[....] Starting enhanced syslogd: rsyslogd[ 12.422928] audit: type=1400 audit(1515778547.594:5): avc: denied { syslog } for pid=3339 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.078592] audit: type=1400 audit(1515778554.250:6): avc: denied { map } for pid=3479 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. 2018/01/12 17:36:00 fuzzer started [ 25.341174] audit: type=1400 audit(1515778560.512:7): avc: denied { map } for pid=3490 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/01/12 17:36:00 dialing manager at 10.128.0.26:35227 2018/01/12 17:36:04 kcov=true, comps=true [ 29.178077] audit: type=1400 audit(1515778564.349:8): avc: denied { map } for pid=3490 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=89 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/01/12 17:36:06 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000000)={r0, r1+10000000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000002000-0x10)={0x0, 0x0}) utimes(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)={{r2, r3/1000+30000}, {0x0, 0x0}}) r4 = accept4(0xffffffffffffffff, &(0x7f0000001000)=@in={0x0, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000)=0x10, 0x80000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r4, &(0x7f0000002000-0x38)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000002000-0x10)=[{&(0x7f0000002000)="a3805cd4e48dd0d476234434b01b0a79665b43ac30659523d278731560304c69c63887ede3194c2b7705c55bb1d7f38ef40285df55ea9567230896a9c1cd99423a2f3fb4e98ea12ec06b521ef5fd0746ea7254", 0x53}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000004000-0x8)='./file1\x00', &(0x7f0000001000)=""/43, 0x2b) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000005000-0x2)=0xa06, &(0x7f0000004000)=0x2) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000006000-0x60)={0x0, 0x6, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000000)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_settime(r5, 0x1, &(0x7f0000006000-0x20)={{0x0, 0x0}, {0x77359400, 0x0}}, &(0x7f0000005000)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x0, &(0x7f0000007000-0x4)=0x0, &(0x7f0000007000-0x4)=0x4) setsockopt$inet_mreq(r4, 0x0, 0x0, &(0x7f0000000000)={@rand_addr=0x1000, @broadcast=0xffffffff}, 0x8) fsync(r4) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x200, 0x0) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000003000-0xc)={0xfffffffffffffffb, 0x5d1a, 0x9, 0x5, 0x6, 0x4d58}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000008000-0x20)={@common='bcsh0\x00', @ifru_addrs={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2018/01/12 17:36:06 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000001000-0xb)='/dev/midi#\x00', 0x3, 0x400000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x1a0, 0x0}, {r0, 0x400, 0x0}], 0x2, &(0x7f0000001000)={0x0, 0x0}, &(0x7f0000001000-0x8)={0x6}, 0x8) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000000000/0x1000)=nil, 0x80, 0x3, 0x0, &(0x7f0000262000/0x4000)=nil, 0xee3}) r1 = syz_open_dev$sndmidi(&(0x7f0000001000)='/dev/snd/midiC#D#\x00', 0x2, 0x400) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x1, 0x5]) bind$ax25(r1, &(0x7f0000001000)={0x3, {"4171e8704e8e65"}, 0x8000}, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000002000)={0x401, 0x7, 0x2, 0x94e, "6f3a143dff034f9ce37a23fe91f8eb097d075a0e94c3f8fddb678151462ac2bab92788c50ff1841e6168c8d1", 0x800}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000004000-0x59)=""/89) poll(&(0x7f0000003000)=[{r1, 0x4, 0x0}, {r0, 0x300, 0x0}, {r0, 0x0, 0x0}, {r1, 0x715, 0x0}, {r1, 0x10, 0x0}], 0x5, 0x9) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000004000)=@known='com.apple.system.Security\x00', &(0x7f0000003000-0x4c)=""/120, 0x78) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000004000)=[0x8, 0x3]) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000005000)=0x0, 0x1) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000003000)=[0x1, 0xd69]) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000006000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000008000-0x10)={r0, 0x28, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000007000-0xc)={r2, 0x4, 0x18}, 0xc) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000009000-0x8)='keyring\x00', &(0x7f0000008000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000008000)="b928b3f29f9b4b56424e95cbdf1eaea1d1ad75ab2f2da95a884509cd1930b35b75816f42d94894", 0x27, 0xfffffffffffffffd) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000008000)='asymmetric\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000001000)="6e6365b54cefd6506c59451d35c672dbee62862a8cbc9f0c18b210ba36b5c6fa8d87c379e9ffba121ebe90bff743d4317b7d0ceeb8058f15f8ed064d0227008c3ad5752b7e73fb5a4f422ae1364fd2b803b88f99a3de2d2dd54499bdb9c0205f04ea62020b54570cf614d598a2be0981b67ddc499d02730ee0081604ac3933261098b5c805a259f8600e857b4ddcd971c6f704d642437d9ded574a5768f86bb3e360fce86f59", 0xa6, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = request_key(&(0x7f0000008000)='cifs.spnego\x00', &(0x7f0000003000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000009000-0x1a)='com.apple.system.Security\x00', 0xfffffffffffffffe) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000009000-0xc)={r3, r4, r5}, &(0x7f0000008000)=""/242, 0xf2, &(0x7f0000009000-0x38)={&(0x7f0000004000-0x40)={'wp512-generic\x00'}, &(0x7f0000008000)="a362beee423d4682d275958be42a9e3cc7a43f3dc15d2edcb2c8855c08ebb9b5ba6a74434ef03a3dbe94cff52e7f475774cd56f4c141c4d5a0c954f62844a553787b5911dd7ae9470a1324a2bc992853ae382afd019eb2849efdc2d7b7e90309af0239b3bd883bbf3bf88466fd4cc88812d355879f4851c347f4fcfef18d658078b0aaf2b3e9da23829d33b3a89f66c1d7ce9d59eb2bdb207a2d1034b3b1eff45297a226ed89e61320d2620f1ab1994dc90d28d0322e0a00bb44bbf2de945d1e571f1d04f782c0782036acb5877fa8d7c6651815d0fb6407688083387a1f2fc8f3d6782889cbc9954ebc", 0xea, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 17:36:06 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000db000-0x10)={0x0, 0xbc, &(0x7f0000001000-0xbc)=[@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x800}, @in={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, @in6={0xa, 0x1, 0x90e, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x1}, @in6={0xa, 0x0, 0x1, @loopback={0x0, 0x1}, 0x100000001}, @in6={0xa, 0x3, 0x8, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xfffffffffffffffc}, @in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000001000-0x1)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r1, @in6={{0xa, 0x1, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x20, 0x3, 0x0, 0x5, 0x100000000, 0x1, 0x6, 0x8, 0x0, 0x80000001, 0xf5ea, 0x1, 0x81, 0xfc, 0x6]}, &(0x7f00007e6000-0x4)=0x108) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000001000)=@abs={0x0, 0x0, 0x3}, 0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002000-0x9a)={r1, 0x92, "adabad43de991b76fe9e6777984a555c24ddfbe79dfd19ccf50ce789109abc20043c204e8bb0ff186cf2ca956c2e0a45008114041f09be5ac82eb7d6ff6582bd75c5cca8e8378650b20bfaf3955f9c2cc454fac5a173f781f289a0a5e646f1e7b8685a151c97051bffa99696477cf9d24d2b4cdc5c2fccc7e1f32a266ac0b998e20a23e9e6b25e9070529862965796c13d60"}, &(0x7f0000002000)=0x9a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xbe) getgid() listen(r0, 0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000003000)=@get={0x1, &(0x7f0000002000)=""/145, 0x2}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000004000)={r2, 0x3, 0x0}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000006000-0xa0)={r3, @in6={{0xa, 0x3, 0x4, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @rand_addr=0x40}, 0xffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x101, 0x8, 0x9, 0x4, 0x0}, &(0x7f0000005000)=0xa0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x7, &(0x7f0000006000)=0x100000001, 0x4) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000006000-0x23)=""/35) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, [0x0, 0x0]}, &(0x7f0000007000)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000007000-0xc)={r4, @rand_addr=0x3, @loopback=0x7f000001}, 0xc) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000002000)={r1, 0x5ec3, 0x30, 0x2, 0x8}, &(0x7f0000009000-0x4)=0x18) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f000000a000-0x10)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) utimes(&(0x7f000000a000-0x8)='./file0\x00', &(0x7f0000001000)={{r5, r6/1000+10000}, {r7, r8/1000+30000}}) 2018/01/12 17:36:06 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/vcs\x00', 0x22000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f000097c000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x14) ioctl$KVM_SMI(r0, 0xaeb7) pipe2(&(0x7f0000001000-0x8)={0x0, 0x0}, 0x84800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000002000-0x50)=""/80) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2530, 0x0}], 0x1, &(0x7f0000002000-0x10)={0x0, 0x0}, &(0x7f0000003000-0x8)={0x8}, 0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000003000)={0x800, 0xbff, &(0x7f0000004000-0xae)="5ff250aa2e690967869eb9f1c5228f4afee7ab020e4a8692de960a48eaa45f8c00c954a00fea4c53a527d1624c750351e94869451dbab8592b7dc159aa1deec8e157ff77c1b238559603e75679bc9363209a50152047100c9dff872d9728be60a0cc512788536c84d6830a6c4d96ab0a4e6bc564bcd3892aedab78d4a783ab664a7d808cf7a9179037a6cc448f580993a369ea929211d0f7d135dcb0dda7118f2ed1ac2805a00f1ebb612492296b", &(0x7f0000002000-0xa7)="b28b05d083bc61488f042b4693980ed8775f780b327432b37f8aba15082fe91636ef27ec70fa2e866f297c89a42d41e06f10bf276e9979355a018a2acdb7679341f6356ac761f913f94019f4f3bc7f28706cd49e3fe9bf9e621eec15bc384dccf57db98df2b33444c3e296e81bb5c09f0ea75f94a3ddcc8fea1ca298c8498bfe9382559e023153c2f59ee05e5ddd0a53e2885bdda0304ae850771b3e43376f15a8cba23b736742", 0xae, 0xa7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000005000-0x15)='/proc/self/net/pfkey\x00', 0x200000, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000004000-0x4)=@assoc_id=0x0, &(0x7f0000005000)=0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000005000)={r3, 0x5}, &(0x7f0000001000)=0x8) socket$inet6(0xa, 0xa, 0x5) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000007000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = dup2(r1, r2) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000007000)=0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_submit(r6, 0x5, &(0x7f0000007000)=[&(0x7f0000005000)={0x0, 0x0, 0x0, 0x7, 0x7fff, r5, &(0x7f0000008000-0xfe)="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", 0xfe, 0x0, 0x0, 0x0, r4}, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x7, 0x1000, r1, &(0x7f0000001000)="9d2f30134060db6c1ab2426380edf86515d4e235cee1596808fa89b80f48ddc4a035d21e6d33d5c6ceac6342c1b8c67035ba671b4d44dab385d14d875035c317acb032dba31a0bc9e2882ae0a2ad58c7e144649ad750b7428d32b4828ef9d8f4209c2bedfa2f8677e3a496c0a8b8853668f95f7ecd3d2badff3019f47c01ea", 0x7f, 0x9, 0x0, 0x0, r0}, &(0x7f0000004000)={0x0, 0x0, 0x0, 0xe, 0x5, r1, &(0x7f0000007000)="3dbac70729d463ee09cc12ae9244bba5a6f40eb6a0ce02c795820838d6055556da813c0874df16c66c7eda364f141dcecf383a73d55a90b35b6dc64d3a5c898f2a8de4bdee1248efdbe36b733a1f37c950d938a356b1ddf82d44dd19487e40aed4b76dd61c1eb1967c05d17d4b8acfd59f3864d82b09aa64616e2962de2f43a82f3bcf7619351708f43fdfbfd64f73bb32bcb0ebdd4f97059c7e44edbc8f6f8693ef09020eb4bbe6406036eff9c0813484df643479e9075c9a260807f489921bc6", 0xc1, 0x4, 0x0, 0x0, r1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000008000-0x7e)="76ab0d6cca1d7b083153033a14ea5bcdb1ad6c18eedee1e46a587cf3fe4cca8f966cd2454b8da764aba13894bc25da71e79657f23be6b0ca41b821ed77696b384fb0c61a0de1c667770d5598d3fe993d5e4a46e96aa96ee17ff09efbd844966ee1f1d8424bc946826293d65bc3ff11c11f001ad18eaf7b43878f5fc862e6", 0x7e, 0x3, 0x0, 0x1, r0}, &(0x7f0000006000-0x40)={0x0, 0x0, 0x0, 0x7, 0x46, r2, &(0x7f0000007000)="6bcc8f4231e1c7055dcd68a2ba7281054a1cb2758669ca0c2dc2bd4fef6a8c2793b789dfbe5965dd90660239205ca09f91a697f9d6ffc1b0fbea3dc36aec84cf83e930e8949e6f88b7938cf2d5363e3eda112293703eb0ab998e9461740080c9438df9c9549295225c3f476e3786d214dc2e1bb697b39492f1d0b3c62e9926f78a31758d46a384b608fd3346bd2ddb8f45cf5564de5fa84f90b6700823dc7740e93ae1f46b563bcc47c3b9d39fbcbe5c24bfddb93d130404cf6d8d42e095331a2ea85406fb5d4aa309975c4b8a833c299a003026ee1b8d31aead154a5422389645ff9764ae6dce60d44f", 0xea, 0x5, 0x0, 0x1, r4}]) 2018/01/12 17:36:06 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000c24000)='/dev/ppp\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/240) mmap(&(0x7f0000aeb000/0x3000)=nil, 0x3000, 0x2000001, 0x1011, r0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000aed000-0xa0)={0x0, @in={{0x2, 0x1, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3f, 0x7fff, 0xd1, 0x8000000, 0x1}, &(0x7f0000001000)=0xa0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001000)={r1, 0x3e, "e8255726cba71fa18a84a70fa7cb58a89bb9c125ca3413c64757a31f93d8ce42c562504c5897ca0e11c0b3cf14b33a345905e2d87416624283cbe99621b2"}, &(0x7f0000001000)=0x46) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000003000-0xa2)={r1, 0x9a, "9326a07242f81057d57d6eb4dce0b94db5b6f0ff9ca4bd874e69f4d88b337e15022af4033d67e78e366ef79c4d168a43d34e9c8d0882c7e8bad70af9f4efa9a2d6c1ac98cc7174ea681d39d14366c80fd853e2b3ba9b8ac4d930b06f8044aa2b1220a3698bee3221e684f167d62a75566cfe6fd224006c5c13c6dd9da6051e24d07ad8dd3ecb90a55948f5164f21de86e0920801074eb03db8d3"}, &(0x7f0000003000-0x4)=0xa2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000aee000-0x35)={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @random="d563289abb9b", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, {0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='bcsh0\x00'}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) init_module(&(0x7f0000004000-0x35)='selfposix_acl_access@proc\\procusereth0@cpuset]system\x00', 0x35, &(0x7f0000002000)='bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000aec000-0x20)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x0, 0x1, &(0x7f0000005000-0x10)={0x3, &(0x7f0000005000-0x18)=[{0x8, 0x3, 0x6, 0x784}, {0x9, 0x7, 0x2, 0x4}, {0xffffffff, 0x3, 0x2, 0x95}]}) mlock(&(0x7f0000aed000/0x1000)=nil, 0x1000) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000-0x44)={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @random="829c356fb45b", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x64, {0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='bcsf0\x00'}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000006000)={0x7, 0x2, 'client0\x00', 0x2, "88838f19ef5d9491", "ad1e2f58491f5278ce079f3dbfc5c58c082f05e42fb601a151ec53c0600fe000", 0xf7, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) remap_file_pages(&(0x7f0000aeb000/0x2000)=nil, 0x2000, 0x8f9018783b7faaae, 0x9, 0x40000) socketpair(0x11, 0x801, 0x8000, &(0x7f0000aed000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000004000-0x4)=0xbb, 0x4) socket$nfc_llcp(0x27, 0x0, 0x1) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000008000-0x4)=0x3, 0x4) 2018/01/12 17:36:06 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/kvm\x00', 0x84000, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000001000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003000-0x90)={0x0, {{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000004000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000002000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) bind$netrom(r1, &(0x7f0000000000)=@ax25={0x3, {"491e2ca0831acf"}, 0x7fffffff}, 0x10) sysfs$1(0x1, &(0x7f0000003000-0xe)='/selinux/load\x00') ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000001000-0x4)=0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000003000)={&(0x7f0000000000/0x4000)=nil, 0x6, 0x3, 0xda, &(0x7f0000002000/0x1000)=nil, 0x5}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004000)={{{@in=@broadcast=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000005000-0x2)=0xe8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000005000)=@req3={0x1, 0xf6f2, 0x5, 0x100000001, 0x82f, 0x2, 0xe3}, 0x1c) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000006000)='/selinux/checkreqprot\x00', 0x90002, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000008000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000008000)={0x4}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003000)={0x0, 0x3, 0x6000, 0x1000, &(0x7f0000005000/0x1000)=nil}) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000005000-0x8)={0x0, 0x0}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000009000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/12 17:36:06 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x8a7d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000002000-0x5)='user\x00', &(0x7f0000001000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000002000-0x35)="4780f8a7568cd6415dc224031c986cd0554a48365c590dfcd8811241fe6d91f07d414513f957d90b27fbb50a4de7abb9d3ddbc6626ee6ee575196243e71fb2653dddc908f2f25e54db99906592d3d741797ccc7694fb5c5ef23e29e8c8880cf95ede5f2608f9928f413907576bf0aa6b057358c47c51a7cc908f76bd3f5adbf5e1dafaae0004146e1e1daa1b7866537f2e3e8ef4e3d086bc21c9611e9b6a2a16be818628033c1264385477", 0xab, r0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000003000-0x8)='./file0\x00', 0x20400, 0x1) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x1a, 0x5, "9d22782db96c0a77afb2a3369ac932e0a2c0c31bac2335599137c8453edc3e77ecc5a6b7ea244dbbe09c13a14ed5f8155ec5e14bb30f495de176a2c6a40f9649", "ee99d8506817b34fb9daecb8d6ee264177aef4a0d04c21fb24ac9f55a58e9676", [0x9e, 0x20], 0x0}) keyctl$reject(0x13, r1, 0x800, 0x7a3b, r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004000-0x10)={r2, 0x28, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000004000-0x28)={&(0x7f0000002000/0x2000)=nil, 0x7, 0x7, 0x20, &(0x7f0000001000/0x2000)=nil, 0x7}) r3 = semget(0x2, 0x1, 0x30) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000004000-0xa)=[0x1000, 0x4, 0x0, 0x81, 0x5]) r4 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000004000-0x4)=0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prlimit64(r5, 0xc, &(0x7f0000002000-0x10)={0xa4e, 0x200}, &(0x7f0000004000)={0x0, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000005000)={0x100, 0xffffffff, 0x1ff, 0x2, 0x2}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000001000)={0x5, 0xb7, &(0x7f0000004000-0xb7)="e367fbe18ea04b6ab6d84a4547f2436ecc52c465e896404722c3cda06f0beb385ad34700c70f2a1590e77e2ff9a9cbe40ded37b4e5a35f0b96c2fdcc5c4da8ddcfa2a554a47bae36a75c94f47ad64d750071412e1971cd4dab0b6f6ce27e0273c3186021f14b7be0b8d818d619667c91c8a9b60cb125265efbcbaa0a49f828f6948a4cd8cbf4fc32b1a4a91ea6082f4e5efd4853ea1e184d78f9b75645798a78bb56f59d7d96bafa074f7fa3014e43ac0f7a3b1daf322c"}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mlockall(0x2) fstat(r4, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000007000-0x8)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r6, r7) 2018/01/12 17:36:06 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000e67000)='/dev/vcs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00001f3000)={0x0, 0xea, "2fb4f49f3908badbf0154899645a3f5cd3c34be4c256050384129d22c29c6ba2ae010af7af1755ff11195d757136a60a4f3b74cd27a399091f47ae9ae6fdab32221db6f580252acae45d66f5fae644eea02c40bb10ea0d4d4cd8f35fb554003604fda70629f3938e70893d1bdc013f8a06ef51d4037fc6f8d740a4fca149c404fd5a22a64566b76bc09e77e0bf3c41901cf8d644702bfd829e50b2b90215b58bbbfa3959fc5686dbf5a27edd1030a352dbceed4b8b0d395de185c1165641e77d48a2b06a29ac6927dde8a1391bc54a192355079227340573033ff07a4f89ca10513d594e15d2463574f9"}, &(0x7f0000000000)=0xf2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001000-0xa9)={r1, 0xa1, "e866e82a3415f8955195191f1c5af23910093ab24f7827f9064fb545aa1d136a32882b759f21f9da34c87feedcb4c9b849d8a84f8a358acedf4c4d7fba55070de36934a9565925b2795243d562a9f75cb335685b0237cbda3f03fcc6d738a2752b4b5137eef5cde20c363d46ee003722efe40fd001ace1cd3c33432cd9690cd1e3787ad097e2f1198317d2fe0dc63583028b4e6ee31ba124365a4c0f55ab53ec25"}, &(0x7f0000001000-0x4)=0xa9) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000002000-0x8)='keyring\x00', &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000001000)='asymmetric\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000001000)='self\'\x00', 0xfffffffffffffff8) keyctl$reject(0x13, r2, 0x6, 0x8, r3) prctl$setname(0xf, &(0x7f0000002000-0x5)='user\x00') keyctl$join(0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000002000)={0x0, 0x7, 0x9, 0x2, 0x3, 0x1, 0x564, 0x7f, 0x5, 0x1000}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000004000-0x5)='user\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000004000-0x24)="e80a8bea60a29b280bcc87bd4b124cea04b58aac27b1649874756b2294003d29785f4889", 0x24, r3) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000002000)='keyring\x00', &(0x7f0000001000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000005000-0xc4)="8307b13a15d386bf7ff0ffcfafcf886a17c9928fcfd0a9fb4e8ff54e79095c02a9502a2fe87703624fbf1d58f84178c909e2a68b93a94700a166e508cb6d1057cd0d01b3d37bd004e86cefa198907500626099e283c97453c82c097532c9d2bd92389d0642c199435d08dcee78f2072a0a3f96ee3246b54dff1e79d6a669637bd2b7b1fc2206670d93381f181912bde6bd20a95918e95901cbb98a4b8bd26a4f41b32a3d665c6c38c67dc969b09a4c37502a7f2cdce00467a7900aba2451df4a6d3b8d3d", 0xc4, r3) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000006000-0x8)='./file0\x00', 0x2000106) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000007000-0x20)={@generic="d2847fa5d4e47964237eaefecf9f21c3", @ifru_addrs={0x2, 0x2, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000008000-0x8)={0x0, 0x0}) dup2(r4, r0) [ 31.326276] audit: type=1400 audit(1515778566.497:9): avc: denied { map } for pid=3490 comm="syz-fuzzer" path="/root/syzkaller-shm895785083" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.347117] audit: type=1400 audit(1515778567.518:10): avc: denied { sys_admin } for pid=3531 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 32.480393] audit: type=1400 audit(1515778567.651:11): avc: denied { sys_chroot } for pid=3712 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 32.733267] mmap: syz-executor1 (3741) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/01/12 17:36:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000482000)="", 0x0, 0x800000120000001, &(0x7f0000e46000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x0, 0x852b, 0xffff, 0x0, 0x0}, 0x14) sendto$inet(r0, &(0x7f0000f70000-0x65)="9f", 0x1, 0x0, &(0x7f0000dab000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 17:36:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000f4f000-0x23)="230000001e00056d00020000000051030700000000000000000001101d020002e517c7", 0x23) 2018/01/12 17:36:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000e2c000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, 0xc) 2018/01/12 17:36:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00002b6000-0x78)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffffffffffd62, &(0x7f0000f06000-0x103e)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff}, [], {{0x0, @ipv6={0x0, 0x6, "61f007", 0x8, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x0, 0x0, ""}}}}}}, 0x0) 2018/01/12 17:36:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ee5000-0x15)='/proc/self/net/pfkey\x00', 0x8101, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000f4e000-0xc)={0x2, 0x1, 0x3ff, 0x0, 0x0, 0x0}) open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x20001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000939000-0xc)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, 0x0}, 0xc) write$tun(r1, &(0x7f0000432000-0x1026)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x0, @multicast1=0xe0000001, {[]}}, @igmp={0x11, 0x4, 0x0, @broadcast=0xffffffff, ""}}}, 0x26) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000014000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}, @empty=0x0}, 0xc) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x2fd}) dup3(r5, r3, 0x0) 2018/01/12 17:36:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) sendto$inet6(r0, &(0x7f00007a9000-0x1)="", 0xfffffe56, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/12 17:36:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000cb4000-0x84)=""/132) 2018/01/12 17:36:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x3) bind$packet(r0, &(0x7f0000c7c000-0x14)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff}, [0x0, 0x0]}, 0x14) 2018/01/12 17:36:08 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) get_robust_list(r0, &(0x7f0000247000)=&(0x7f0000162000)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000d87000)=0x18) 2018/01/12 17:36:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f00005c8000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000617000-0x60)=[], 0x0) recvmsg(0xffffffffffffffff, &(0x7f000070c000-0x38)={&(0x7f00001d7000-0x8)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)=""/0, 0x0, 0x0}, 0x0) dup2(r0, 0xffffffffffffffff) close(r1) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffff6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() [ 33.462596] audit: type=1400 audit(1515778568.633:12): avc: denied { net_admin } for pid=3762 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/12 17:36:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() tgkill(r0, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000d48000-0xe8)={{{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00005d7000)=0xe8) 2018/01/12 17:36:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000802000)='/dev/loop#\x00', 0x0, 0x1004102) mmap(&(0x7f0000000000/0xd35000)=nil, 0xd35000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000cf1000)=""/512, 0xffffff92) 2018/01/12 17:36:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000f15000)='keyring\x00', &(0x7f0000e59000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000007f000)='/dev/net/tun\x00', 0x0) [ 33.505347] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 33.591074] audit: type=1400 audit(1515778568.664:13): avc: denied { dac_override } for pid=3768 comm="syz-executor5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.638420] audit: type=1400 audit(1515778568.669:14): avc: denied { net_raw } for pid=3769 comm="syz-executor2" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.666845] audit: type=1400 audit(1515778568.670:15): avc: denied { create } for pid=3763 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 33.693200] audit: type=1400 audit(1515778568.671:16): avc: denied { bind } for pid=3763 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/01/12 17:36:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00005d5000-0xc)={@multicast1=0xe0000001, @broadcast=0xffffffff, 0x0}, 0x16a) 2018/01/12 17:36:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00002b6000-0x78)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4, 0x400) lookup_dcookie(0x7, &(0x7f000083a000-0x8c)=""/140, 0x8c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedsend(r0, &(0x7f0000a5c000)="", 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000659000)=""/131, 0x83, 0x0, 0x0) 2018/01/12 17:36:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000cd9000)='%!}em0^%[%md5sum]eth0selinuxtrustedem0,\x00', 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000f5c000)="1f0000000104ff00fd4345c007110000f605e0000800010001160003000000", 0x1f) dup3(r0, r1, 0x0) 2018/01/12 17:36:08 executing program 1: r0 = inotify_init1(0x0) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000677000)=0x0) 2018/01/12 17:36:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f00008f9000/0x3000)=nil, 0x3000, &(0x7f00000e9000)=""/18) 2018/01/12 17:36:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ee5000-0x15)='/proc/self/net/pfkey\x00', 0x8101, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000f4e000-0xc)={0x2, 0x1, 0x3ff, 0x0, 0x0, 0x0}) open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x20001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000939000-0xc)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, 0x0}, 0xc) write$tun(r1, &(0x7f0000432000-0x1026)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x0, @multicast1=0xe0000001, {[]}}, @igmp={0x11, 0x4, 0x0, @broadcast=0xffffffff, ""}}}, 0x26) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000014000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}, @empty=0x0}, 0xc) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x2fd}) dup3(r5, r3, 0x0) 2018/01/12 17:36:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2e, &(0x7f00009d8000-0x2e)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff}, @rand_addr=0x0}}}}, 0x0) 2018/01/12 17:36:08 executing program 4: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000008000)={&(0x7f000000d000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000a000-0x10)={&(0x7f0000002000)=@newsa={0xf0, 0x12, 0x1201, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast1=0xe0000001, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0}, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, []}, 0xf0}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 17:36:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) close(r0) 2018/01/12 17:36:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)="") r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/01/12 17:36:09 executing program 3: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fbf000-0x93)=""/185, 0xffffffffffffff89, 0x0, 0x0, 0xffffffffffffff8f) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fc1000)=[], 0x0, 0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000ebd000-0x5b)='x', 0x1, 0x0, &(0x7f000089d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/12 17:36:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f000017c000-0x4)=0x6, 0x4) connect$inet6(r0, &(0x7f0000419000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2018/01/12 17:36:09 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000002000-0xd)='dns_resolver\x00', &(0x7f0000001000)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)='user\x00', 0x0) [ 33.795298] audit: type=1400 audit(1515778568.966:17): avc: denied { write } for pid=3807 comm="syz-executor6" path="socket:[13327]" dev="sockfs" ino=13327 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/01/12 17:36:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000062000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f00006be000/0x1000)=nil) 2018/01/12 17:36:09 executing program 0: mmap(&(0x7f0000000000/0xff3000)=nil, 0xff3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 17:36:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000855000-0x8)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f0000a36000-0x7)='nilfs2\x00', 0x0, &(0x7f00005ac000-0x51)="") r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) r1 = dup(r0) connect$nfc_llcp(r1, &(0x7f0000fba000-0x60)={0x27, 0x100000001, 0x0, 0x3, 0x100, 0x2, "6c846233542466c3c0c338575ce89b2e7f6bb7e6d7986204ca75d09fe0d629c7ec1ac1defa1e3c352ca2098150c7af6fad2f9a4c5245ace656a2db0e6765cc", 0x8}, 0x60) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000845000)={0x1, 0x0}) pwritev(r2, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) sendfile(r0, r2, &(0x7f00000de000-0x8)=0x0, 0x100000001) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000fb1000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000eac000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000)="", 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/12 17:36:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000b03000)='ns/net\x00') 2018/01/12 17:36:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000b2000)=0x0, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000482000)="be", 0x1, 0x800000120000001, &(0x7f0000e46000-0x10)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000966000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) sendto$inet(0xffffffffffffffff, &(0x7f0000f70000-0x65)="", 0x0, 0x0, &(0x7f0000dab000-0x10)={0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvmmsg(r0, &(0x7f0000e42000)=[{{&(0x7f000000e000)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f0000d53000)=[], 0x0, &(0x7f00002fb000)=""/117, 0x75, 0x0}, 0x0}], 0x1, 0x10001, &(0x7f0000ec7000)={0x77359400, 0x0}) [ 33.826690] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 33.872463] audit: type=1400 audit(1515778569.020:18): avc: denied { name_connect } for pid=3832 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 2018/01/12 17:36:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000410000-0x4)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)={0x0, 0x0}}}) r1 = syz_open_dev$tun(&(0x7f0000953000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f7852c846b540c308", @ifru_map={0x294f, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = socket(0x10, 0x802, 0x0) sendto(r2, &(0x7f0000394000-0x12)="120000001200e7ff0a001c0000000000809b", 0x12, 0x0, 0x0, 0x0) 2018/01/12 17:36:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000788000-0xd)='net/anycast6\x00') preadv(r1, &(0x7f0000e5b000)=[{&(0x7f0000c54000-0x1)=""/1, 0xfffffd0e}], 0x1, 0x0) 2018/01/12 17:36:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="de895db1468d", [], {{0x86dd, @ipv6={0x0, 0x6, "a228af", 0x14, 0x6, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}}, 0x0) [ 33.919223] device gre0 entered promiscuous mode 2018/01/12 17:36:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001000-0x188)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {{0x86dd, @ipv6={0x0, 0x6, "20f087", 0x28, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, {[@dstopts={0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}], @icmpv6=@mld={0x0, 0x4888, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}}}}}}}, 0x0) 2018/01/12 17:36:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00002b6000-0x78)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f000069c000)=""/46) 2018/01/12 17:36:09 executing program 7: mmap(&(0x7f0000000000/0x41b000)=nil, 0x41b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000417000-0x38)={&(0x7f000020e000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00003d1000)={&(0x7f0000416000)=@acquire={0x16c, 0x17, 0xe001b1def71634b, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffffffffffff, 0x0}, 0x0, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 17:36:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d64000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2b, 0xfffffffffffffcbb, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r0) bind$inet(r1, &(0x7f000000f000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) connect$inet(r0, &(0x7f0000f6a000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000f6a000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 2018/01/12 17:36:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00002d2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00002d1000)=0xb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @fr=&(0x7f0000013000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r1 = socket(0x11, 0x80803, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000001000)={0xb, 0x7, 0x0, 0x0}) setsockopt(r1, 0x107, 0x1, &(0x7f0000001000)="", 0x200) close(r0) socket$inet6_dccp(0xa, 0x6, 0x0) 2018/01/12 17:36:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = msgget$private(0x0, 0x0) msgrcv(r1, &(0x7f0000e88000)={0x0, ""/170}, 0xb2, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000984000)=0x6) msgsnd(r1, &(0x7f0000857000-0xb3)={0x3, "07d3d3cc94ced128f10f966251adf79107d0570848a621f3fda32edfba2ace26db11f40baef8686d0afb278b4f74a15b4faa550e08bc2bd96b2824ee62de9ccee9a488cf9773dc1de6eaa7f290e9127712ba940cc8abb1aabdea0237b767e4c8e09bd8e7685d7a8dc3e288aef802c8f784e531fff56ea91288f6770c844f40a5b622dad842fc15ef2755c12d9b37952c576f8d3c746a9bc28a8390796f73bc1b1a926e2ba9efe07c4a385e"}, 0xb3, 0x0) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') pread64(r0, &(0x7f00008a9000)=""/0, 0x0, 0x20000) 2018/01/12 17:36:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a28000)={@common='eql\x00', @ifru_names=@syzn={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}}) write$tun(r0, &(0x7f0000355000-0x105f)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}, 0x32) 2018/01/12 17:36:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00007e2000-0x2)=0x800000000001) [ 33.999112] binder: 3871:3876 ERROR: BC_REGISTER_LOOPER called without request [ 34.006742] binder: 3876 RLIMIT_NICE not set [ 34.034953] binder: 3876 RLIMIT_NICE not set 2018/01/12 17:36:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) syz_emit_ethernet(0x36, &(0x7f0000530000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="4c6112cc15d8", [], {{0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}, 0x0) fremovexattr(r0, &(0x7f0000a90000-0x14)=@known='security.capability\x00') syz_emit_ethernet(0x32, &(0x7f00008da000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="4c6112cc15d8", [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000000000000, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8e7a92", 0x8, "7d7783"}, ""}}}}}, 0x0) recvmsg(r1, &(0x7f000016d000)={&(0x7f0000c16000-0x10)=@in={0x0, 0xffffffffffffffff, @loopback=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f00002bb000)=[{&(0x7f0000e9d000-0x29)=""/41, 0x29}, {&(0x7f0000a5e000-0xb0)=""/176, 0xb0}], 0x2, &(0x7f00009cd000-0x4b)=""/75, 0x4b, 0x0}, 0x2000) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)="") mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000143000)='./file0\x00', &(0x7f00007d1000)='ramfs\x00', 0x0, &(0x7f0000802000-0x1)="") times(&(0x7f00004d6000-0x20)={0x0, 0x0, 0x0, 0x0}) [ 34.040679] binder: 3871:3885 got reply transaction with bad transaction stack, transaction 2 has target 3871:0 [ 34.040695] binder: 3871:3885 transaction failed 29201/-71, size -213--837 line 2718 [ 34.086895] binder: release 3871:3876 transaction 2 in, still active [ 34.093626] binder: send failed reply for transaction 2 to 3871:3885 2018/01/12 17:36:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00004ae000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x1000002041, &(0x7f0000f50000)=0x0) clock_gettime(0x0, &(0x7f000029d000)={0x0, 0x0}) io_getevents(r1, 0x6, 0x6, &(0x7f0000f58000-0xe0)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], &(0x7f0000c9f000-0x10)={0x0, r2}) io_submit(r1, 0x1, &(0x7f0000b53000-0x28)=[&(0x7f00003bf000-0x40)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00005be000)="", 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) io_destroy(r1) [ 34.097747] binder: 3871:3902 ERROR: BC_REGISTER_LOOPER called without request [ 34.097757] binder: 3902 RLIMIT_NICE not set [ 34.099671] binder: 3871:3902 got reply transaction with no transaction stack [ 34.099694] binder: 3871:3902 transaction failed 29201/-71, size -213--837 line 2703 [ 34.099768] binder: 3871:3876 transaction failed 29189/-22, size 0-0 line 2788 [ 34.134760] binder: undelivered TRANSACTION_COMPLETE 2018/01/12 17:36:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0xb2, &(0x7f0000b22000-0x8)=0x0) io_cancel(r0, &(0x7f0000be1000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ec5000)="", 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f000035a000)={0x0, 0x0, 0x0, 0x0}) 2018/01/12 17:36:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000)="", &(0x7f0000744000)=0x0, &(0x7f0000f8b000)=0x0, &(0x7f00000d5000)="") mknod(&(0x7f0000b5a000-0x8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') preadv(r0, &(0x7f0000be5000-0x40)=[{&(0x7f0000847000-0x2c)=""/44, 0x2c}], 0x100000000000007d, 0x0) lseek(r0, 0x0, 0x0) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/01/12 17:36:09 executing program 7: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000813000-0x39)=""/57) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000)=0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f000004f000-0x8)=0x6) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x4) rt_sigtimedwait(&(0x7f000000c000-0x8)={0xfffffffffffffff8}, 0x0, &(0x7f000003e000)={0x77359400, 0x0}, 0x8) dup3(r1, r2, 0x0) 2018/01/12 17:36:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) flock(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000e94000)=0x6) ioctl$int_in(r0, 0x5452, &(0x7f0000009000-0x8)=0x7) fcntl$setsig(r0, 0xa, 0x12) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00002cb000)={0x0, 0x0}) recvmsg(r1, &(0x7f000070c000-0x38)={&(0x7f00001d7000-0x8)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)=""/0, 0x0, 0x0}, 0x0) dup2(0xffffffffffffffff, r1) tkill(0x0, 0x0) close(0xffffffffffffffff) sync() perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/01/12 17:36:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00000da000/0xd000)=nil, 0xd000, 0x10000100000c, 0x0, 0x41) semop(0x0, &(0x7f000002f000-0x1e)=[{0x3, 0x6, 0x0}, {0x3, 0x0, 0x0}], 0x2) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00007c8000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f00008df000-0x4)=0x8) semtimedop(0x0, &(0x7f0000ffe000-0x30)=[{0x0, 0x0, 0x0}, {0x0, 0xfffffffffffffffa, 0x0}], 0x2, &(0x7f0000ef1000)={0x0, 0x0}) [ 34.154929] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.160615] binder: undelivered TRANSACTION_ERROR: 29189 [ 34.172230] binder: undelivered TRANSACTION_ERROR: 29189 [ 34.178237] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/12 17:36:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x3) 2018/01/12 17:36:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f000042a000-0x38)={0x0, 0x0, &(0x7f0000fd7000-0x10)=[{&(0x7f00002c6000)=[{0x14, 0x1c, 0x331, 0xffffffffffffffff, 0xffffffffffffffff, [@nested={0x4, 0x0, []}]}], 0x14}], 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 17:36:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000855000-0x8)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f0000a36000-0x7)='nilfs2\x00', 0x0, &(0x7f00005ac000-0x51)="") r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) r1 = dup(r0) connect$nfc_llcp(r1, &(0x7f0000fba000-0x60)={0x27, 0x100000001, 0x0, 0x3, 0x100, 0x2, "6c846233542466c3c0c338575ce89b2e7f6bb7e6d7986204ca75d09fe0d629c7ec1ac1defa1e3c352ca2098150c7af6fad2f9a4c5245ace656a2db0e6765cc", 0x8}, 0x60) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000845000)={0x1, 0x0}) pwritev(r2, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r2, &(0x7f00000de000-0x8)=0x0, 0x100000001) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00005cf000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000eb6000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000622000-0xe8)={{{@in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000daa000-0x4)=0xe8) 2018/01/12 17:36:09 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) dup2(r1, r0) 2018/01/12 17:36:09 executing program 7: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000001f000-0xa)='./control\x00', 0xa400095e) 2018/01/12 17:36:09 executing program 3: r0 = semget$private(0x0, 0x9, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000813000-0x39)=""/57) 2018/01/12 17:36:09 executing program 6: r0 = socket(0x11, 0x802, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f00008aa000)="", 0x0) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x40000) semtimedop(0x0, &(0x7f00000a8000)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000, 0x0}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000003000)=[]) unshare(0x40600) 2018/01/12 17:36:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f000048b000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mq_notify(r1, &(0x7f00007e0000-0x58)={0x0, 0x0, 0x1, @thr={&(0x7f0000e1b000-0x9e)="", &(0x7f000090c000)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 17:36:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000d51000)="", &(0x7f0000744000)=0x0, &(0x7f0000646000-0x4)=0x0, &(0x7f00001a2000)="") mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00004ee000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f0000e60000)=[]) r0 = memfd_create(&(0x7f0000c7f000)='/dev/input/event#\x00', 0x0) write$eventfd(r0, &(0x7f0000b75000-0x8)=0x0, 0x8) r1 = syz_open_procfs(0x0, &(0x7f000052f000)='attr/prev\x00') sendfile(r1, r0, &(0x7f0000f89000)=0x0, 0x5) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00006ce000)={{{@in=@loopback=0x7f000001, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0}, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0}, 0x0, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) sendmsg$inet_sctp(r0, &(0x7f0000558000-0x38)={&(0x7f0000a34000)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000f70000)=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2018/01/12 17:36:09 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000a8c000)=0xb) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00004f3000-0x8)='./file0\x00', 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000681000-0x14)={0x0, 0x9, 0x0, 0x0, 0x0}, 0x14) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000e37000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f000012c000/0x2000)=nil) mlock(&(0x7f00003da000/0x2000)=nil, 0x2000) 2018/01/12 17:36:09 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f000090e000)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001000-0xce)=""/206, 0xce, 0x0, &(0x7f0000001000-0x8)={r0, 0x0}) 2018/01/12 17:36:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000ed4000-0xd)='dns_resolver\x00', &(0x7f0000623000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f000097a000-0x4e)="707070307d8973656375726974792e76626f786e657430766d6e65743076626f786e6574306d643573756d2b2a6264657670726f636367726f75702873656c696e75783a76626f786e6574305c00", 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0x0) 2018/01/12 17:36:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000bdb000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) writev(r0, &(0x7f000083d000-0x90)=[{&(0x7f00008a2000-0xed)="e97c5d9a5ae88efd9f44251059c22d959295a040b504d1b1c5a987a854ad5cda3a71aee122df48ae75c9a04f2a5cdf453d264a90d4b600ba84a8ddcceb1757929d23fb3b2e942dd4a34678ad24a9e7e65e6f4a2f50f1fc9c293c669b203aeee14641cfd2aa9d1c0f04132d32a4a02fecd4e47e77a3d67dccd38b7d76793855e7686325e4cd611d309fcb215867d481a3f5417323bc21ddf51980e624d526cc5debb7d0063715007581d3fb0d0ca6072a3bf9f2c26b360ee4c3b24cd9479b8e49e02d56d9a538faa9e5b9ea183bd563c6d96035a6c0829b1a0c219f176785c43a0706fd75b3dd536706ad07c71e", 0xed}, {&(0x7f0000c6d000-0x5)="71e9eb949e", 0x5}, {&(0x7f00003af000-0x66)="f73b12a03d1b64346f99df7deef7a4398822298befd08122e5d707feef77b51d5f5220f528eca491e5d3ac20f86e3e10868156a432edea96f9eabe57f1d353f06ffd98764a699be1acc2938c63d42ae893659bdc8e84197835e8f583567a4f264dd02e8cb822", 0x66}, {&(0x7f0000439000-0x5f)="d8a9caade0cf7a1244ed54928761f08a01cd84964df42eba3afda4fd87fcdc282a101200f0b2e3eb2b4315d34102343f1f2fb3d977d214760a2f66108f4b29bffabfc41f8c9794d58c8909b91561d121a6e6ca998ad987073bfa6c48e455a2", 0x5f}, {&(0x7f0000986000)="d45a805446bc364d236d3301116e628c1ca66e0c0dd465b414e70328f240eb1647596878aabb18bc1c76d922d48a6cb9c150e5b39ba4d254c7ae043b6b428fb8c044094e3e9a12efcc4cbd9ee18137f2ceb18a0f3b3446567a7f420f1323196acdbab17bf93b1820150ddde3", 0x6c}], 0x5) 2018/01/12 17:36:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000001000-0x1)='/', 0x0, 0x0) 2018/01/12 17:36:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000020000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x440000000000127c, &(0x7f000076f000)="") 2018/01/12 17:36:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00005c8000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) flock(r0, 0x1) close(r1) 2018/01/12 17:36:09 executing program 7: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000009000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000a9d000-0x8)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00006f4000)={0x0, 0x0}, &(0x7f0000a9e000-0x4)=0x8) 2018/01/12 17:36:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000802000)='/dev/loop#\x00', 0x0, 0x1004102) read(r0, &(0x7f00000e3000)=""/512, 0x200) 2018/01/12 17:36:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000004000-0x36)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff}, [], {{0x4000000800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x800000002, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}}}, 0x0) 2018/01/12 17:36:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() msgrcv(0x0, &(0x7f0000e88000)={0x0, ""/170}, 0xb2, 0x0, 0x0) prlimit64(r0, 0x0, &(0x7f0000123000)={0x0, 0x0}, &(0x7f0000664000-0x10)={0x0, 0x0}) 2018/01/12 17:36:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000822000-0x6e)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, @random="de895db1468d", [], {{0x86dd, @ipv6={0x0, 0x6, "a228af", 0x28, 0x6, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "899f46832ced6f4156afb56397f94fd0"}]}}, {""}}}}}}}, 0x0) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00007a3000-0x78)={0x2, 0x78, 0x400000000000072, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000004000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0xffffffffffffffff}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}, 0x0) 2018/01/12 17:36:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000802000)='/dev/loop#\x00', 0x0, 0x1004102) read(r0, &(0x7f0000cf1000)=""/512, 0xffffff92) 2018/01/12 17:36:09 executing program 4: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000e09000-0x94)=""/148) 2018/01/12 17:36:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_settime(0xfffffffffffffff4, &(0x7f0000b70000)={0x0, 0x1c9c380}) 2018/01/12 17:36:09 executing program 2: move_pages(0x0, 0x0, &(0x7f0000000000)=[], &(0x7f0000001000-0x4)=[], &(0x7f0000003000-0x8)=[], 0x0) 2018/01/12 17:36:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00001ef000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000592000-0xc)=@ethtool_rxfh_indir={0x1, 0x0, []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/12 17:36:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f000027a000-0x2c)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @igmp={0x0, 0x0, 0x0, @loopback=0x7f000001, ""}}}}}, &(0x7f000027a000-0xc)={0x0, 0x1, [0x0]}) 2018/01/12 17:36:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00002a0000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x9, &(0x7f0000000000)={0x0, 0x22, 0x0, @thr={&(0x7f0000001000-0x5b)="", &(0x7f0000383000)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000-0x4)=0x0) 2018/01/12 17:36:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000cf0000-0x21)="1f0000000306ffde0000f49ff60f0000000600000900018006000000000300", 0x1f) 2018/01/12 17:36:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c52000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000928000-0x28)={@generic="00fb5d0000000000010000770800", @ifru_ivalue=0x7fff}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00005db000)={0x0, 0x0, []}) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c52000-0xd)='/dev/net/tun\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000cd5000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/12 17:36:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002fa000-0x6)='statm\x00') pread64(r0, &(0x7f00008a9000)=""/0, 0x0, 0x0) 2018/01/12 17:36:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:09 executing program 0: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f000001d000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12b, "f64d678c83e147631b78fdf01000e793"}]}}, {""}}}}}}, 0x0) 2018/01/12 17:36:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)="") r0 = open(&(0x7f0000fd1000)='./file0\x00', 0x0, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000143000)='./file0\x00', &(0x7f00007d1000)='ramfs\x00', 0x0, &(0x7f0000802000-0x1)="") execveat(r0, &(0x7f0000fd5000)='./file0/file0\x00', &(0x7f0000394000-0x38)=[], &(0x7f0000570000-0x20)=[&(0x7f0000fd5000)="737973000000815b255b707070316370756574626465762d626465763a63707573657400"], 0x0) times(&(0x7f00004d6000-0x20)={0x0, 0x0, 0x0, 0x0}) 2018/01/12 17:36:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000a91000)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x3, 0x0, 0x400, 0x2}, &(0x7f000066f000)=0xa0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000591000-0x20)={0x111, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x76e, 0x0}, 0x20) mmap(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/01/12 17:36:09 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000644000)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0}, @sadb_address={0x3, 0x2000000005, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 34.668760] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 34.707215] netlink: 'syz-executor6': attribute type 1 has an invalid length. 2018/01/12 17:36:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000102000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000dc0000-0x4)=0xd61) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000fdf000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/12 17:36:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f00009f4000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_map={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}}) 2018/01/12 17:36:09 executing program 1: 2018/01/12 17:36:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) [ 34.714332] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 34.728325] netlink: 'syz-executor3': attribute type 4 has an invalid length. 2018/01/12 17:36:09 executing program 0: 2018/01/12 17:36:09 executing program 6: 2018/01/12 17:36:09 executing program 0: 2018/01/12 17:36:09 executing program 2: 2018/01/12 17:36:09 executing program 1: 2018/01/12 17:36:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00007c7000-0xa)='net/nfsfs\x00') getdents64(0xffffffffffffffff, &(0x7f0000f3c000)=""/13, 0xd) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f000065b000-0x12)={@common='bcsf0\x00', 0x0}) getdents64(r0, &(0x7f0000001000-0x1000)=""/1024, 0x400) getdents(r0, &(0x7f0000431000-0x18)=""/24, 0xf67e73644fb63db4) 2018/01/12 17:36:09 executing program 4: 2018/01/12 17:36:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 2: [ 34.798851] netlink: 'syz-executor3': attribute type 4 has an invalid length. 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 1: [ 34.846965] netlink: 'syz-executor3': attribute type 4 has an invalid length. 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000f0e000-0xa)='setgroups\x00') 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 2: [ 34.887718] netlink: 'syz-executor3': attribute type 4 has an invalid length. 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 6: [ 34.932225] netlink: 'syz-executor3': attribute type 4 has an invalid length. 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(0xffffffffffffffff, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(0xffffffffffffffff, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(0xffffffffffffffff, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00009da000)=0xffffffffffffffff, 0x4) write(r0, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00009da000)=0xffffffffffffffff, 0x4) write(r0, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 1: 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd5}]}, &(0x7f0000f92000-0x4)=0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00009da000)=0xffffffffffffffff, 0x4) write(r0, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 1: mmap(&(0x7f0000000000/0x57000)=nil, 0x57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x0, 0x0, &(0x7f000004b000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) select(0x40, &(0x7f0000039000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000-0x40)={0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000032000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000004c000)={0x77359400, 0x0}) 2018/01/12 17:36:10 executing program 2: 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 0: 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 4: 2018/01/12 17:36:10 executing program 7: 2018/01/12 17:36:10 executing program 6: 2018/01/12 17:36:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a15000-0xd)='/dev/net/tun\x00', 0x0, 0x100200a) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f000097e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, @ifru_settings={0x5, 0x0, @sync=&(0x7f00001a4000-0xc)={0x0, 0x0, 0x0}}}) socket$packet(0x11, 0xa, 0x300) write$tun(r2, &(0x7f0000e20000-0x348)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "356d06", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "af295e", 0x0, "9b907f"}, ""}}}}, 0x42) 2018/01/12 17:36:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000f7c000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000f6a000)=0x8, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000558000-0x38)={&(0x7f0000a34000)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000f70000)=[{&(0x7f0000f70000-0x65)="470a3747e4d6c6dc7e519c8cfa37b13380c40d8724eb4f1fe4fb8607a6fa401ca8969a47542c8e2cb00000000000000000dbf1eedf91d955a9e84c62af9fc4452b9c97c651", 0x45}], 0x1, 0x0, 0x0, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000be7000-0x4)=0x0) 2018/01/12 17:36:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000900000)={0x0, 0x0}) sendto$inet(r1, &(0x7f0000063000-0x72)="e202493912e035dcd110c29638a93886eec0701cbe4b6f264aedb00d2cf41f9691ca1ce9552503b0362574be56260a98d5b1e523ea93c61496db5a84bc68029dfd1d947be13074b906fe8a867c5f09011d663b70a687ee6cc14262295846755299bd03a29570e327601138cc6a59ef9a520d", 0x72, 0x40, &(0x7f0000800000-0x10)={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) bind$inet6(r0, &(0x7f000082d000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10000}, 0x1c) listen(r0, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup2(r0, r0) connect$inet(r3, &(0x7f0000868000-0x10)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000b1e000-0x8)={0x1, [0x0]}, &(0x7f0000a02000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000722000)={r4, @in={{0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000054000-0x4)=0x108) r6 = semget(0x3, 0x7, 0x0) r7 = getpgid(0x0) process_vm_readv(r7, &(0x7f0000f10000)=[], 0x0, &(0x7f000066d000)=[{&(0x7f000016e000-0xf5)=""/245, 0xf5}], 0x1, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f000077c000)=[0x8001, 0x1ff, 0xd047, 0xfffffffffffff1f5, 0x9]) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000875000)=0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000c05000)={r5, 0x100, 0x0, 0x0, 0x0, 0x0}, 0x14) 2018/01/12 17:36:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001000-0x4)=0x0, 0x85, 0x0, &(0x7f0000dc5000-0x10)={0x0, 0x0}, &(0x7f00007c9000-0x4)=0x0, 0x278b7d92) 2018/01/12 17:36:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f0000e77000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x1}, 0x1c) 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00002a0000)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000f8000)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000d20000)={{{@in=@rand_addr=0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f5f000)=0xe8) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000beb000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000001001bf3ff000000006500ff00010000007db0e6f10efbf9a219d8f6aa6bd58d1c43473100e85026e7ff40f9b55bd1b3335d5bffff0001f3", "cfa40005000000f7ffffffff00000000000000ffb833220182ab867d00", [0x0, 0x0], 0x0}) memfd_create(&(0x7f000016d000)='/dev/loop#\x00', 0x0) memfd_create(&(0x7f0000702000)="2f6465762f6c7b6f70a300", 0x0) 2018/01/12 17:36:10 executing program 2: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0xe, 0x0}) mmap(&(0x7f00008ff000/0xf000)=nil, 0xf000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000003000-0x20)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1, 0x0}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x9) clone(0x0, &(0x7f000000c000)="", &(0x7f0000002000-0x4)=0x0, &(0x7f000090c000-0x4)=0x0, &(0x7f0000001000)="") mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) read(r0, &(0x7f000000c000)=""/100, 0x64) 2018/01/12 17:36:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fe5000)='./file0\x00', 0x2) lsetxattr(&(0x7f0000c53000)='./file0\x00', &(0x7f0000b93000-0x19)=@known='system.posix_acl_default\x00', &(0x7f0000b23000-0x14)="02000000020003000000000000000000000806a0", 0x14, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000f0c000)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000c05000-0x2c)={0xb9, 0x24, [0x1, 0x20, 0x100, 0x200, 0x4, 0x3, 0x23f, 0x40, 0xffff]}) 2018/01/12 17:36:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/12 17:36:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x100000000000c8, &(0x7f00005b9000-0x4)=0x0, 0x4) readv(r0, &(0x7f00001fd000)=[{&(0x7f00009a6000-0x1000)=""/4096, 0x1000}], 0x1) r1 = socket$inet(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f000020a000-0x4)=0x5, 0x4) r2 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) 2018/01/12 17:36:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000cca000-0x10)=[{&(0x7f000039a000)="2900000020001900013d181000d9f50602000000000000029e14007f0d000400040000000000000080", 0x29}], 0x1) [ 35.367668] ================================================================== [ 35.375219] BUG: KASAN: double-free or invalid-free in relay_open+0x6a1/0xa40 [ 35.382465] [ 35.384072] CPU: 1 PID: 4266 Comm: syz-executor6 Not tainted 4.15.0-rc7+ #258 [ 35.391327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.400656] Call Trace: [ 35.403224] dump_stack+0x194/0x257 [ 35.406828] ? arch_local_irq_restore+0x53/0x53 [ 35.411473] ? show_regs_print_info+0x18/0x18 [ 35.415949] ? __lock_is_held+0xb6/0x140 [ 35.419990] ? relay_open+0x6a1/0xa40 [ 35.423785] print_address_description+0x73/0x250 [ 35.428601] ? relay_open+0x6a1/0xa40 [ 35.432373] ? relay_open+0x6a1/0xa40 [ 35.436144] kasan_report_double_free+0x55/0x80 [ 35.440789] kasan_slab_free+0xa3/0xc0 [ 35.444660] kfree+0xd6/0x260 [ 35.447741] relay_open+0x6a1/0xa40 [ 35.451350] ? relay_open_buf.part.10+0x9b0/0x9b0 [ 35.456178] ? __debugfs_create_file+0x2cf/0x3d0 [ 35.460912] ? debugfs_create_file+0x57/0x70 [ 35.465299] do_blk_trace_setup+0x4a4/0xcd0 [ 35.469601] ? blk_tracer_print_line+0x40/0x40 [ 35.474160] ? __might_sleep+0x95/0x190 [ 35.478122] ? kasan_check_write+0x14/0x20 [ 35.482332] ? _copy_from_user+0x99/0x110 [ 35.486460] __blk_trace_setup+0xbe/0x150 [ 35.490592] ? do_blk_trace_setup+0xcd0/0xcd0 [ 35.495078] ? disk_name+0x98/0x100 [ 35.498689] blk_trace_ioctl+0x206/0x2e0 [ 35.502723] ? blk_add_trace_rq_remap+0x680/0x680 [ 35.507552] ? avc_has_extended_perms+0x7fa/0x12c0 [ 35.512466] blkdev_ioctl+0x1845/0x1e00 [ 35.516416] ? blkpg_ioctl+0xb40/0xb40 [ 35.520276] ? avc_ss_reset+0x110/0x110 [ 35.524222] ? lock_downgrade+0x980/0x980 [ 35.528347] ? lock_release+0xa40/0xa40 [ 35.532300] ? __lock_is_held+0xb6/0x140 [ 35.536363] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 35.542227] ? rcu_note_context_switch+0x710/0x710 [ 35.547134] block_ioctl+0xde/0x120 [ 35.550736] ? blkdev_fallocate+0x3b0/0x3b0 [ 35.555034] do_vfs_ioctl+0x1b1/0x1520 [ 35.558895] ? _cond_resched+0x14/0x30 [ 35.562762] ? ioctl_preallocate+0x2b0/0x2b0 [ 35.567147] ? selinux_capable+0x40/0x40 [ 35.571189] ? SyS_futex+0x269/0x390 [ 35.574886] ? SyS_getsockopt+0x16b/0x340 [ 35.579037] ? security_file_ioctl+0x89/0xb0 [ 35.583423] SyS_ioctl+0x8f/0xc0 [ 35.586771] entry_SYSCALL_64_fastpath+0x23/0x9a [ 35.591498] RIP: 0033:0x452ac9 [ 35.594660] RSP: 002b:00007f80c2b82c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 35.602340] RAX: ffffffffffffffda RBX: 00007f80c2b83700 RCX: 0000000000452ac9 [ 35.609580] RDX: 0000000020beaf68 RSI: 00000000c0481273 RDI: 0000000000000014 [ 35.616822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 35.624065] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 35.631306] R13: 0000000000a2f7ef R14: 00007f80c2b839c0 R15: 0000000000000000 [ 35.638575] [ 35.640176] Allocated by task 4266: [ 35.643778] save_stack+0x43/0xd0 [ 35.647201] kasan_kmalloc+0xad/0xe0 [ 35.650884] kmem_cache_alloc_trace+0x136/0x750 [ 35.655525] relay_open+0xf2/0xa40 [ 35.659040] do_blk_trace_setup+0x4a4/0xcd0 [ 35.663331] __blk_trace_setup+0xbe/0x150 [ 35.667449] blk_trace_ioctl+0x206/0x2e0 [ 35.671482] blkdev_ioctl+0x1845/0x1e00 [ 35.675427] block_ioctl+0xde/0x120 [ 35.679026] do_vfs_ioctl+0x1b1/0x1520 [ 35.682885] SyS_ioctl+0x8f/0xc0 [ 35.686237] entry_SYSCALL_64_fastpath+0x23/0x9a [ 35.690959] [ 35.692555] Freed by task 4266: [ 35.695825] save_stack+0x43/0xd0 [ 35.699258] kasan_slab_free+0x71/0xc0 [ 35.703115] kfree+0xd6/0x260 [ 35.706192] relay_open+0x84a/0xa40 [ 35.709791] do_blk_trace_setup+0x4a4/0xcd0 [ 35.714092] __blk_trace_setup+0xbe/0x150 [ 35.718222] blk_trace_ioctl+0x206/0x2e0 [ 35.722253] blkdev_ioctl+0x1845/0x1e00 [ 35.726199] block_ioctl+0xde/0x120 [ 35.729795] do_vfs_ioctl+0x1b1/0x1520 [ 35.733653] SyS_ioctl+0x8f/0xc0 [ 35.736991] entry_SYSCALL_64_fastpath+0x23/0x9a [ 35.741714] [ 35.743314] The buggy address belongs to the object at ffff8801d1689800 [ 35.743314] which belongs to the cache kmalloc-512 of size 512 [ 35.755942] The buggy address is located 0 bytes inside of [ 35.755942] 512-byte region [ffff8801d1689800, ffff8801d1689a00) [ 35.767612] The buggy address belongs to the page: [ 35.772513] page:ffffea000745a240 count:1 mapcount:0 mapping:ffff8801d1689080 index:0x0 [ 35.780629] flags: 0x2fffc0000000100(slab) [ 35.784836] raw: 02fffc0000000100 ffff8801d1689080 0000000000000000 0000000100000006 [ 35.792689] raw: ffffea000746a920 ffffea000745e460 ffff8801dac00940 0000000000000000 [ 35.800552] page dumped because: kasan: bad access detected [ 35.806229] [ 35.807829] Memory state around the buggy address: [ 35.812730] ffff8801d1689700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.820159] ffff8801d1689780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.827488] >ffff8801d1689800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.834816] ^ [ 35.838152] ffff8801d1689880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.845486] ffff8801d1689900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.852812] ================================================================== [ 35.860149] Disabling lock debugging due to kernel taint [ 35.865568] Kernel panic - not syncing: panic_on_warn set ... [ 35.865568] [ 35.872901] CPU: 1 PID: 4266 Comm: syz-executor6 Tainted: G B 4.15.0-rc7+ #258 [ 35.881445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.890773] Call Trace: [ 35.893335] dump_stack+0x194/0x257 [ 35.896934] ? arch_local_irq_restore+0x53/0x53 [ 35.901570] ? kasan_end_report+0x32/0x50 [ 35.905690] ? lock_downgrade+0x980/0x980 [ 35.909826] ? vsnprintf+0x1ed/0x1900 [ 35.913600] panic+0x1e4/0x41c [ 35.916764] ? refcount_error_report+0x214/0x214 [ 35.921493] ? add_taint+0x40/0x50 [ 35.925010] ? add_taint+0x1c/0x50 [ 35.928525] ? relay_open+0x6a1/0xa40 [ 35.932294] ? relay_open+0x6a1/0xa40 [ 35.936063] kasan_end_report+0x50/0x50 [ 35.940011] kasan_report_double_free+0x72/0x80 [ 35.944654] kasan_slab_free+0xa3/0xc0 [ 35.948515] kfree+0xd6/0x260 [ 35.951591] relay_open+0x6a1/0xa40 [ 35.955191] ? relay_open_buf.part.10+0x9b0/0x9b0 [ 35.960010] ? __debugfs_create_file+0x2cf/0x3d0 [ 35.964749] ? debugfs_create_file+0x57/0x70 [ 35.969132] do_blk_trace_setup+0x4a4/0xcd0 [ 35.973425] ? blk_tracer_print_line+0x40/0x40 [ 35.977976] ? __might_sleep+0x95/0x190 [ 35.981939] ? kasan_check_write+0x14/0x20 [ 35.986155] ? _copy_from_user+0x99/0x110 [ 35.990284] __blk_trace_setup+0xbe/0x150 [ 35.994404] ? do_blk_trace_setup+0xcd0/0xcd0 [ 35.998872] ? disk_name+0x98/0x100 [ 36.002473] blk_trace_ioctl+0x206/0x2e0 [ 36.006505] ? blk_add_trace_rq_remap+0x680/0x680 [ 36.011328] ? avc_has_extended_perms+0x7fa/0x12c0 [ 36.016241] blkdev_ioctl+0x1845/0x1e00 [ 36.020183] ? blkpg_ioctl+0xb40/0xb40 [ 36.024039] ? avc_ss_reset+0x110/0x110 [ 36.027983] ? lock_downgrade+0x980/0x980 [ 36.032115] ? lock_release+0xa40/0xa40 [ 36.036063] ? __lock_is_held+0xb6/0x140 [ 36.040108] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 36.045966] ? rcu_note_context_switch+0x710/0x710 [ 36.050868] block_ioctl+0xde/0x120 [ 36.054477] ? blkdev_fallocate+0x3b0/0x3b0 [ 36.058769] do_vfs_ioctl+0x1b1/0x1520 [ 36.062626] ? _cond_resched+0x14/0x30 [ 36.066487] ? ioctl_preallocate+0x2b0/0x2b0 [ 36.070873] ? selinux_capable+0x40/0x40 [ 36.074908] ? SyS_futex+0x269/0x390 [ 36.078592] ? SyS_getsockopt+0x16b/0x340 [ 36.082718] ? security_file_ioctl+0x89/0xb0 [ 36.087097] SyS_ioctl+0x8f/0xc0 [ 36.090438] entry_SYSCALL_64_fastpath+0x23/0x9a [ 36.095167] RIP: 0033:0x452ac9 [ 36.098337] RSP: 002b:00007f80c2b82c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 36.106021] RAX: ffffffffffffffda RBX: 00007f80c2b83700 RCX: 0000000000452ac9 [ 36.113271] RDX: 0000000020beaf68 RSI: 00000000c0481273 RDI: 0000000000000014 [ 36.120512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 36.127751] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 36.134992] R13: 0000000000a2f7ef R14: 00007f80c2b839c0 R15: 0000000000000000 [ 36.142701] Dumping ftrace buffer: [ 36.146214] (ftrace buffer empty) [ 36.149893] Kernel Offset: disabled [ 36.153490] Rebooting in 86400 seconds..