &(0x7f0000834000-0xa)=@abs, 0x8) fcntl$setown(r1, 0x8, r0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000926000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f0000364000-0x8)='./file0\x00', 0x401, 0x0) 2018/02/16 17:35:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00002c0000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000546000)={&(0x7f000026e000-0xc)={0x10}, 0xc, &(0x7f0000f76000-0x10)={&(0x7f0000213000-0x2c)=@ipv4_deladdr={0x2c, 0x15, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, @common="737907db6100000006310005fe6400"}]}, 0x2c}, 0x1}, 0x0) 2018/02/16 17:35:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f00007ee000-0x1000)="a5", 0x1) recvfrom(r0, &(0x7f00001b5000-0xe2)=""/226, 0xfffffffffffffe49, 0x0, 0x0, 0x0) 2018/02/16 17:35:33 executing program 6: truncate(&(0x7f0000589000)='./file0\x00', 0x0) 2018/02/16 17:35:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000f2a000)=0x0) fcntl$setown(r0, 0x8, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000001b000)={0x0, 0x0}) process_vm_readv(r2, &(0x7f000032a000)=[{&(0x7f0000b1d000-0xeb)=""/235, 0xeb}], 0x1, &(0x7f0000596000-0x20)=[{&(0x7f0000e68000)=""/64, 0x40}], 0x1, 0x0) 2018/02/16 17:35:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f00007ee000-0x1000)="a5", 0x1) recvfrom(r0, &(0x7f00001b5000-0xe2)=""/226, 0xfffffffffffffe49, 0x0, 0x0, 0x0) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/16 17:35:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) perf_event_open(&(0x7f0000274000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00006c4000-0x4)={0xffffffffffffffff}) [ 36.095655] ptrace attach of "/root/syz-executor4"[4221] was attempted by "/root/syz-executor4"[5319] 2018/02/16 17:35:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$selinux_validatetrans(r0, &(0x7f00005f5000)={'system_u:object_r:console_device_t:s0', 0x20, 'system_u:object_r:ssh_exec_t:s0', 0x20, 0x0, 0x0, 0x20, '/usr/sbin/ntpd\x00'}, 0x58) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) write$sndseq(r0, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r1) 2018/02/16 17:35:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000c9f000-0x4), 0x4) 2018/02/16 17:35:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f00007ee000-0x1000)="a5", 0x1) recvfrom(r0, &(0x7f00001b5000-0xe2)=""/226, 0xfffffffffffffe49, 0x0, 0x0, 0x0) 2018/02/16 17:35:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f00007ee000-0x1000)="a5", 0x1) recvfrom(r0, &(0x7f00001b5000-0xe2)=""/226, 0xfffffffffffffe49, 0x0, 0x0, 0x0) 2018/02/16 17:35:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) perf_event_open(&(0x7f0000274000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00006c4000-0x4)={0xffffffffffffffff}) 2018/02/16 17:35:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000236000-0x60), &(0x7f0000913000), &(0x7f0000f8b000), &(0x7f0000aac000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom$unix(r2, &(0x7f0000962000), 0x0, 0x0, &(0x7f0000834000-0xa)=@abs, 0x8) fcntl$setown(r1, 0x8, r0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000926000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f0000364000-0x8)='./file0\x00', 0x401, 0x0) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000019000-0x102a)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@echo={0x8}}}}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000014000)=0x80, 0x4) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f000001d000-0x4)) 2018/02/16 17:35:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000005000-0x10)={0x2, &(0x7f0000003000-0x18)=[{0xc}, {0x6}]}, 0x10) writev(r1, &(0x7f0000009000)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) [ 36.181318] ptrace attach of "/root/syz-executor4"[4221] was attempted by "/root/syz-executor4"[5340] 2018/02/16 17:35:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00006c1000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000c35000)={0x0, 0x8, [@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @empty, @link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @random="b331d8a877eb", @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}]}) 2018/02/16 17:35:33 executing program 5: mmap(&(0x7f0000000000/0x23000)=nil, 0x23000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000021000)=@mpls_getroute={0x16, 0x1a, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {0x1c}, []}, 0x1c}, 0x1}, 0x0) 2018/02/16 17:35:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000396000)={0x0, 0x2d, 0x0, @thr={&(0x7f0000471000), &(0x7f0000451000-0xd3)}}, &(0x7f0000606000-0x4)) timer_getoverrun(0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000727000)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f0000581000)=0x10) socket$inet(0x10, 0x0, 0x0) 2018/02/16 17:35:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x1, &(0x7f0000005000/0x4000)=nil) 2018/02/16 17:35:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00003d8000)='/dev/rfkill\x00', 0x205, 0x0) writev(r0, &(0x7f0000da6000)=[{&(0x7f0000b9a000-0x38)="0bf5430f080300", 0x7}], 0x1) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x9382, &(0x7f00004f8000)) 2018/02/16 17:35:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000759000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00009a5000/0x4000)=nil, 0x4000) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/02/16 17:35:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000601000)='/dev/dsp#\x00', 0x1, 0x6001) 2018/02/16 17:35:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, &(0x7f000075d000-0xad), &(0x7f000015e000-0x4), &(0x7f0000b26000-0x4), &(0x7f0000923000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ec000-0x8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 2018/02/16 17:35:33 executing program 2: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003000)=@filter={'filter\x00', 0xe, 0x4, 0x14a8, 0xffffffff, 0x0, 0x1148, 0x0, 0xffffffff, 0xffffffff, 0x13d8, 0x13d8, 0x13d8, 0xffffffff, 0x4, &(0x7f0000004000-0x40), {[{{@uncond, 0x0, 0x1100, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={0x1030, 'cgroup\x00', 0x1, {0x0, 0x1, 0x0, 0x0, "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"}}, @common=@hl={0x28, 'hl\x00'}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@frag={0x30, 'frag\x00'}, @common=@unspec=@statistic={0x38, 'statistic\x00'}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@set3={0x50, 'set\x00', 0x3}, @common=@ah={0x30, 'ah\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x1508) 2018/02/16 17:35:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, &(0x7f00003f9000+0xc8b), &(0x7f0000000000)) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x9382, &(0x7f00004f8000)) 2018/02/16 17:35:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000a0e000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@empty, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast2=0xe0000002, {[]}}, @igmp={0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}, 0x34) 2018/02/16 17:35:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000779000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000ec7000-0x8)=@file={0x0, './file0\x00'}, 0xa) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) read(r1, &(0x7f0000e40000)=""/144, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f00005e2000-0x8)=[{r1, 0xbfff}], 0x1, &(0x7f0000001000), &(0x7f0000001000), 0x8) dup2(r2, r0) 2018/02/16 17:35:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000af1000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f00007b6000)=@ethtool_pauseparam={0x14}}) 2018/02/16 17:35:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000761000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xfffffffffffffc01) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x9382, &(0x7f00004f8000)) 2018/02/16 17:35:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00003dd000)='./file0\x00', &(0x7f00004f6000-0x8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x801, &(0x7f000092f000)) lremovexattr(&(0x7f0000760000)='./file0\x00', &(0x7f0000c74000)=@random={'trusted.\x00', 'ramfs\x00'}) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x9382, &(0x7f00004f8000)) [ 36.455843] device eql entered promiscuous mode 2018/02/16 17:35:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000a78000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000145000)=[{{&(0x7f000011a000)=@alg, 0x58, &(0x7f00009fd000)=[{&(0x7f0000e29000)=""/1, 0x1}], 0x1, &(0x7f0000729000-0x77)}}, {{0x0, 0x0, &(0x7f0000f79000)=[], 0x0, &(0x7f0000d3d000)}}], 0x2, 0x2, &(0x7f0000173000-0x10)={0x77359400}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) dup3(r1, r2, 0x0) 2018/02/16 17:35:33 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000fdd000-0x14)) 2018/02/16 17:35:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000bb0000)='/dev/mixer\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00003a4000-0x138)) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) r1 = dup2(r0, r0) sendmsg(r1, &(0x7f0000e55000)={&(0x7f0000a2e000-0x10)=@ax25={0x3, {"a9b91326152e82"}}, 0x10, &(0x7f0000caf000-0x60)=[], 0x0, &(0x7f0000a13000)=[]}, 0x0) 2018/02/16 17:35:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000a0e000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@empty, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast2=0xe0000002, {[]}}, @igmp={0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}, 0x34) 2018/02/16 17:35:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00003dd000)='./file0\x00', &(0x7f00004f6000-0x8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x801, &(0x7f000092f000)) lremovexattr(&(0x7f0000760000)='./file0\x00', &(0x7f0000c74000)=@random={'trusted.\x00', 'ramfs\x00'}) 2018/02/16 17:35:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000a0e000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@empty, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast2=0xe0000002, {[]}}, @igmp={0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}, 0x34) [ 36.577473] device eql entered promiscuous mode 2018/02/16 17:35:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x10, 0x0, 'sha384-generic\x00'}, 0x58) 2018/02/16 17:35:33 executing program 1: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080044dfb, &(0x7f0000001000)) 2018/02/16 17:35:33 executing program 4: getdents64(0xffffffffffffffff, &(0x7f00007e9000-0x1000)=""/4096, 0x1000) 2018/02/16 17:35:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000082a000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000176000-0x50)) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000806, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00001dc000-0x118)="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", 0x118) 2018/02/16 17:35:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000bb0000)='/dev/mixer\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00003a4000-0x138)) 2018/02/16 17:35:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) dup2(r0, r1) 2018/02/16 17:35:33 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) fallocate(r0, 0x12, 0x0, 0x1) 2018/02/16 17:35:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000324000)=0xffffffffffffffc0, 0x4) 2018/02/16 17:35:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00003dd000)='./file0\x00', &(0x7f00004f6000-0x8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x801, &(0x7f000092f000)) lremovexattr(&(0x7f0000760000)='./file0\x00', &(0x7f0000c74000)=@random={'trusted.\x00', 'ramfs\x00'}) 2018/02/16 17:35:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000038b000)='net/arp\x00') readv(r0, &(0x7f00000d2000)=[{&(0x7f00009f2000)=""/76, 0x4c}, {&(0x7f00005c7000)=""/195, 0xc3}], 0x1000000000000191) [ 36.663101] audit: type=1400 audit(1518802533.722:16): avc: denied { create } for pid=5462 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 36.663449] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000163000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f0000009000), &(0x7f0000ae2000-0x40), &(0x7f0000001000-0x40), &(0x7f0000001000-0x8)={0x0, 0x1c9c380}, &(0x7f0000001000-0x7)={&(0x7f000023d000), 0x8}) [ 36.687125] audit: type=1400 audit(1518802533.724:17): avc: denied { write } for pid=5462 comm="syz-executor4" path="socket:[15099]" dev="sockfs" ino=15099 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 36.732149] device eql entered promiscuous mode 2018/02/16 17:35:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001ca000-0x1)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f000062e000-0x10)=[{&(0x7f0000d9d000-0x11)='\x00', 0x1}], 0x1) sendto(r1, &(0x7f000010a000-0x26)="4425063ee92413f1f0688a", 0xb, 0x0, &(0x7f0000585000-0xa)=@un=@abs, 0x8) 2018/02/16 17:35:33 executing program 1: mmap(&(0x7f0000000000/0xf94000)=nil, 0xf94000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f0000814000)={0x10}, 0xc, &(0x7f0000f88000)={&(0x7f0000c6b000-0x60)=@ipv6_newroute={0x40, 0x18, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0x24, 0x9, [{0x1f}, {0x5}, {}, {}]}]}, 0x40}, 0x1}, 0x0) 2018/02/16 17:35:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00003dd000)='./file0\x00', &(0x7f00004f6000-0x8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x801, &(0x7f000092f000)) lremovexattr(&(0x7f0000760000)='./file0\x00', &(0x7f0000c74000)=@random={'trusted.\x00', 'ramfs\x00'}) 2018/02/16 17:35:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000bb0000)='/dev/mixer\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00003a4000-0x138)) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00004e0000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000f56000)=[{&(0x7f0000f56000)="3346c901a4", 0x5}], 0x1, 0x0) 2018/02/16 17:35:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000a0e000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@empty, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast2=0xe0000002, {[]}}, @igmp={0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}, 0x34) 2018/02/16 17:35:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000acd000)={@generic="af5547464c3a8b26787b6961b10a94e8"}) 2018/02/16 17:35:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) dup2(r0, r1) [ 36.760178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pig=5473 comm=syz-executor4 [ 36.818810] audit: type=1400 audit(1518802533.879:18): avc: denied { name_bind } for pid=5481 comm="syz-executor6" src=20024 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 36.841343] audit: type=1400 audit(1518802533.879:19): avc: denied { node_bind } for pid=5481 comm="syz-executor6" src=20024 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 2018/02/16 17:35:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x2, &(0x7f000034c000-0x10)={0x1, &(0x7f0000444000)=[{0x6}]}) 2018/02/16 17:35:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00004e0000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000f56000)=[{&(0x7f0000f56000)="3346c901a4", 0x5}], 0x1, 0x0) 2018/02/16 17:35:33 executing program 1: mmap(&(0x7f0000000000/0xef7000)=nil, 0xef7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000ef0000-0x4)=0x7fd, 0x4) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000aa6000-0x4)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000e5d000), 0x4) 2018/02/16 17:35:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) [ 36.876322] device eql entered promiscuous mode [ 36.889196] audit: type=1400 audit(1518802533.945:20): avc: denied { name_connect } for pid=5481 comm="syz-executor6" dest=20024 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 36.914711] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 2018/02/16 17:35:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000063a000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001000)) 2018/02/16 17:35:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001ca000-0x1)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f000062e000-0x10)=[{&(0x7f0000d9d000-0x11)='\x00', 0x1}], 0x1) sendto(r1, &(0x7f000010a000-0x26)="4425063ee92413f1f0688a", 0xb, 0x0, &(0x7f0000585000-0xa)=@un=@abs, 0x8) 2018/02/16 17:35:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) dup2(r0, r1) 2018/02/16 17:35:34 executing program 5: mmap(&(0x7f0000afa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000afb000-0x4), &(0x7f0000afb000-0x8), 0x8001, &(0x7f00001d1000/0x1000)=nil, 0x4) 2018/02/16 17:35:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001ca000-0x1)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f000062e000-0x10)=[{&(0x7f0000d9d000-0x11)='\x00', 0x1}], 0x1) sendto(r1, &(0x7f000010a000-0x26)="4425063ee92413f1f0688a", 0xb, 0x0, &(0x7f0000585000-0xa)=@un=@abs, 0x8) 2018/02/16 17:35:34 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000017000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r0}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f000000d000), 0x8) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x7f) r1 = dup2(r0, r0) ioctl$int_in(r1, 0x5421, &(0x7f000000a000-0x8)=0x1fffffffe0) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f000000d000-0x10)=[{&(0x7f000000c000-0xef)=""/239, 0xef}], 0x1) 2018/02/16 17:35:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00004e0000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000f56000)=[{&(0x7f0000f56000)="3346c901a4", 0x5}], 0x1, 0x0) 2018/02/16 17:35:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00005e5000)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000141000-0x10)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000c6c000-0x2a)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x8}}}}}, 0x0) [ 36.987725] audit: type=1326 audit(1518802534.048:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=5503 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453a59 code=0x0 [ 37.043710] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 2018/02/16 17:35:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053c000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000b7a000-0x8)='./file0\x00', &(0x7f0000db1000-0x8)='./file0\x00', &(0x7f0000f9d000-0x5)='proc\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f000054f000-0x8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x85) getdents64(r0, &(0x7f0000f58000-0x68f)=""/1679, 0x68f) getdents64(r0, &(0x7f000017a000-0xcb)=""/203, 0xcb) 2018/02/16 17:35:34 executing program 5: mmap(&(0x7f0000000000/0xd18000)=nil, 0xd18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00005a3000)={0x1, &(0x7f0000d1e000-0x8)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000d1a000-0x1b)=""/27, &(0x7f000023e000)=0x1b) 2018/02/16 17:35:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f00004b8000)={0x10, 0x0, 0xffffffffffffffff, 0xffff}, 0xc) r1 = syz_open_dev$tun(&(0x7f0000516000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000fea000+0x815)=0x6, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000b2a000)={@common="ffffb70e7473300009dfffffff00", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc22207302"}) 2018/02/16 17:35:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00004e0000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000f56000)=[{&(0x7f0000f56000)="3346c901a4", 0x5}], 0x1, 0x0) 2018/02/16 17:35:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) dup2(r0, r1) 2018/02/16 17:35:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001ca000-0x1)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f000062e000-0x10)=[{&(0x7f0000d9d000-0x11)='\x00', 0x1}], 0x1) sendto(r1, &(0x7f000010a000-0x26)="4425063ee92413f1f0688a", 0xb, 0x0, &(0x7f0000585000-0xa)=@un=@abs, 0x8) 2018/02/16 17:35:34 executing program 1: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @empty, 0x1}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003000-0x38)={&(0x7f0000004000-0x20)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14}}}, 0x20, &(0x7f0000002000)=[{}], 0x1, &(0x7f0000001000-0x270)=[]}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001000+0xfde), 0x4) 2018/02/16 17:35:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008f7000-0x7)='mounts\x00') r1 = epoll_create(0x1f) poll(&(0x7f0000857000-0x10)=[{r1}], 0x1, 0x9b) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b59000-0xc)) mkdir(&(0x7f0000b09000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9f000-0x8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) 2018/02/16 17:35:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcc000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x1}) 2018/02/16 17:35:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000b36000-0x17)='net/ip6_tables_matches\x00') lseek(r0, 0x80a15, 0x0) 2018/02/16 17:35:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053c000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000b7a000-0x8)='./file0\x00', &(0x7f0000db1000-0x8)='./file0\x00', &(0x7f0000f9d000-0x5)='proc\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f000054f000-0x8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x85) getdents64(r0, &(0x7f0000f58000-0x68f)=""/1679, 0x68f) getdents64(r0, &(0x7f000017a000-0xcb)=""/203, 0xcb) 2018/02/16 17:35:34 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00006ae000-0x4), 0x0) 2018/02/16 17:35:34 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x0) 2018/02/16 17:35:34 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001000)=[{&(0x7f0000012000)=""/231, 0xe7}], 0x1, 0x0) [ 37.124850] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 37.143153] audit: type=1400 audit(1518802534.203:22): avc: denied { net_broadcast } for pid=5536 comm="syz-executor3" capability=11 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000002000-0x1000)=""/4, &(0x7f00005f8000)=0x4) 2018/02/16 17:35:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f000047e000-0x8), 0x8) 2018/02/16 17:35:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000f2a000)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @loopback=0x7f000001}, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000cef000-0x10)=@common='lo\x00'}) 2018/02/16 17:35:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcc000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x1}) 2018/02/16 17:35:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x331, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, r0, 0xb) 2018/02/16 17:35:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000fd1000)={@common='ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000e9f000-0x38)={&(0x7f0000a4f000-0xc)={0x10}, 0xc, &(0x7f00004e8000-0x10)={&(0x7f00008b1000)=@ipv4_newaddr={0x28, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @loopback=0x7f000001}, @IFA_FLAGS={0x8, 0x8, 0x43a}]}, 0x28}, 0x1, 0x0, 0x0, 0x80000000010}, 0x0) 2018/02/16 17:35:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053c000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000b7a000-0x8)='./file0\x00', &(0x7f0000db1000-0x8)='./file0\x00', &(0x7f0000f9d000-0x5)='proc\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f000054f000-0x8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x85) getdents64(r0, &(0x7f0000f58000-0x68f)=""/1679, 0x68f) getdents64(r0, &(0x7f000017a000-0xcb)=""/203, 0xcb) 2018/02/16 17:35:34 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003000-0x9)='/dev/ppp\x00', 0x0, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, ""/41}, &(0x7f0000003000)=0x2b) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0x4008744b, &(0x7f0000003000)=""/174) [ 38.153300] IPVS: ftp: loaded support on port[0] = 21 [ 38.399207] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/02/16 17:35:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) shmat(r0, &(0x7f0000662000/0x3000)=nil, 0x0) 2018/02/16 17:35:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000f2a000)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @loopback=0x7f000001}, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000cef000-0x10)=@common='lo\x00'}) 2018/02/16 17:35:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcc000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x1}) 2018/02/16 17:35:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f00001f7000)={0x10}, 0xc, &(0x7f0000e23000-0x10)={&(0x7f000055e000-0x1c)=@ipv6_newroute={0x1c, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, []}, 0x1c}, 0x1}, 0x0) 2018/02/16 17:35:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00003c6000-0x20)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000508000)=""/192) mincore(&(0x7f0000f51000/0x3000)=nil, 0x3000, &(0x7f0000704000-0x11)=""/17) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000059000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000aa2000-0x18)) 2018/02/16 17:35:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000cb3000-0x28)={@common='ip6gretap0\x00', &(0x7f00005ff000)=@ethtool_channels={0x3d}}) 2018/02/16 17:35:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000053c000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000b7a000-0x8)='./file0\x00', &(0x7f0000db1000-0x8)='./file0\x00', &(0x7f0000f9d000-0x5)='proc\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f000054f000-0x8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x85) getdents64(r0, &(0x7f0000f58000-0x68f)=""/1679, 0x68f) getdents64(r0, &(0x7f000017a000-0xcb)=""/203, 0xcb) 2018/02/16 17:35:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd1000-0x38)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_lifetime={0x4, 0x3}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}]}, 0xc0}, 0x1}, 0x0) 2018/02/16 17:35:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000534000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000052000)="e5fcb5bf91aa7855fbcdfef1ddb42113", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000c5a000-0x38)={&(0x7f0000db7000)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000b77000)=[], 0x0, &(0x7f00000a1000-0x10)=[{0x10, 0x117, 0x4}], 0x10}, 0x0) [ 38.813661] IPv6: Can't replace route, no match found [ 38.818381] audit: type=1400 audit(1518802535.874:23): avc: denied { ipc_owner } for pid=5725 comm="syz-executor2" capability=15 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 38.822594] IPv6: Can't replace route, no match found 2018/02/16 17:35:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000f2a000)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @loopback=0x7f000001}, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000cef000-0x10)=@common='lo\x00'}) 2018/02/16 17:35:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)='/dev/sequencer\x00', 0x1, 0x0) poll(&(0x7f000007b000)=[{r0, 0x84}, {r0}], 0x2, 0x0) 2018/02/16 17:35:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f0000176000)='user\x00', &(0x7f00009d6000-0x5)={0x73, 0x79, 0x7a}, &(0x7f000082a000-0x2)='\x00', 0x1, r0) r2 = add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000f29000-0x1000)="b33ab76079ebe0d94f729cd653e520c19ad7d97fe21769e7c4db44c249b544230ba287fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd640b336616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149be31bd78b506e8b", 0xc0, r0) keyctl$dh_compute(0x17, &(0x7f0000713000-0xc)={r1, r2, r2}, &(0x7f0000bf8000-0x45)=""/69, 0x45, &(0x7f000065a000-0x38)={&(0x7f0000169000-0x40)={'crc32-generic\x00'}}) 2018/02/16 17:35:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) shmat(r0, &(0x7f0000662000/0x3000)=nil, 0x0) 2018/02/16 17:35:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcc000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x1}) 2018/02/16 17:35:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00003c6000-0x20)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000508000)=""/192) mincore(&(0x7f0000f51000/0x3000)=nil, 0x3000, &(0x7f0000704000-0x11)=""/17) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000059000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000aa2000-0x18)) 2018/02/16 17:35:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000596000)={&(0x7f0000b6f000)=@pptp={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x20, &(0x7f00002b8000)=[], 0x0, &(0x7f000080d000)=[{0x10, 0x84, 0x8}], 0x10}, 0x0) 2018/02/16 17:35:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000023000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 2018/02/16 17:35:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000f2a000)={0x0, {0x2, 0xffffffffffffffff, @empty}, {0x2, 0xffffffffffffffff, @loopback=0x7f000001}, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000cef000-0x10)=@common='lo\x00'}) 2018/02/16 17:35:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) shmat(r0, &(0x7f0000662000/0x3000)=nil, 0x0) 2018/02/16 17:35:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00003c6000-0x20)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000508000)=""/192) mincore(&(0x7f0000f51000/0x3000)=nil, 0x3000, &(0x7f0000704000-0x11)=""/17) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000059000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000aa2000-0x18)) 2018/02/16 17:35:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)='/dev/sequencer\x00', 0x1, 0x0) poll(&(0x7f000007b000)=[{r0, 0x84}, {r0}], 0x2, 0x0) 2018/02/16 17:35:36 executing program 0: mmap(&(0x7f0000000000/0xfb4000)=nil, 0xfb4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x6c}, 0x0, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0x0, 0x9}}, 0xe8) sendto$inet6(r0, &(0x7f0000fa1000-0x2a), 0x0, 0x0, &(0x7f0000f9f000-0x1c)={0xa, 0x1, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/02/16 17:35:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00003c6000-0x20)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000508000)=""/192) mincore(&(0x7f0000f51000/0x3000)=nil, 0x3000, &(0x7f0000704000-0x11)=""/17) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000059000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000aa2000-0x18)) 2018/02/16 17:35:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000006d000/0x4000)=nil) shmat(r0, &(0x7f0000662000/0x3000)=nil, 0x0) [ 39.725748] IPVS: ftp: loaded support on port[0] = 21 [ 39.963581] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/02/16 17:35:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000246000-0x1c)={0x5, 0x1, 0x5, 0x9, 0x8}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000f7a000-0x20)={r0, &(0x7f0000e05000-0x7f), &(0x7f0000763000)}, 0x20) 2018/02/16 17:35:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f45000)={0x0, 0x0, &(0x7f00003c0000)={&(0x7f00000a4000-0x90)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @in=@multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/02/16 17:35:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)='/dev/sequencer\x00', 0x1, 0x0) poll(&(0x7f000007b000)=[{r0, 0x84}, {r0}], 0x2, 0x0) 2018/02/16 17:35:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00003c6000-0x20)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000508000)=""/192) mincore(&(0x7f0000f51000/0x3000)=nil, 0x3000, &(0x7f0000704000-0x11)=""/17) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000059000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000aa2000-0x18)) 2018/02/16 17:35:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000540000)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x8000400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00004b5000-0x4)=r1) 2018/02/16 17:35:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00003c6000-0x20)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000508000)=""/192) mincore(&(0x7f0000f51000/0x3000)=nil, 0x3000, &(0x7f0000704000-0x11)=""/17) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000059000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000aa2000-0x18)) 2018/02/16 17:35:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000a6e000)={&(0x7f0000abc000-0x80)=@generic={0xa, "daf8ffe6ffffff0001f20000000000b61b340e63f8ab691822e903e7d64ac8fef9507f000daec57f844686fbbf26093d6b53efc1cb2b880001186a68506776e9eba5ebd039273202a52700faccec35160ec64fc333c1c99287b26eaece2900727e347f814dc256ce82cb2c8080000000bff900000000000000076167b456"}, 0x80, &(0x7f000073a000)=[], 0x0, &(0x7f0000ffb000-0x260)=[]}, 0x0) 2018/02/16 17:35:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000042c000-0x28)={@common="6c6f0005f100020000b200", 0x0}) sendmsg$nl_route(r0, &(0x7f000058c000-0x38)={&(0x7f0000187000-0xc)={0x10}, 0xc, &(0x7f0000452000)={&(0x7f0000009000)=@ipv6_newaddr={0x2c, 0x14, 0xfd, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/02/16 17:35:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)='/dev/sequencer\x00', 0x1, 0x0) poll(&(0x7f000007b000)=[{r0, 0x84}, {r0}], 0x2, 0x0) 2018/02/16 17:35:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000c6a000-0x40)=[{0x4}, {}, {}, {}, {}, {}, {}, {}], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000794000-0x60)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) sendto(r0, &(0x7f00001a6000)="f1", 0x1, 0x1, &(0x7f0000210000-0x60)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75296811812f17fcb15b854768b106479b8744cc07f4ef85104f214b714432d6b762b606b112d7bdfaa9811dffe7e6bf498b64cded3bcd7ee27eb2bed57758"}, 0x60) writev(r0, &(0x7f0000699000-0x10)=[{&(0x7f0000c47000-0x660)="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", 0x419}], 0x1) 2018/02/16 17:35:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000aba000-0x10)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) getresuid(&(0x7f00001c3000), &(0x7f0000523000), &(0x7f00001da000-0x4)) sendmsg$netlink(r0, &(0x7f000008e000)={0x0, 0x0, &(0x7f0000a83000-0x60)=[{&(0x7f00002c2000-0x140)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, "", []}, 0x10}], 0x1}, 0x0) 2018/02/16 17:35:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00003bf000-0x22)="2200000018000701000700002a00071502010008002720000000000000001f009f75", 0x22) 2018/02/16 17:35:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00003c6000-0x20)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000508000)=""/192) mincore(&(0x7f0000f51000/0x3000)=nil, 0x3000, &(0x7f0000704000-0x11)=""/17) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000059000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000aa2000-0x18)) 2018/02/16 17:35:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000540000)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x8000400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00004b5000-0x4)=r1) 2018/02/16 17:35:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000540000)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x8000400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00004b5000-0x4)=r1) [ 40.388247] audit: type=1400 audit(1518802537.448:24): avc: denied { map_create } for pid=5914 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/16 17:35:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000540000)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x8000400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00004b5000-0x4)=r1) 2018/02/16 17:35:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00007a0000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, ')#2', 0x2, 0x11, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}}}}}}}, &(0x7f0000efe000)={0x0, 0x1, [0x0]}) 2018/02/16 17:35:37 executing program 3: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000005000-0x1c)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000006000-0x78)={0x2, 0x7, 0x0, 0xf, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/16 17:35:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000398000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f000098f000-0x8)=0x1461) readv(r0, &(0x7f0000dec000-0x28)=[{&(0x7f000014e000+0x671)=""/138, 0x8a}], 0x1) futex(&(0x7f0000013000-0x4), 0x0, 0x0, &(0x7f0000061000-0x10), &(0x7f00003d0000-0x4), 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000013000-0x10)={&(0x7f0000011000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 40.450271] audit: type=1400 audit(1518802537.492:25): avc: denied { map_read } for pid=5914 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/02/16 17:35:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000540000)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x8000400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00004b5000-0x4)=r1) 2018/02/16 17:35:37 executing program 4: mmap(&(0x7f0000000000/0xfc4000)=nil, 0xfc4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000fbc000-0xb0)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000fbf000)={{0x80}, 'port1\x00'}) 2018/02/16 17:35:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000c06000)=[{0x0, 0xffffffffffffffe5}], 0x1, &(0x7f0000d81000-0x10)={0x0, 0x1c9c380}) 2018/02/16 17:35:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000540000)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x8000400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00004b5000-0x4)=r1) 2018/02/16 17:35:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000328000-0x98)={0x2, 0x400000000000003, 0x0, 0x0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_address={0x5, 0x9, 0x0, 0xa0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) 2018/02/16 17:35:37 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) clone(0x0, &(0x7f0000af2000), &(0x7f00000cc000-0x4), &(0x7f0000888000-0x4), &(0x7f0000c04000-0x1)) wait4(0x0, 0x0, 0x80000000, &(0x7f000005b000-0x90)) 2018/02/16 17:35:37 executing program 4: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x8000000000000024}) bpf$PROG_LOAD(0x5, &(0x7f000000a000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000004000-0xa)='GPL\x00', 0x2, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/16 17:35:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000540000)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x8000400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00004b5000-0x4)=r1) 2018/02/16 17:35:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000398000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f000098f000-0x8)=0x1461) readv(r0, &(0x7f0000dec000-0x28)=[{&(0x7f000014e000+0x671)=""/138, 0x8a}], 0x1) futex(&(0x7f0000013000-0x4), 0x0, 0x0, &(0x7f0000061000-0x10), &(0x7f00003d0000-0x4), 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000013000-0x10)={&(0x7f0000011000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/02/16 17:35:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000366000)=0x6, 0x4) close(r0) 2018/02/16 17:35:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000639000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getitimer(0x0, &(0x7f0000d93000)) 2018/02/16 17:35:37 executing program 3: mmap(&(0x7f0000000000/0x26000)=nil, 0x26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x400454d0, &(0x7f0000026000-0x3)) 2018/02/16 17:35:37 executing program 5: mmap(&(0x7f0000000000/0x2e000)=nil, 0x2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f000000b000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f000002b000), 0x0, 0x0, 0x0, 0x7, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000008000-0x10)={&(0x7f000000b000)={0x24, 0x29, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@nested={0x10, 0x0, [@typed={0xc, 0x1, @uid}]}]}, 0x24}, 0x1}, 0x0) 2018/02/16 17:35:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000f0f000)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000b42000)={0x24, 0x806, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x10, 0x1, [@typed={0xc, 0x0, @fd=0xffffffffffffffff}]}]}, 0x24}, 0x1}, 0x0) 2018/02/16 17:35:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000c81000-0xa)='net/route\x00') r1 = syz_open_dev$urandom(&(0x7f00009ca000-0xd)='/dev/urandom\x00', 0x0, 0x1) sendfile(r1, r0, &(0x7f0000fda000-0x8), 0x100000001) 2018/02/16 17:35:37 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) clone(0x0, &(0x7f0000af2000), &(0x7f00000cc000-0x4), &(0x7f0000888000-0x4), &(0x7f0000c04000-0x1)) wait4(0x0, 0x0, 0x80000000, &(0x7f000005b000-0x90)) 2018/02/16 17:35:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f000080a000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x80, &(0x7f00001c9000-0x8)=0x0) io_submit(r2, 0x1, &(0x7f0000cad000-0x8)=[&(0x7f0000b06000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000afb000-0xf1), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/02/16 17:35:37 executing program 0: r0 = getpgrp(0x0) getpriority(0x2, r0) 2018/02/16 17:35:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f0000750000)=[{0x20, 0x0, 0x0, 0xfffffffffffff030}, {0x200000000000006}]}, 0x10) 2018/02/16 17:35:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000398000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f000098f000-0x8)=0x1461) readv(r0, &(0x7f0000dec000-0x28)=[{&(0x7f000014e000+0x671)=""/138, 0x8a}], 0x1) futex(&(0x7f0000013000-0x4), 0x0, 0x0, &(0x7f0000061000-0x10), &(0x7f00003d0000-0x4), 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000013000-0x10)={&(0x7f0000011000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/02/16 17:35:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000132000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x180004522, &(0x7f000022b000-0x1)) 2018/02/16 17:35:37 executing program 0: syz_extract_tcp_res(&(0x7f0000896000-0x8), 0x0, 0x0) 2018/02/16 17:35:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f0000b7e000-0x10), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) exit(0x0) [ 40.725931] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 40.762750] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/02/16 17:35:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x400000000000802, 0x0) write(r0, &(0x7f0000bd7000)="240000001a0025f0006bb404feff001c020b49ff6e10b500000700eb0800030001000000", 0x24) 2018/02/16 17:35:37 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) clone(0x0, &(0x7f0000af2000), &(0x7f00000cc000-0x4), &(0x7f0000888000-0x4), &(0x7f0000c04000-0x1)) wait4(0x0, 0x0, 0x80000000, &(0x7f000005b000-0x90)) 2018/02/16 17:35:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0xec) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000a79000-0x44)={{0x2, 0xffffffffffffffff, @empty}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0xc, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, @syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/16 17:35:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f0000750000)=[{0x20, 0x0, 0x0, 0xfffffffffffff030}, {0x200000000000006}]}, 0x10) 2018/02/16 17:35:37 executing program 4: mmap(&(0x7f0000000000/0xfc9000)=nil, 0xfc9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000fc7000)={{{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0xa0}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x2b}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) sendto$inet6(r0, &(0x7f000089b000-0x7e), 0x0, 0x0, &(0x7f0000dee000)={0xa, 0x1, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/02/16 17:35:37 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) clone(0x0, &(0x7f0000af2000), &(0x7f00000cc000-0x4), &(0x7f0000888000-0x4), &(0x7f0000c04000-0x1)) wait4(0x0, 0x0, 0x80000000, &(0x7f000005b000-0x90)) 2018/02/16 17:35:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000ac0000-0x280)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000d10000), {[{{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='sit0\x00'}, 0x0, 0x70, 0xb8, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @loopback=0x7f000001, 0x0, 0xffffffff, @generic="f09a15503ed60d65be05ddff2564346d", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, 0x0, 0x8c}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) [ 40.807285] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/02/16 17:35:37 executing program 5: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000009000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x1f0, 0x410, 0x1f0, 0xf8, 0xf8, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f000000c000), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket2={0x28, 'socket\x00', 0x2}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={0x28, 'mh\x00'}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4={[], [0xff, 0xff], @empty}, [], [], @generic="7f865b36a68c3594a60a6f5daa8a21ab", @generic="2246c6c2e7a602a6870833c16fb93e7d"}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={0x30, 'frag\x00'}, @common=@ipv6header={0x28, 'ipv6header\x00'}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, [], [], @generic="000643f39167d8a8cb4928f163aebebf", @common='ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv4=@rand_addr}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x630) 2018/02/16 17:35:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f000080a000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x80, &(0x7f00001c9000-0x8)=0x0) io_submit(r2, 0x1, &(0x7f0000cad000-0x8)=[&(0x7f0000b06000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000afb000-0xf1), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/02/16 17:35:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f0000750000)=[{0x20, 0x0, 0x0, 0xfffffffffffff030}, {0x200000000000006}]}, 0x10) 2018/02/16 17:35:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000615000)={0x81}) 2018/02/16 17:35:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000398000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f000098f000-0x8)=0x1461) readv(r0, &(0x7f0000dec000-0x28)=[{&(0x7f000014e000+0x671)=""/138, 0x8a}], 0x1) futex(&(0x7f0000013000-0x4), 0x0, 0x0, &(0x7f0000061000-0x10), &(0x7f00003d0000-0x4), 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000013000-0x10)={&(0x7f0000011000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/02/16 17:35:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f0000750000)=[{0x20, 0x0, 0x0, 0xfffffffffffff030}, {0x200000000000006}]}, 0x10) [ 40.894903] ipt_CLUSTERIP: bad num_local_nodes 140 [ 40.902298] x_tables: ip6_tables: mh match: only valid for protocol 135 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000ac0000-0x280)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000d10000), {[{{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='sit0\x00'}, 0x0, 0x70, 0xb8, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @loopback=0x7f000001, 0x0, 0xffffffff, @generic="f09a15503ed60d65be05ddff2564346d", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, 0x0, 0x8c}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) 2018/02/16 17:35:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f000080a000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x80, &(0x7f00001c9000-0x8)=0x0) io_submit(r2, 0x1, &(0x7f0000cad000-0x8)=[&(0x7f0000b06000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000afb000-0xf1), 0x0, 0x0, 0x0, 0x1, r1}]) [ 40.939779] ipt_CLUSTERIP: bad num_local_nodes 140 [ 40.945332] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 40.975303] ipt_CLUSTERIP: bad num_local_nodes 140 2018/02/16 17:35:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00005d3000)={&(0x7f00003d8000)={0x10}, 0xc, &(0x7f0000aa5000-0x10)={&(0x7f00005e8000-0xc4)={0x14, 0x2, 0x9, 0x400800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000058d000-0x38)={&(0x7f000078d000)={0x10}, 0xc, &(0x7f0000798000-0x10)={&(0x7f0000725000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xbd4c}}]}, 0x34}, 0x1}, 0x0) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000ac0000-0x280)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000d10000), {[{{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='sit0\x00'}, 0x0, 0x70, 0xb8, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @loopback=0x7f000001, 0x0, 0xffffffff, @generic="f09a15503ed60d65be05ddff2564346d", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, 0x0, 0x8c}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) 2018/02/16 17:35:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000615000)={0x81}) 2018/02/16 17:35:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f000080a000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x80, &(0x7f00001c9000-0x8)=0x0) io_submit(r2, 0x1, &(0x7f0000cad000-0x8)=[&(0x7f0000b06000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000afb000-0xf1), 0x0, 0x0, 0x0, 0x1, r1}]) [ 40.994057] syz-executor1 (6076) used greatest stack depth: 16104 bytes left 2018/02/16 17:35:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000615000)={0x81}) 2018/02/16 17:35:38 executing program 5: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt(r0, 0x84, 0x2, &(0x7f0000000000), 0x0) [ 41.045513] ipt_CLUSTERIP: bad num_local_nodes 140 2018/02/16 17:35:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000364000-0x4), 0x1) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000ac0000-0x280)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000d10000), {[{{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='sit0\x00'}, 0x0, 0x70, 0xb8, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @loopback=0x7f000001, 0x0, 0xffffffff, @generic="f09a15503ed60d65be05ddff2564346d", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, 0x0, 0x8c}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000006000)=@ethtool_modinfo={0x42, 0x0, 0x0, "1be6fc8db1a392e6"}}) 2018/02/16 17:35:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000615000)={0x81}) 2018/02/16 17:35:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000a47000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000d65000-0xa)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d1000-0x8), 0x8000fffffffe) io_setup(0x6, &(0x7f0000dc8000)=0x0) io_cancel(r2, &(0x7f0000029000)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f0000552000), 0x0, 0x9, 0x0, 0x0, r0}, &(0x7f00002bd000)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000e89000-0x24)={0x0, 0x80, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffffffffc00, 0x101, 0x0, 0x0, 0x0, 0x1, 0x3}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00007de000-0x24)) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x10000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dff000-0xc)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f0000b02000-0x5030)=@newlink={0x38, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VF_PORTS={0x4, 0x18, []}]}, 0x38}, 0x1}, 0x0) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d9000-0x10)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[]}, 0x0) pipe2(&(0x7f00001fb000), 0x0) [ 41.122792] ipt_CLUSTERIP: bad num_local_nodes 140 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xb, 0x80a, 0xffff) sendto$unix(r0, &(0x7f00001ac000-0xc3)="a5fe1eb880eb84b584dfe07c9bec242d63bca9a82b5c41d169db576e5a511ab631245f44c45a19d108ac0afdce5022f84652b6b2ff07d3568101e327adec30608ca287c676cfc779bc7db78f10cb09382b3649be58c8a013780a42a1cf4f8e331078f85b6f951163963a753e8d908675d5f6d127d43d6baedb6fdfee5822cbf87798b72dd67f65d55122ae6febc2b4e209adf59100897ecd8eb21dddb26bd278b741903b127729b2e8653d75ab4917c90f2a4cc1b3086608633a938d609ed4011fb034", 0xc3, 0x8c0, &(0x7f0000ef2000-0xa)=@file={0x0, './file0\x00'}, 0xa) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) ioctl$int_out(r1, 0x0, &(0x7f0000316000-0x8)) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r2, &(0x7f00009e5000-0x38)={&(0x7f0000528000)=@sco, 0x0, &(0x7f0000d48000)=[], 0x0, &(0x7f0000d31000-0x65)=""/101, 0x65}, 0x0) close(r2) r3 = accept(r1, 0x0, &(0x7f0000efb000-0x4)) close(r2) getsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000e9b000-0x4), &(0x7f0000678000-0x4)=0x4) 2018/02/16 17:35:38 executing program 0: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$peekuser(0x3, r0, 0x1) r1 = socket$inet(0x2, 0x808, 0x800) bind$inet(r1, &(0x7f0000002000-0x10)={0x2, 0x3, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000005000-0x4f)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x3, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000005000-0x4f)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @broadcast=0xffffffff, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x3, 0x8}}}}}, 0x0) 2018/02/16 17:35:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001000-0x4)=0x18, 0x4) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000357000/0x400000)=nil, 0x400000, &(0x7f00009d7000)=""/160) 2018/02/16 17:35:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000d8000)=0x200, 0x4) connect$inet(r0, &(0x7f00002db000-0x10)={0x2, 0x3, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000956000)=0x8000, 0x4) sendmsg$netlink(r1, &(0x7f0000915000)={&(0x7f00005c9000)=@kern={0x10}, 0xc, &(0x7f0000525000)=[{&(0x7f0000032000)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x2, "", []}, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000b7000-0x8)={0x0, 0x13, 0x7}, &(0x7f0000947000-0x4)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000158000-0x8)={r2, 0x3, 0x101}, 0x8) 2018/02/16 17:35:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00001c7000)='/dev/dmmidi#\x00', 0x5, 0x450001) bind$unix(r0, &(0x7f0000bc2000)=@file={0x1, './file0\x00'}, 0xa) mkdir(&(0x7f000002a000-0xa)='./control\x00', 0x0) mkdir(&(0x7f00007a6000-0x10)='./control/file0\x00', 0x0) mount(&(0x7f000008f000)='./control\x00', &(0x7f00000c2000-0x10)='./control/file0\x00', &(0x7f0000b45000)='cgroup\x00', 0x0, &(0x7f0000725000)="f4") recvfrom$ax25(0xffffffffffffffff, &(0x7f0000035000-0x1000)=""/4096, 0x1000, 0x0, &(0x7f0000219000-0x10)={0x3, {"5a03cfdfee611a"}}, 0x10) 2018/02/16 17:35:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000403000-0x8d)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x1020) sendto(r1, &(0x7f00005c9000-0xa8), 0xfffffffffffffeee, 0x0, &(0x7f0000352000-0x10)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2e000-0xe0)}}, &(0x7f0000769000-0x4)) sched_rr_get_interval(0x0, &(0x7f0000f53000-0x10)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a08000-0x20)={{0x0, r3}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000cba000)) tkill(r2, 0x1000000000016) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000485000-0x3)=',&\x00', 0x0) prctl$void(0x20) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20)={0x428421, {0x400003ffffffe}, 0x0, 0x2}, &(0x7f0000ef9000), 0x8, &(0x7f00001a4000-0x8)) signalfd4(r0, &(0x7f0000e4a000)={0x1}, 0x8, 0x80000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000aac000-0x5)=""/5) r1 = syz_open_dev$evdev(&(0x7f0000258000)='/dev/input/event#\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f000049a000-0x20)={r1, 0x7, 0x0, 0x1, &(0x7f00008ce000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000006000-0x8)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f0000006000-0x10)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000005000), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/16 17:35:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x4, &(0x7f00003da000-0x10)={0x0, 0x80000001}) r0 = syz_open_dev$mouse(&(0x7f0000451000-0x12)='/dev/input/mouse#\x00', 0x6, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000702000-0x10)={r0, 0x28, &(0x7f00005db000-0x28)}, 0x10) 2018/02/16 17:35:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) sendmsg(r0, &(0x7f00005d0000-0x38)={&(0x7f0000e2e000)=@sco={0x1f}, 0x8, &(0x7f0000bf5000)=[], 0x0, &(0x7f0000cb6000)=[]}, 0x0) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000649000-0x154)=@newsa={0x154, 0x10, 0x717, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@encap={0x1c, 0x4, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, @in6=@dev={0xfe, 0x80}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/02/16 17:35:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000efb000-0xa8)=[{&(0x7f0000d28000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000f37000-0x18)=[], 0x0, &(0x7f00001bb000-0x24)=[@rights={0x10, 0x1, 0x1, [0xffffffffffffffff]}, @rights={0x10, 0x1, 0x1, [0xffffffffffffffff]}], 0x20}], 0x1, 0x0) 2018/02/16 17:35:38 executing program 0: mmap(&(0x7f0000000000/0xf6e000)=nil, 0xf6e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000e79000-0x5be), 0xffae, 0x8084, &(0x7f00004d4000)={0x2, 0x0, @empty}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00009a2000)=0x4) poll(&(0x7f0000d07000-0x8)=[{r0}], 0x200000000000031b, 0x0) 2018/02/16 17:35:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000203000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000ed9000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f00000b4000-0xa)='selinuxfs\x00', 0x0, &(0x7f0000e2b000-0x118)) 2018/02/16 17:35:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f000092d000-0xe6)="130000001000ffdde200f49ff60f050000230a009d0000000f00afc43022e5f9ec3e4fe8", 0x24) 2018/02/16 17:35:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fa2000)=@nat={'nat\x00', 0x1b, 0x5, 0x4d8, 0xf0, 0x318, 0xffffffff, 0x0, 0x318, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, &(0x7f00001b0000-0x50), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @common='ip6gretap0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00'}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4=@dev={0xac, 0x14}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback={0x0, 0x1}, @ipv4=@empty, @icmp_id, @port}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@broadcast=0xffffffff, @ipv4=@rand_addr, @port, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x538) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000096a000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f000030d000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7fffffff}, 0x1c) syz_emit_ethernet(0x15b, &(0x7f0000695000-0x2)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "011f20", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0x8}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0x0]}) 2018/02/16 17:35:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000ea3000-0x78)={0x1000000000000002, 0x78, 0x49f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f00006a9000-0x20)={{}, {0x77359400}}, &(0x7f00004dc000-0x20)) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000f12000), &(0x7f0000c20000), 0x400, &(0x7f000077a000/0x4000)=nil, 0x3) madvise(&(0x7f0000668000/0x4000)=nil, 0x4000, 0x4) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000055000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00007e6000)=0x63) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00004a2000)=0x1f) 2018/02/16 17:35:38 executing program 1: mmap(&(0x7f0000000000/0x2e000)=nil, 0x2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000002e000-0x28)={@common='ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000029000-0x10)={&(0x7f000002b000-0x8c)=@bridge_newneigh={0x30, 0x1c, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @link_local={0x1, 0x80, 0xc2}}, @NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x30}, 0x1}, 0x0) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000f12000), &(0x7f0000c20000), 0x400, &(0x7f000077a000/0x4000)=nil, 0x3) madvise(&(0x7f0000668000/0x4000)=nil, 0x4000, 0x4) 2018/02/16 17:35:38 executing program 2: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000001000)='asymmetric\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000001000-0xc)='/dev/amidi#\x00', 0xfffffffffffffffc) 2018/02/16 17:35:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() pipe(&(0x7f0000942000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000f80000)=[{&(0x7f00004b8000-0x72)=""/114, 0x72}], 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000715000)=0x2) close(r2) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000034000-0xd)='\a', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000028000-0xd)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000037000)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000001c000-0x50)={0x282, @time}) 2018/02/16 17:35:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006b8000-0x310)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f00007fb000-0x30), {[{{@ipv6={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @common='ip6gretap0\x00', @common='rose0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff, 0x7}, {0x7fffffff}}}}, {{@uncond, 0x0, 0xa8, 0x110, 0x0, {}, []}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x47) 2018/02/16 17:35:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000a0f000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000bfc000)=0x10000000) 2018/02/16 17:35:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x20000000f, &(0x7f0000ae5000)="02", 0x1) listen(r0, 0x0) 2018/02/16 17:35:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000007f000-0xb)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000760000-0x48)={0x0, 0x0, []}) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000f12000), &(0x7f0000c20000), 0x400, &(0x7f000077a000/0x4000)=nil, 0x3) madvise(&(0x7f0000668000/0x4000)=nil, 0x4000, 0x4) 2018/02/16 17:35:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000d88000)="8907130000", 0x5) 2018/02/16 17:35:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000ab3000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000821000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00007e5000)={0x0, 0x0, 0x0, 'queue1\x00'}) 2018/02/16 17:35:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000007f000-0xb)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000760000-0x48)={0x0, 0x0, []}) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000f12000), &(0x7f0000c20000), 0x400, &(0x7f000077a000/0x4000)=nil, 0x3) madvise(&(0x7f0000668000/0x4000)=nil, 0x4000, 0x4) 2018/02/16 17:35:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000f4f000)={@common='sit0\x00', @ifru_data=&(0x7f00008e8000-0x20)="0101090700070c0000fa000011040100df0000000010b8000000ff000004eb00"}) 2018/02/16 17:35:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000581000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000c1b000-0x60)=[{&(0x7f00003a3000)='4', 0x1}, {&(0x7f0000534000)="c1", 0x1}], 0x2, 0x0) [ 41.473852] Protocol error: SET target dimension is over the limit! 2018/02/16 17:35:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000007f000-0xb)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000760000-0x48)={0x0, 0x0, []}) 2018/02/16 17:35:38 executing program 2: mmap(&(0x7f0000000000/0xb15000)=nil, 0xb15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000b13000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000f35000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000ddb000-0x110)={{0x0, 0x0, 0x0, 0x0, "72db65927aba971fe7dd67664b99bf4c22bb19ef627a4d0cdb0981bc336663120cc13c2f7215b17f515d4b2a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8b94c5d68a019158ba7e0cd96010e9ed306a1a9f27e36dd1b8306fc7275e594251e669d8309eeb173e6e2a858dbb82694eac35bce574f15686db5847d034b17d", &(0x7f0000dc5000-0x1f)='{vboxnet1]vboxnet0(em1-+system\x00', 0x1f}) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000d74000-0x7e)=""/126) 2018/02/16 17:35:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000426000-0x13)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000dd000-0x120)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "c919a0189e4c2efb3f91f671d3051c33"}) 2018/02/16 17:35:38 executing program 7: r0 = getpgrp(0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0xfffffefffffffffd, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x936000)=nil, 0x936000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x5}) rt_sigtimedwait(&(0x7f0000002000-0x8)={0x3ffff}, &(0x7f0000f0b000-0x10), &(0x7f0000fbd000-0x10)={0xffffd, 0x989680}, 0x8) 2018/02/16 17:35:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000205000)="1f0000000104ff00fd4354c007b70000f30501000800010056f6e7dcffdf00", 0x1f) 2018/02/16 17:35:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000a0f000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000bfc000)=0x10000000) 2018/02/16 17:35:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000007f000-0xb)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000760000-0x48)={0x0, 0x0, []}) [ 41.518723] Protocol error: SET target dimension is over the limit! 2018/02/16 17:35:38 executing program 2: mmap(&(0x7f0000000000/0xb15000)=nil, 0xb15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000b13000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 2018/02/16 17:35:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000805000-0x7e), 0x0, 0x200007ff, &(0x7f000096f000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f000084b000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) close(r0) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000f35000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000ddb000-0x110)={{0x0, 0x0, 0x0, 0x0, "72db65927aba971fe7dd67664b99bf4c22bb19ef627a4d0cdb0981bc336663120cc13c2f7215b17f515d4b2a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8b94c5d68a019158ba7e0cd96010e9ed306a1a9f27e36dd1b8306fc7275e594251e669d8309eeb173e6e2a858dbb82694eac35bce574f15686db5847d034b17d", &(0x7f0000dc5000-0x1f)='{vboxnet1]vboxnet0(em1-+system\x00', 0x1f}) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000d74000-0x7e)=""/126) 2018/02/16 17:35:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000a0f000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000bfc000)=0x10000000) 2018/02/16 17:35:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00006e7000)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f000005b000), {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, []}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x20000000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e8) 2018/02/16 17:35:38 executing program 2: mmap(&(0x7f0000000000/0xb15000)=nil, 0xb15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000b13000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 2018/02/16 17:35:38 executing program 1: syslog(0x0, &(0x7f0000709000), 0x0) 2018/02/16 17:35:38 executing program 6: mmap(&(0x7f0000000000/0xe84000)=nil, 0xe84000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000e82000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000e81000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) [ 41.600505] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 41.613355] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/16 17:35:38 executing program 1: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005000)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x2}, {{@in=@rand_addr, 0xffffffffffffffff, 0x33}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) 2018/02/16 17:35:38 executing program 2: mmap(&(0x7f0000000000/0xb15000)=nil, 0xb15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000b13000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000f35000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000ddb000-0x110)={{0x0, 0x0, 0x0, 0x0, "72db65927aba971fe7dd67664b99bf4c22bb19ef627a4d0cdb0981bc336663120cc13c2f7215b17f515d4b2a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8b94c5d68a019158ba7e0cd96010e9ed306a1a9f27e36dd1b8306fc7275e594251e669d8309eeb173e6e2a858dbb82694eac35bce574f15686db5847d034b17d", &(0x7f0000dc5000-0x1f)='{vboxnet1]vboxnet0(em1-+system\x00', 0x1f}) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000d74000-0x7e)=""/126) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000290000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001275, &(0x7f0000704000)) 2018/02/16 17:35:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') umount2(&(0x7f0000117000)='./file0\x00', 0x0) [ 41.717905] kauditd_printk_skb: 6 callbacks suppressed [ 41.717913] audit: type=1400 audit(1518802538.778:32): avc: denied { dac_read_search } for pid=6279 comm="syz-executor2" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 41.748289] audit: type=1400 audit(1518802538.778:33): avc: denied { dac_override } for pid=6279 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 41.772799] audit: type=1400 audit(1518802538.784:34): avc: denied { sys_admin } for pid=6279 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:35:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000290000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001275, &(0x7f0000704000)) 2018/02/16 17:35:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f00001d7000), 0x4000000005, 0x0, &(0x7f0000199000-0x10), &(0x7f0000a29000-0x4), 0x55da77f243942654) 2018/02/16 17:35:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000a0f000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000bfc000)=0x10000000) 2018/02/16 17:35:38 executing program 1: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000007000-0x4)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000011000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0xffffffffffffffff, 0x8, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/16 17:35:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000f35000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000ddb000-0x110)={{0x0, 0x0, 0x0, 0x0, "72db65927aba971fe7dd67664b99bf4c22bb19ef627a4d0cdb0981bc336663120cc13c2f7215b17f515d4b2a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8b94c5d68a019158ba7e0cd96010e9ed306a1a9f27e36dd1b8306fc7275e594251e669d8309eeb173e6e2a858dbb82694eac35bce574f15686db5847d034b17d", &(0x7f0000dc5000-0x1f)='{vboxnet1]vboxnet0(em1-+system\x00', 0x1f}) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000d74000-0x7e)=""/126) 2018/02/16 17:35:38 executing program 4: link(&(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000000000)='./file0\x00') 2018/02/16 17:35:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') umount2(&(0x7f0000117000)='./file0\x00', 0x0) [ 41.797103] audit: type=1400 audit(1518802538.809:35): avc: denied { net_admin } for pid=5779 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 41.845484] audit: type=1400 audit(1518802538.906:36): avc: denied { net_raw } for pid=6290 comm="syz-executor1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000ae1000)='/dev/cuse\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f0000908000)='./file0\x00', &(0x7f0000e77000)={0x8}, &(0x7f0000fd1000), 0x1400) [ 41.895488] audit: type=1400 audit(1518802538.955:37): avc: denied { sys_admin } for pid=6296 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 41.919894] audit: type=1400 audit(1518802538.956:38): avc: denied { net_admin } for pid=4221 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000c1b000-0x7)='ns/uts\x00') fchmod(r0, 0x0) 2018/02/16 17:35:39 executing program 3: mmap(&(0x7f0000000000/0xfb4000)=nil, 0xfb4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0xa000000) [ 41.944254] audit: type=1400 audit(1518802538.962:39): avc: denied { net_admin } for pid=4221 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 41.968627] audit: type=1400 audit(1518802538.963:40): avc: denied { net_admin } for pid=4221 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00004c4000-0x4)=0x9, 0x4) connect$inet6(r0, &(0x7f00004da000-0x1c)={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$inet(r0, &(0x7f0000594000)={0x0, 0xffffffffffffffff, @multicast1}, &(0x7f000034f000-0x4)=0x10) 2018/02/16 17:35:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000290000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001275, &(0x7f0000704000)) 2018/02/16 17:35:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf7000-0x1c)=[@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/16 17:35:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000cac000)='/selinux/checkreqprot\x00', 0x182, 0x0) write$tun(r0, &(0x7f0000cef000-0x113a)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "eacf97", 0xfce, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {"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"}}}}}, 0x1000) 2018/02/16 17:35:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000c000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000-0x30)={0x4, 0x0, &(0x7f000000a000-0x10)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f000088e000)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x5, 0x0, &(0x7f0000a2c000-0x8)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000ccd000-0x6), &(0x7f0000350000-0x3)=0x6) 2018/02/16 17:35:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)}, @ptr={0x77622a85, 0x0, &(0x7f0000008000-0x8e)}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eb000-0x30)={0x8, 0x0, &(0x7f000057e000)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, &(0x7f0000bf0000-0x1)}) 2018/02/16 17:35:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:35:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') umount2(&(0x7f0000117000)='./file0\x00', 0x0) [ 41.992962] audit: type=1400 audit(1518802538.964:41): avc: denied { sys_admin } for pid=6287 comm="syz-executor6" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 2018/02/16 17:35:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000290000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001275, &(0x7f0000704000)) 2018/02/16 17:35:39 executing program 3: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x9) sendto$inet(r0, &(0x7f000000b000)="14000000e803000007000000000000000003be29000000003686c8b90dfb3bf8863073d6", 0x24, 0x0, 0x0, 0x0) 2018/02/16 17:35:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000b82000)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}, 0x0) [ 42.092801] binder: BINDER_SET_CONTEXT_MGR already set [ 42.108417] binder: undelivered death notification, 0000000000000000 [ 42.147953] binder: 6316:6334 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 42.152200] binder_alloc: 6322: binder_alloc_buf, no vma [ 42.161138] binder: 6316:6331 transaction failed 29189/-3, size 80-16 line 2957 [ 42.173242] binder: 6316:6325 ioctl 40046207 0 returned -16 [ 42.173267] binder: BINDER_SET_CONTEXT_MGR already set [ 42.190227] binder: 6322:6326 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/02/16 17:35:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dad000-0x8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f0000727000)='\b', 0x1, 0x0, &(0x7f0000109000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000d99000-0x20)={0x8}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000653000)={0x0, 0x1}, 0x8) sendmmsg(r0, &(0x7f0000acf000-0x78)=[{{0x0, 0x0, &(0x7f000022a000)=[{&(0x7f0000a44000-0xac5)="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", 0x201}], 0x1, &(0x7f0000783000)=[]}}], 0x1, 0x0) 2018/02/16 17:35:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000ddd000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 2018/02/16 17:35:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:35:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000c000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000-0x30)={0x4, 0x0, &(0x7f000000a000-0x10)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f000088e000)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x5, 0x0, &(0x7f0000a2c000-0x8)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000ccd000-0x6), &(0x7f0000350000-0x3)=0x6) [ 42.203227] binder_alloc: binder_alloc_mmap_handler: 6316 20000000-20002000 already mapped failed -16 [ 42.216822] binder: BINDER_SET_CONTEXT_MGR already set [ 42.225779] binder: 6316:6325 ioctl 40046207 0 returned -16 [ 42.225971] binder_alloc: 6322: binder_alloc_buf, no vma [ 42.237073] binder: 6316:6331 transaction failed 29189/-3, size 80-16 line 2957 [ 42.237472] binder: 6322:6335 ioctl 40046207 0 returned -16 2018/02/16 17:35:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:35:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000085000-0x6)='logon\x00', &(0x7f000078d000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000b90000), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000228000-0xb)='asymmetric\x00', &(0x7f0000d6d000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000f8a000)="30801057020000000000000000ef5499fbb78042c3c76172e7f8b67029d3b24374c0f14231891d207ae27b08c9ed4f895fcfe63bfc58315485bb97d2bd5336651daacdf4b26d92d68b62c0083c000000000000050d54720952b789", 0x5b, r0) 2018/02/16 17:35:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f00007c5000)='logon\x00', &(0x7f0000a08000)={0x73, 0x79, 0x7a}, &(0x7f0000d78000-0x7)='\x00', 0x0) 2018/02/16 17:35:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cab000+0x5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6b000-0xb0)={{0x80}, '\x00ort0\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000b42000)={{0x20000000000080}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/16 17:35:39 executing program 4: mmap(&(0x7f0000000000/0x3b000)=nil, 0x3b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000023000)=@assoc_value, &(0x7f000003a000)=0x52) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000023000)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000033000-0x40), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={0x150, 'hashlimit\x00', 0x2, {'bcsh0\x00', {0x0, 0x1f, 0x42, 0x0, 0x0, 0x3f, 0x4}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @common='dummy0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) connect$inet(r0, &(0x7f0000004000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) [ 42.323488] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.329389] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/16 17:35:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000061c000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c44000)="71000715cdf03b3afc091c52a7e86bd1e9", 0x11) 2018/02/16 17:35:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dad000-0x8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f0000727000)='\b', 0x1, 0x0, &(0x7f0000109000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000d99000-0x20)={0x8}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000653000)={0x0, 0x1}, 0x8) sendmmsg(r0, &(0x7f0000acf000-0x78)=[{{0x0, 0x0, &(0x7f000022a000)=[{&(0x7f0000a44000-0xac5)="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", 0x201}], 0x1, &(0x7f0000783000)=[]}}], 0x1, 0x0) 2018/02/16 17:35:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000533000)={r0}) 2018/02/16 17:35:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2018/02/16 17:35:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cab000+0x5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6b000-0xb0)={{0x80}, '\x00ort0\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000b42000)={{0x20000000000080}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/16 17:35:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cab000+0x5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6b000-0xb0)={{0x80}, '\x00ort0\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000b42000)={{0x20000000000080}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/16 17:35:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000c000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000-0x30)={0x4, 0x0, &(0x7f000000a000-0x10)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f000088e000)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x5, 0x0, &(0x7f0000a2c000-0x8)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000ccd000-0x6), &(0x7f0000350000-0x3)=0x6) 2018/02/16 17:35:39 executing program 6: get_mempolicy(&(0x7f00000a3000-0x4), &(0x7f0000000000), 0xfffffffffffffffc, &(0x7f0000132000/0x2000)=nil, 0x100) [ 42.436387] binder: undelivered death notification, 0000000000000000 2018/02/16 17:35:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000d1e000)={0x0, 0x1c9c380}, &(0x7f0000f01000-0x10)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000c1d000/0x3000)=nil, 0x3000) mmap(&(0x7f0000c1d000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/16 17:35:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cab000+0x5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6b000-0xb0)={{0x80}, '\x00ort0\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000b42000)={{0x20000000000080}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/16 17:35:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cab000+0x5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6b000-0xb0)={{0x80}, '\x00ort0\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000b42000)={{0x20000000000080}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/16 17:35:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000483, &(0x7f000005a000-0x18)=""/24, &(0x7f0000aed000)=0x101a3) [ 42.533185] binder: undelivered death notification, 0000000000000000 2018/02/16 17:35:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000c000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000-0x30)={0x4, 0x0, &(0x7f000000a000-0x10)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f000088e000)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x5, 0x0, &(0x7f0000a2c000-0x8)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000ccd000-0x6), &(0x7f0000350000-0x3)=0x6) 2018/02/16 17:35:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$alg(r0, &(0x7f0000634000-0x38)={0x0, 0x0, &(0x7f0000d56000-0xa0)=[]}, 0x90) 2018/02/16 17:35:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000206000)=@buf={0x0, &(0x7f000046e000)}) 2018/02/16 17:35:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dad000-0x8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f0000727000)='\b', 0x1, 0x0, &(0x7f0000109000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000d99000-0x20)={0x8}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000653000)={0x0, 0x1}, 0x8) sendmmsg(r0, &(0x7f0000acf000-0x78)=[{{0x0, 0x0, &(0x7f000022a000)=[{&(0x7f0000a44000-0xac5)="648c2c4f412db5c04c8285dae9d7e975bd52b0c438f9f0a70e45868b5323a968dd20861f02fbf41bfc151e89d4702f07a4517251d5c11e5e7b445050fe4b0603d53b78b661c5f24c4fbe3e227129420eab0ca55322eae260c7836d979a81b345cf327a306d2f66d011ee5fca718f9f045aa2b0417a45e26078c73016e17321151b5f6d2895aaa398220295158cdda4537a63d1d8ede0b2d2669acac15f15e337f12aae15e1d531b3ed6c8f1d758bec1342b4d047b7b2442b64a5513150d1ae82c391a7ad78c59a6b23620caaa3bf6d46a3e3aecc100a9417c92fb710be446cc5c82d50d2de5b0717f2aecb496c86c1cdb80b472a9f92a093232559b936434fe16003a3ca22497b47fcad6d2b3c6f6e30790f6952b4131ffa00109b6814c2e89fc35b4c763b7351670ae58598991b4349b3cc80c0bf8ec6ab20e67d155aa407a99c241563175912638d319095dad14ddef2c2250495c7d23b19643efbd47370ed1d85ffec893f99191ecff47319c59d3e9665078afed8cd158a4d8c8ee1913f60ae72fd9584da9d3251f19c00547f2e85e8f8cb770bace3dc5eb0a07f2aba13fe7db20fcdae1500505e17a4d4979be8bf427ce6caee0d20be2fd84874b825252a73a078403e795e5160485fb74f4c984c8502e1d2fbe9f77ba9c4e891f1aad56d1dba249b2be0f2a5f1a607a402daf2fbcfe23191b2f81608e6444fa0153e4a07ed", 0x201}], 0x1, &(0x7f0000783000)=[]}}], 0x1, 0x0) [ 42.700639] binder: undelivered death notification, 0000000000000000 2018/02/16 17:35:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cab000+0x5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6b000-0xb0)={{0x80}, '\x00ort0\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000b42000)={{0x20000000000080}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/16 17:35:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cab000+0x5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6b000-0xb0)={{0x80}, '\x00ort0\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000b42000)={{0x20000000000080}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/16 17:35:39 executing program 0: r0 = socket$inet(0xa, 0x3, 0x4000000001a) setsockopt$IPT_SO_SET_REPLACE(r0, 0x3a, 0x40, &(0x7f0000013000)=@raw={'raw\x00', 0x9, 0x4, 0x2d8, 0x70, 0xffffffff, 0xffffffff, 0x70, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4, &(0x7f0000014000+0x9d8), {[{{@ip={@broadcast=0xffffffff, @empty, 0x0, 0x0, @common='eql\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd8, 0x0, {}, []}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x70}}}}, 0x338) 2018/02/16 17:35:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x40044590) 2018/02/16 17:35:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000483, &(0x7f000005a000-0x18)=""/24, &(0x7f0000aed000)=0x101a3) 2018/02/16 17:35:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f000010f000)={&(0x7f000000f000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f00004e1000-0x10a4)={0x14, 0x23, 0x2fd, 0xffffffffffffffff, 0xffffffffffffffff, {0x12}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:35:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000385000-0x12)='/dev/input/mouse#\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000ca4000-0x10)='/dev/input/mice\x00', 0x0, 0x4000) 2018/02/16 17:35:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dad000-0x8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f0000727000)='\b', 0x1, 0x0, &(0x7f0000109000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000d99000-0x20)={0x8}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000653000)={0x0, 0x1}, 0x8) sendmmsg(r0, &(0x7f0000acf000-0x78)=[{{0x0, 0x0, &(0x7f000022a000)=[{&(0x7f0000a44000-0xac5)="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", 0x201}], 0x1, &(0x7f0000783000)=[]}}], 0x1, 0x0) 2018/02/16 17:35:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000226000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000016000)) 2018/02/16 17:35:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000015000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000008000-0x10)={&(0x7f0000017000-0x20)={0x14, 0x20, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:35:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000483, &(0x7f000005a000-0x18)=""/24, &(0x7f0000aed000)=0x101a3) 2018/02/16 17:35:40 executing program 2: r0 = epoll_create1(0x0) fcntl$addseals(r0, 0x409, 0x4000000000000008) 2018/02/16 17:35:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000582000+0x5c7)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "540300", 0x3c, 0x3a, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "140189", 0x0, 0x2f, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, [], "b640a7b2719f64e38c779415"}}}}}}}, 0x0) 2018/02/16 17:35:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000267000+0x908)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/16 17:35:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000483, &(0x7f000005a000-0x18)=""/24, &(0x7f0000aed000)=0x101a3) 2018/02/16 17:35:40 executing program 6: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt(r0, 0x1000000000000084, 0x8, &(0x7f0000fe7000-0x2), 0x0) 2018/02/16 17:35:40 executing program 3: mmap(&(0x7f0000000000/0xe78000)=nil, 0xe78000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) mmap(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000e79000)=[{{&(0x7f0000442000-0x26)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x26, &(0x7f000059b000-0x70)=[{&(0x7f0000e7a000-0x51)=""/81, 0x51}, {&(0x7f0000e79000)=""/4096, 0x1000}, {&(0x7f0000e7a000-0x57)=""/87, 0x57}, {&(0x7f00009cf000)=""/214, 0xd6}, {&(0x7f0000461000)=""/164, 0xa4}, {&(0x7f0000273000-0x9e)=""/158, 0x9e}, {&(0x7f0000e7a000-0x29)=""/41, 0x29}], 0x7, 0x0, 0x0, 0x8}, 0xc0}, {{&(0x7f000015d000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10, &(0x7f0000e7a000-0x20)=[{&(0x7f0000e7a000-0xdf)=""/223, 0xdf}, {&(0x7f00001f3000)=""/93, 0x5d}], 0x2, &(0x7f0000b1f000)=""/96, 0x60, 0x6}, 0x3}, {{&(0x7f0000ba7000-0x9)=@rc, 0x9, &(0x7f000010a000-0x50)=[{&(0x7f0000e79000)=""/24, 0x18}, {&(0x7f0000e7a000-0x6a)=""/109, 0x6d}, {&(0x7f0000e79000)=""/193, 0xc1}, {&(0x7f000095d000)=""/162, 0xa2}, {&(0x7f0000bd2000-0x70)=""/112, 0x70}], 0x5, &(0x7f000084c000-0x37)=""/55, 0x37, 0xffffffffffffff00}, 0xbc0}, {{&(0x7f0000a3c000)=@hci, 0x6, &(0x7f0000e7a000-0x40)=[{&(0x7f0000229000)=""/85, 0x55}, {&(0x7f0000e7a000-0x1000)=""/4096, 0x1000}, {&(0x7f0000e7a000-0xe8)=""/232, 0xe8}, {&(0x7f0000e79000)=""/4, 0x4}], 0x4, &(0x7f00001c3000-0xe5)=""/229, 0xe5, 0x2}, 0xffffffff}, {{&(0x7f0000132000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10, &(0x7f00007c3000-0x70)=[{&(0x7f0000e79000)=""/166, 0xa6}, {&(0x7f0000903000-0x87)=""/135, 0x87}, {&(0x7f00004cf000)=""/160, 0xa0}, {&(0x7f0000e7a000-0xe6)=""/230, 0xe6}, {&(0x7f0000268000-0xac)=""/172, 0xac}, {&(0x7f0000e7a000-0xbd)=""/189, 0xbd}, {&(0x7f0000e79000)=""/63, 0x3f}], 0x7, &(0x7f0000e7a000-0xad)=""/173, 0xad, 0xd4}}], 0x5, 0x120, &(0x7f000060f000-0x10)={0x77359400}) mmap(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000e7a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000e7a000)) dup2(r2, r0) 2018/02/16 17:35:40 executing program 2: r0 = epoll_create1(0x0) fcntl$addseals(r0, 0x409, 0x4000000000000008) 2018/02/16 17:35:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000b40000)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f00003cf000-0x2c)='\x00', 0x1) read(r1, &(0x7f0000de2000)=""/181, 0xb5) 2018/02/16 17:35:40 executing program 2: r0 = epoll_create1(0x0) fcntl$addseals(r0, 0x409, 0x4000000000000008) 2018/02/16 17:35:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000ff5000-0x38)={&(0x7f0000a35000-0xc)={0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000ff4000+0xa23)=@acquire={0x16c, 0x17, 0x509, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, @in=@dev={0xac, 0x14}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@multicast2=0xe0000002}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x33}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}]}]}, 0x16c}, 0x1}, 0x0) 2018/02/16 17:35:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt(r0, 0x2000000000010d, 0xc, &(0x7f0000999000)=""/4, &(0x7f0000000000)=0x4) 2018/02/16 17:35:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000c42000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x20000400) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f000058d000-0x18)={0x0, 0x4000000000001, 0x1, &(0x7f0000197000)}) 2018/02/16 17:35:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000954000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000fee000)) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00004e7000-0x4), &(0x7f000058c000)=0x4) 2018/02/16 17:35:40 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x0) 2018/02/16 17:35:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00006c3000-0x4)='bic\x00', 0x4) 2018/02/16 17:35:40 executing program 2: r0 = epoll_create1(0x0) fcntl$addseals(r0, 0x409, 0x4000000000000008) 2018/02/16 17:35:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009ff000-0xa)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x2) 2018/02/16 17:35:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) readv(r0, &(0x7f0000339000-0x50)=[{&(0x7f0000dd2000)=""/118, 0x76}], 0x1) 2018/02/16 17:35:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 2018/02/16 17:35:40 executing program 4: mmap(&(0x7f000026e000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f000026f000-0x8)={0x0, 0x0}) read$eventfd(r0, &(0x7f0000079000-0x8), 0x8) write$eventfd(r1, &(0x7f000026f000), 0x8) 2018/02/16 17:35:40 executing program 5: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000004000-0x10)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000), 0x0) close(r0) 2018/02/16 17:35:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000ef4000)="2400000052001f00fff9f407002304000a14f51108000100020000000800020001000000", 0x24) 2018/02/16 17:35:40 executing program 0: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x2000) fcntl$setstatus(r0, 0x4, 0x0) 2018/02/16 17:35:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f000091f000)=[], 0x0) recvfrom$llc(r0, &(0x7f00003c4000)=""/77, 0x4d, 0x0, &(0x7f00006ae000-0x10)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, 0x10) close(r1) 2018/02/16 17:35:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x178, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, &(0x7f0000867000), {[{{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@ipvs={0x48, 'ipvs\x00', 0x0, {@ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast2=0xe0000002, @empty, 0x0, 0x0, @generic="c2cf11053b4f365ea4a5ef1529fc5c91", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) r1 = socket$inet(0x2, 0x805, 0x0) connect$inet(r1, &(0x7f0000f7e000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) 2018/02/16 17:35:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f0000fd5000-0x14)={0x14, 0x4, 0x10000000000001, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:35:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009ff000-0xa)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f000042b000)=[], 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000ce4000)=0x1000000000007) 2018/02/16 17:35:40 executing program 0: mmap(&(0x7f0000000000/0x32000)=nil, 0x32000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, &(0x7f0000007000-0x40), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x1}}, @common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@broadcast=0xffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @common='teql0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x310) connect$inet6(r1, &(0x7f0000001000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f000000b000-0x1c)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000f000-0x10)=[], 0x0, &(0x7f0000011000)=[]}, 0x0) 2018/02/16 17:35:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000f000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000008000-0x10)={&(0x7f000078c000)={0x18, 0x23, 0x82d, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x4, 0x1, []}]}, 0x18}, 0x1}, 0x0) 2018/02/16 17:35:40 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0xd0, &(0x7f0000002000-0x3e)=""/62, &(0x7f0000002000-0x4)=0xfffffffffffffdd7) 2018/02/16 17:35:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0xfffffffffffffffd, &(0x7f0000001000)) 2018/02/16 17:35:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) getegid() fchownat(0xffffffffffffffff, &(0x7f000096b000)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000002000+0x922), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00004d3000)={0x5, [0x6, 0x7fff, 0x800, 0x2, 0x1]}, &(0x7f00009ad000)=0xe) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20) r4 = dup3(r3, r1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000b8d000-0x20)=[@flags={0x3, 0x100}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/16 17:35:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001000-0xe)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000002000)={'system_u:object_r:system_cron_spool_t:s0', 0x20, '%ystem_u\x00'}, 0x32) [ 43.558214] syz-executor1 (6518) used greatest stack depth: 15840 bytes left 2018/02/16 17:35:40 executing program 3: mmap(&(0x7f0000000000/0xfe8000)=nil, 0xfe8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fe7000-0x498)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f0000fe6000), {[{{@ipv6={@dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @generic="6634bbc8cf0c1d7ffeded6976874c0ac", @generic="ccf29e0abccb1229104e64ba8531a753"}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@frag={0x30, 'frag\x00'}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xfffffffffffffffa, 0x0, "3786ac58bda5ddeaa685365f07766823d032c5f0a942a1dd8d624f6fed0c"}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @loopback={0x0, 0x1}, [], [], @generic="b8658512aa5d155c2ab4bdbc4d02286d", @common='vcan0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @loopback={0x0, 0x1}, [], [], @generic="9dd39c29dfd92f6b19fc6d5d1e155f18", @generic="cbdf066ba0501335c31bd086e4c7ec65"}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket2={0x28, 'socket\x00', 0x2}, @common=@hl={0x28, 'hl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x498) 2018/02/16 17:35:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000aa8000-0x85)=""/133, &(0x7f00007b9000-0x4)=0x85) 2018/02/16 17:35:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005df000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000057000-0x8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000035000)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00008c9000+0xcfe)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000a3e000-0x8)='./file0\x00', r0, &(0x7f0000339000-0x8)='./file0\x00') 2018/02/16 17:35:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000008000)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x98, 0x188, 0x98, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000004000-0x40), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@unspec=@cgroup0={0x28, 'cgroup\x00'}, @common=@ttl={0x28, 'ttl\x00'}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @common='vcan0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) 2018/02/16 17:35:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000c69000-0x3e8)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xff0, &(0x7f0000023000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@loopback=0x7f000001, @rand_addr, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1b6}}}, {{@uncond, 0x0, 0x70, 0x198, 0x0, {}, []}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, "73797374656d5f753a6f626a6563745f723a6c64636f6e6669675f63616368655f743a5330000000000000000000000000000000000000000000000000000000000000000000000000000000000026000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000e90000000000000000000000000000000000000000000000000900ffde000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000002000"}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x70}}}}, 0x3c0) 2018/02/16 17:35:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f00001d8000)=""/220, 0xdc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000afa000-0x38)={&(0x7f000000f000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f00004b1000-0x128)={0x14, 0x23, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xb}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:35:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) getegid() fchownat(0xffffffffffffffff, &(0x7f000096b000)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000002000+0x922), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00004d3000)={0x5, [0x6, 0x7fff, 0x800, 0x2, 0x1]}, &(0x7f00009ad000)=0xe) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20) r4 = dup3(r3, r1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000b8d000-0x20)=[@flags={0x3, 0x100}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/16 17:35:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000bf6000)=@common='ipddp0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000dda000-0x10)=@common='ipddp0\x00') 2018/02/16 17:35:40 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fremovexattr(r0, &(0x7f0000012000)=@known='com.apple.FinderInfo\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/16 17:35:40 executing program 4: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000001d000-0xe8)={{{@in=@rand_addr, @in6=@remote}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@multicast2}}, &(0x7f0000016000-0x4)=0xe8) openat$ppp(0xffffffffffffff9c, &(0x7f0000006000-0x9)='/dev/ppp\x00', 0x121100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000001e000-0x9)='/dev/kvm\x00', 0x8000, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000001f000-0x10)='/selinux/policy\x00', 0x0, 0x0) write$selinux_load(r0, &(0x7f000001b000)={0xf97cff8c, 0x8, 'SE Linux', "f535ddb2182ecb9d84143998dd637bc31aa2c7b5f9471cbd61b127f305e72537001a9f3571f14e3395030b23532544ed52a248c370fd5f915dad122b1d9e7b74ef68f6781be70ed25bc41f03c4566be26bdaece2af3eb558aa3992ff7bbf11b3b74b3f4fb0c2643e89353ed79ffec9e80c3dc17106e9c4db65dd421ae348cf5faad38537067be134dc0a1b1afdb76a2d20c397e448fe3e9f4a8460b9d8c9caf9253983039d48722658a2c543c4b9d67a7a70fbcc884231c0cdea0819a0016dfe180b97500a4c0c775c4bb117ee1adfb8ab5ea62994cf2223b50407f7bd5aff78ce5767735538d462a80af117f5a8c75245c81077a3"}, 0x105) syz_emit_ethernet(0x2a, &(0x7f0000005000-0x4f)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xffffff89, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}, 0x0) 2018/02/16 17:35:40 executing program 3: mmap(&(0x7f0000000000/0xfe8000)=nil, 0xfe8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fe7000-0x498)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f0000fe6000), {[{{@ipv6={@dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @generic="6634bbc8cf0c1d7ffeded6976874c0ac", @generic="ccf29e0abccb1229104e64ba8531a753"}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@frag={0x30, 'frag\x00'}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xfffffffffffffffa, 0x0, "3786ac58bda5ddeaa685365f07766823d032c5f0a942a1dd8d624f6fed0c"}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @loopback={0x0, 0x1}, [], [], @generic="b8658512aa5d155c2ab4bdbc4d02286d", @common='vcan0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @loopback={0x0, 0x1}, [], [], @generic="9dd39c29dfd92f6b19fc6d5d1e155f18", @generic="cbdf066ba0501335c31bd086e4c7ec65"}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket2={0x28, 'socket\x00', 0x2}, @common=@hl={0x28, 'hl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x498) [ 43.713447] xt_SECMARK: invalid security context 'system_u:object_r:ldconfig_cache_t:S0' 2018/02/16 17:35:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000058000-0x12)='/dev/input/event#\x00', 0xafd, 0x8000040000001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000303000)={0x0, 0x0, &(0x7f000056b000)}) write$evdev(r0, &(0x7f00008c2000-0x30)=[{{}, 0x2, 0x0, 0x40c}, {}], 0x30) 2018/02/16 17:35:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f00001d8000)=""/220, 0xdc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000afa000-0x38)={&(0x7f000000f000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f00004b1000-0x128)={0x14, 0x23, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xb}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:35:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00009fb000)={0x0, {0x2, 0x2, @multicast2=0xe0000002}, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x1, @multicast2=0xe0000002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 2018/02/16 17:35:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000f07000)={{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, {0xa, 0xffffffffffffffff, 0x0, @empty}}, 0x5c) 2018/02/16 17:35:40 executing program 3: mmap(&(0x7f0000000000/0xfe8000)=nil, 0xfe8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fe7000-0x498)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f0000fe6000), {[{{@ipv6={@dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @generic="6634bbc8cf0c1d7ffeded6976874c0ac", @generic="ccf29e0abccb1229104e64ba8531a753"}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@frag={0x30, 'frag\x00'}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xfffffffffffffffa, 0x0, "3786ac58bda5ddeaa685365f07766823d032c5f0a942a1dd8d624f6fed0c"}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @loopback={0x0, 0x1}, [], [], @generic="b8658512aa5d155c2ab4bdbc4d02286d", @common='vcan0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @loopback={0x0, 0x1}, [], [], @generic="9dd39c29dfd92f6b19fc6d5d1e155f18", @generic="cbdf066ba0501335c31bd086e4c7ec65"}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket2={0x28, 'socket\x00', 0x2}, @common=@hl={0x28, 'hl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x498) 2018/02/16 17:35:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000945000-0x58)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/16 17:35:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000842000-0x18)={0xaa}) syz_open_dev$vcsn(&(0x7f00009c0000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000c20000)={{&(0x7f0000068000/0x800000)=nil, 0x7fffdff97000}}) 2018/02/16 17:35:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) getegid() fchownat(0xffffffffffffffff, &(0x7f000096b000)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000002000+0x922), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00004d3000)={0x5, [0x6, 0x7fff, 0x800, 0x2, 0x1]}, &(0x7f00009ad000)=0xe) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20) r4 = dup3(r3, r1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000b8d000-0x20)=[@flags={0x3, 0x100}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/16 17:35:41 executing program 4: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000001d000-0xe8)={{{@in=@rand_addr, @in6=@remote}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@multicast2}}, &(0x7f0000016000-0x4)=0xe8) openat$ppp(0xffffffffffffff9c, &(0x7f0000006000-0x9)='/dev/ppp\x00', 0x121100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000001e000-0x9)='/dev/kvm\x00', 0x8000, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000001f000-0x10)='/selinux/policy\x00', 0x0, 0x0) write$selinux_load(r0, &(0x7f000001b000)={0xf97cff8c, 0x8, 'SE Linux', "f535ddb2182ecb9d84143998dd637bc31aa2c7b5f9471cbd61b127f305e72537001a9f3571f14e3395030b23532544ed52a248c370fd5f915dad122b1d9e7b74ef68f6781be70ed25bc41f03c4566be26bdaece2af3eb558aa3992ff7bbf11b3b74b3f4fb0c2643e89353ed79ffec9e80c3dc17106e9c4db65dd421ae348cf5faad38537067be134dc0a1b1afdb76a2d20c397e448fe3e9f4a8460b9d8c9caf9253983039d48722658a2c543c4b9d67a7a70fbcc884231c0cdea0819a0016dfe180b97500a4c0c775c4bb117ee1adfb8ab5ea62994cf2223b50407f7bd5aff78ce5767735538d462a80af117f5a8c75245c81077a3"}, 0x105) syz_emit_ethernet(0x2a, &(0x7f0000005000-0x4f)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xffffff89, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}, 0x0) 2018/02/16 17:35:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000cb8000), 0x8, 0x0, 0x0) msgrcv(r0, &(0x7f0000e90000)={0x0, ""/192}, 0xc8, 0x0, 0x0) msgsnd(r0, &(0x7f0000dc2000)={0x1, '('}, 0x9, 0x0) 2018/02/16 17:35:41 executing program 3: mmap(&(0x7f0000000000/0xfe8000)=nil, 0xfe8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fe7000-0x498)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f0000fe6000), {[{{@ipv6={@dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @generic="6634bbc8cf0c1d7ffeded6976874c0ac", @generic="ccf29e0abccb1229104e64ba8531a753"}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}, @common=@frag={0x30, 'frag\x00'}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xfffffffffffffffa, 0x0, "3786ac58bda5ddeaa685365f07766823d032c5f0a942a1dd8d624f6fed0c"}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @loopback={0x0, 0x1}, [], [], @generic="b8658512aa5d155c2ab4bdbc4d02286d", @common='vcan0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @loopback={0x0, 0x1}, [], [], @generic="9dd39c29dfd92f6b19fc6d5d1e155f18", @generic="cbdf066ba0501335c31bd086e4c7ec65"}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket2={0x28, 'socket\x00', 0x2}, @common=@hl={0x28, 'hl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x498) 2018/02/16 17:35:41 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0x3a, 0x0, &(0x7f0000001000-0x28), 0x0) 2018/02/16 17:35:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f00001d8000)=""/220, 0xdc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000afa000-0x38)={&(0x7f000000f000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f00004b1000-0x128)={0x14, 0x23, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xb}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:35:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) getegid() fchownat(0xffffffffffffffff, &(0x7f000096b000)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000002000+0x922), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00004d3000)={0x5, [0x6, 0x7fff, 0x800, 0x2, 0x1]}, &(0x7f00009ad000)=0xe) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20) r4 = dup3(r3, r1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000b8d000-0x20)=[@flags={0x3, 0x100}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/16 17:35:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000842000-0x18)={0xaa}) syz_open_dev$vcsn(&(0x7f00009c0000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000c20000)={{&(0x7f0000068000/0x800000)=nil, 0x7fffdff97000}}) 2018/02/16 17:35:41 executing program 4: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000001d000-0xe8)={{{@in=@rand_addr, @in6=@remote}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@multicast2}}, &(0x7f0000016000-0x4)=0xe8) openat$ppp(0xffffffffffffff9c, &(0x7f0000006000-0x9)='/dev/ppp\x00', 0x121100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000001e000-0x9)='/dev/kvm\x00', 0x8000, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000001f000-0x10)='/selinux/policy\x00', 0x0, 0x0) write$selinux_load(r0, &(0x7f000001b000)={0xf97cff8c, 0x8, 'SE Linux', "f535ddb2182ecb9d84143998dd637bc31aa2c7b5f9471cbd61b127f305e72537001a9f3571f14e3395030b23532544ed52a248c370fd5f915dad122b1d9e7b74ef68f6781be70ed25bc41f03c4566be26bdaece2af3eb558aa3992ff7bbf11b3b74b3f4fb0c2643e89353ed79ffec9e80c3dc17106e9c4db65dd421ae348cf5faad38537067be134dc0a1b1afdb76a2d20c397e448fe3e9f4a8460b9d8c9caf9253983039d48722658a2c543c4b9d67a7a70fbcc884231c0cdea0819a0016dfe180b97500a4c0c775c4bb117ee1adfb8ab5ea62994cf2223b50407f7bd5aff78ce5767735538d462a80af117f5a8c75245c81077a3"}, 0x105) syz_emit_ethernet(0x2a, &(0x7f0000005000-0x4f)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xffffff89, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}, 0x0) 2018/02/16 17:35:41 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000001000-0x38)="b131e9dc0137e4da", 0x8) 2018/02/16 17:35:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/02/16 17:35:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000842000-0x18)={0xaa}) syz_open_dev$vcsn(&(0x7f00009c0000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000c20000)={{&(0x7f0000068000/0x800000)=nil, 0x7fffdff97000}}) 2018/02/16 17:35:41 executing program 6: mmap(&(0x7f0000000000/0xefb000)=nil, 0xefb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001000-0x1e)={0x0, {0x2, 0xffffffffffffffff, @rand_addr}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@generic="68c791406f8c04f24fb2d8dd5a393408"}) 2018/02/16 17:35:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f00001d8000)=""/220, 0xdc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000afa000-0x38)={&(0x7f000000f000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f00004b1000-0x128)={0x14, 0x23, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xb}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:35:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000cb8000), 0x8, 0x0, 0x0) msgrcv(r0, &(0x7f0000e90000)={0x0, ""/192}, 0xc8, 0x0, 0x0) msgsnd(r0, &(0x7f0000dc2000)={0x1, '('}, 0x9, 0x0) 2018/02/16 17:35:41 executing program 4: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000001d000-0xe8)={{{@in=@rand_addr, @in6=@remote}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@multicast2}}, &(0x7f0000016000-0x4)=0xe8) openat$ppp(0xffffffffffffff9c, &(0x7f0000006000-0x9)='/dev/ppp\x00', 0x121100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000001e000-0x9)='/dev/kvm\x00', 0x8000, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000001f000-0x10)='/selinux/policy\x00', 0x0, 0x0) write$selinux_load(r0, &(0x7f000001b000)={0xf97cff8c, 0x8, 'SE Linux', "f535ddb2182ecb9d84143998dd637bc31aa2c7b5f9471cbd61b127f305e72537001a9f3571f14e3395030b23532544ed52a248c370fd5f915dad122b1d9e7b74ef68f6781be70ed25bc41f03c4566be26bdaece2af3eb558aa3992ff7bbf11b3b74b3f4fb0c2643e89353ed79ffec9e80c3dc17106e9c4db65dd421ae348cf5faad38537067be134dc0a1b1afdb76a2d20c397e448fe3e9f4a8460b9d8c9caf9253983039d48722658a2c543c4b9d67a7a70fbcc884231c0cdea0819a0016dfe180b97500a4c0c775c4bb117ee1adfb8ab5ea62994cf2223b50407f7bd5aff78ce5767735538d462a80af117f5a8c75245c81077a3"}, 0x105) syz_emit_ethernet(0x2a, &(0x7f0000005000-0x4f)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xffffff89, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}, 0x0) 2018/02/16 17:35:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000842000-0x18)={0xaa}) syz_open_dev$vcsn(&(0x7f00009c0000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000c20000)={{&(0x7f0000068000/0x800000)=nil, 0x7fffdff97000}}) 2018/02/16 17:35:41 executing program 1: mmap(&(0x7f0000004000/0xffb000)=nil, 0xffb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f000089f000-0xb)='/dev/audio\x00', 0x4040, 0x0) 2018/02/16 17:35:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000cb8000), 0x8, 0x0, 0x0) msgrcv(r0, &(0x7f0000e90000)={0x0, ""/192}, 0xc8, 0x0, 0x0) msgsnd(r0, &(0x7f0000dc2000)={0x1, '('}, 0x9, 0x0) 2018/02/16 17:35:41 executing program 6: mmap(&(0x7f0000000000/0xefb000)=nil, 0xefb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001000-0x1e)={0x0, {0x2, 0xffffffffffffffff, @rand_addr}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@generic="68c791406f8c04f24fb2d8dd5a393408"}) 2018/02/16 17:35:41 executing program 6: mmap(&(0x7f0000000000/0xefb000)=nil, 0xefb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001000-0x1e)={0x0, {0x2, 0xffffffffffffffff, @rand_addr}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@generic="68c791406f8c04f24fb2d8dd5a393408"}) 2018/02/16 17:35:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f000030f000)={0x10, 0x0, 0xffffffffffffffff, 0x400000}, 0xc) dup2(r0, r1) 2018/02/16 17:35:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00005d0000-0xa)='/dev/cuse\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f000035c000)=r0) 2018/02/16 17:35:41 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00006d0000)) 2018/02/16 17:35:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e0000", 0x4) 2018/02/16 17:35:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ee2000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="a2", 0x1) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x9) sendfile(r1, r2, &(0x7f0000e65000-0x8), 0x6) 2018/02/16 17:35:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f00006c2000)=@newsa={0x154, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x86}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/02/16 17:35:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f65000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(rfc4106(rfc4543(authenc(rmd128-generic,ecb-des3_ede-asm)'}, 0x58) 2018/02/16 17:35:41 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000003000)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000001000-0x1000), 0x0, 0x0, &(0x7f0000001000)={0xa, 0xffffffffffffffff, 0x2, @dev={0xfe, 0x80}}, 0x1c) 2018/02/16 17:35:41 executing program 6: mmap(&(0x7f0000000000/0xefb000)=nil, 0xefb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001000-0x1e)={0x0, {0x2, 0xffffffffffffffff, @rand_addr}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@generic="68c791406f8c04f24fb2d8dd5a393408"}) 2018/02/16 17:35:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f00004a6000-0x1)=0x9, 0x20) r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f000000c000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009000-0x38)={0x0, 0x0, &(0x7f0000014000-0x10)=[{&(0x7f000000d000-0x69)="b8bb", 0x2}], 0x1, &(0x7f0000013000)=[]}, 0x200088c0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000bc8000)=[{&(0x7f0000261000-0xb)="08cf", 0x2}], 0x1, &(0x7f0000003000)=[]}, 0x0) 2018/02/16 17:35:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000cb8000), 0x8, 0x0, 0x0) msgrcv(r0, &(0x7f0000e90000)={0x0, ""/192}, 0xc8, 0x0, 0x0) msgsnd(r0, &(0x7f0000dc2000)={0x1, '('}, 0x9, 0x0) 2018/02/16 17:35:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f000030f000)={0x10, 0x0, 0xffffffffffffffff, 0x400000}, 0xc) dup2(r0, r1) 2018/02/16 17:35:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f00006c2000)=@newsa={0x154, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x86}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/02/16 17:35:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000f5a000-0x4)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000d9a000-0x4)=0x1, 0x4) 2018/02/16 17:35:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x1, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, &(0x7f0000ea7000-0x8), 0x20) 2018/02/16 17:35:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000444000-0xa)='./control\x00', r0, &(0x7f000034b000-0x8)='./file0\x00') name_to_handle_at(r0, &(0x7f0000d55000-0x8)='./file0\x00', &(0x7f000059a000)={0xc, 0x0, "6efd18aa"}, &(0x7f0000040000), 0x0) 2018/02/16 17:35:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000a56000-0x11)='net/snmp6\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x2000000003) 2018/02/16 17:35:41 executing program 0: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000015000-0x9)='auxv\x00') pread64(r0, &(0x7f0000007000-0x4b)=""/1, 0x1, 0x0) 2018/02/16 17:35:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002a4000-0xf)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) read(r1, &(0x7f0000295000-0x26)=""/38, 0x26) io_setup(0x5, &(0x7f0000f3f000)=0x0) io_submit(r2, 0x1, &(0x7f0000134000)=[&(0x7f0000d45000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00001bd000-0xc9), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/02/16 17:35:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f000030f000)={0x10, 0x0, 0xffffffffffffffff, 0x400000}, 0xc) dup2(r0, r1) 2018/02/16 17:35:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x8000000000015, 0x80005, 0x0) getsockopt(r0, 0x8000200000000114, 0x5, &(0x7f000047c000), &(0x7f0000000000)) 2018/02/16 17:35:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f00006c2000)=@newsa={0x154, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x86}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/02/16 17:35:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f000054f000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x2}) 2018/02/16 17:35:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000444000-0xa)='./control\x00', r0, &(0x7f000034b000-0x8)='./file0\x00') name_to_handle_at(r0, &(0x7f0000d55000-0x8)='./file0\x00', &(0x7f000059a000)={0xc, 0x0, "6efd18aa"}, &(0x7f0000040000), 0x0) 2018/02/16 17:35:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb0000-0x12)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000e12000)={0x0, 0x0, 0x0, 0x0, "a08a5c482fda809402031909a8ef59cdf669452a33aa23966cd7c587c24bd97e"}) 2018/02/16 17:35:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f000030f000)={0x10, 0x0, 0xffffffffffffffff, 0x400000}, 0xc) dup2(r0, r1) 2018/02/16 17:35:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f00006c2000)=@newsa={0x154, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x86}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/02/16 17:35:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0x0, 0x0, &(0x7f0000d90000-0x10)) 2018/02/16 17:35:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000617000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000ca2000-0x38)={&(0x7f00008dd000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f000032f000-0x10)=[], 0x0, &(0x7f0000734000-0x30)=[@rights={0x20, 0x1, 0x1, [r3, r0, r2]}], 0x20}, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000940000-0x8)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x1}, 0x0) close(r2) close(r1) 2018/02/16 17:35:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb0000-0x12)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000e12000)={0x0, 0x0, 0x0, 0x0, "a08a5c482fda809402031909a8ef59cdf669452a33aa23966cd7c587c24bd97e"}) 2018/02/16 17:35:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000444000-0xa)='./control\x00', r0, &(0x7f000034b000-0x8)='./file0\x00') name_to_handle_at(r0, &(0x7f0000d55000-0x8)='./file0\x00', &(0x7f000059a000)={0xc, 0x0, "6efd18aa"}, &(0x7f0000040000), 0x0) 2018/02/16 17:35:41 executing program 0: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f000063b000-0x4), 0x4) 2018/02/16 17:35:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000f79000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000993000)) 2018/02/16 17:35:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002a4000-0xf)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) read(r1, &(0x7f0000295000-0x26)=""/38, 0x26) io_setup(0x5, &(0x7f0000f3f000)=0x0) io_submit(r2, 0x1, &(0x7f0000134000)=[&(0x7f0000d45000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00001bd000-0xc9), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/02/16 17:35:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000984000)='setgroups\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000b97000)=[{&(0x7f0000962000)='1', 0x1}], 0x1) 2018/02/16 17:35:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003b000-0x6)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000fd2000-0x20)={0x0, 0x1, 0x0, 0x8000000000}) 2018/02/16 17:35:42 executing program 0: prctl$void(0x1d) 2018/02/16 17:35:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000015000-0x38)={&(0x7f0000007000-0x10)=@in={0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f000002e000-0x60)=[], 0x0, &(0x7f000001f000-0x80)=[{0x10, 0x0, 0x7}], 0x10}, 0x0) 2018/02/16 17:35:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000f79000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000993000)) 2018/02/16 17:35:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000084000)=&(0x7f0000e27000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af24, &(0x7f00003b6000)={0x0, 0x0, &(0x7f0000207000-0x9)=""/9, &(0x7f0000fb1000-0x80)=""/128, &(0x7f0000f82000-0x4)=""/4}) 2018/02/16 17:35:42 executing program 6: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000007000-0x70)=[{&(0x7f0000000000)="53f6fb15d892e6892be53cbc6efef35bb9365c2a3b73c6486ef250756c10c183816a0eb4937a39522a46625e7129b5a04244f63c9856e81f1d19d6589a33c7f86b5f95bc7b97922b0c323286b7aecf1af6d4c1390f039943cecff64d8d79f2d78e256a308ab9d7e959af1ffec61405cc6594fc5f555ab3c3eff47a7abdb60bc24a4fc48457b1cfab122059dc1066e7aedcb23152276b9fa08b835f5eb186f520c1da393f5163b4836ba176852357e44389ef60871a04d95d4038b477813e8fb62b10678e7680f9ff1f02241758f8bbd2", 0xd0}], 0x1, &(0x7f0000003000-0x100)=[]}, 0x0) bind$can_raw(r0, &(0x7f0000004000-0x10)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000), 0x170) 2018/02/16 17:35:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb0000-0x12)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000e12000)={0x0, 0x0, 0x0, 0x0, "a08a5c482fda809402031909a8ef59cdf669452a33aa23966cd7c587c24bd97e"}) 2018/02/16 17:35:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002a4000-0xf)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) read(r1, &(0x7f0000295000-0x26)=""/38, 0x26) io_setup(0x5, &(0x7f0000f3f000)=0x0) io_submit(r2, 0x1, &(0x7f0000134000)=[&(0x7f0000d45000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00001bd000-0xc9), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/02/16 17:35:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000444000-0xa)='./control\x00', r0, &(0x7f000034b000-0x8)='./file0\x00') name_to_handle_at(r0, &(0x7f0000d55000-0x8)='./file0\x00', &(0x7f000059a000)={0xc, 0x0, "6efd18aa"}, &(0x7f0000040000), 0x0) 2018/02/16 17:35:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000f79000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000993000)) 2018/02/16 17:35:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb0000-0x12)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000e12000)={0x0, 0x0, 0x0, 0x0, "a08a5c482fda809402031909a8ef59cdf669452a33aa23966cd7c587c24bd97e"}) 2018/02/16 17:35:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f00009d1000)='ramfs\x00', 0x4, &(0x7f0000680000-0xaa)) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f00009b7000-0x7)='ns/mnt\x00') setns(r0, 0x0) clone(0x30020100, &(0x7f0000e69000), &(0x7f00009c5000-0x4), &(0x7f00001cc000), &(0x7f0000a46000)) 2018/02/16 17:35:42 executing program 1: mmap(&(0x7f0000000000/0x3be000)=nil, 0x3be000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendmsg(r0, &(0x7f0000006000)={&(0x7f00003b5000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, 0x26, &(0x7f000020b000-0x70)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/16 17:35:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d81000-0x80)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0c000-0x30)=[], 0x0, &(0x7f00002d4000)=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/02/16 17:35:42 executing program 6: mmap(&(0x7f0000000000/0xfbf000)=nil, 0xfbf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f0000793000-0x10)=[]}, 0x8000) sendto$inet6(r0, &(0x7f0000fc0000-0xba)='\'', 0x1, 0x0, &(0x7f0000fbb000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/16 17:35:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002a4000-0xf)='/dev/vhost-net\x00', 0x2, 0x0) r1 = eventfd(0x0) read(r1, &(0x7f0000295000-0x26)=""/38, 0x26) io_setup(0x5, &(0x7f0000f3f000)=0x0) io_submit(r2, 0x1, &(0x7f0000134000)=[&(0x7f0000d45000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00001bd000-0xc9), 0x0, 0x0, 0x0, 0x1, r1}]) 2018/02/16 17:35:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000064b000-0xc4)={@random="cd393800", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ccddd2", 0x8, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/16 17:35:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000f79000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000993000)) 2018/02/16 17:35:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000064b000-0xc4)={@random="cd393800", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ccddd2", 0x8, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/16 17:35:42 executing program 3: mmap(&(0x7f0000000000/0xb0d000)=nil, 0xb0d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000b0a000)={0x0, 0x0, []}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r3, 0x0, 0x2, r2}) [ 45.138346] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 2018/02/16 17:35:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x3f}) bpf$PROG_LOAD(0x5, &(0x7f00006f5000-0x48)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x2f}], {0x95}}, &(0x7f00009b4000)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f00006d1000)=""/195}, 0x264) 2018/02/16 17:35:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000589000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x5, &(0x7f00006fa000-0x20)) 2018/02/16 17:35:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00004ba000)=0x0) r1 = syz_open_procfs(r0, &(0x7f000033b000)='net\x00') exit(0x0) getdents64(r1, &(0x7f00005ab000-0x44)=""/68, 0xffffffffffffff76) 2018/02/16 17:35:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000064b000-0xc4)={@random="cd393800", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ccddd2", 0x8, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) 2018/02/16 17:35:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f00009d1000)='ramfs\x00', 0x4, &(0x7f0000680000-0xaa)) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f00009b7000-0x7)='ns/mnt\x00') setns(r0, 0x0) clone(0x30020100, &(0x7f0000e69000), &(0x7f00009c5000-0x4), &(0x7f00001cc000), &(0x7f0000a46000)) 2018/02/16 17:35:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000029000-0x3e0)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x7dc, &(0x7f0000028000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={0x28, 'cpu\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@empty, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, [], [], @syzn={0x73, 0x79, 0x7a}, @generic="cbce2889cc5ceebc1ea7ad6780fa4b4d"}, 0x0, 0xa8, 0xe8, 0x0, {}, []}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "ac39761bf04254b041e24c3b67c2d688ef4980ddef83404f5a149c36c500"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x21, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3e0) 2018/02/16 17:35:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d81000-0x80)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0c000-0x30)=[], 0x0, &(0x7f00002d4000)=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/02/16 17:35:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000deb000)={0x2, 0x400000000000003, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/02/16 17:35:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000064b000-0xc4)={@random="cd393800", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ccddd2", 0x8, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, 0x0) [ 45.306192] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 1 [ 45.375741] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 1 2018/02/16 17:35:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00006bf000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x1276, &(0x7f000035c000-0x44)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @empty}, 0x0, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @generic="980edbe34139704e389db349f728ad25"}) 2018/02/16 17:35:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000589000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x5, &(0x7f00006fa000-0x20)) 2018/02/16 17:35:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000308000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f000010f000)={0x0, &(0x7f000002d000), 0x0, 0xffffffffffffffff, 0x80003}) 2018/02/16 17:35:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d81000-0x80)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0c000-0x30)=[], 0x0, &(0x7f00002d4000)=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/02/16 17:35:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000061e000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00008f3000)={0x0, 0x0, []}) 2018/02/16 17:35:42 executing program 2: mmap(&(0x7f0000000000/0xf60000)=nil, 0xf60000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000a04000-0x4), 0x4) 2018/02/16 17:35:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f00009d1000)='ramfs\x00', 0x4, &(0x7f0000680000-0xaa)) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f00009b7000-0x7)='ns/mnt\x00') setns(r0, 0x0) clone(0x30020100, &(0x7f0000e69000), &(0x7f00009c5000-0x4), &(0x7f00001cc000), &(0x7f0000a46000)) 2018/02/16 17:35:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000deb000)={0x2, 0x400000000000003, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/02/16 17:35:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x5) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) read(r1, &(0x7f0000fc0000-0x4a)=""/74, 0x4a) ioctl$int_in(r2, 0x5452, &(0x7f0000b00000-0x8)=0x7) dup2(r1, r3) 2018/02/16 17:35:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000589000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x5, &(0x7f00006fa000-0x20)) 2018/02/16 17:35:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00008e8000)=@sack_info={0x0, 0x0, 0x201}, &(0x7f00003eb000)=0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='E', 0x1) ioctl$sock_ifreq(r0, 0x1000080000089f1, &(0x7f0000569000-0x28)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="01000000090002fbff031d0000010000c7000000e00003000480fbf502007e23"}) 2018/02/16 17:35:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00006bf000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x1276, &(0x7f000035c000-0x44)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @empty}, 0x0, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @generic="980edbe34139704e389db349f728ad25"}) 2018/02/16 17:35:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d81000-0x80)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0c000-0x30)=[], 0x0, &(0x7f00002d4000)=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/02/16 17:35:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000deb000)={0x2, 0x400000000000003, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/02/16 17:35:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00006bf000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x1276, &(0x7f000035c000-0x44)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @empty}, 0x0, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @generic="980edbe34139704e389db349f728ad25"}) 2018/02/16 17:35:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000589000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x5, &(0x7f00006fa000-0x20)) 2018/02/16 17:35:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e3e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000c1000)='/dev/dmmidi#\x00', 0x0, 0x0) 2018/02/16 17:35:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f00009d1000)='ramfs\x00', 0x4, &(0x7f0000680000-0xaa)) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f00009b7000-0x7)='ns/mnt\x00') setns(r0, 0x0) clone(0x30020100, &(0x7f0000e69000), &(0x7f00009c5000-0x4), &(0x7f00001cc000), &(0x7f0000a46000)) 2018/02/16 17:35:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000abd000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @rand_addr, {[]}}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}}}}}}, &(0x7f0000b3e000)={0x0, 0x1, [0x0]}) 2018/02/16 17:35:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00006b6000)='./file0\x00', &(0x7f000015e000)='./control\x00') 2018/02/16 17:35:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000deb000)={0x2, 0x400000000000003, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/02/16 17:35:42 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000383000)={{}, {0x0}}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{r0}, {0x77359400}}, &(0x7f0000001000-0x20)) 2018/02/16 17:35:42 executing program 2: mmap(&(0x7f0000000000/0x21000)=nil, 0x21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) 2018/02/16 17:35:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00006bf000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x1276, &(0x7f000035c000-0x44)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @empty}, 0x0, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @generic="980edbe34139704e389db349f728ad25"}) 2018/02/16 17:35:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000371000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0xc}}, 0x10) 2018/02/16 17:35:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00006b6000)='./file0\x00', &(0x7f000015e000)='./control\x00') 2018/02/16 17:35:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d78000+0xa7b)='net/softnet_stat\x00') close(r0) 2018/02/16 17:35:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000187000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x75, &(0x7f0000bb9000)={0x0, 0x7}, 0x8) sendto$inet6(r1, &(0x7f0000ff9000-0x1)="e1", 0x1, 0x0, &(0x7f00006a0000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000fb8000-0x4), 0x4) [ 45.833568] mmap: syz-executor4 (6891) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 45.903919] [ 45.905581] ====================================================== [ 45.911880] WARNING: possible circular locking dependency detected [ 45.918173] 4.16.0-rc1+ #315 Not tainted [ 45.922201] ------------------------------------------------------ [ 45.928495] syz-executor2/6902 is trying to acquire lock: [ 45.933997] (sk_lock-AF_INET){+.+.}, at: [<00000000d0ac9a5e>] do_ip_setsockopt.isra.12+0x1d9/0x3210 [ 45.943252] [ 45.943252] but task is already holding lock: [ 45.949190] (rtnl_mutex){+.+.}, at: [<00000000b732a108>] rtnl_lock+0x17/0x20 [ 45.956452] [ 45.956452] which lock already depends on the new lock. [ 45.956452] [ 45.964735] [ 45.964735] the existing dependency chain (in reverse order) is: [ 45.972321] [ 45.972321] -> #2 (rtnl_mutex){+.+.}: [ 45.977578] __mutex_lock+0x16f/0x1a80 [ 45.981954] mutex_lock_nested+0x16/0x20 [ 45.986504] rtnl_lock+0x17/0x20 [ 45.990362] unregister_netdevice_notifier+0x91/0x4e0 [ 45.996042] tee_tg_destroy+0x61/0xc0 [ 46.000335] cleanup_entry+0x218/0x350 [ 46.004713] __do_replace+0x79d/0xa50 [ 46.009007] do_ipt_set_ctl+0x40f/0x5f0 [ 46.013476] nf_setsockopt+0x67/0xc0 [ 46.017681] ip_setsockopt+0x97/0xa0 [ 46.021883] tcp_setsockopt+0x82/0xd0 [ 46.026175] sock_common_setsockopt+0x95/0xd0 [ 46.031161] SyS_setsockopt+0x189/0x360 [ 46.035626] do_syscall_64+0x280/0x940 [ 46.040004] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 46.045682] [ 46.045682] -> #1 (&xt[i].mutex){+.+.}: [ 46.051112] __mutex_lock+0x16f/0x1a80 [ 46.055489] mutex_lock_nested+0x16/0x20 [ 46.060041] xt_find_table_lock+0x3e/0x3e0 [ 46.064767] xt_request_find_table_lock+0x28/0xc0 [ 46.070097] get_info+0x154/0x690 [ 46.074040] do_arpt_get_ctl+0x2a9/0xa00 [ 46.078594] nf_getsockopt+0x6a/0xc0 [ 46.082796] ip_getsockopt+0x15c/0x220 [ 46.087172] tcp_getsockopt+0x82/0xd0 [ 46.091461] sock_common_getsockopt+0x95/0xd0 [ 46.096448] SyS_getsockopt+0x178/0x340 [ 46.100911] do_syscall_64+0x280/0x940 [ 46.105288] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 46.110963] [ 46.110963] -> #0 (sk_lock-AF_INET){+.+.}: [ 46.116653] lock_acquire+0x1d5/0x580 [ 46.120945] lock_sock_nested+0xc2/0x110 [ 46.125495] do_ip_setsockopt.isra.12+0x1d9/0x3210 [ 46.130914] ip_setsockopt+0x3a/0xa0 [ 46.135122] udp_setsockopt+0x45/0x80 [ 46.139415] sock_common_setsockopt+0x95/0xd0 [ 46.144405] SyS_setsockopt+0x189/0x360 [ 46.148866] do_syscall_64+0x280/0x940 [ 46.153243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 46.158920] [ 46.158920] other info that might help us debug this: [ 46.158920] [ 46.167030] Chain exists of: [ 46.167030] sk_lock-AF_INET --> &xt[i].mutex --> rtnl_mutex [ 46.167030] [ 46.177231] Possible unsafe locking scenario: [ 46.177231] [ 46.183257] CPU0 CPU1 [ 46.187890] ---- ---- [ 46.192523] lock(rtnl_mutex); [ 46.195769] lock(&xt[i].mutex); [ 46.201706] lock(rtnl_mutex); [ 46.207469] lock(sk_lock-AF_INET); [ 46.211151] [ 46.211151] *** DEADLOCK *** [ 46.211151] [ 46.217179] 1 lock held by syz-executor2/6902: [ 46.221727] #0: (rtnl_mutex){+.+.}, at: [<00000000b732a108>] rtnl_lock+0x17/0x20 [ 46.229413] [ 46.229413] stack backtrace: [ 46.233878] CPU: 0 PID: 6902 Comm: syz-executor2 Not tainted 4.16.0-rc1+ #315 [ 46.241119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.250440] Call Trace: [ 46.252999] dump_stack+0x194/0x257 [ 46.256599] ? arch_local_irq_restore+0x53/0x53 [ 46.261240] print_circular_bug.isra.38+0x2cd/0x2dc [ 46.266226] ? save_trace+0xe0/0x2b0 [ 46.269913] __lock_acquire+0x30a8/0x3e00 [ 46.274037] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 46.279195] ? rtnl_lock+0x17/0x20 [ 46.282706] ? rtnl_lock+0x17/0x20 [ 46.286218] ? __lock_acquire+0x664/0x3e00 [ 46.290426] ? mutex_lock_io_nested+0x1900/0x1900 [ 46.295239] ? rcutorture_record_progress+0x10/0x10 [ 46.300230] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 46.305389] ? __kernel_text_address+0xd/0x40 [ 46.309854] ? unwind_get_return_address+0x61/0xa0 [ 46.314754] ? __save_stack_trace+0x7e/0xd0 [ 46.319047] ? check_noncircular+0x20/0x20 [ 46.323257] ? save_stack+0xa3/0xd0 [ 46.326856] ? save_stack+0x43/0xd0 [ 46.330456] lock_acquire+0x1d5/0x580 [ 46.334224] ? lock_acquire+0x1d5/0x580 [ 46.338166] ? do_ip_setsockopt.isra.12+0x1d9/0x3210 [ 46.343240] ? lock_release+0xa40/0xa40 [ 46.347183] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 46.353418] ? do_raw_spin_trylock+0x190/0x190 [ 46.357974] ? lock_sock_nested+0x44/0x110 [ 46.362178] lock_sock_nested+0xc2/0x110 [ 46.366210] ? do_ip_setsockopt.isra.12+0x1d9/0x3210 [ 46.371281] do_ip_setsockopt.isra.12+0x1d9/0x3210 [ 46.376180] ? ip_ra_control+0x5c0/0x5c0 [ 46.380212] ? lock_release+0xa40/0xa40 [ 46.384157] ? kmem_cache_alloc+0x466/0x760 [ 46.388449] ? lock_release+0xa40/0xa40 [ 46.392397] ? find_held_lock+0x35/0x1d0 [ 46.396431] ? avc_has_perm+0x35e/0x680 [ 46.400374] ? lock_downgrade+0x980/0x980 [ 46.404495] ? avc_alloc_node+0x4d0/0x4d0 [ 46.408611] ? lock_release+0xa40/0xa40 [ 46.412555] ? __lock_is_held+0xb6/0x140 [ 46.417109] ? avc_has_perm+0x43e/0x680 [ 46.421053] ? avc_has_perm_noaudit+0x520/0x520 [ 46.425693] ? iterate_fd+0x3f0/0x3f0 [ 46.429462] ? __sched_text_start+0x8/0x8 [ 46.433588] ? sock_has_perm+0x2a4/0x420 [ 46.437622] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 46.442958] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 46.448636] ? selinux_netlbl_sock_rcv_skb+0x730/0x730 [ 46.453883] ip_setsockopt+0x3a/0xa0 [ 46.457568] udp_setsockopt+0x45/0x80 [ 46.461338] sock_common_setsockopt+0x95/0xd0 [ 46.465807] SyS_setsockopt+0x189/0x360 [ 46.469751] ? SyS_recv+0x40/0x40 [ 46.473176] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 46.478684] ? do_syscall_64+0xb6/0x940 [ 46.482633] ? SyS_recv+0x40/0x40 [ 46.486054] do_syscall_64+0x280/0x940 [ 46.489914] ? __do_page_fault+0xc90/0xc90 [ 46.494117] ? finish_task_switch+0x1c0/0x860 [ 46.498583] ? finish_task_switch+0x181/0x860 [ 46.503046] ? syscall_return_slowpath+0x550/0x550 [ 46.507944] ? syscall_return_slowpath+0x2ac/0x550 [ 46.512846] ? prepare_exit_to_usermode+0x350/0x350 [ 46.517835] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 46.523168] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.527980] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 46.533139] RIP: 0033:0x453a59 [ 46.536302] RSP: 002b:00007f783734bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 46.543979] RAX: ffffffffffffffda RBX: 00007f783734c6d4 RCX: 0000000000453a59 2018/02/16 17:35:43 executing program 0: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604111, &(0x7f0000003000)="bb9337f7ec0b04d3ec6d8eff7f7b0ae2c48acc818123fd7d00f9669b07004f22f0a20993a236916876a553d40633a094a428dea168423ea006d41bba5b3a3a3a2281b52603") 2018/02/16 17:35:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f000070d000)={&(0x7f0000775000)={0x10}, 0xc, &(0x7f00002ca000-0x10)={&(0x7f0000208000-0x24)=@ipv4_newroute={0x1c, 0x18, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x5}, []}, 0x1c}, 0x1}, 0x0) 2018/02/16 17:35:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00006b6000)='./file0\x00', &(0x7f000015e000)='./control\x00') 2018/02/16 17:35:43 executing program 3: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000006000-0x9)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f000000a000-0x18)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x200000a, 0x6012, r1, 0x0) getresgid(&(0x7f0000007000-0x1), &(0x7f0000005000-0x4), &(0x7f000000e000-0x4)) [ 46.551219] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000013 [ 46.558459] RBP: 000000000071bea0 R08: 000000000000000c R09: 0000000000000000 [ 46.565699] R10: 000000002001b000 R11: 0000000000000246 R12: 00000000ffffffff [ 46.572937] R13: 0000000000000523 R14: 00000000006f7be8 R15: 0000000000000000 2018/02/16 17:35:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000ed7000)="26000000220047019353ff07008a00000002006d200000ff1fc0e9ffff495180e507c7033500", 0x26) 2018/02/16 17:35:43 executing program 6: socket(0x18, 0x0, 0x3f400001) 2018/02/16 17:35:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009cc000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x801) r2 = dup3(r1, r0, 0x0) writev(r2, &(0x7f00008ba000)=[{&(0x7f0000ce0000-0xde)='I', 0x1}], 0x1) 2018/02/16 17:35:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00006b6000)='./file0\x00', &(0x7f000015e000)='./control\x00') 2018/02/16 17:35:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="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", 0x4d1, 0x0, &(0x7f0000607000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000e8e000)=[{{&(0x7f00008b6000)=@in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x1}, 0x1c, &(0x7f0000232000-0x10)=[{&(0x7f0000f89000)='t', 0x1}], 0x1, &(0x7f0000e00000-0x148)=[]}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a8000-0x4), 0x4) sendto$inet6(r0, &(0x7f000010c000-0xec)="14", 0x1, 0x0, &(0x7f00004d9000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x100000001}, 0x1c) connect$inet6(r0, &(0x7f000060f000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x7) accept4(r0, 0x0, &(0x7f0000623000-0x4), 0x0) 2018/02/16 17:35:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000667000)={&(0x7f0000455000-0x13c)=@newsa={0x13c, 0x10, 0x721, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@dev={0xfe, 0x80}}, {@in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x33}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000002, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'crc32\x00'}}}]}, 0x13c}, 0x1}, 0x0) [ 46.640495] x86/PAT: syz-executor3:6917 map pfn RAM range req write-combining for [mem 0x1a1f10000-0x1a1f13fff], got write-back [ 46.683406] x86/PAT: syz-executor3:6917 map pfn RAM range req write-combining for [mem 0x1a1f20000-0x1a1f23fff], got write-back [ 46.719201] kauditd_printk_skb: 1117 callbacks suppressed [ 46.719208] audit: type=1400 audit(1518802543.778:1159): avc: denied { net_admin } for pid=5779 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 46.749302] audit: type=1400 audit(1518802543.778:1160): avc: denied { net_admin } for pid=5779 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:43 executing program 2: mmap(&(0x7f0000fc3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc4000/0x1000)=nil, 0x1000, 0x3000004, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000fc4000-0x73)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/16 17:35:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f000054d000-0xb)='/dev/adsp#\x00', 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00007a2000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x6000) 2018/02/16 17:35:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087e000-0x2)='F', 0x1, 0x0, &(0x7f0000060000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, &(0x7f0000c72000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5f000-0x4)=0x10, 0x0) shutdown(r2, 0x1) 2018/02/16 17:35:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000987000)={@common='bridge0\x00', @ifru_data=&(0x7f0000a7b000-0x20)="04000000000000000200000020000005000000d8000000edfffffff5fffffc23"}) 2018/02/16 17:35:43 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000077d000-0xb)='/dev/vcsa#\x00', 0x73, 0x0) readv(r0, &(0x7f00005c0000)=[{&(0x7f0000c26000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/16 17:35:43 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x17, 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000013000-0x4)=0x81) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000003000-0x4)=0x100, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000014000-0xc)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) 2018/02/16 17:35:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000462000)='net/arp\x00') r1 = syz_open_dev$urandom(&(0x7f0000ba5000)='/dev/urandom\x00', 0x0, 0x1) sendfile(r1, r0, &(0x7f0000fda000-0x8), 0x100000001) 2018/02/16 17:35:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@empty, [], @ipv4=@multicast1=0xe0000001, [], @ipv4=@empty, [], @ipv4=@loopback=0x7f000001}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast2=0xe0000002, @empty, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) syz_emit_ethernet(0x6a, &(0x7f0000d67000-0xca)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @dev={0xac, 0x14}, {[]}}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [{[]}]}, @rr={0x7, 0x13, 0x0, [@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @rand_addr, @empty]}, @lsrr={0x83, 0xf, 0x0, [@rand_addr, @empty, @empty]}]}}}}}}}, &(0x7f0000490000-0xc)={0x0, 0x1, [0x0]}) [ 46.773766] audit: type=1400 audit(1518802543.784:1161): avc: denied { net_admin } for pid=4213 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 46.798231] audit: type=1400 audit(1518802543.784:1162): avc: denied { net_admin } for pid=4213 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000462000)='net/arp\x00') r1 = syz_open_dev$urandom(&(0x7f0000ba5000)='/dev/urandom\x00', 0x0, 0x1) sendfile(r1, r0, &(0x7f0000fda000-0x8), 0x100000001) 2018/02/16 17:35:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000987000)={@common='bridge0\x00', @ifru_data=&(0x7f0000a7b000-0x20)="04000000000000000200000020000005000000d8000000edfffffff5fffffc23"}) [ 46.822698] audit: type=1400 audit(1518802543.791:1163): avc: denied { net_admin } for pid=4225 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 46.847158] audit: type=1400 audit(1518802543.804:1164): avc: denied { net_admin } for pid=4221 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 46.871634] audit: type=1400 audit(1518802543.880:1165): avc: denied { net_admin } for pid=4219 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 46.896104] audit: type=1400 audit(1518802543.881:1166): avc: denied { net_admin } for pid=4219 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000987000)={@common='bridge0\x00', @ifru_data=&(0x7f0000a7b000-0x20)="04000000000000000200000020000005000000d8000000edfffffff5fffffc23"}) 2018/02/16 17:35:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000462000)='net/arp\x00') r1 = syz_open_dev$urandom(&(0x7f0000ba5000)='/dev/urandom\x00', 0x0, 0x1) sendfile(r1, r0, &(0x7f0000fda000-0x8), 0x100000001) [ 46.920584] audit: type=1400 audit(1518802543.902:1167): avc: denied { net_admin } for pid=6944 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 46.945067] audit: type=1400 audit(1518802543.903:1168): avc: denied { dac_override } for pid=6946 comm="syz-executor7" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:35:44 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x17, 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000013000-0x4)=0x81) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000003000-0x4)=0x100, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000014000-0xc)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) 2018/02/16 17:35:44 executing program 0: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) close(r0) 2018/02/16 17:35:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f000054d000-0xb)='/dev/adsp#\x00', 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00007a2000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x6000) 2018/02/16 17:35:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000462000)='net/arp\x00') r1 = syz_open_dev$urandom(&(0x7f0000ba5000)='/dev/urandom\x00', 0x0, 0x1) sendfile(r1, r0, &(0x7f0000fda000-0x8), 0x100000001) 2018/02/16 17:35:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000987000)={@common='bridge0\x00', @ifru_data=&(0x7f0000a7b000-0x20)="04000000000000000200000020000005000000d8000000edfffffff5fffffc23"}) 2018/02/16 17:35:44 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x17, 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000013000-0x4)=0x81) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000003000-0x4)=0x100, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000014000-0xc)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) 2018/02/16 17:35:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000c69000)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x98, 0x158, 0x98, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@iprange={0x68, 'iprange\x00', 0x1, {@ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4=@multicast2=0xe0000002, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x350) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) 2018/02/16 17:35:44 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0xff, 0x0, &(0x7f0000262000-0xbc)=""/188, &(0x7f00009f2000-0x4)=0xbc) [ 47.014717] sctp: [Deprecated]: syz-executor1 (pid 6967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.014717] Use struct sctp_sack_info instead 2018/02/16 17:35:44 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x17, 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000013000-0x4)=0x81) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000003000-0x4)=0x100, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000014000-0xc)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) 2018/02/16 17:35:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f000035b000+0xb31)={0x10}, 0xc, &(0x7f00003de000-0x8)={&(0x7f00005c6000-0x11c)=@newlink={0x30, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IF_NETNSID={0x8, 0x2e}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xffffffffffffffff}]}, 0x30}, 0x1}, 0x0) 2018/02/16 17:35:44 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000004000-0x6)='./control\x00', 0x4) mmap(&(0x7f0000000000/0xaf8000)=nil, 0xaf8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f000003c000)='./control\x00', 0x141042, 0x0) creat(&(0x7f0000017000)='./bus\x00', 0x0) lchown(&(0x7f0000108000-0xa)='./control\x00', 0x0, 0x0) chmod(&(0x7f000003d000-0x6)='./bus\x00', 0x0) 2018/02/16 17:35:44 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002000)={0x0, 0x3f}, &(0x7f0000007000-0x4)=0x8) nanosleep(&(0x7f0000012000-0x10), &(0x7f0000002000)={0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000003000-0x10)={&(0x7f000000b000-0x48)={0x1, 0x3, 0x0, {r2}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15ffe90001abab"}}, 0x48}, 0x1}, 0x0) 2018/02/16 17:35:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f000054d000-0xb)='/dev/adsp#\x00', 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00007a2000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x6000) 2018/02/16 17:35:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000eec000)='dns_resolver\x00', &(0x7f0000d86000)={0x73, 0x79, 0x7a}, &(0x7f0000925000)='/dev/sequencer\x00', 0xffffffffffffffff) r1 = add_key(&(0x7f0000f14000-0xc)='id_resolver\x00', &(0x7f0000d54000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000974000)="c8", 0x1, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000051000-0x8)='big_key\x00', &(0x7f000043b000-0x5)={0x73, 0x79, 0x7a}, r1) 2018/02/16 17:35:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000c69000)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x98, 0x158, 0x98, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@iprange={0x68, 'iprange\x00', 0x1, {@ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4=@multicast2=0xe0000002, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x350) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) 2018/02/16 17:35:44 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x17, 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000013000-0x4)=0x81) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000003000-0x4)=0x100, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000014000-0xc)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) [ 47.122427] sctp: [Deprecated]: syz-executor2 (pid 6998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.122427] Use struct sctp_sack_info instead [ 47.135096] sctp: [Deprecated]: syz-executor1 (pid 6996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.135096] Use struct sctp_sack_info instead 2018/02/16 17:35:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000001000)='net/arp\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') 2018/02/16 17:35:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f000054d000-0xb)='/dev/adsp#\x00', 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00007a2000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x6000) 2018/02/16 17:35:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000c69000)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x98, 0x158, 0x98, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@iprange={0x68, 'iprange\x00', 0x1, {@ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4=@multicast2=0xe0000002, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x350) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) 2018/02/16 17:35:44 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002000)={0x0, 0x3f}, &(0x7f0000007000-0x4)=0x8) nanosleep(&(0x7f0000012000-0x10), &(0x7f0000002000)={0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000003000-0x10)={&(0x7f000000b000-0x48)={0x1, 0x3, 0x0, {r2}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15ffe90001abab"}}, 0x48}, 0x1}, 0x0) [ 47.238403] sctp: [Deprecated]: syz-executor2 (pid 7023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.238403] Use struct sctp_sack_info instead [ 47.274568] sctp: [Deprecated]: syz-executor1 (pid 7020) Use of struct sctp_assoc_value in delayed_ack socket option. 2018/02/16 17:35:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x800400000485, &(0x7f00005e1000), 0x0) 2018/02/16 17:35:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_addrs=@rc={0x1f}}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000e61000-0x11)='/selinux/enforce\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000a4d000-0x4)=r1) 2018/02/16 17:35:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000c69000)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x98, 0x158, 0x98, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@iprange={0x68, 'iprange\x00', 0x1, {@ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4=@multicast2=0xe0000002, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x350) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) 2018/02/16 17:35:44 executing program 6: futex(&(0x7f000061c000), 0xd, 0x0, &(0x7f0000fa5000-0x10), &(0x7f000035d000), 0x0) 2018/02/16 17:35:44 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x17, 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000013000-0x4)=0x81) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000003000-0x4)=0x100, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000014000-0xc)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) 2018/02/16 17:35:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ce7000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000b1000/0x18000)=nil, &(0x7f000052c000)=[@text64={0x40, &(0x7f0000159000)="c4e379150e00470fc71b0f23d9b9360900000f32b9530b0000b80f000000ba000000000f30f20f35c421f81748f9460f2395c42251afeb4fdbf4", 0x3a}], 0x1, 0x0, &(0x7f00006ee000-0x20)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/16 17:35:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000756000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000c0b000)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, 0x0, 0x0, 0x4}, &(0x7f00001c5000)=0xa0) r0 = syz_open_procfs(0x0, &(0x7f0000c2b000)="6664001f66d0") execveat(r0, &(0x7f0000019000-0x8)='./file0\x00', &(0x7f0000843000)=[&(0x7f0000019000-0x13)="2d5d000a09d0766d6e657430"], &(0x7f00003ad000)=[], 0x0) [ 47.274568] Use struct sctp_sack_info instead 2018/02/16 17:35:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x800400000485, &(0x7f00005e1000), 0x0) 2018/02/16 17:35:44 executing program 2: mmap(&(0x7f0000000000/0x23000)=nil, 0x23000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000009000)=@ipv4_delroute={0x1c, 0x19, 0xf11, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x2}, []}, 0x1c}, 0x1}, 0x0) 2018/02/16 17:35:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000756000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000c0b000)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, 0x0, 0x0, 0x4}, &(0x7f00001c5000)=0xa0) r0 = syz_open_procfs(0x0, &(0x7f0000c2b000)="6664001f66d0") execveat(r0, &(0x7f0000019000-0x8)='./file0\x00', &(0x7f0000843000)=[&(0x7f0000019000-0x13)="2d5d000a09d0766d6e657430"], &(0x7f00003ad000)=[], 0x0) 2018/02/16 17:35:44 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x17, 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000013000-0x4)=0x81) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000003000-0x4)=0x100, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000014000-0xc)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) 2018/02/16 17:35:44 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002000)={0x0, 0x3f}, &(0x7f0000007000-0x4)=0x8) nanosleep(&(0x7f0000012000-0x10), &(0x7f0000002000)={0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000003000-0x10)={&(0x7f000000b000-0x48)={0x1, 0x3, 0x0, {r2}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15ffe90001abab"}}, 0x48}, 0x1}, 0x0) 2018/02/16 17:35:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000f000-0xc)={0x10, 0x34050}, 0xc, &(0x7f0000008000-0x10)={&(0x7f0000017000-0x20)={0x18, 0x27, 0x82b, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, [@nested={0x0, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/16 17:35:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000d44000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00001ad000-0x4)=0x10, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000486, &(0x7f000005a000-0x18)=""/24, &(0x7f0000aed000)=0x18) 2018/02/16 17:35:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ce7000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000b1000/0x18000)=nil, &(0x7f000052c000)=[@text64={0x40, &(0x7f0000159000)="c4e379150e00470fc71b0f23d9b9360900000f32b9530b0000b80f000000ba000000000f30f20f35c421f81748f9460f2395c42251afeb4fdbf4", 0x3a}], 0x1, 0x0, &(0x7f00006ee000-0x20)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 47.410824] sctp: [Deprecated]: syz-executor2 (pid 7052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.410824] Use struct sctp_sack_info instead 2018/02/16 17:35:44 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002000)={0x0, 0x3f}, &(0x7f0000007000-0x4)=0x8) nanosleep(&(0x7f0000012000-0x10), &(0x7f0000002000)={0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000003000-0x10)={&(0x7f000000b000-0x48)={0x1, 0x3, 0x0, {r2}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15ffe90001abab"}}, 0x48}, 0x1}, 0x0) 2018/02/16 17:35:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x800400000485, &(0x7f00005e1000), 0x0) 2018/02/16 17:35:44 executing program 5: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="f5", 0x1, 0x0, &(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "f9cf03841b95"}, 0x10) sendto(r0, &(0x7f0000000000), 0x0, 0x20044000, 0x0, 0x0) write(r0, &(0x7f0000679000)="f4", 0x1) 2018/02/16 17:35:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000d44000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00001ad000-0x4)=0x10, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000486, &(0x7f000005a000-0x18)=""/24, &(0x7f0000aed000)=0x18) 2018/02/16 17:35:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000061c000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c44000), 0x1b2) [ 47.530590] sctp: [Deprecated]: syz-executor1 (pid 7077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.530590] Use struct sctp_sack_info instead 2018/02/16 17:35:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x800400000485, &(0x7f00005e1000), 0x0) 2018/02/16 17:35:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ce7000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000b1000/0x18000)=nil, &(0x7f000052c000)=[@text64={0x40, &(0x7f0000159000)="c4e379150e00470fc71b0f23d9b9360900000f32b9530b0000b80f000000ba000000000f30f20f35c421f81748f9460f2395c42251afeb4fdbf4", 0x3a}], 0x1, 0x0, &(0x7f00006ee000-0x20)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/16 17:35:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000756000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000c0b000)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, 0x0, 0x0, 0x4}, &(0x7f00001c5000)=0xa0) r0 = syz_open_procfs(0x0, &(0x7f0000c2b000)="6664001f66d0") execveat(r0, &(0x7f0000019000-0x8)='./file0\x00', &(0x7f0000843000)=[&(0x7f0000019000-0x13)="2d5d000a09d0766d6e657430"], &(0x7f00003ad000)=[], 0x0) 2018/02/16 17:35:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eb000-0x30)={0xfffffffffffffec9, 0x0, &(0x7f000016e000)=[@acquire_done={0x40106309}], 0x0, 0x0, &(0x7f00004ec000)}) 2018/02/16 17:35:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x400) read(r0, &(0x7f0000de3000-0x1000)=""/4096, 0x1000) 2018/02/16 17:35:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000d44000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00001ad000-0x4)=0x10, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000486, &(0x7f000005a000-0x18)=""/24, &(0x7f0000aed000)=0x18) 2018/02/16 17:35:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000061c000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c44000), 0x1b2) 2018/02/16 17:35:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000e9c000-0xec), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @empty}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) read(r0, &(0x7f00006a7000-0xa1)=""/161, 0xa1) close(r0) 2018/02/16 17:35:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000d44000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00001ad000-0x4)=0x10, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000486, &(0x7f000005a000-0x18)=""/24, &(0x7f0000aed000)=0x18) 2018/02/16 17:35:44 executing program 4: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000d000)=0x4) syz_open_dev$sndpcmp(&(0x7f000000b000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400) 2018/02/16 17:35:44 executing program 5: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000001000-0x1e)={0x18, 0x0, {0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @common='ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f000000c000-0x1e)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2}, @syzn={0x73, 0x79, 0x7a, 0x0}}}, 0x1e) close(r1) 2018/02/16 17:35:44 executing program 3: mmap(&(0x7f0000000000/0xf28000)=nil, 0xf28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(r0, 0x10e, 0xb, &(0x7f000077d000)={{{@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000dd8000-0x38)={&(0x7f0000d9d000)={0x10}, 0xc, &(0x7f0000f22000)={&(0x7f0000f23000-0x2c0)=@getae={0x48, 0x1f, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @in=@dev={0xac, 0x14}}, [@ipv6_hthresh={0x8, 0x4}]}, 0x48}, 0x1}, 0x0) 2018/02/16 17:35:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000061c000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c44000), 0x1b2) 2018/02/16 17:35:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ce7000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000b1000/0x18000)=nil, &(0x7f000052c000)=[@text64={0x40, &(0x7f0000159000)="c4e379150e00470fc71b0f23d9b9360900000f32b9530b0000b80f000000ba000000000f30f20f35c421f81748f9460f2395c42251afeb4fdbf4", 0x3a}], 0x1, 0x0, &(0x7f00006ee000-0x20)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/16 17:35:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000040000)='./bus\x00', 0x0) mount(&(0x7f0000044000-0x6)='./bus\x00', &(0x7f0000044000-0x6)='./bus\x00', &(0x7f0000625000)='ramfs\x00', 0x0, &(0x7f0000043000)) open$dir(&(0x7f0000606000)='./bus\x00', 0x3fd, 0x0) 2018/02/16 17:35:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000756000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000c0b000)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, 0x0, 0x0, 0x4}, &(0x7f00001c5000)=0xa0) r0 = syz_open_procfs(0x0, &(0x7f0000c2b000)="6664001f66d0") execveat(r0, &(0x7f0000019000-0x8)='./file0\x00', &(0x7f0000843000)=[&(0x7f0000019000-0x13)="2d5d000a09d0766d6e657430"], &(0x7f00003ad000)=[], 0x0) 2018/02/16 17:35:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000061c000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c44000), 0x1b2) 2018/02/16 17:35:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000a85000-0x20)={@common='bpq0\x00', @ifru_flags=0x5100}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000000000000) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000544000)=0x5, 0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) r5 = dup3(r4, r3, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000a1f000-0x10)={0x0, 0x7, 0xa3a9, 0x3}, 0x10) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000750000)) clock_gettime(0x0, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000a94000-0xe)='/dev/admmidi#\x00', 0x793, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000f68000-0x24)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f000071d000-0xc)='/dev/rfkill\x00', 0x880, 0x0) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/02/16 17:35:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000055f000)='/dev/rtc\x00', 0x0, 0x0) ppoll(&(0x7f000044d000)=[{r0}], 0x1, &(0x7f00009f7000-0x10), &(0x7f0000719000-0x8), 0x8) 2018/02/16 17:35:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) clone(0x0, &(0x7f0000bf3000-0x2e), &(0x7f00000f0000), &(0x7f00005b2000), &(0x7f0000963000)) 2018/02/16 17:35:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000f21000-0x380)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x0, 0xea, 'bm\x00', "225eecb600000007ceb36a2658d861a1eff32000000000000000d947ff2ad36d4e0d6b5328cf197cd30f110002000000000000d48bdc49c5f07871c41c895cbb30dc1065e1ca049ab6e5f300000000000000023a992aa626d200a9ee7fd68edf88000099b1942a0ff1fef7a3b917dc483d93f9d782b3ce2da3eb8965fbf6dca4", 0x400000000002f}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@broadcast=0xffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @generic="9cd7d6f066821358576485a73127bf63", @generic="ad8e0879982acd22a5e0eba0ca671522"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14}, @multicast1=0xe0000001, 0x0, 0x0, @generic="e39e66367d4140ac40e41e1e04d2404a", @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) r1 = socket$inet(0x2, 0x3, 0x88) sendto$inet(r1, &(0x7f0000005000), 0x0, 0xc844, &(0x7f0000005000)={0x2, 0xffffffffffffffff, @empty}, 0x10) sendto$inet(r1, &(0x7f000056d000)="0022c3586d2a4c9b438493bb502204de19a2f6ca", 0x14, 0x0, &(0x7f0000005000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) 2018/02/16 17:35:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000091a000)) mkdir(&(0x7f0000976000-0xe)='./file0/file0\x00', 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) umount2(&(0x7f000094f000-0x8)='./file0\x00', 0x0) 2018/02/16 17:35:44 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000509000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) ppoll(&(0x7f0000fc5000-0x8)=[{r0}], 0x1d1, &(0x7f000058e000)={0x77359400}, &(0x7f00009e6000-0x8), 0x8) 2018/02/16 17:35:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x20000000005, 0x9}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000f36000)={r0, &(0x7f00009d4000), &(0x7f0000db4000)=""/4096}, 0x18) 2018/02/16 17:35:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000d1a000-0x12)='/dev/input/event#\x00', 0x0, 0x2) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000e98000-0x8)=0x2) read(r0, &(0x7f0000984000)=""/24, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000a3c000-0x8)) syz_open_procfs(r1, &(0x7f0000840000)='net/dev\x00') 2018/02/16 17:35:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00007cd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffc01) 2018/02/16 17:35:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x88000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r0, &(0x7f00001d8000-0x2), 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000c1d000), 0x4) 2018/02/16 17:35:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) connect$inet(r0, &(0x7f000073a000-0x10)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000ca1000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x8}}}}}, 0x0) 2018/02/16 17:35:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000b2f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000bef000-0x10)={&(0x7f0000131000)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}, 0xffffffffffffffff, 0x32}, @in6=@ipv4={[], [0xff, 0xff], @empty}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_crypt={0x48, 0x2, {{'cts(xts-serpent-avx2)\x00'}, 0xfffffffffffffdec}}]}, 0x138}, 0x1}, 0x0) 2018/02/16 17:35:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000091a000)) mkdir(&(0x7f0000976000-0xe)='./file0/file0\x00', 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) umount2(&(0x7f000094f000-0x8)='./file0\x00', 0x0) 2018/02/16 17:35:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00009e8000-0x24)) 2018/02/16 17:35:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000060c000-0x5)='/dev/vcs\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000895000)=""/181, 0xb5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000e01000-0x8)) writev(0xffffffffffffffff, &(0x7f0000fb6000-0x10)=[], 0x0) 2018/02/16 17:35:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x88000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r0, &(0x7f00001d8000-0x2), 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000c1d000), 0x4) 2018/02/16 17:35:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000242000)) 2018/02/16 17:35:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000091a000)) mkdir(&(0x7f0000976000-0xe)='./file0/file0\x00', 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) umount2(&(0x7f000094f000-0x8)='./file0\x00', 0x0) 2018/02/16 17:35:45 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) keyctl$join(0x1, 0x0) 2018/02/16 17:35:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a1000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$mice(&(0x7f0000394000)='/dev/input/mice\x00', 0x0, 0x0) 2018/02/16 17:35:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x14, &(0x7f00000c6000-0x18)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@generic={0x8863, "94c603ff00e8"}}}, &(0x7f0000b0c000)={0x0, 0x0, []}) 2018/02/16 17:35:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000b1000)={r2, 0x0, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/02/16 17:35:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a1000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$mice(&(0x7f0000394000)='/dev/input/mice\x00', 0x0, 0x0) 2018/02/16 17:35:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000060c000-0x5)='/dev/vcs\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000895000)=""/181, 0xb5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000e01000-0x8)) writev(0xffffffffffffffff, &(0x7f0000fb6000-0x10)=[], 0x0) 2018/02/16 17:35:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x88000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r0, &(0x7f00001d8000-0x2), 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000c1d000), 0x4) 2018/02/16 17:35:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000091a000)) mkdir(&(0x7f0000976000-0xe)='./file0/file0\x00', 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) umount2(&(0x7f000094f000-0x8)='./file0\x00', 0x0) 2018/02/16 17:35:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00008f1000)={&(0x7f0000157000)={0x10}, 0xc, &(0x7f00007e5000)={&(0x7f0000525000)=@allocspi={0xf8, 0x16, 0x66e18825aa2f341f, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in6=@dev={0xfe, 0x80}, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@empty, 0xffffffffffffffff, 0x33}, @in6=@empty, {}, {}, {}, 0x5}}, []}, 0xf8}, 0x1}, 0x0) 2018/02/16 17:35:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x88000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0xffffffffffffffab, &(0x7f0000e97000-0x8)=0x1) read$eventfd(r1, &(0x7f00001d8000-0x2), 0x1c) write(r0, &(0x7f0000440000-0x30), 0x0) 2018/02/16 17:35:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000008000-0x4)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000006000-0x10)={0x1, &(0x7f0000008000-0x8)=[{0x6}]}, 0x10) 2018/02/16 17:35:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x88000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r0, &(0x7f00001d8000-0x2), 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000c1d000), 0x4) 2018/02/16 17:35:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000060c000-0x5)='/dev/vcs\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000895000)=""/181, 0xb5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000e01000-0x8)) writev(0xffffffffffffffff, &(0x7f0000fb6000-0x10)=[], 0x0) 2018/02/16 17:35:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00008f1000)={&(0x7f0000157000)={0x10}, 0xc, &(0x7f00007e5000)={&(0x7f0000525000)=@allocspi={0xf8, 0x16, 0x66e18825aa2f341f, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in6=@dev={0xfe, 0x80}, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@empty, 0xffffffffffffffff, 0x33}, @in6=@empty, {}, {}, {}, 0x5}}, []}, 0xf8}, 0x1}, 0x0) 2018/02/16 17:35:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x88000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0xffffffffffffffab, &(0x7f0000e97000-0x8)=0x1) read$eventfd(r1, &(0x7f00001d8000-0x2), 0x1c) write(r0, &(0x7f0000440000-0x30), 0x0) 2018/02/16 17:35:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000fdf000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000010000-0x28)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000008000-0x10)={0x1d, r1}, 0x10, &(0x7f0000003000-0x10)={&(0x7f000000b000-0x48)={0x1, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0xfffffffffffffffc, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) 2018/02/16 17:35:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000176000)='/dev/ptmx\x00', 0x40000000842, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f000086f000)=""/1, 0x1) 2018/02/16 17:35:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000b1000)={r2, 0x0, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/02/16 17:35:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a1000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$mice(&(0x7f0000394000)='/dev/input/mice\x00', 0x0, 0x0) 2018/02/16 17:35:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000008000-0x4)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000006000-0x10)={0x1, &(0x7f0000008000-0x8)=[{0x6}]}, 0x10) 2018/02/16 17:35:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000060c000-0x5)='/dev/vcs\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000895000)=""/181, 0xb5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000e01000-0x8)) writev(0xffffffffffffffff, &(0x7f0000fb6000-0x10)=[], 0x0) 2018/02/16 17:35:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00008f1000)={&(0x7f0000157000)={0x10}, 0xc, &(0x7f00007e5000)={&(0x7f0000525000)=@allocspi={0xf8, 0x16, 0x66e18825aa2f341f, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in6=@dev={0xfe, 0x80}, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@empty, 0xffffffffffffffff, 0x33}, @in6=@empty, {}, {}, {}, 0x5}}, []}, 0xf8}, 0x1}, 0x0) 2018/02/16 17:35:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001000-0x8), &(0x7f00001d0000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000c25000/0x1000)=nil, 0x1000}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000c87000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/02/16 17:35:45 executing program 1: mmap(&(0x7f0000000000/0xe69000)=nil, 0xe69000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000af2000-0x4)=0x404100fffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000e66000), 0x4) 2018/02/16 17:35:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000008000-0x4)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000006000-0x10)={0x1, &(0x7f0000008000-0x8)=[{0x6}]}, 0x10) 2018/02/16 17:35:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000ccf000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000008000-0x10)={&(0x7f0000732000-0x10c)={0x18, 0x23, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x11}, [@nested={0x4, 0x9, []}]}, 0x18}, 0x1}, 0x0) 2018/02/16 17:35:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x88000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0xffffffffffffffab, &(0x7f0000e97000-0x8)=0x1) read$eventfd(r1, &(0x7f00001d8000-0x2), 0x1c) write(r0, &(0x7f0000440000-0x30), 0x0) 2018/02/16 17:35:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001000-0x8), &(0x7f00001d0000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000c25000/0x1000)=nil, 0x1000}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000c87000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/02/16 17:35:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000b1000)={r2, 0x0, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/02/16 17:35:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00008f1000)={&(0x7f0000157000)={0x10}, 0xc, &(0x7f00007e5000)={&(0x7f0000525000)=@allocspi={0xf8, 0x16, 0x66e18825aa2f341f, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in6=@dev={0xfe, 0x80}, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@empty, 0xffffffffffffffff, 0x33}, @in6=@empty, {}, {}, {}, 0x5}}, []}, 0xf8}, 0x1}, 0x0) 2018/02/16 17:35:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f18000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000eda000-0xe0)=@ethtool_rxnfc={0x34, 0x0, 0x0, {0x0, @ah_ip6_spec={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}}, {"7205", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @ah_ip6_spec={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @rand_addr}}, {"52b6", @empty}}, 0x0, []}}) 2018/02/16 17:35:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000008000-0x4)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000006000-0x10)={0x1, &(0x7f0000008000-0x8)=[{0x6}]}, 0x10) 2018/02/16 17:35:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000555000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f0000b32000-0x14)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0xd7fad3b4}, 0x1}, 0x0) 2018/02/16 17:35:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001000-0x8), &(0x7f00001d0000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000c25000/0x1000)=nil, 0x1000}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000c87000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/02/16 17:35:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f18000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000eda000-0xe0)=@ethtool_rxnfc={0x34, 0x0, 0x0, {0x0, @ah_ip6_spec={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}}, {"7205", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @ah_ip6_spec={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @rand_addr}}, {"52b6", @empty}}, 0x0, []}}) 2018/02/16 17:35:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x88000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0xffffffffffffffab, &(0x7f0000e97000-0x8)=0x1) read$eventfd(r1, &(0x7f00001d8000-0x2), 0x1c) write(r0, &(0x7f0000440000-0x30), 0x0) 2018/02/16 17:35:45 executing program 4: mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000ca2000-0x10)={0x0, 0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x0, r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000c000-0x4), 0x5, 0x0, &(0x7f0000012000-0x10), &(0x7f000000d000-0x4), 0x0) 2018/02/16 17:35:45 executing program 3: semtimedop(0x0, &(0x7f000028d000)=[], 0x0, &(0x7f00006d3000-0x10)) 2018/02/16 17:35:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a1000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$mice(&(0x7f0000394000)='/dev/input/mice\x00', 0x0, 0x0) 2018/02/16 17:35:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000b1000)={r2, 0x0, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/02/16 17:35:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004000-0x3f8)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x1a0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000002000-0x40), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @common='gretap0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@ipv6={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @common='syzkaller1\x00', @common='syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={0x58, 'hashlimit\x00', 0x1, {@syzn={0x73, 0x79, 0x7a}, {0xc, 0x0, 0x5, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x18}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) r1 = socket$inet6(0xa, 0x3, 0xfe) sendto$inet6(r1, &(0x7f0000003000), 0x312, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/16 17:35:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001000-0x8), &(0x7f00001d0000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000c25000/0x1000)=nil, 0x1000}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000c87000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/02/16 17:35:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f18000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000eda000-0xe0)=@ethtool_rxnfc={0x34, 0x0, 0x0, {0x0, @ah_ip6_spec={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}}, {"7205", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @ah_ip6_spec={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @rand_addr}}, {"52b6", @empty}}, 0x0, []}}) 2018/02/16 17:35:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b54000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x61) accept4(r0, 0x0, &(0x7f00003e3000), 0x0) 2018/02/16 17:35:45 executing program 5: mmap(&(0x7f0000000000/0xff3000)=nil, 0xff3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095c000-0x4)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) dup2(r0, r1) 2018/02/16 17:35:45 executing program 2: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000003000)={0x2, &(0x7f0000003000)=[{0x7}, {0x0, 0x0, 0x0, 0x7fff}]}) 2018/02/16 17:35:45 executing program 4: mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000ca2000-0x10)={0x0, 0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x0, r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000c000-0x4), 0x5, 0x0, &(0x7f0000012000-0x10), &(0x7f000000d000-0x4), 0x0) 2018/02/16 17:35:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f18000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000eda000-0xe0)=@ethtool_rxnfc={0x34, 0x0, 0x0, {0x0, @ah_ip6_spec={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}}, {"7205", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @ah_ip6_spec={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @rand_addr}}, {"52b6", @empty}}, 0x0, []}}) 2018/02/16 17:35:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00009a4000)=0x5, 0x4) 2018/02/16 17:35:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004000-0x3f8)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x1a0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000002000-0x40), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @common='gretap0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@ipv6={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @common='syzkaller1\x00', @common='syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={0x58, 'hashlimit\x00', 0x1, {@syzn={0x73, 0x79, 0x7a}, {0xc, 0x0, 0x5, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x18}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) r1 = socket$inet6(0xa, 0x3, 0xfe) sendto$inet6(r1, &(0x7f0000003000), 0x312, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/16 17:35:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) epoll_create1(0x0) 2018/02/16 17:35:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b54000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x61) accept4(r0, 0x0, &(0x7f00003e3000), 0x0) 2018/02/16 17:35:46 executing program 1: mmap(&(0x7f0000000000/0x31000)=nil, 0x31000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f000002e000)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x1f0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f000002f000-0x40), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x4}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) 2018/02/16 17:35:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f000080b000-0x8)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000cf9000)=[{}, {}], &(0x7f0000fca000)={0x77359400}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2e000-0xe0)}}, &(0x7f0000769000-0x4)) sched_rr_get_interval(0x0, &(0x7f0000646000-0x10)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r2}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/02/16 17:35:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000a85000-0x20)={@common='bpq0\x00', @ifru_flags=0x5100}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000544000)=0x5, 0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) r5 = dup3(r4, r3, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000a1f000-0x10)={0x0, 0x7, 0xa3a9, 0x3}, 0x10) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000750000)) clock_gettime(0x0, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000a94000-0xe)='/dev/admmidi#\x00', 0x793, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000f68000-0x24)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) r6 = dup3(r0, r2, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f000021b000-0x90)={0x7fffffff, {{0x2, 0x3, @empty}}}, 0x90) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000e43000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, &(0x7f0000c32000)=0x8) 2018/02/16 17:35:46 executing program 4: mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000ca2000-0x10)={0x0, 0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x0, r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000c000-0x4), 0x5, 0x0, &(0x7f0000012000-0x10), &(0x7f000000d000-0x4), 0x0) 2018/02/16 17:35:46 executing program 5: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044160, &(0x7f0000006000-0x1f5)) 2018/02/16 17:35:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004000-0x3f8)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x1a0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000002000-0x40), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @common='gretap0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@ipv6={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @common='syzkaller1\x00', @common='syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={0x58, 'hashlimit\x00', 0x1, {@syzn={0x73, 0x79, 0x7a}, {0xc, 0x0, 0x5, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x18}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) r1 = socket$inet6(0xa, 0x3, 0xfe) sendto$inet6(r1, &(0x7f0000003000), 0x312, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/16 17:35:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b54000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x61) accept4(r0, 0x0, &(0x7f00003e3000), 0x0) 2018/02/16 17:35:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/16 17:35:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0c000-0x30)=[], 0x0, &(0x7f00002d4000)=[]}, 0x0) 2018/02/16 17:35:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004000-0x3f8)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x1a0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000002000-0x40), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], [], @syzn={0x73, 0x79, 0x7a}, @common='gretap0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@ipv6={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @common='syzkaller1\x00', @common='syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={0x58, 'hashlimit\x00', 0x1, {@syzn={0x73, 0x79, 0x7a}, {0xc, 0x0, 0x5, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x18}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) r1 = socket$inet6(0xa, 0x3, 0xfe) sendto$inet6(r1, &(0x7f0000003000), 0x312, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/16 17:35:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b54000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x61) accept4(r0, 0x0, &(0x7f00003e3000), 0x0) 2018/02/16 17:35:46 executing program 4: mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000ca2000-0x10)={0x0, 0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x0, r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000c000-0x4), 0x5, 0x0, &(0x7f0000012000-0x10), &(0x7f000000d000-0x4), 0x0) 2018/02/16 17:35:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) epoll_create1(0x0) 2018/02/16 17:35:46 executing program 0: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000003000-0x38)={&(0x7f0000011000-0xc)=@nl=@kern={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f000000e000-0x56)="5500000019007fafb72d1cb2a4a280930a06000000a843dc91052369390009002f000000000000001900050000000000000000081338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000002000)=[]}, 0x0) 2018/02/16 17:35:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000935000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000a9a000)) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000fb0000-0x4)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f000034e000-0x20)={0x27ff, 0x2, 0x1000, 0x2000, &(0x7f0000e1c000/0x2000)=nil}) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000169000-0x70)={[{0x7, 0x92a, 0x8, 0xb6fe, 0x0, 0xfffffffffffff801, 0xfffffffffffffbff, 0x6, 0x5, 0x1, 0x7, 0x0, 0x6}, {0x1000, 0xfff, 0x64, 0x80, 0x81, 0x5, 0x80000000, 0x9, 0x7fff, 0xfffffffffffffffd, 0x7fffffff, 0xbb23, 0x800000000000000}, {0x6, 0x80000001, 0x0, 0x5, 0xe65, 0x3, 0x2, 0xa00, 0x80000000, 0x0, 0x2, 0x7fffffff, 0x1}], 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00009f5000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r6 = getuid() fchown(r3, r6, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/02/16 17:35:46 executing program 7: mmap(&(0x7f0000000000/0xfac000)=nil, 0xfac000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fa2000)=@nat={'nat\x00', 0x1b, 0x5, 0x4d8, 0xf0, 0x318, 0xffffffff, 0x0, 0x318, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, &(0x7f00001b0000-0x50), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @common='ip6gretap0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @icmp_id, @icmp_id=0x3}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00'}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4=@dev={0xac, 0x14}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback={0x0, 0x1}, @ipv4=@empty, @icmp_id, @port}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@broadcast=0xffffffff, @ipv4=@rand_addr, @port, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x538) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000017000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x400000000000009}, 0x1c) connect$inet6(r1, &(0x7f0000010000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d], 0xffffffffffffffff, 0xaa}}, 0x1c) 2018/02/16 17:35:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x4149, &(0x7f000091e000-0x8)=0x9, &(0x7f0000b8d000)) 2018/02/16 17:35:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) epoll_create1(0x0) 2018/02/16 17:35:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8983, &(0x7f000000b000-0x28)={@generic="06000000b00cdf0e9bb7d93587f30c59", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 2018/02/16 17:35:46 executing program 4: mmap(&(0x7f0000000000/0x34000)=nil, 0x34000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000017000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f000001f000)={0x0, 0x0, &(0x7f000001d000)=[], 0x363, &(0x7f0000004000)=[]}, 0x0) 2018/02/16 17:35:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='setgroups\x00') sendfile(r0, r0, &(0x7f0000592000)=0x2, 0x800000210) 2018/02/16 17:35:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065b000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000bc5000)="1703000000f1ff3da5ffffffff0000ff", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000cb1000)=[{0x0, 0x0, &(0x7f0000832000-0x10)=[{&(0x7f000057d000-0x89)="2af91ac7552aa51129285c75b407c956fbc1a31227bf82b3ceb55e9f1cdcf9ca7d093caf7c0013f4f19b3c7ff9c092465b50adbbf65a8619a321e3880a3527afa627e0ae5b68219316f8685de930c572c338a68395387c9e63eedca07af6e1aeb33be9d8e9d7976a8d4ce05c14b06ee5efa9fabc91d73d1c62891f59f934b1be1a", 0x81}], 0x1, &(0x7f000082f000-0x90)=[]}], 0x1, 0x0) 2018/02/16 17:35:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d37000-0xc)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) openat$vcs(0xffffffffffffff9c, &(0x7f00006e7000)='/dev/vcs\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000022000-0xc)={0x2001}) epoll_pwait(r2, &(0x7f0000a1f000-0x54)=[{}], 0x1, 0x0, &(0x7f0000bc0000-0x8), 0x8) 2018/02/16 17:35:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) epoll_create1(0x0) 2018/02/16 17:35:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000885000-0x10)=[{&(0x7f00009df000-0x1f)="1f00000001031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) 2018/02/16 17:35:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) 2018/02/16 17:35:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x880000000001e, 0x1000000000002, 0x0) sendto(r0, &(0x7f0000eef000), 0x0, 0x0, &(0x7f0000c09000-0x80)=@generic={0x1e, "ffff0000899acae7d5fd6f09790802ceab75d656f5fbfd00000009f56b72dfb6fb3e90484cd725f3fe9e0d8e1fb142c69c0c68a59e3413cd11d80253e5f9c0719e9cfe7eb58dc5c7f256b3ecaa00319dcf247b42bdc33f03030000000000000041fc480fbb1bf13a83131b401c20f3df8461acbb410bcd1c3e37db70b1a8"}, 0x80) 2018/02/16 17:35:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000046e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000c79000-0x1008)={0x0, 0x1c, "345344e41ecf8a26a5e9a84b79272c2ad80cf4161c010f408e6e6274"}, &(0x7f0000c71000-0x4)=0x24) 2018/02/16 17:35:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) 2018/02/16 17:35:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='setgroups\x00') sendfile(r0, r0, &(0x7f0000592000)=0x2, 0x800000210) 2018/02/16 17:35:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d37000-0xc)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) openat$vcs(0xffffffffffffff9c, &(0x7f00006e7000)='/dev/vcs\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000022000-0xc)={0x2001}) epoll_pwait(r2, &(0x7f0000a1f000-0x54)=[{}], 0x1, 0x0, &(0x7f0000bc0000-0x8), 0x8) 2018/02/16 17:35:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d37000-0xc)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) openat$vcs(0xffffffffffffff9c, &(0x7f00006e7000)='/dev/vcs\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000022000-0xc)={0x2001}) epoll_pwait(r2, &(0x7f0000a1f000-0x54)=[{}], 0x1, 0x0, &(0x7f0000bc0000-0x8), 0x8) 2018/02/16 17:35:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ca5000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f000000a000)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000753000-0xc)={&(0x7f0000215000)='./file0\x00'}, 0xc) 2018/02/16 17:35:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000046e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000c79000-0x1008)={0x0, 0x1c, "345344e41ecf8a26a5e9a84b79272c2ad80cf4161c010f408e6e6274"}, &(0x7f0000c71000-0x4)=0x24) 2018/02/16 17:35:46 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4400000000001267, &(0x7f0000017000)) 2018/02/16 17:35:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@loopback, @in=@broadcast, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000366000)=0xe8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r2, &(0x7f000077a000), 0x0, 0x800000020000000, &(0x7f0000aa9000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) recvfrom$inet(r2, &(0x7f0000e32000)=""/116, 0x74, 0x100, &(0x7f0000019000-0x10)={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) bind$inet(r2, &(0x7f0000899000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000afb000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000c91000)={0x0, 0x80000, 0xffffffffffffff9c}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000a25000-0x9)='/dev/vcs\x00', 0x400040, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f000016e000-0xc)={r4, 0x80000, r3}) r7 = socket$netlink(0x10, 0x3, 0x14) recvfrom$inet(r2, &(0x7f0000aab000+0x5df)=""/128, 0x80, 0x40000102, &(0x7f0000836000-0x10)={0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x14}}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000042000-0x10)={0xffffffffffffffa1, 0x0, 0x100, 0x5}) r8 = request_key(&(0x7f000075b000)='id_resolver\x00', &(0x7f0000d00000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000183000-0x11)=',mime_typecgroup\x00', 0xfffffffffffffffe) getresgid(&(0x7f00004a8000-0x4), &(0x7f0000573000-0x4)=0x0, &(0x7f000078e000)) keyctl$chown(0x4, r8, r1, r9) getsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f0000ff1000)=""/182, &(0x7f0000351000-0x4)=0xb6) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000980000-0x8)={0x6, 0x7fffffff}, 0x8) r10 = accept$inet(r5, &(0x7f00009f1000+0xd89)={0x0, 0xffffffffffffffff, @broadcast}, &(0x7f0000608000-0x4)=0x10) r11 = syz_open_dev$amidi(&(0x7f00007f1000-0xc)='/dev/amidi#\x00', 0x3, 0x962a37975de9e42d) ioctl$KVM_GET_REGS(r11, 0x8090ae81, &(0x7f0000dfe000)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000049000-0x8)={0x0, 0x1f}, &(0x7f0000d2b000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000f1d000)={r12, 0x1000}, 0x6) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000386000-0x8)={0x0, 0x9}, &(0x7f000080d000)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000ebc000-0x8c)={r13, @in6={{0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x1}}}, 0x8c) writev(r2, &(0x7f0000a77000)=[{&(0x7f0000bc8000-0x66)='1', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000964000-0x14)={0x7, 0xffff, 0x8, 0x40, 0x5}, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000c31000), 0x4) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f000040a000), &(0x7f000085f000)=0x8) writev(r2, &(0x7f0000e25000)=[{&(0x7f000059b000-0x1000)="1b535ea19371228fb35cd6affe75fd508703a6520c0c3bcedded24701762dcc7bd2249cb28f40bca747076580104c7a930147cc14fa98c7da7b4cb5d0268cb4a2a3629923bccfc95f3f7e1016b77eec330ccf3264824dc1c2826635d6a37badd2fabc8477acd6797c2201ea3aa10c1bcf72a92d3a2333701e8a4effd28eecfa504af9e19c8e3ef6aa3e7ac50c17b032f86ef3a0c87345f5fe88fc592e2d1ac32864512bbfd1b1326a3b5e1f5ed1e722467", 0xb1}], 0x1) 2018/02/16 17:35:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='setgroups\x00') sendfile(r0, r0, &(0x7f0000592000)=0x2, 0x800000210) 2018/02/16 17:35:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x100000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000b3b000), 0x4) syz_emit_ethernet(0x1ff, &(0x7f0000592000-0x12)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [{[], {0x8100}}], {@generic={0x88a8}}}, &(0x7f0000747000-0x10)={0x0, 0x1, [0x0]}) 2018/02/16 17:35:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000046e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000c79000-0x1008)={0x0, 0x1c, "345344e41ecf8a26a5e9a84b79272c2ad80cf4161c010f408e6e6274"}, &(0x7f0000c71000-0x4)=0x24) 2018/02/16 17:35:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d37000-0xc)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) openat$vcs(0xffffffffffffff9c, &(0x7f00006e7000)='/dev/vcs\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000022000-0xc)={0x2001}) epoll_pwait(r2, &(0x7f0000a1f000-0x54)=[{}], 0x1, 0x0, &(0x7f0000bc0000-0x8), 0x8) 2018/02/16 17:35:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00007f0000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f000008c000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000231000/0x2000)=nil}) dup2(r0, r1) 2018/02/16 17:35:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d37000-0xc)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) openat$vcs(0xffffffffffffff9c, &(0x7f00006e7000)='/dev/vcs\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000022000-0xc)={0x2001}) epoll_pwait(r2, &(0x7f0000a1f000-0x54)=[{}], 0x1, 0x0, &(0x7f0000bc0000-0x8), 0x8) 2018/02/16 17:35:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00002db000-0x38)={&(0x7f000018a000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000008000-0x10)={&(0x7f0000933000)={0x14, 0x20, 0x701, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:35:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='setgroups\x00') sendfile(r0, r0, &(0x7f0000592000)=0x2, 0x800000210) 2018/02/16 17:35:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x38b, &(0x7f00006ab000)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031b000-0x8)={r0, r1}) 2018/02/16 17:35:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d37000-0xc)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) openat$vcs(0xffffffffffffff9c, &(0x7f00006e7000)='/dev/vcs\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000022000-0xc)={0x2001}) epoll_pwait(r2, &(0x7f0000a1f000-0x54)=[{}], 0x1, 0x0, &(0x7f0000bc0000-0x8), 0x8) 2018/02/16 17:35:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000046e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000c79000-0x1008)={0x0, 0x1c, "345344e41ecf8a26a5e9a84b79272c2ad80cf4161c010f408e6e6274"}, &(0x7f0000c71000-0x4)=0x24) 2018/02/16 17:35:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d37000-0xc)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) openat$vcs(0xffffffffffffff9c, &(0x7f00006e7000)='/dev/vcs\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000022000-0xc)={0x2001}) epoll_pwait(r2, &(0x7f0000a1f000-0x54)=[{}], 0x1, 0x0, &(0x7f0000bc0000-0x8), 0x8) 2018/02/16 17:35:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000647000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00001c2000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/02/16 17:35:46 executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000001000-0x1e)={0x18, 0x0, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @syzn={0x73, 0x79, 0x7a, 0x0}}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000002000-0x1e)={0x18, 0x0, {0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, @common='ip6tnl0\x00'}}) 2018/02/16 17:35:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fce000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_readv(r1, &(0x7f0000fca000)=[], 0x29c, &(0x7f0000fcb000-0x60)=[{&(0x7f00005e9000)=""/145, 0x91}], 0xf, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c23000-0x10)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/02/16 17:35:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000020d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000e5000)=0x100000001) sendmsg$alg(r1, &(0x7f000042a000-0x38)={0x0, 0x0, &(0x7f0000d50000)=[{&(0x7f0000fa4000-0xf6)="95", 0x1}], 0x1}, 0x0) 2018/02/16 17:35:46 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000002000)) 2018/02/16 17:35:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f000096d000)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x0, 0x170, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@state={0x28, 'state\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f18a96f3e9ee6f2b7e0512aac7e5dba09aa0b82bb4aaa46fa5ba06b3a346"}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14}, @multicast1=0xe0000001, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f00006ae000-0x32)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/16 17:35:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(r0, 0x800006) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000260000)=0x6, 0x4) 2018/02/16 17:35:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb1000-0x48)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x38b, &(0x7f00006ab000)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031b000-0x8)={r0, r1}) 2018/02/16 17:35:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{}, 0x0, &(0x7f0000fd0000)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}}}], 0xffffff46) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f000079b000-0x4)) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000078000-0x4)) dup2(r0, r2) 2018/02/16 17:35:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000cf8000-0xf)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000d97000)={0xffffffffffffffff, 0x100000020000fd}) 2018/02/16 17:35:46 executing program 5: mmap(&(0x7f0000000000/0xfab000)=nil, 0xfab000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fab000-0x568)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x0, 0x348, 0xffffffff, 0x0, 0x348, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000c6a000-0x50), {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @ipv4=@broadcast=0xffffffff, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv4=@multicast1=0xe0000001, @port, @port}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @empty, [], [], @common='irlan0\x00', @generic="d47ebf0b119819df7a26a6e799c916fa"}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00'}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@dev={0xac, 0x14}, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @gre_key, @icmp_id}}}, {{@ipv6={@empty, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, [], [], @generic="ec5a2aca81764801bea23556552ee9fd", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback={0x0, 0x1}, @ipv6=@loopback={0x0, 0x1}, @icmp_id, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x568) 2018/02/16 17:35:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0x