[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.019715] audit: type=1400 audit(1518802691.412:6): avc: denied { map } for pid=4152 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. 2018/02/16 17:38:17 fuzzer started syzkaller login: [ 24.294332] audit: type=1400 audit(1518802697.687:7): avc: denied { map } for pid=4163 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/16 17:38:18 dialing manager at 10.128.0.26:42897 [ 27.878479] can: request_module (can-proto-0) failed. [ 27.888287] can: request_module (can-proto-0) failed. 2018/02/16 17:38:21 kcov=true, comps=true [ 28.440694] audit: type=1400 audit(1518802701.833:8): avc: denied { map } for pid=4163 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9084 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/16 17:38:23 executing program 0: mmap(&(0x7f0000000000/0xf7a000)=nil, 0xf7a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x20000000000017, &(0x7f0000f78000)=0x400, 0x102fc) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000f74000)=0x9, 0x4) 2018/02/16 17:38:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000988000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 2018/02/16 17:38:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00009f5000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x1c, 0x5, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/16 17:38:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10000000000001e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000540000-0xc), &(0x7f00001d5000)=0xc) perf_event_open(&(0x7f0000274000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getflags(r0, 0x1) 2018/02/16 17:38:23 executing program 3: mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feb000-0x7)={0x20080522}, &(0x7f0000fea000)) 2018/02/16 17:38:23 executing program 4: mmap(&(0x7f0000000000/0xb0e000)=nil, 0xb0e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xff06, &(0x7f0000ae9000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, @dev={0xac, 0x14}, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "fba762", 0x0, "e8b33e"}}}}}}, &(0x7f00003b5000)={0x0, 0x0, []}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00004dd000), &(0x7f0000aab000-0x4)=0xc) getpgid(0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000b0d000), &(0x7f0000b0e000-0x4)=0x4) 2018/02/16 17:38:23 executing program 5: mmap(&(0x7f0000000000/0xfd6000)=nil, 0xfd6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00008fc000)=0x8, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004ad000-0x4)={0x0, 0x6}, 0x4) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000a76000), 0x0) 2018/02/16 17:38:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x200000000000003, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000158000-0x280)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000162000-0x30), {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @common='gretap0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0xa}}, 0x10, &(0x7f00000b8000-0xa0)=[], 0x0, &(0x7f000023d000-0x3d0)=[]}, 0x0) [ 30.532249] audit: type=1400 audit(1518802703.925:9): avc: denied { map } for pid=4163 comm="syz-fuzzer" path="/root/syzkaller-shm424103891" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 30.590339] audit: type=1400 audit(1518802703.983:10): avc: denied { sys_admin } for pid=4208 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 30.636528] IPVS: ftp: loaded support on port[0] = 21 [ 30.674839] audit: type=1400 audit(1518802704.067:11): avc: denied { net_admin } for pid=4213 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 30.676854] IPVS: ftp: loaded support on port[0] = 21 [ 30.738486] IPVS: ftp: loaded support on port[0] = 21 [ 30.781332] IPVS: ftp: loaded support on port[0] = 21 [ 30.839645] IPVS: ftp: loaded support on port[0] = 21 [ 30.911826] IPVS: ftp: loaded support on port[0] = 21 [ 31.010545] IPVS: ftp: loaded support on port[0] = 21 [ 31.111804] IPVS: ftp: loaded support on port[0] = 21 [ 32.030651] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.073285] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.243894] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.352424] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.371654] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.525875] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.574383] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.723893] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.685062] audit: type=1400 audit(1518802708.076:12): avc: denied { sys_chroot } for pid=4213 comm="syz-executor7" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:38:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00004ae000-0x3b0)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0xa0, 0xa0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000497000), {[{{@ip={@empty, @broadcast=0xffffffff, 0x0, 0x0, @generic="a7436a13b1012e83df90f1e2e935414f", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@ip={@multicast1=0xe0000001, @loopback=0x7f000001, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}, {{@ip={@dev={0xac, 0x14}, @multicast2=0xe0000002, 0x0, 0x0, @common='bpq0\x00', @generic="b0a7140308c2099086357aa0255ffb70"}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@unspec=@quota={0x38, 'quota\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b0) 2018/02/16 17:38:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00004ae000-0x3b0)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0xa0, 0xa0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000497000), {[{{@ip={@empty, @broadcast=0xffffffff, 0x0, 0x0, @generic="a7436a13b1012e83df90f1e2e935414f", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@ip={@multicast1=0xe0000001, @loopback=0x7f000001, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}, {{@ip={@dev={0xac, 0x14}, @multicast2=0xe0000002, 0x0, 0x0, @common='bpq0\x00', @generic="b0a7140308c2099086357aa0255ffb70"}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@unspec=@quota={0x38, 'quota\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b0) [ 34.792898] ipt_CLUSTERIP: Please specify destination IP [ 34.818905] ipt_CLUSTERIP: Please specify destination IP [ 34.889035] ipt_CLUSTERIP: Please specify destination IP [ 34.907612] audit: type=1400 audit(1518802708.300:13): avc: denied { create } for pid=5200 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 34.946770] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 34.987705] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 34.998689] audit: type=1400 audit(1518802708.339:14): avc: denied { write } for pid=5200 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 35.165763] audit: type=1400 audit(1518802708.558:15): avc: denied { net_raw } for pid=5251 comm="syz-executor5" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 35.199486] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 2018/02/16 17:38:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000072b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002000-0xc6)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f0000bac000+0x431)={0x0, 0x0, &(0x7f0000073000-0x20)=[{&(0x7f0000c29000-0xbe)="717168324c3b0d89b1b9be169b40ff1bfb35e82bdbae058e47ecfa1a00ed9742d1d8574a2b512d10d2e63459c5ed8c174e98514e0a34244a9ff52bc2a841515e3bb0f0b5042ec3f1fcf664d7857dd135aead5ea2d92607eb8c0dd729ee3bde832bd81fa7d38338bfc9717cf57197388b3d83e330c6518a3d1707af5a9883d31baf565ff37ed0bb3540cba2cb0b1a775dacfb83b6f24e298ec4d0c0f737e2e67fbd63208772bb61f696b240f0aa", 0xad}], 0x1, &(0x7f0000763000)=[]}, 0x4008880) io_submit(r3, 0x1, &(0x7f0000bda000-0x20)=[&(0x7f0000618000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)="b3b03996ff05abb1e8b1c24b50898d8f9ead673923f57eea9c323539f61098a6", 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/16 17:38:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00004ae000-0x3b0)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0xa0, 0xa0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000497000), {[{{@ip={@empty, @broadcast=0xffffffff, 0x0, 0x0, @generic="a7436a13b1012e83df90f1e2e935414f", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@ip={@multicast1=0xe0000001, @loopback=0x7f000001, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}, {{@ip={@dev={0xac, 0x14}, @multicast2=0xe0000002, 0x0, 0x0, @common='bpq0\x00', @generic="b0a7140308c2099086357aa0255ffb70"}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@unspec=@quota={0x38, 'quota\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b0) 2018/02/16 17:38:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000625000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000aff000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x108) 2018/02/16 17:38:28 executing program 3: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f000000a000-0x38)={&(0x7f0000009000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f000000a000-0x27)=[], 0x0, &(0x7f0000003000)=[@rights={0x10, 0x1, 0x1, []}], 0x10}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000003000-0x20)={@mcast2={0xff, 0x2, [], 0x1}}, 0x11e) 2018/02/16 17:38:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f00006b6000-0x68)={0x18, 0x2, 0x2, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x2, []}]}, 0x18}, 0x1}, 0x0) 2018/02/16 17:38:28 executing program 5: mmap(&(0x7f0000000000/0xfd6000)=nil, 0xfd6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00008fc000)=0x8, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004ad000-0x4)={0x0, 0x6}, 0x4) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000a76000), 0x0) 2018/02/16 17:38:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000fdf000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000163000-0x48)=[@in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, @in6={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x3c) 2018/02/16 17:38:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000985000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f00002d7000)=&(0x7f000098a000-0x1)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df6000-0x28)={0x0, 0x0, &(0x7f00003ad000-0x69)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000636000)=""/199, 0x2}) [ 35.218551] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 35.268757] [ 35.270426] ====================================================== [ 35.270783] ipt_CLUSTERIP: Please specify destination IP [ 35.276724] WARNING: possible circular locking dependency detected [ 35.276731] 4.16.0-rc1+ #315 Not tainted [ 35.276733] ------------------------------------------------------ [ 35.276738] syz-executor1/5277 is trying to acquire lock: [ 35.276740] (sk_lock-AF_INET6){+.+.}, at: [<00000000bfdb7df7>] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 35.276765] [ 35.276765] but task is already holding lock: [ 35.276766] (rtnl_mutex){+.+.}, at: [<000000008beceb0d>] rtnl_lock+0x17/0x20 [ 35.276784] [ 35.276784] which lock already depends on the new lock. [ 35.276784] [ 35.335311] [ 35.335311] the existing dependency chain (in reverse order) is: [ 35.342905] [ 35.342905] -> #2 (rtnl_mutex){+.+.}: [ 35.348176] __mutex_lock+0x16f/0x1a80 [ 35.352554] mutex_lock_nested+0x16/0x20 [ 35.357106] rtnl_lock+0x17/0x20 [ 35.360964] unregister_netdevice_notifier+0x91/0x4e0 [ 35.366652] tee_tg_destroy+0x61/0xc0 [ 35.370943] cleanup_entry+0x218/0x350 [ 35.375320] __do_replace+0x79d/0xa50 [ 35.379612] do_ipt_set_ctl+0x40f/0x5f0 [ 35.384076] nf_setsockopt+0x67/0xc0 [ 35.388281] ip_setsockopt+0x97/0xa0 [ 35.392575] raw_setsockopt+0xb7/0xd0 [ 35.396868] sock_common_setsockopt+0x95/0xd0 [ 35.401854] SyS_setsockopt+0x189/0x360 [ 35.406320] do_syscall_64+0x280/0x940 [ 35.410701] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 35.416377] [ 35.416377] -> #1 (&xt[i].mutex){+.+.}: [ 35.421807] __mutex_lock+0x16f/0x1a80 [ 35.426185] mutex_lock_nested+0x16/0x20 [ 35.430738] xt_find_table_lock+0x3e/0x3e0 [ 35.435473] xt_request_find_table_lock+0x28/0xc0 [ 35.440807] get_info+0x154/0x690 [ 35.444751] do_ip6t_get_ctl+0x159/0xaf0 [ 35.449302] nf_getsockopt+0x6a/0xc0 [ 35.453507] ipv6_getsockopt+0x1df/0x2e0 [ 35.458058] tcp_getsockopt+0x82/0xd0 [ 35.462348] sock_common_getsockopt+0x95/0xd0 [ 35.467342] SyS_getsockopt+0x178/0x340 [ 35.471808] do_syscall_64+0x280/0x940 [ 35.476187] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 35.481863] [ 35.481863] -> #0 (sk_lock-AF_INET6){+.+.}: [ 35.487639] lock_acquire+0x1d5/0x580 [ 35.491933] lock_sock_nested+0xc2/0x110 [ 35.496483] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 35.501990] ipv6_setsockopt+0xd7/0x130 [ 35.506456] sctp_setsockopt+0x2b6/0x61d0 [ 35.511094] sock_common_setsockopt+0x95/0xd0 [ 35.516081] SyS_setsockopt+0x189/0x360 [ 35.520547] do_syscall_64+0x280/0x940 [ 35.524926] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 35.530603] [ 35.530603] other info that might help us debug this: [ 35.530603] [ 35.538714] Chain exists of: [ 35.538714] sk_lock-AF_INET6 --> &xt[i].mutex --> rtnl_mutex [ 35.538714] [ 35.549004] Possible unsafe locking scenario: [ 35.549004] [ 35.555035] CPU0 CPU1 [ 35.559668] ---- ---- [ 35.564310] lock(rtnl_mutex); [ 35.567559] lock(&xt[i].mutex); [ 35.573497] lock(rtnl_mutex); [ 35.579262] lock(sk_lock-AF_INET6); [ 35.583030] [ 35.583030] *** DEADLOCK *** [ 35.583030] [ 35.589058] 1 lock held by syz-executor1/5277: [ 35.593604] #0: (rtnl_mutex){+.+.}, at: [<000000008beceb0d>] rtnl_lock+0x17/0x20 [ 35.601290] [ 35.601290] stack backtrace: [ 35.605763] CPU: 0 PID: 5277 Comm: syz-executor1 Not tainted 4.16.0-rc1+ #315 [ 35.613003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.622328] Call Trace: [ 35.624889] dump_stack+0x194/0x257 [ 35.628496] ? arch_local_irq_restore+0x53/0x53 [ 35.633141] print_circular_bug.isra.38+0x2cd/0x2dc [ 35.638126] ? save_trace+0xe0/0x2b0 [ 35.641931] __lock_acquire+0x30a8/0x3e00 [ 35.646053] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 35.651212] ? rtnl_lock+0x17/0x20 [ 35.654732] ? __mutex_lock+0x16f/0x1a80 [ 35.658761] ? rtnl_lock+0x17/0x20 [ 35.662275] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 35.667610] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 35.672943] ? rtnl_lock+0x17/0x20 [ 35.676470] ? mutex_lock_io_nested+0x1900/0x1900 [ 35.681290] ? perf_trace_lock_acquire+0xe3/0x980 [ 35.686101] ? perf_trace_lock_acquire+0xe3/0x980 [ 35.690916] ? perf_trace_lock+0x900/0x900 [ 35.695124] ? check_noncircular+0x20/0x20 [ 35.699329] ? check_noncircular+0x20/0x20 [ 35.703534] ? find_held_lock+0x35/0x1d0 [ 35.707568] lock_acquire+0x1d5/0x580 [ 35.711339] ? lock_acquire+0x1d5/0x580 [ 35.715283] ? do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 35.720444] ? lock_release+0xa40/0xa40 [ 35.724388] ? do_raw_spin_trylock+0x190/0x190 [ 35.728943] ? lock_sock_nested+0x44/0x110 [ 35.733147] lock_sock_nested+0xc2/0x110 [ 35.737182] ? do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 35.742341] do_ipv6_setsockopt.isra.8+0x3c5/0x39d0 [ 35.747328] ? ipv6_update_options+0x330/0x330 [ 35.751880] ? __lock_is_held+0xb6/0x140 [ 35.755914] ? __lock_is_held+0xb6/0x140 [ 35.759947] ? update_load_avg+0x249/0x2d80 [ 35.764239] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 35.769746] ? update_load_avg+0x249/0x2d80 [ 35.774040] ? check_noncircular+0x20/0x20 [ 35.778245] ? resched_curr+0x13e/0x1a0 [ 35.782190] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 35.787700] ? put_prev_task_fair+0x80/0x80 [ 35.791993] ? print_irqtrace_events+0x270/0x270 [ 35.796722] ? rb_insert_color+0x1580/0x1580 [ 35.801100] ? find_held_lock+0x35/0x1d0 [ 35.805132] ? print_irqtrace_events+0x270/0x270 [ 35.809857] ? lock_downgrade+0x980/0x980 [ 35.813982] ? lock_downgrade+0x980/0x980 [ 35.818104] ? print_irqtrace_events+0x270/0x270 [ 35.822828] ? __lock_acquire+0x664/0x3e00 [ 35.827034] ? do_raw_spin_trylock+0x190/0x190 [ 35.831584] ? do_raw_spin_trylock+0x190/0x190 [ 35.836139] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 35.841222] ipv6_setsockopt+0xd7/0x130 [ 35.845168] ? ipv6_setsockopt+0xd7/0x130 [ 35.849289] sctp_setsockopt+0x2b6/0x61d0 [ 35.853409] ? sctp_setsockopt_paddr_thresholds+0x550/0x550 [ 35.859091] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 35.864252] ? perf_trace_lock_acquire+0xe3/0x980 [ 35.869064] ? __lock_is_held+0xb6/0x140 [ 35.873096] ? perf_trace_lock+0x900/0x900 [ 35.877301] ? __perf_event_task_sched_out+0x268/0x1400 [ 35.882635] ? perf_trace_lock_acquire+0xe3/0x980 [ 35.887448] ? check_noncircular+0x20/0x20 [ 35.891655] ? __unqueue_futex+0x290/0x290 [ 35.895862] ? perf_trace_lock+0x900/0x900 [ 35.900067] ? __enqueue_entity+0x109/0x1e0 [ 35.904360] ? perf_trace_lock+0x900/0x900 [ 35.908564] ? check_noncircular+0x20/0x20 [ 35.912770] ? check_noncircular+0x20/0x20 [ 35.916977] ? finish_task_switch+0x1c0/0x860 [ 35.921442] ? lock_downgrade+0x980/0x980 [ 35.925559] ? find_held_lock+0x35/0x1d0 [ 35.929595] ? avc_has_perm+0x35e/0x680 [ 35.933543] ? lock_downgrade+0x980/0x980 [ 35.937663] ? lock_release+0xa40/0xa40 [ 35.941606] ? lock_downgrade+0x980/0x980 [ 35.945741] ? lock_release+0xa40/0xa40 [ 35.949686] ? __lock_is_held+0xb6/0x140 [ 35.953720] ? avc_has_perm+0x43e/0x680 [ 35.957664] ? avc_has_perm_noaudit+0x520/0x520 [ 35.962306] ? iterate_fd+0x3f0/0x3f0 [ 35.966078] ? __sched_text_start+0x8/0x8 [ 35.970204] ? __lock_is_held+0xb6/0x140 [ 35.974241] ? sock_has_perm+0x2a4/0x420 [ 35.978272] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 35.983608] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 35.989288] ? selinux_netlbl_sock_rcv_skb+0x730/0x730 [ 35.994539] ? __schedule+0x2070/0x2070 [ 35.998486] sock_common_setsockopt+0x95/0xd0 [ 36.002954] SyS_setsockopt+0x189/0x360 [ 36.006898] ? SyS_recv+0x40/0x40 [ 36.010323] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 36.015829] ? do_syscall_64+0xb6/0x940 [ 36.019773] ? SyS_recv+0x40/0x40 [ 36.023206] do_syscall_64+0x280/0x940 [ 36.027078] ? __do_page_fault+0xc90/0xc90 [ 36.031282] ? finish_task_switch+0x1c0/0x860 [ 36.035749] ? finish_task_switch+0x181/0x860 [ 36.040218] ? syscall_return_slowpath+0x550/0x550 [ 36.045118] ? syscall_return_slowpath+0x2ac/0x550 [ 36.050022] ? prepare_exit_to_usermode+0x350/0x350 [ 36.055013] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 36.060348] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 36.065167] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/02/16 17:38:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000cd5000)={&(0x7f00004b4000-0x228)=@newsa={0x140, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x32}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000002}, [@tfcpad={0x8, 0x16}, @algo_crypt={0x48, 0x2, {{'cbc(twofish)\x00'}}}]}, 0x140}, 0x1}, 0x0) 2018/02/16 17:38:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00009ec000)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000763000), {[{{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @dev={0xfe, 0x80}, [], [0x0, 0x0, 0xffffff00], @common='bpq0\x00', @syzn={0x73, 0x79, 0x7a}, {}, {}, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a, 0x0}, @common='vlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a8) 2018/02/16 17:38:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00004ae000-0x3b0)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0xa0, 0xa0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000497000), {[{{@ip={@empty, @broadcast=0xffffffff, 0x0, 0x0, @generic="a7436a13b1012e83df90f1e2e935414f", @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xa0, 0x0, {}, []}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@ip={@multicast1=0xe0000001, @loopback=0x7f000001, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xd0, 0x0, {}, []}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}, {{@ip={@dev={0xac, 0x14}, @multicast2=0xe0000002, 0x0, 0x0, @common='bpq0\x00', @generic="b0a7140308c2099086357aa0255ffb70"}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@unspec=@quota={0x38, 'quota\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b0) 2018/02/16 17:38:29 executing program 5: mmap(&(0x7f0000000000/0xfd6000)=nil, 0xfd6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00008fc000)=0x8, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004ad000-0x4)={0x0, 0x6}, 0x4) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000a76000), 0x0) [ 36.070329] RIP: 0033:0x453a59 [ 36.073489] RSP: 002b:00007f3f567c9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 36.081166] RAX: ffffffffffffffda RBX: 00007f3f567ca6d4 RCX: 0000000000453a59 [ 36.088406] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000013 [ 36.095647] RBP: 000000000071bea0 R08: 0000000000000088 R09: 0000000000000000 [ 36.102886] R10: 0000000020625000 R11: 0000000000000246 R12: 00000000ffffffff [ 36.110126] R13: 00000000000004fb R14: 00000000006f7828 R15: 0000000000000000 2018/02/16 17:38:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000031000)='/dev/autofs\x00', 0x103a01, 0x0) getdents(r0, &(0x7f0000098000+0xf88)=""/106, 0x6a) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00008e9000), &(0x7f0000ca3000-0x4)=0x4) listen(0xffffffffffffffff, 0x7) r1 = socket(0x2, 0x3, 0xff) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f000051f000-0x4)) sync_file_range(0xffffffffffffffff, 0x0, 0x3ff, 0x0) syz_open_dev$admmidi(&(0x7f0000166000-0xe)='/dev/admmidi#\x00', 0x5b56, 0x4001) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000db2000)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000529000-0x4)=0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000fb7000-0x4), 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00008d4000)='/selinux/enforce\x00', 0x1, 0x0) 2018/02/16 17:38:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc5000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000adf000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendmsg$alg(r0, &(0x7f00000db000-0x38)={0x0, 0x0, &(0x7f00008ea000)=[], 0x0, &(0x7f0000001000-0x172)=[@assoc={0x18, 0x117, 0x4}, @op={0x276, 0x117, 0x3}, @op={0x18, 0x117, 0x3}], 0x48}, 0x0) 2018/02/16 17:38:29 executing program 0: mmap(&(0x7f0000000000/0x26000)=nil, 0x26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000013000)='asymmetric\x00', &(0x7f0000025000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000025000-0x11)='/dev/vga_arbiter\x00', 0xfffffffffffffffd) 2018/02/16 17:38:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000985000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f00002d7000)=&(0x7f000098a000-0x1)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df6000-0x28)={0x0, 0x0, &(0x7f00003ad000-0x69)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000636000)=""/199, 0x2}) [ 36.137395] ipt_CLUSTERIP: Please specify destination IP [ 36.151596] xt_CT: You must specify a L4 protocol, and not use inversions on it. [ 36.170592] xt_CT: You must specify a L4 protocol, and not use inversions on it. 2018/02/16 17:38:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000031000)='/dev/autofs\x00', 0x103a01, 0x0) getdents(r0, &(0x7f0000098000+0xf88)=""/106, 0x6a) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00008e9000), &(0x7f0000ca3000-0x4)=0x4) listen(0xffffffffffffffff, 0x7) r1 = socket(0x2, 0x3, 0xff) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f000051f000-0x4)) sync_file_range(0xffffffffffffffff, 0x0, 0x3ff, 0x0) syz_open_dev$admmidi(&(0x7f0000166000-0xe)='/dev/admmidi#\x00', 0x5b56, 0x4001) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000db2000)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000529000-0x4)=0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000fb7000-0x4), 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00008d4000)='/selinux/enforce\x00', 0x1, 0x0) 2018/02/16 17:38:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) socketpair(0x1b, 0x4, 0xffffffff, &(0x7f00008a3000)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r2, &(0x7f00000de000-0x8), 0x100000001) ioctl$LOOP_CLR_FD(r0, 0x4c01) pselect6(0x40, &(0x7f000035e000)={0x3, 0x2, 0x7fff, 0x4, 0x0, 0x100000000, 0xfffffffffffffc1f}, &(0x7f0000bfd000-0x40)={0x4, 0x7fffffff, 0x401, 0x0, 0x80000000, 0x8001, 0x0, 0x8}, &(0x7f0000ea3000)={0x3d, 0x0, 0x3ff, 0x5, 0x0, 0x9b4}, &(0x7f00006ed000)={0x0, 0x1c9c380}, &(0x7f0000030000)={&(0x7f00002fc000), 0x8}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000cf7000-0x90)={[0x3, 0x1000, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x61fc, 0x9, 0x4, 0x8000, 0x3f, 0x9, 0x1000], 0x0, 0x86d07}) 2018/02/16 17:38:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000985000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f00002d7000)=&(0x7f000098a000-0x1)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df6000-0x28)={0x0, 0x0, &(0x7f00003ad000-0x69)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000636000)=""/199, 0x2}) 2018/02/16 17:38:29 executing program 0: mmap(&(0x7f0000000000/0x26000)=nil, 0x26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000013000)='asymmetric\x00', &(0x7f0000025000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000025000-0x11)='/dev/vga_arbiter\x00', 0xfffffffffffffffd) 2018/02/16 17:38:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c76000-0x9)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000789000)=0x7c) 2018/02/16 17:38:29 executing program 5: mmap(&(0x7f0000000000/0xfd6000)=nil, 0xfd6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00008fc000)=0x8, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004ad000-0x4)={0x0, 0x6}, 0x4) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000a76000), 0x0) 2018/02/16 17:38:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000031000)='/dev/autofs\x00', 0x103a01, 0x0) getdents(r0, &(0x7f0000098000+0xf88)=""/106, 0x6a) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00008e9000), &(0x7f0000ca3000-0x4)=0x4) listen(0xffffffffffffffff, 0x7) r1 = socket(0x2, 0x3, 0xff) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f000051f000-0x4)) sync_file_range(0xffffffffffffffff, 0x0, 0x3ff, 0x0) syz_open_dev$admmidi(&(0x7f0000166000-0xe)='/dev/admmidi#\x00', 0x5b56, 0x4001) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000db2000)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000529000-0x4)=0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000fb7000-0x4), 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00008d4000)='/selinux/enforce\x00', 0x1, 0x0) 2018/02/16 17:38:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00009ec000)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000763000), {[{{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @dev={0xfe, 0x80}, [], [0x0, 0x0, 0xffffff00], @common='bpq0\x00', @syzn={0x73, 0x79, 0x7a}, {}, {}, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a, 0x0}, @common='vlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a8) 2018/02/16 17:38:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000985000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f00002d7000)=&(0x7f000098a000-0x1)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df6000-0x28)={0x0, 0x0, &(0x7f00003ad000-0x69)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000636000)=""/199, 0x2}) 2018/02/16 17:38:29 executing program 0: mmap(&(0x7f0000000000/0x26000)=nil, 0x26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000013000)='asymmetric\x00', &(0x7f0000025000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000025000-0x11)='/dev/vga_arbiter\x00', 0xfffffffffffffffd) 2018/02/16 17:38:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000039000-0x28)={@common='ip6tnl0\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f0000706000)}}) 2018/02/16 17:38:29 executing program 0: mmap(&(0x7f0000000000/0x26000)=nil, 0x26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000013000)='asymmetric\x00', &(0x7f0000025000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000025000-0x11)='/dev/vga_arbiter\x00', 0xfffffffffffffffd) 2018/02/16 17:38:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00009ec000)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000763000), {[{{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @dev={0xfe, 0x80}, [], [0x0, 0x0, 0xffffff00], @common='bpq0\x00', @syzn={0x73, 0x79, 0x7a}, {}, {}, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a, 0x0}, @common='vlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a8) 2018/02/16 17:38:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c76000-0x9)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000789000)=0x7c) 2018/02/16 17:38:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f000023f000-0x2)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e2a000)="8c", 0x1, 0x0, &(0x7f000042f000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f000071b000-0x20)={0x0, 0x0, 0x3}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00007db000-0xc)={0x0, 0x0, 0x80000000020}, 0xc) writev(r0, &(0x7f0000f08000)=[{&(0x7f0000f29000-0xeb)="bc", 0x1}], 0x1) shutdown(r0, 0x1) [ 36.312250] xt_CT: You must specify a L4 protocol, and not use inversions on it. 2018/02/16 17:38:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c76000-0x9)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000789000)=0x7c) 2018/02/16 17:38:29 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000007000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x8000008004500b, &(0x7f0000004000-0x8)) [ 36.373566] xt_CT: You must specify a L4 protocol, and not use inversions on it. 2018/02/16 17:38:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000031000)='/dev/autofs\x00', 0x103a01, 0x0) getdents(r0, &(0x7f0000098000+0xf88)=""/106, 0x6a) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00008e9000), &(0x7f0000ca3000-0x4)=0x4) listen(0xffffffffffffffff, 0x7) r1 = socket(0x2, 0x3, 0xff) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f000051f000-0x4)) sync_file_range(0xffffffffffffffff, 0x0, 0x3ff, 0x0) syz_open_dev$admmidi(&(0x7f0000166000-0xe)='/dev/admmidi#\x00', 0x5b56, 0x4001) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000db2000)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000529000-0x4)=0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000fb7000-0x4), 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00008d4000)='/selinux/enforce\x00', 0x1, 0x0) 2018/02/16 17:38:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000031000)='/dev/autofs\x00', 0x103a01, 0x0) getdents(r0, &(0x7f0000098000+0xf88)=""/106, 0x6a) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00008e9000), &(0x7f0000ca3000-0x4)=0x4) listen(0xffffffffffffffff, 0x7) r1 = socket(0x2, 0x3, 0xff) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f000051f000-0x4)) sync_file_range(0xffffffffffffffff, 0x0, 0x3ff, 0x0) syz_open_dev$admmidi(&(0x7f0000166000-0xe)='/dev/admmidi#\x00', 0x5b56, 0x4001) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000db2000)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000529000-0x4)=0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000fb7000-0x4), 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00008d4000)='/selinux/enforce\x00', 0x1, 0x0) 2018/02/16 17:38:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) socketpair(0x1b, 0x4, 0xffffffff, &(0x7f00008a3000)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r2, &(0x7f00000de000-0x8), 0x100000001) ioctl$LOOP_CLR_FD(r0, 0x4c01) pselect6(0x40, &(0x7f000035e000)={0x3, 0x2, 0x7fff, 0x4, 0x0, 0x100000000, 0xfffffffffffffc1f}, &(0x7f0000bfd000-0x40)={0x4, 0x7fffffff, 0x401, 0x0, 0x80000000, 0x8001, 0x0, 0x8}, &(0x7f0000ea3000)={0x3d, 0x0, 0x3ff, 0x5, 0x0, 0x9b4}, &(0x7f00006ed000)={0x0, 0x1c9c380}, &(0x7f0000030000)={&(0x7f00002fc000), 0x8}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000cf7000-0x90)={[0x3, 0x1000, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x61fc, 0x9, 0x4, 0x8000, 0x3f, 0x9, 0x1000], 0x0, 0x86d07}) 2018/02/16 17:38:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000aed000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000fa3000)={0x0, 0xffffffffffffffff}) 2018/02/16 17:38:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00006fd000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000bf6000)=0x319, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00007c8000-0x38)={&(0x7f0000609000-0x10)=@in={0x0, 0xffffffffffffffff, @remote}, 0x10, &(0x7f0000ba2000)=[], 0x0, &(0x7f00009cf000)=""/56, 0x38}, 0x0) ppoll(&(0x7f000060d000)=[{r0}], 0x1, &(0x7f0000f0b000)={0x0, 0x989680}, &(0x7f000091e000-0x8), 0x8) 2018/02/16 17:38:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00009ec000)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000763000), {[{{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @dev={0xfe, 0x80}, [], [0x0, 0x0, 0xffffff00], @common='bpq0\x00', @syzn={0x73, 0x79, 0x7a}, {}, {}, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a, 0x0}, @common='vlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a8) 2018/02/16 17:38:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c76000-0x9)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000789000)=0x7c) 2018/02/16 17:38:29 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000007000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x8000008004500b, &(0x7f0000004000-0x8)) 2018/02/16 17:38:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000008000)={@common='ip6_vti0\x00', @ifru_data=&(0x7f000000a000)="00009e1908e8af7d6f1735df9846e4f13e566e2bd2d7b04d929d09000100f47b"}) 2018/02/16 17:38:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00006fd000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000bf6000)=0x319, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00007c8000-0x38)={&(0x7f0000609000-0x10)=@in={0x0, 0xffffffffffffffff, @remote}, 0x10, &(0x7f0000ba2000)=[], 0x0, &(0x7f00009cf000)=""/56, 0x38}, 0x0) ppoll(&(0x7f000060d000)=[{r0}], 0x1, &(0x7f0000f0b000)={0x0, 0x989680}, &(0x7f000091e000-0x8), 0x8) 2018/02/16 17:38:29 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000007000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x8000008004500b, &(0x7f0000004000-0x8)) [ 36.479803] xt_CT: You must specify a L4 protocol, and not use inversions on it. 2018/02/16 17:38:29 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000007000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x8000008004500b, &(0x7f0000004000-0x8)) 2018/02/16 17:38:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001ee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmsg(r0, &(0x7f0000d1b000-0x38)={&(0x7f000093c000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @multicast1}}}, 0x2e, &(0x7f000046f000-0x10)=[], 0x0, &(0x7f0000746000-0x62)=""/98, 0x62}, 0x102) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0xfdc7, 0x0, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000db1000)=""/109, 0x6d, 0x0, &(0x7f0000798000-0x3)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/16 17:38:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00006fd000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000bf6000)=0x319, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00007c8000-0x38)={&(0x7f0000609000-0x10)=@in={0x0, 0xffffffffffffffff, @remote}, 0x10, &(0x7f0000ba2000)=[], 0x0, &(0x7f00009cf000)=""/56, 0x38}, 0x0) ppoll(&(0x7f000060d000)=[{r0}], 0x1, &(0x7f0000f0b000)={0x0, 0x989680}, &(0x7f000091e000-0x8), 0x8) 2018/02/16 17:38:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) socketpair(0x1b, 0x4, 0xffffffff, &(0x7f00008a3000)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r2, &(0x7f00000de000-0x8), 0x100000001) ioctl$LOOP_CLR_FD(r0, 0x4c01) pselect6(0x40, &(0x7f000035e000)={0x3, 0x2, 0x7fff, 0x4, 0x0, 0x100000000, 0xfffffffffffffc1f}, &(0x7f0000bfd000-0x40)={0x4, 0x7fffffff, 0x401, 0x0, 0x80000000, 0x8001, 0x0, 0x8}, &(0x7f0000ea3000)={0x3d, 0x0, 0x3ff, 0x5, 0x0, 0x9b4}, &(0x7f00006ed000)={0x0, 0x1c9c380}, &(0x7f0000030000)={&(0x7f00002fc000), 0x8}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000cf7000-0x90)={[0x3, 0x1000, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x61fc, 0x9, 0x4, 0x8000, 0x3f, 0x9, 0x1000], 0x0, 0x86d07}) 2018/02/16 17:38:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000031000)='/dev/autofs\x00', 0x103a01, 0x0) getdents(r0, &(0x7f0000098000+0xf88)=""/106, 0x6a) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00008e9000), &(0x7f0000ca3000-0x4)=0x4) listen(0xffffffffffffffff, 0x7) r1 = socket(0x2, 0x3, 0xff) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f000051f000-0x4)) sync_file_range(0xffffffffffffffff, 0x0, 0x3ff, 0x0) syz_open_dev$admmidi(&(0x7f0000166000-0xe)='/dev/admmidi#\x00', 0x5b56, 0x4001) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000db2000)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000529000-0x4)=0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000fb7000-0x4), 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00008d4000)='/selinux/enforce\x00', 0x1, 0x0) 2018/02/16 17:38:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb6000-0x10)=[{&(0x7f0000fb4000)="1f00000003031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) 2018/02/16 17:38:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000031000)='/dev/autofs\x00', 0x103a01, 0x0) getdents(r0, &(0x7f0000098000+0xf88)=""/106, 0x6a) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00008e9000), &(0x7f0000ca3000-0x4)=0x4) listen(0xffffffffffffffff, 0x7) r1 = socket(0x2, 0x3, 0xff) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f000051f000-0x4)) sync_file_range(0xffffffffffffffff, 0x0, 0x3ff, 0x0) syz_open_dev$admmidi(&(0x7f0000166000-0xe)='/dev/admmidi#\x00', 0x5b56, 0x4001) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000db2000)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000529000-0x4)=0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000fb7000-0x4), 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00008d4000)='/selinux/enforce\x00', 0x1, 0x0) 2018/02/16 17:38:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000004000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, @rand_addr, @dev={0xac, 0x14}, {[]}}, "c4e60974958cac44"}}}}}, 0x0) 2018/02/16 17:38:30 executing program 5: msgrcv(0x0, &(0x7f0000177000), 0x8, 0x1, 0x3800) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000003000-0x10)={&(0x7f000000b000-0x48)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e07000b0001abab"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000013000-0x38)={&(0x7f0000011000-0x10)={0x1d, r1}, 0x10, &(0x7f000000f000-0x10)={&(0x7f0000016000-0x3c)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) 2018/02/16 17:38:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000162000-0x18)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00008d2000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) close(r0) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00006fd000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000bf6000)=0x319, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00007c8000-0x38)={&(0x7f0000609000-0x10)=@in={0x0, 0xffffffffffffffff, @remote}, 0x10, &(0x7f0000ba2000)=[], 0x0, &(0x7f00009cf000)=""/56, 0x38}, 0x0) ppoll(&(0x7f000060d000)=[{r0}], 0x1, &(0x7f0000f0b000)={0x0, 0x989680}, &(0x7f000091e000-0x8), 0x8) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000000b000)='map_files\x00') getdents64(r0, &(0x7f0000008000-0x119)=""/936, 0x3a8) 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000004000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, @rand_addr, @dev={0xac, 0x14}, {[]}}, "c4e60974958cac44"}}}}}, 0x0) 2018/02/16 17:38:30 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000003000-0x4), &(0x7f0000001000-0x4)=0x4) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000198000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000df4000)={0x0, 0x1, [@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) socketpair(0x1b, 0x4, 0xffffffff, &(0x7f00008a3000)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r2, &(0x7f00000de000-0x8), 0x100000001) ioctl$LOOP_CLR_FD(r0, 0x4c01) pselect6(0x40, &(0x7f000035e000)={0x3, 0x2, 0x7fff, 0x4, 0x0, 0x100000000, 0xfffffffffffffc1f}, &(0x7f0000bfd000-0x40)={0x4, 0x7fffffff, 0x401, 0x0, 0x80000000, 0x8001, 0x0, 0x8}, &(0x7f0000ea3000)={0x3d, 0x0, 0x3ff, 0x5, 0x0, 0x9b4}, &(0x7f00006ed000)={0x0, 0x1c9c380}, &(0x7f0000030000)={&(0x7f00002fc000), 0x8}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000cf7000-0x90)={[0x3, 0x1000, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x61fc, 0x9, 0x4, 0x8000, 0x3f, 0x9, 0x1000], 0x0, 0x86d07}) 2018/02/16 17:38:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f000021c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000022000-0x10)={0x2, &(0x7f0000016000)=[{0x28}, {0x6}]}, 0x10) sendto(r1, &(0x7f0000d5b000-0x27), 0x0, 0x0, &(0x7f0000b7e000-0x10)=@nfc={0x27}, 0x10) 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000004000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, @rand_addr, @dev={0xac, 0x14}, {[]}}, "c4e60974958cac44"}}}}}, 0x0) 2018/02/16 17:38:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000822000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x800000080004535, &(0x7f0000a8d000)) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000bc5000-0x20)={{0x0}}) rt_sigtimedwait(&(0x7f0000186000), &(0x7f000089f000), &(0x7f000027f000-0x10)={r0, 0x1c9c380}, 0x8) 2018/02/16 17:38:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000002, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f5a000-0x4)=0x5, 0x4) connect$inet6(r0, &(0x7f0000f07000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) [ 36.675886] print_req_error: I/O error, dev loop0, sector 0 2018/02/16 17:38:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a7000-0x10)={&(0x7f0000419000-0x174)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@empty, @in=@multicast2=0xe0000002}, {@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{"6465666c61746500000000000000000000000000000000000000000000000000000000000000000000f1ffffff00"}}}]}, 0x138}, 0x1}, 0x0) 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000004000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, @rand_addr, @dev={0xac, 0x14}, {[]}}, "c4e60974958cac44"}}}}}, 0x0) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f00002ce000)="1f00000002031900000007000000068100ed853b090001001a0100ff3ffe58", 0x1f}], 0x1) 2018/02/16 17:38:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e46000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000709000-0x48)=[{0x3}, {}, {}, {}, {}, {}, {}, {}], 0x8) 2018/02/16 17:38:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f6000-0x3)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x3)='/dev/kvm\x00', 0x502ed115b2d9a5ae, 0x0) ftruncate(r0, 0xfff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x802, 0x0) sendfile(r1, r0, &(0x7f0000e74000), 0x876b5e795) sendfile(r1, r0, &(0x7f000075e000), 0x1fffffffe0) sendmsg$kcm(r1, &(0x7f0000958000-0x38)={&(0x7f000066d000)=@ax25={0x3, {"bf6e4aa13cff19"}}, 0x10, &(0x7f000062d000-0x20)=[], 0x0, &(0x7f000019a000)=[]}, 0x0) 2018/02/16 17:38:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000001000), 0x8) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x2013, r0, 0x0) read(r0, &(0x7f0000ad4000)=""/100, 0x64) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x4000000010, 0x803, 0x0) mq_notify(r0, &(0x7f0000c38000)={0x20000000, 0x15, 0x2, @thr={&(0x7f000090b000), &(0x7f00009a6000-0x49)}}) [ 36.792481] print_req_error: I/O error, dev loop0, sector 0 [ 36.823787] audit: type=1400 audit(1518802710.216:16): avc: denied { dac_override } for pid=5466 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 36.851116] audit: type=1400 audit(1518802710.242:17): avc: denied { map } for pid=5462 comm="syz-executor4" path="/dev/dsp" dev="devtmpfs" ino=153 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 2018/02/16 17:38:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000a9d000-0x8)) socket$packet(0x11, 0x2, 0x300) 2018/02/16 17:38:30 executing program 5: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xef) read(r0, &(0x7f000000a000-0xbb)=""/187, 0x329) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000010000)=0x2000000000000002, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f000000f000-0x10)=@hopopts={0x0, 0x0, [], []}, 0x8) sendto$inet6(r0, &(0x7f0000002000-0x2), 0x21f, 0x0, &(0x7f0000003000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x3)='/dev/kvm\x00', 0x502ed115b2d9a5ae, 0x0) ftruncate(r0, 0xfff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x802, 0x0) sendfile(r1, r0, &(0x7f0000e74000), 0x876b5e795) sendfile(r1, r0, &(0x7f000075e000), 0x1fffffffe0) sendmsg$kcm(r1, &(0x7f0000958000-0x38)={&(0x7f000066d000)=@ax25={0x3, {"bf6e4aa13cff19"}}, 0x10, &(0x7f000062d000-0x20)=[], 0x0, &(0x7f000019a000)=[]}, 0x0) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x4000000010, 0x803, 0x0) mq_notify(r0, &(0x7f0000c38000)={0x20000000, 0x15, 0x2, @thr={&(0x7f000090b000), &(0x7f00009a6000-0x49)}}) 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f000092e000)='/dev/amidi#\x00', 0x2, 0x8a02) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cc000-0xc)) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000017000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000041000-0x20)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/02/16 17:38:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f0000a9f000)={&(0x7f0000193000)=@newspdinfo={0x1c, 0x24, 0xc01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@ipv6_hthresh={0x8, 0x4}]}, 0x1c}, 0x1}, 0x0) 2018/02/16 17:38:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f8d000-0x8)='pagemap\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100000) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x4000000010, 0x803, 0x0) mq_notify(r0, &(0x7f0000c38000)={0x20000000, 0x15, 0x2, @thr={&(0x7f000090b000), &(0x7f00009a6000-0x49)}}) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x3)='/dev/kvm\x00', 0x502ed115b2d9a5ae, 0x0) ftruncate(r0, 0xfff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x802, 0x0) sendfile(r1, r0, &(0x7f0000e74000), 0x876b5e795) sendfile(r1, r0, &(0x7f000075e000), 0x1fffffffe0) sendmsg$kcm(r1, &(0x7f0000958000-0x38)={&(0x7f000066d000)=@ax25={0x3, {"bf6e4aa13cff19"}}, 0x10, &(0x7f000062d000-0x20)=[], 0x0, &(0x7f000019a000)=[]}, 0x0) 2018/02/16 17:38:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000811000-0x8)=@assoc_value, 0x8) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000017000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000041000-0x20)={{}, {0x0, 0x9}}, &(0x7f0000040000)) [ 36.939968] audit: type=1400 audit(1518802710.332:18): avc: denied { map } for pid=5490 comm="syz-executor3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14284 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000017000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000041000-0x20)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x4000000010, 0x803, 0x0) mq_notify(r0, &(0x7f0000c38000)={0x20000000, 0x15, 0x2, @thr={&(0x7f000090b000), &(0x7f00009a6000-0x49)}}) 2018/02/16 17:38:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000811000-0x8)=@assoc_value, 0x8) 2018/02/16 17:38:30 executing program 6: mmap(&(0x7f0000000000/0xd3b000)=nil, 0xd3b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, []}) pipe(&(0x7f0000001000-0x8)={0x0}) ioctl$sock_SIOCINQ(r0, 0xc0189436, &(0x7f0000000000)) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x3)='/dev/kvm\x00', 0x502ed115b2d9a5ae, 0x0) ftruncate(r0, 0xfff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x802, 0x0) sendfile(r1, r0, &(0x7f0000e74000), 0x876b5e795) sendfile(r1, r0, &(0x7f000075e000), 0x1fffffffe0) sendmsg$kcm(r1, &(0x7f0000958000-0x38)={&(0x7f000066d000)=@ax25={0x3, {"bf6e4aa13cff19"}}, 0x10, &(0x7f000062d000-0x20)=[], 0x0, &(0x7f000019a000)=[]}, 0x0) [ 36.979811] sctp: [Deprecated]: syz-executor3 (pid 5508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 36.979811] Use struct sctp_sack_info instead 2018/02/16 17:38:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) waitid(0x2, r0, 0x0, 0xc0000002, &(0x7f0000acf000)) 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000ff1000-0x12)="ff02047f0100000effffff78d60000d8144e000000000205", 0x18) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000000)=""/49) r0 = socket$netlink(0x10, 0x3, 0x8000000010) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000062d000)={0x14, 0x22, 0xafb, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:38:30 executing program 6: mmap(&(0x7f0000000000/0xb0c000)=nil, 0xb0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000ae9000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, @dev={0xac, 0x14}, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "fba762", 0x0, "e8b33e"}}}}}}, &(0x7f00003b5000)={0x0, 0x0, []}) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000036c000-0x38)={&(0x7f000035d000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, 0x10, &(0x7f0000b78000)=[], 0x0, &(0x7f000034d000-0x9a)=""/154, 0x9a}, 0x0) write(r0, &(0x7f0000a35000-0xcf)="1f0000001000077f00000000002000fc0300000408000200048000ad06ffef", 0x1f) recvmsg(r0, &(0x7f00005cf000-0x38)={&(0x7f000006f000-0x8)=@sco, 0x8, &(0x7f00004c9000)=[], 0x0, &(0x7f0000978000-0x1000)=""/4096, 0x1000}, 0x0) 2018/02/16 17:38:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f0000a9f000)={&(0x7f0000193000)=@newspdinfo={0x1c, 0x24, 0xc01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@ipv6_hthresh={0x8, 0x4}]}, 0x1c}, 0x1}, 0x0) 2018/02/16 17:38:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000811000-0x8)=@assoc_value, 0x8) [ 37.017582] sctp: [Deprecated]: syz-executor3 (pid 5516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 37.017582] Use struct sctp_sack_info instead 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000eaa000-0x4), &(0x7f00006dc000)=0x4) [ 37.058237] audit: type=1400 audit(1518802710.450:19): avc: denied { create } for pid=5526 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 37.085570] dccp_invalid_packet: pskb_may_pull failed [ 37.091926] sctp: [Deprecated]: syz-executor3 (pid 5536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 37.091926] Use struct sctp_sack_info instead 2018/02/16 17:38:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000bf6000)=0x319, 0x4) recvmsg(r0, &(0x7f00007c8000-0x38)={&(0x7f0000609000-0x10)=@in={0x0, 0xffffffffffffffff, @remote}, 0x10, &(0x7f0000ba2000)=[{&(0x7f0000135000)=""/177, 0xb1}], 0x1, &(0x7f00009cf000)=""/56, 0x16}, 0x0) sendto$inet(r0, &(0x7f0000fa8000-0x2b)='J', 0x1, 0x20000011, &(0x7f00001e4000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/16 17:38:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000811000-0x8)=@assoc_value, 0x8) 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0xf25000)=nil, 0xf25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80805, 0x0) connect$inet6(r0, &(0x7f00000a5000-0x1c)={0x2, 0xffffffffffffffff, 0x6358c0, @loopback={0x0, 0x1}}, 0x1c) [ 37.111499] audit: type=1400 audit(1518802710.478:20): avc: denied { write } for pid=5526 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 37.135300] audit: type=1400 audit(1518802710.503:21): avc: denied { read } for pid=5530 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000017000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000041000-0x20)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000d97000)) prctl$getreaper(0x0, &(0x7f0000d38000-0x8)) 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000004000-0x8)=0x10) read(r0, &(0x7f0000010000)=""/176, 0x27) readv(r0, &(0x7f000000e000)=[{&(0x7f0000004000-0xcc)=""/204, 0xcc}], 0x1) 2018/02/16 17:38:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f0000a9f000)={&(0x7f0000193000)=@newspdinfo={0x1c, 0x24, 0xc01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@ipv6_hthresh={0x8, 0x4}]}, 0x1c}, 0x1}, 0x0) 2018/02/16 17:38:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') read(r0, &(0x7f0000b5b000), 0x0) lseek(r0, 0x0, 0x0) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/16 17:38:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000913000-0x10)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) listen(r0, 0x100401000003) r1 = accept$inet(r0, &(0x7f0000da9000-0x10)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f00002d3000)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000999000-0x8), &(0x7f00004ad000)=0x8) 2018/02/16 17:38:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa9000-0x1c)={0xa, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000967000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000c9f000-0x4)=0x10000, 0x4) r1 = dup(r0) write$eventfd(r1, &(0x7f0000606000-0x8), 0xffbe) write$selinux_context(r1, &(0x7f0000458000-0x1e)='system_u:object_r:hwdata_t:s0\x00', 0x300) write$eventfd(r1, &(0x7f00006d5000), 0x8) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0xef4000)=nil, 0xef4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x40) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000ef0000), 0x4) [ 37.149976] sctp: [Deprecated]: syz-executor3 (pid 5551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 37.149976] Use struct sctp_sack_info instead 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$packet(r0, &(0x7f0000173000-0x14)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) 2018/02/16 17:38:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f0000a9f000)={&(0x7f0000193000)=@newspdinfo={0x1c, 0x24, 0xc01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@ipv6_hthresh={0x8, 0x4}]}, 0x1c}, 0x1}, 0x0) 2018/02/16 17:38:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000913000-0x10)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) listen(r0, 0x100401000003) r1 = accept$inet(r0, &(0x7f0000da9000-0x10)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f00002d3000)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000999000-0x8), &(0x7f00004ad000)=0x8) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000d97000)) prctl$getreaper(0x0, &(0x7f0000d38000-0x8)) 2018/02/16 17:38:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f000025d000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000712000)={0x8, 0xfffffffffffffffb, 0x9, 0x6, 0x9, 0x5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0x58000)=nil, 0x58000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) select(0x40, &(0x7f0000039000-0x40), &(0x7f0000001000-0x40)={0x80200}, &(0x7f0000032000-0x40), &(0x7f000004c000)={0x77359400}) 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000004000-0x8)=0x10) read(r0, &(0x7f0000010000)=""/176, 0x27) readv(r0, &(0x7f000000e000)=[{&(0x7f0000004000-0xcc)=""/204, 0xcc}], 0x1) 2018/02/16 17:38:30 executing program 5: mmap(&(0x7f0000000000/0x52000)=nil, 0x52000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000047000-0x6)='./bus\x00', 0x0) mount(&(0x7f0000052000-0x1)='./file0\x00', &(0x7f0000052000-0x6)='./bus\x00', &(0x7f0000015000-0x5)='ext2\x00', 0x0, &(0x7f0000041000-0xd3)) 2018/02/16 17:38:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') read(r0, &(0x7f0000b5b000), 0x0) lseek(r0, 0x0, 0x0) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000ead000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f00002ec000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000575000-0x3a)='Q', 0x1, 0x4007ffd, &(0x7f0000c41000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4000000003, &(0x7f0000097000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000c87000)={0x0, r0}, &(0x7f0000a2c000-0x10)) clone(0x0, &(0x7f0000b47000), &(0x7f0000d5e000-0x4), &(0x7f0000d5a000), &(0x7f0000ef1000-0x7f)) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000d97000)) prctl$getreaper(0x0, &(0x7f0000d38000-0x8)) 2018/02/16 17:38:30 executing program 5: mmap(&(0x7f0000000000/0x52000)=nil, 0x52000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000047000-0x6)='./bus\x00', 0x0) mount(&(0x7f0000052000-0x1)='./file0\x00', &(0x7f0000052000-0x6)='./bus\x00', &(0x7f0000015000-0x5)='ext2\x00', 0x0, &(0x7f0000041000-0xd3)) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000ca000-0x258)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000fdd000), {[{{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) syz_emit_ethernet(0x32, &(0x7f000029d000-0x1139)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @multicast2=0xe0000002, @rand_addr, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) [ 37.388405] audit: type=1400 audit(1518802710.779:22): avc: denied { dac_read_search } for pid=4220 comm="syz-executor5" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:38:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') read(r0, &(0x7f0000b5b000), 0x0) lseek(r0, 0x0, 0x0) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/16 17:38:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000913000-0x10)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) listen(r0, 0x100401000003) r1 = accept$inet(r0, &(0x7f0000da9000-0x10)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f00002d3000)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000999000-0x8), &(0x7f00004ad000)=0x8) 2018/02/16 17:38:30 executing program 5: mmap(&(0x7f0000000000/0x52000)=nil, 0x52000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000047000-0x6)='./bus\x00', 0x0) mount(&(0x7f0000052000-0x1)='./file0\x00', &(0x7f0000052000-0x6)='./bus\x00', &(0x7f0000015000-0x5)='ext2\x00', 0x0, &(0x7f0000041000-0xd3)) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000ca000-0x258)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000fdd000), {[{{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) syz_emit_ethernet(0x32, &(0x7f000029d000-0x1139)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @multicast2=0xe0000002, @rand_addr, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000004000-0x8)=0x10) read(r0, &(0x7f0000010000)=""/176, 0x27) readv(r0, &(0x7f000000e000)=[{&(0x7f0000004000-0xcc)=""/204, 0xcc}], 0x1) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000d97000)) prctl$getreaper(0x0, &(0x7f0000d38000-0x8)) 2018/02/16 17:38:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f000025d000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000712000)={0x8, 0xfffffffffffffffb, 0x9, 0x6, 0x9, 0x5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f000097b000)) 2018/02/16 17:38:30 executing program 5: mmap(&(0x7f0000000000/0x52000)=nil, 0x52000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000047000-0x6)='./bus\x00', 0x0) mount(&(0x7f0000052000-0x1)='./file0\x00', &(0x7f0000052000-0x6)='./bus\x00', &(0x7f0000015000-0x5)='ext2\x00', 0x0, &(0x7f0000041000-0xd3)) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000ca000-0x258)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000fdd000), {[{{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) syz_emit_ethernet(0x32, &(0x7f000029d000-0x1139)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @multicast2=0xe0000002, @rand_addr, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/16 17:38:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014e000-0x38)={&(0x7f0000cdc000)={0x10}, 0xc, &(0x7f0000f9c000-0x10)={&(0x7f0000b44000-0x2d4)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1}, 0x0) 2018/02/16 17:38:30 executing program 7: io_getevents(0x0, 0x0, 0x0, &(0x7f0000036000-0x60)=[], &(0x7f0000036000-0x10)={0x0, 0x1c9c380}) 2018/02/16 17:38:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00003f8000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000516000)) dup2(r0, r1) 2018/02/16 17:38:30 executing program 7: mmap(&(0x7f0000000000/0xf7c000)=nil, 0xf7c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f74000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000f72000-0x1e)=""/53, 0x35, 0x0, &(0x7f0000205000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000f75000-0x4)=0x20000000000008, 0x12b) sendto$inet6(r0, &(0x7f0000867000), 0x0, 0x0, &(0x7f000064b000-0x1c)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) 2018/02/16 17:38:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000ca000-0x258)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000fdd000), {[{{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) syz_emit_ethernet(0x32, &(0x7f000029d000-0x1139)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @multicast2=0xe0000002, @rand_addr, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) 2018/02/16 17:38:30 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000004000-0x8)=0x10) read(r0, &(0x7f0000010000)=""/176, 0x27) readv(r0, &(0x7f000000e000)=[{&(0x7f0000004000-0xcc)=""/204, 0xcc}], 0x1) 2018/02/16 17:38:31 executing program 0: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000dee000)=""/4096) 2018/02/16 17:38:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000be7000-0x8)={0x19980330}, &(0x7f000032e000)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in=@loopback=0x7f000001, @in=@dev={0xac, 0x14}}}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in=@loopback=0x7f000001}}, 0xe8) 2018/02/16 17:38:31 executing program 1: mmap(&(0x7f0000000000/0xf5d000)=nil, 0xf5d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(xeta-generic)\x00'}, 0x58) bind$alg(r0, &(0x7f0000f5a000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) 2018/02/16 17:38:31 executing program 5: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000f000-0xae)="240000001800030007fffd946fa293bc02ee0600000000000000856804000f00d188737e", 0x24}], 0x1}, 0x0) 2018/02/16 17:38:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') read(r0, &(0x7f0000b5b000), 0x0) lseek(r0, 0x0, 0x0) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/16 17:38:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f000025d000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000712000)={0x8, 0xfffffffffffffffb, 0x9, 0x6, 0x9, 0x5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/16 17:38:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff7fffffff, 0x40000) ioctl$KDSETMODE(r0, 0x4b3a, 0x7fffffff) syncfs(r0) stat(&(0x7f0000f13000)='./file0\x00', &(0x7f00004ac000-0x44)) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000096c000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwrite64(r1, &(0x7f0000008000-0x32)='8', 0x1, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000fed000-0x8)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000d01000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000fcc000-0x8)={0x1, 0x80000001}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000e74000-0x1c)={0xa, 0x1, 0x1000000000000, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/02/16 17:38:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000913000-0x10)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) listen(r0, 0x100401000003) r1 = accept$inet(r0, &(0x7f0000da9000-0x10)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f00002d3000)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000999000-0x8), &(0x7f00004ad000)=0x8) 2018/02/16 17:38:31 executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) execve(&(0x7f0000002000)='./file0\x00', &(0x7f0000000000)=[], &(0x7f0000001000-0x38)=[&(0x7f0000002000)='/selinux/avc/hash_stats\x00']) [ 37.635035] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) [ 37.649156] audit: type=1400 audit(1518802711.041:23): avc: denied { net_admin } for pid=5687 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:38:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1c, &(0x7f00009fe000-0x4), &(0x7f00009ea000-0x4)=0x3) 2018/02/16 17:38:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @empty, 0x25}]}, &(0x7f00007b8000-0x4)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18}, [@ldst={0x2, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0}], {0x95}}, &(0x7f0000c43000)='syzkaller\x00', 0x8000, 0x1000, &(0x7f000087d000)=""/4096}, 0x48) 2018/02/16 17:38:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x9, &(0x7f0000001000-0x98)={0x0, @in={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, 0x98) 2018/02/16 17:38:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x0, @empty}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000168000)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f00004db000-0x10)={&(0x7f0000007000-0x48)={0x5, 0x360, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c25e50766"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000003000-0x10)={&(0x7f0000005000-0x48)={0x7, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "510200"}}, 0x48}, 0x1}, 0x0) 2018/02/16 17:38:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f9000-0x2)='#}\x00', 0x0) ftruncate(r1, 0x40001) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4f000-0x4)=0x4, 0x4) sendfile(r0, r1, &(0x7f0000c84000), 0x2) [ 37.685679] audit: type=1400 audit(1518802711.073:24): avc: denied { map } for pid=5700 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 2018/02/16 17:38:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000034000-0xd)="0100000076626f786e65743100", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000028000-0xd)='/dev/snd/seq\x00', 0x0, 0x20002) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000036000)={0x0, 0x0, 0x0, "717565756530000000000200"}) write$sndseq(r1, &(0x7f0000023000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, @tick, {}, {}, @result}], 0x90) 2018/02/16 17:38:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00001f7000-0x10)={0x0, 0x0}) setitimer(0x2, &(0x7f00000e9000)={{}, {0x0, r0/1000+10000}}, &(0x7f0000281000)) setitimer(0x2, &(0x7f000016a000-0x20)={{0x77359400}, {0x77359400}}, &(0x7f000056d000-0x20)) 2018/02/16 17:38:31 executing program 6: mmap(&(0x7f0000000000/0xfbf000)=nil, 0xfbf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x20000000104, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8091}, {}], 0x2, &(0x7f0000034000)={0x77359400}) semop(r0, &(0x7f0000036000-0x6)=[{0x0, 0xbffffffffffffffd}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/02/16 17:38:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff7fffffff, 0x40000) ioctl$KDSETMODE(r0, 0x4b3a, 0x7fffffff) syncfs(r0) stat(&(0x7f0000f13000)='./file0\x00', &(0x7f00004ac000-0x44)) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000096c000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwrite64(r1, &(0x7f0000008000-0x32)='8', 0x1, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000fed000-0x8)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000d01000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000fcc000-0x8)={0x1, 0x80000001}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000e74000-0x1c)={0xa, 0x1, 0x1000000000000, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/02/16 17:38:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f000025d000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000712000)={0x8, 0xfffffffffffffffb, 0x9, 0x6, 0x9, 0x5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/16 17:38:31 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000002000), &(0x7f0000003000-0x4)=0x18) [ 37.721523] audit: type=1400 audit(1518802711.114:25): avc: denied { dac_override } for pid=5688 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/16 17:38:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @empty, 0x25}]}, &(0x7f00007b8000-0x4)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18}, [@ldst={0x2, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0}], {0x95}}, &(0x7f0000c43000)='syzkaller\x00', 0x8000, 0x1000, &(0x7f000087d000)=""/4096}, 0x48) 2018/02/16 17:38:31 executing program 3: mmap(&(0x7f0000000000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x8924, &(0x7f0000029000-0x4)) 2018/02/16 17:38:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000789000)) 2018/02/16 17:38:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x1000800000004) r1 = syz_open_dev$sndpcmp(&(0x7f0000a94000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000f6c000-0xc)) 2018/02/16 17:38:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00004d0000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000007000-0x58)={{0x50f, 0xa0000001}, 0x1, 0x3}) 2018/02/16 17:38:31 executing program 6: mmap(&(0x7f0000000000/0x2d000)=nil, 0x2d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f000002a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000015000-0x4)=0x14) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000023000)={0x10}, 0xc, &(0x7f0000019000)={&(0x7f000002a000-0x30)=@ipv6_delroute={0x28, 0x19, 0x60d, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, [{0x8, 0x0, 0x0, r1}]}]}, 0x28}, 0x1}, 0x0) 2018/02/16 17:38:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000398000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f000098f000-0x8)=0x1461) futex(&(0x7f0000013000-0x4), 0x0, 0x0, &(0x7f0000061000-0x10), &(0x7f00003d0000-0x4), 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000013000-0x10)={&(0x7f0000011000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/02/16 17:38:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff7fffffff, 0x40000) ioctl$KDSETMODE(r0, 0x4b3a, 0x7fffffff) syncfs(r0) stat(&(0x7f0000f13000)='./file0\x00', &(0x7f00004ac000-0x44)) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000096c000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwrite64(r1, &(0x7f0000008000-0x32)='8', 0x1, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000fed000-0x8)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000d01000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000fcc000-0x8)={0x1, 0x80000001}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000e74000-0x1c)={0xa, 0x1, 0x1000000000000, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/02/16 17:38:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000aba000-0x10)={0x2, &(0x7f000039a000)=[{0x7}, {0x6}]}, 0x10) 2018/02/16 17:38:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) close(r0) 2018/02/16 17:38:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f0000f41000-0xc)={0x10}, 0xc, &(0x7f0000f90000)={&(0x7f0000997000)=@bridge_setlink={0x28, 0x13, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/02/16 17:38:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @empty, 0x25}]}, &(0x7f00007b8000-0x4)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18}, [@ldst={0x2, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0}], {0x95}}, &(0x7f0000c43000)='syzkaller\x00', 0x8000, 0x1000, &(0x7f000087d000)=""/4096}, 0x48) 2018/02/16 17:38:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndseq(&(0x7f000087c000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00004aa000-0x50)={0x3, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x100000000001}}) 2018/02/16 17:38:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff7fffffff, 0x40000) ioctl$KDSETMODE(r0, 0x4b3a, 0x7fffffff) syncfs(r0) stat(&(0x7f0000f13000)='./file0\x00', &(0x7f00004ac000-0x44)) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000096c000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwrite64(r1, &(0x7f0000008000-0x32)='8', 0x1, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000fed000-0x8)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000d01000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000fcc000-0x8)={0x1, 0x80000001}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000e74000-0x1c)={0xa, 0x1, 0x1000000000000, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/02/16 17:38:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000867000-0x4)={0x19980330}, &(0x7f00001dd000)) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000e2b000)=""/31) 2018/02/16 17:38:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000582000-0x8)={0x19980330}, &(0x7f00005cd000-0x18)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000754000-0x20)={@generic="36aba9dcdc51749bbe9b4db98a5673ca", @ifru_flags}) 2018/02/16 17:38:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @empty, 0x25}]}, &(0x7f00007b8000-0x4)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18}, [@ldst={0x2, 0x0, 0xb, 0x7a, 0x0, 0xfffffff0}], {0x95}}, &(0x7f0000c43000)='syzkaller\x00', 0x8000, 0x1000, &(0x7f000087d000)=""/4096}, 0x48) 2018/02/16 17:38:31 executing program 6: mmap(&(0x7f0000000000/0xf6a000)=nil, 0xf6a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f5a000-0x4)=0x5, 0x4) connect$inet6(r0, &(0x7f0000e90000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x1f}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5e000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f6a000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x9}, 0x1c) bind$inet6(r2, &(0x7f0000d87000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) 2018/02/16 17:38:31 executing program 3: mmap(&(0x7f0000000000/0xfee000)=nil, 0xfee000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x20000000008946, &(0x7f0000268000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_data=&(0x7f0000eaa000)="0a0000008000fa0400000004bd000000ff00010000000009690007ffff2400"}) 2018/02/16 17:38:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000398000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f000098f000-0x8)=0x1461) futex(&(0x7f0000013000-0x4), 0x0, 0x0, &(0x7f0000061000-0x10), &(0x7f00003d0000-0x4), 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000013000-0x10)={&(0x7f0000011000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/02/16 17:38:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c79000-0xc)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b06000-0x130c)={0x14, 0x4, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 37.965766] ALSA: seq fatal error: cannot create timer (-16) 2018/02/16 17:38:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000020d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00002f9000-0x38)={0x0, 0x0, &(0x7f0000002000)=[]}, 0x8001) ioctl$int_in(r1, 0x5452, &(0x7f00000e5000)=0x100000002) recvmsg(r1, &(0x7f0000136000)={0x0, 0x0, &(0x7f00002a1000)=[{&(0x7f0000308000)=""/1, 0x1}], 0x1, &(0x7f0000319000)}, 0x0) recvmsg(r1, &(0x7f00002ac000)={&(0x7f00002fb000-0x8)=@un=@abs, 0x8, &(0x7f0000033000)=[], 0x0, &(0x7f00002fb000-0xc8)}, 0x0) 2018/02/16 17:38:31 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000+0x901)='wlan0*mime_type-trusted}&wlan0vmnet1.trusted{\\{GPL\x00', 0x0) fcntl$dupfd(r0, 0x40d, 0xffffffffffffffff) 2018/02/16 17:38:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000a93000)=@filter={'filter\x00', 0xe, 0x4, 0x558, 0xffffffff, 0x360, 0x280, 0x280, 0xffffffff, 0xffffffff, 0x488, 0x488, 0x488, 0xffffffff, 0x4, &(0x7f0000f15000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, [], [], @common='nr0\x00', @common='gretap0\x00', {}, {}, 0x84}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@sctp={0x148, 'sctp\x00', 0x0, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, [], 0x4, [], 0x0, 0x5}}, @common=@unspec=@rateest={0x68, 'rateest\x00', 0x0, {@common='ifb0\x00', @common='vcan0\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, []}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @common=@frag={0x30, 'frag\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5b8) 2018/02/16 17:38:31 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000fa000-0x4)) 2018/02/16 17:38:31 executing program 6: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002000)={&(0x7f0000008000)={0x10}, 0xc, &(0x7f0000006000-0x10)={&(0x7f000000a000)=@polexpire={0xd0, 0x1b, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001}}}, [@etimer_thresh={0x8, 0xc, 0x4}, @sec_ctx={0xc, 0x8, {0x8, 0x8}}]}, 0xd0}, 0x1}, 0x0) 2018/02/16 17:38:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000044000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f000027b000)) 2018/02/16 17:38:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000f86000)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}]}, 0x70}, 0x1}, 0x0) 2018/02/16 17:38:31 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000fa000-0x4)) [ 38.091454] QAT: Invalid ioctl 2018/02/16 17:38:31 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000+0x901)='wlan0*mime_type-trusted}&wlan0vmnet1.trusted{\\{GPL\x00', 0x0) fcntl$dupfd(r0, 0x40d, 0xffffffffffffffff) 2018/02/16 17:38:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) read(r0, &(0x7f0000a6b000)=""/4096, 0x1000) poll(&(0x7f0000ed0000-0x10)=[{r0}], 0x1, 0xfff) writev(r0, &(0x7f0000a45000-0x10)=[{&(0x7f0000714000)="2900000018001980013d75241a6800210206e30067fff501069600000800050000000200080000bf00", 0x29}], 0x1) 2018/02/16 17:38:31 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000fa000-0x4)) 2018/02/16 17:38:31 executing program 6: r0 = socket$inet6(0xa, 0x800000000080003, 0x10000000000000ef) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000015000-0x4), 0x1) 2018/02/16 17:38:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000044000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f000027b000)) 2018/02/16 17:38:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000398000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f000098f000-0x8)=0x1461) futex(&(0x7f0000013000-0x4), 0x0, 0x0, &(0x7f0000061000-0x10), &(0x7f00003d0000-0x4), 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000013000-0x10)={&(0x7f0000011000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/02/16 17:38:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x1c1, 0x0, &(0x7f0000b2d000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/16 17:38:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x83, &(0x7f0000c7f000-0xd9)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "01ff00", 0x4d, 0x6, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x1, 0x4d, 0x0, "797fbff1809c8fdfdf83ca53ab40650864bef4f20da4fa3d90e71fd7beabde2c6b81993021a0cfab042fc46e3839f977ebb9f857374b863703c702059a9c9395985128eae2"}}}}}}, 0x0) 2018/02/16 17:38:31 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000fa000-0x4)) 2018/02/16 17:38:31 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00003d9000-0x9)='children\x00') fcntl$setsig(r0, 0xa, 0x400000000000016) [ 38.159514] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 38.167062] in_atomic(): 1, irqs_disabled(): 0, pid: 5842, name: syz-executor5 [ 38.174442] INFO: lockdep is turned off. [ 38.178548] CPU: 1 PID: 5842 Comm: syz-executor5 Not tainted 4.16.0-rc1+ #315 [ 38.183982] QAT: Invalid ioctl [ 38.185813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.185817] Call Trace: [ 38.185836] dump_stack+0x194/0x257 [ 38.185851] ? arch_local_irq_restore+0x53/0x53 [ 38.185864] ? fs_reclaim_acquire+0x20/0x20 [ 38.185884] ___might_sleep+0x2b2/0x470 [ 38.217446] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 38.223307] ? __debug_object_init+0x235/0x1040 [ 38.227951] ? lock_acquire+0x1d5/0x580 [ 38.231899] ? lock_acquire+0x1d5/0x580 [ 38.235867] __might_sleep+0x95/0x190 [ 38.239655] kmem_cache_alloc_trace+0x299/0x740 [ 38.244307] ? lock_acquire+0x1d5/0x580 [ 38.248260] ? lock_acquire+0x1d5/0x580 [ 38.252215] ? __rds_conn_create+0xe46/0x1b50 [ 38.256697] rds_loop_conn_alloc+0xc8/0x380 [ 38.261000] ? rds_loop_conn_free+0x290/0x290 [ 38.265481] ? __init_waitqueue_head+0x97/0x140 [ 38.270129] ? init_wait_entry+0x1b0/0x1b0 [ 38.274348] ? __lockdep_init_map+0xe4/0x650 [ 38.278742] __rds_conn_create+0x112f/0x1b50 [ 38.283161] ? rds_conn_drop+0xb0/0xb0 [ 38.287043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 38.291788] ? retint_kernel+0x10/0x10 [ 38.295677] ? copy_user_enhanced_fast_string+0xe/0x20 [ 38.300934] ? copyin+0x91/0xb0 [ 38.304197] ? copy_page_from_iter+0x50e/0x7c0 [ 38.308768] ? _copy_from_iter+0xf30/0xf30 [ 38.312982] ? _raw_spin_unlock_bh+0x30/0x40 [ 38.317378] ? rds_message_copy_from_user+0x29e/0x370 [ 38.322552] rds_conn_create_outgoing+0x3f/0x50 [ 38.327207] rds_sendmsg+0xda3/0x2390 [ 38.330985] ? avc_has_perm+0x43e/0x680 [ 38.334966] ? rds_send_drop_to+0x19d0/0x19d0 [ 38.339439] ? iterate_fd+0x3f0/0x3f0 [ 38.343228] ? trace_hardirqs_on+0xd/0x10 [ 38.347354] ? _raw_spin_unlock_irq+0x27/0x70 [ 38.351844] ? sock_has_perm+0x2a4/0x420 [ 38.355884] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 38.361222] ? lock_release+0x9a2/0xa40 [ 38.365172] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 38.371038] ? __check_object_size+0x8b/0x530 [ 38.375523] ? __might_sleep+0x95/0x190 [ 38.379482] ? selinux_socket_sendmsg+0x36/0x40 [ 38.384128] ? security_socket_sendmsg+0x89/0xb0 [ 38.388864] ? rds_send_drop_to+0x19d0/0x19d0 [ 38.393342] sock_sendmsg+0xca/0x110 [ 38.397041] SYSC_sendto+0x361/0x5c0 [ 38.400741] ? SYSC_connect+0x4a0/0x4a0 [ 38.404716] ? schedule+0xf5/0x430 [ 38.408236] ? SYSC_bind+0x290/0x410 [ 38.411958] ? SyS_futex+0x269/0x390 [ 38.415646] ? fd_install+0x4d/0x60 [ 38.419263] ? trace_hardirqs_off+0xd/0x10 [ 38.423473] ? exit_to_usermode_loop+0x198/0x2f0 [ 38.428213] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 38.433734] SyS_sendto+0x40/0x50 [ 38.437169] ? SyS_getpeername+0x30/0x30 [ 38.441206] do_syscall_64+0x280/0x940 [ 38.445070] ? __do_page_fault+0xc90/0xc90 [ 38.449282] ? finish_task_switch+0x58d/0x860 [ 38.453757] ? syscall_return_slowpath+0x550/0x550 [ 38.458667] ? syscall_return_slowpath+0x2ac/0x550 [ 38.463577] ? prepare_exit_to_usermode+0x350/0x350 [ 38.468570] ? prepare_exit_to_usermode+0x227/0x350 [ 38.473563] ? perf_trace_sys_enter+0xcb0/0xcb0 [ 38.478213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.483047] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 38.488215] RIP: 0033:0x453a59 [ 38.491469] RSP: 002b:00007f82742c8c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 38.499153] RAX: ffffffffffffffda RBX: 00007f82742c96d4 RCX: 0000000000453a59 2018/02/16 17:38:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) [ 38.506399] RDX: 00000000000001c1 RSI: 0000000020dbf000 RDI: 0000000000000013 [ 38.513647] RBP: 000000000071bea0 R08: 0000000020b2d000 R09: 0000000000000010 [ 38.520895] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 38.528143] R13: 00000000000004b9 R14: 00000000006f71f8 R15: 0000000000000000 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000+0x901)='wlan0*mime_type-trusted}&wlan0vmnet1.trusted{\\{GPL\x00', 0x0) fcntl$dupfd(r0, 0x40d, 0xffffffffffffffff) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x1c1, 0x0, &(0x7f0000b2d000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000398000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f000098f000-0x8)=0x1461) futex(&(0x7f0000013000-0x4), 0x0, 0x0, &(0x7f0000061000-0x10), &(0x7f00003d0000-0x4), 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000013000-0x10)={&(0x7f0000011000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000044000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f000027b000)) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x1c1, 0x0, &(0x7f0000b2d000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000+0x901)='wlan0*mime_type-trusted}&wlan0vmnet1.trusted{\\{GPL\x00', 0x0) fcntl$dupfd(r0, 0x40d, 0xffffffffffffffff) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x1c1, 0x0, &(0x7f0000b2d000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x1c1, 0x0, &(0x7f0000b2d000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000013000-0x39)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000e000-0x8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x14, 0x0, &(0x7f000000d000-0x98)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000001a000-0x30)={0x10, 0x0, &(0x7f0000019000)=[@request_death={0x400c630e, 0x0, 0x3}], 0x1, 0x0, &(0x7f0000016000)='o'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000044000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f000027b000)) [ 38.646323] QAT: Invalid ioctl 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x1c1, 0x0, &(0x7f0000b2d000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x1c1, 0x0, &(0x7f0000b2d000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fc3000-0x1000), 0x0, 0x0, &(0x7f000069b000-0x5)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000933000-0xa)='/dev/vcs#\x00', 0x1, 0x0) lseek(r0, 0x0, 0x3) 2018/02/16 17:38:32 executing program 1: set_mempolicy(0x7, &(0x7f0000824000-0x8), 0x0) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(0x0, &(0x7f00008d8000)=[{0x0, 0xcfde}, {}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000f85000)=""/101) [ 38.712876] QAT: Invalid ioctl [ 38.716989] binder: 5891 RLIMIT_NICE not set [ 38.722585] binder: 5891 RLIMIT_NICE not set [ 38.739160] binder: 5888:5905 tried to acquire reference to desc 0, got 1 instead 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) [ 38.761873] binder: 5888:5905 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 38.777642] binder: 5888:5891 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 38.784502] binder: 5891 RLIMIT_NICE not set [ 38.792309] binder: 5888:5905 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 38.800674] binder: 5888:5891 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 38.807664] binder: 5891 RLIMIT_NICE not set 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00', 0x0, {0x0, 0x0, 0x0, 0x4}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000af6000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f00007ee000)=@ipx={0x4, 0x0, 0x0, "405a54dfca6d"}, 0x10) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000015d000-0xc)='net/netlink\x00') sendfile(r0, r0, &(0x7f00003a7000), 0x400000ff) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000006000-0x4)=0x1, 0x4) 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4000000000000003, 0x5) mmap(&(0x7f0000024000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000015000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) connect$inet6(r0, &(0x7f0000024000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000023000)=[], 0x0, &(0x7f0000023000)=[]}, 0x8000) sendmsg(r0, &(0x7f000000b000-0x38)={0x0, 0x0, &(0x7f000000c000-0x40)=[{&(0x7f0000015000)='_', 0x1}], 0x1, &(0x7f0000007000-0x1b8)=[]}, 0x0) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x24}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000e48000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff}, 0xc) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000d44000-0x1c)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x1, [@empty]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00003f4000-0x2b)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0x1, 0x8}}}}}, 0x0) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={@common='ip6gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000001000-0x14)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) dup3(r0, r1, 0x0) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfdf000)=nil, 0xfdf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000834000)='I', 0x0) pwrite64(r0, &(0x7f00000a9000)="da1ed4c6dded1b78fc32304d94d0495eb57495f26bd5e020039135e969d62de70774035020e85d75ca98aa392bd9112c8139f55a2a9aee87aa62b0c9a368a1866279463154ba1d39b42c188aa87a1db69f69fbfd67731bfaf62b639f911c4fe5aa163574d70d3127cad9d17ea2b888dfd9b4338d606825114f0aec9522b8eb85", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000005, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000734000)='./file0\x00') mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000fdf000)='./file0\x00', &(0x7f0000ca0000-0x1)=""/1, 0x1) [ 38.814898] binder: undelivered death notification, 0000000000000000 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xdc2000)=nil, 0xdc2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x805, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000b5f000), 0x0) sendto$inet(r0, &(0x7f00007b4000-0x49)='?', 0x1, 0x0, &(0x7f0000cb7000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000eb000-0x4), &(0x7f0000a00000-0x4)=0x4) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00003f8000-0x4), 0x4) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind(r0, &(0x7f0000005000-0x10)=@ethernet={0x0, @empty}, 0x10) 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00008cc000-0x28)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000bf6000-0x38)={&(0x7f0000ddb000)={0x10}, 0xc, &(0x7f0000883000)={&(0x7f0000b4c000-0x1074)=@setlink={0x28, 0x13, 0x803, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000651000)=""/240, &(0x7f0000ca6000-0x4)=0xf0) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x0, &(0x7f0000002000)=[{0x0, 0x111}], 0x10}, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/02/16 17:38:32 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x0, &(0x7f0000000000), 0x0) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000409000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x3, &(0x7f0000dc1000-0x8)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000b53000-0x28)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)="06000000000000009d", 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000008000-0x38)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001000ff20fffefd956fc2830924a600800200000000000000020000000400140007960000b598bc593ab68b1148a730de07ff00000000000054a6613b6aabf35d4c1cbc832b0790ed", 0x4c}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000016000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x2}, 0x1c) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00005e6000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000cdb000-0x10)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f0000fa5000)=0x10) syz_extract_tcp_res$synack(&(0x7f000057f000-0x8), 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f000012a000-0x18)=@generic={0x1, 0x48d, 0x2}) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000595000-0x8)={0x19980330}, &(0x7f0000244000)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000e26000)={&(0x7f0000016000)={0x10}, 0x0, &(0x7f000000b000)={&(0x7f000001d000)=@ipv6_newroute={0x1c, 0x18, 0x501, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x1c}, 0x1}, 0x0) [ 38.940074] netlink: 40 bytes leftover after parsing attributes in process `syz-executor3'. 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x688b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f000000e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f000002c000)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x100, 0x100, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f000001f000-0x40), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={0x28, 'hl\x00'}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f000001a000-0x60)=[], 0x1f2, &(0x7f000001f000-0xf8)=[]}, 0x0) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000ff1000-0x20)={0x42e1d9, {0xffffffbffffff270}}, &(0x7f00005ee000-0x20), 0x8, &(0x7f000017a000-0x8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00001c2000)='/dev/sg#\x00', 0x0, 0x0) 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000e61000)="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", 0xfc) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00005e6000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000cdb000-0x10)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f0000fa5000)=0x10) syz_extract_tcp_res$synack(&(0x7f000057f000-0x8), 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f000012a000-0x18)=@generic={0x1, 0x48d, 0x2}) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000651000)=""/240, &(0x7f0000ca6000-0x4)=0xf0) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @rand_addr=0x1000000000000005}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f000097d000)='yeah\x00', 0x5) shutdown(r0, 0x1) [ 38.990413] netlink: 40 bytes leftover after parsing attributes in process `syz-executor3'. 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00008c0000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000f08000-0x4)) flock(r0, 0x1) close(r1) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00007c4000)='keyring\x00', &(0x7f000070b000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000e40000)='user\x00', &(0x7f00009d6000-0x5)={0x73, 0x79, 0x7a}, &(0x7f000003e000)="fa", 0x1, r0) r2 = add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000b0a000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000f29000-0x1000)="b33ab76079ebe0d900000000000000019ad7d97fe21769e7c4db44c249b544230ba287fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca26e0cc821620e365a0e6b9485f2d925493f62113e33e5f8c7eba09fc19a9497f5b07e5849d2e875b066cd640b336616fe0f3c3002801b4627ee7597689525e8e81f750a86eac80fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6b28f6672f98f7e149be31bd78b506e8b", 0xc0, r0) keyctl$dh_compute(0x17, &(0x7f00004c9000-0xc)={r1, r2, r2}, &(0x7f00000fc000)=""/1, 0x1, &(0x7f0000eaf000-0x38)={&(0x7f0000573000-0x11)={'crct10dif-generic\x00'}, &(0x7f0000fe6000-0x23)}) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0x110000)=nil, 0x110000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}, [], "802a08000000006b"}}}}}}}, 0x0) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000651000)=""/240, &(0x7f0000ca6000-0x4)=0xf0) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00005e6000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000cdb000-0x10)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f0000fa5000)=0x10) syz_extract_tcp_res$synack(&(0x7f000057f000-0x8), 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f000012a000-0x18)=@generic={0x1, 0x48d, 0x2}) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000e61000)="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", 0xfc) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x688b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f000000e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f000002c000)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x100, 0x100, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f000001f000-0x40), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={0x28, 'hl\x00'}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f000001a000-0x60)=[], 0x1f2, &(0x7f000001f000-0xf8)=[]}, 0x0) [ 39.036973] netlink: 216 bytes leftover after parsing attributes in process `syz-executor6'. [ 39.073833] netlink: 216 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000018000), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x437, &(0x7f00004ef000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "e30227", 0x401, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "16b589", 0x0, '~9\f'}, "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"}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0x0]}) recvfrom$inet6(r0, &(0x7f0000f19000)=""/34, 0xfffffffffffffdb5, 0x40000060, &(0x7f000002f000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0xfffffffffffffec3) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$sndpcmp(&(0x7f0000f56000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x80100) fdatasync(r1) process_vm_readv(r0, &(0x7f0000fba000-0x80)=[{&(0x7f000053e000)=""/82, 0x52}, {&(0x7f0000c0d000)=""/81, 0x51}], 0x2, &(0x7f00004b0000)=[{&(0x7f0000e93000)=""/132, 0x84}, {&(0x7f0000912000)=""/133, 0x85}], 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000d0b000-0xa)='/dev/vcs#\x00', 0x1, 0x101000) r2 = syz_open_procfs(0x0, &(0x7f00001ff000-0x8)='pagemap\x00') sendfile(r2, r2, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000080000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000fc4000-0x68)={0x1, 0x0, [{0x9, 0x2, 0x0, 0x0, @adapter={0xffffffff}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f000010e000)={0x400000009, 0x5}) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00005e6000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000cdb000-0x10)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f0000fa5000)=0x10) syz_extract_tcp_res$synack(&(0x7f000057f000-0x8), 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f000012a000-0x18)=@generic={0x1, 0x48d, 0x2}) [ 39.134046] netlink: 216 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x688b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f000000e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f000002c000)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x100, 0x100, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f000001f000-0x40), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={0x28, 'hl\x00'}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f000001a000-0x60)=[], 0x1f2, &(0x7f000001f000-0xf8)=[]}, 0x0) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000651000)=""/240, &(0x7f0000ca6000-0x4)=0xf0) 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000e61000)="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", 0xfc) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008dd000)=0x2000000000101) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000057000), 0x8, 0x0) readv(r0, &(0x7f0000e7b000-0x48)=[{&(0x7f0000e7a000)=""/195, 0x86}], 0x1) signalfd4(r0, &(0x7f00002af000-0x8), 0x8, 0x0) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) sendmsg(r0, &(0x7f0000f2b000-0x38)={0x0, 0x0, &(0x7f0000c80000-0x10)=[]}, 0x20000004) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000080000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000fc4000-0x68)={0x1, 0x0, [{0x9, 0x2, 0x0, 0x0, @adapter={0xffffffff}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f000010e000)={0x400000009, 0x5}) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000cda000)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xb}, 0x1c) connect$inet6(r0, &(0x7f00005bf000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000695000-0x2)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0x8}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0x0]}) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) sendmsg(r0, &(0x7f0000f2b000-0x38)={0x0, 0x0, &(0x7f0000c80000-0x10)=[]}, 0x20000004) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x688b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f000000e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f000002c000)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x100, 0x100, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f000001f000-0x40), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={0x28, 'hl\x00'}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f000001a000-0x60)=[], 0x1f2, &(0x7f000001f000-0xf8)=[]}, 0x0) 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000052e000-0x9)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000080000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000fc4000-0x68)={0x1, 0x0, [{0x9, 0x2, 0x0, 0x0, @adapter={0xffffffff}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f000010e000)={0x400000009, 0x5}) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) sendmsg(r0, &(0x7f0000f2b000-0x38)={0x0, 0x0, &(0x7f0000c80000-0x10)=[]}, 0x20000004) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000cda000)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xb}, 0x1c) connect$inet6(r0, &(0x7f00005bf000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000695000-0x2)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0x8}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0x0]}) [ 39.217320] netlink: 216 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000080000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000fc4000-0x68)={0x1, 0x0, [{0x9, 0x2, 0x0, 0x0, @adapter={0xffffffff}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f000010e000)={0x400000009, 0x5}) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r0 = shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x6000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmdt(r0) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) sendmsg(r0, &(0x7f0000f2b000-0x38)={0x0, 0x0, &(0x7f0000c80000-0x10)=[]}, 0x20000004) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000cda000)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xb}, 0x1c) connect$inet6(r0, &(0x7f00005bf000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000695000-0x2)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0x8}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0x0]}) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008dd000)=0x2000000000101) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000057000), 0x8, 0x0) readv(r0, &(0x7f0000e7b000-0x48)=[{&(0x7f0000e7a000)=""/195, 0x86}], 0x1) signalfd4(r0, &(0x7f00002af000-0x8), 0x8, 0x0) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000fae000)="29000000180031d51b2000010000000702000000000006ff800000000c00000004001000000ef4ff01", 0x29}], 0x1) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000cda000)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xb}, 0x1c) connect$inet6(r0, &(0x7f00005bf000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000695000-0x2)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0x2, 0x8}}}}}}, &(0x7f0000775000)={0x0, 0x1, [0x0]}) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00003c3000-0xa)='/dev/cuse\x00', 0x800000001, 0x0) write$fuse(r0, &(0x7f0000ff5000)={0x28, 0x3, 0x0, @fuse_notify_delete_out}, 0x28) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000080000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000fc4000-0x68)={0x1, 0x0, [{0x9, 0x2, 0x0, 0x0, @adapter={0xffffffff}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f000010e000)={0x400000009, 0x5}) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000080000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000fc4000-0x68)={0x1, 0x0, [{0x9, 0x2, 0x0, 0x0, @adapter={0xffffffff}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f000010e000)={0x400000009, 0x5}) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000088c000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ce0000-0x4), 0x0) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000a09000)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000002000-0x18)) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000006000)=@file={0x1, './file0\x00'}, 0xa) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008dd000)=0x2000000000101) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000057000), 0x8, 0x0) readv(r0, &(0x7f0000e7b000-0x48)=[{&(0x7f0000e7a000)=""/195, 0x86}], 0x1) signalfd4(r0, &(0x7f00002af000-0x8), 0x8, 0x0) 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000c76000)) getpgid(0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) read$eventfd(r0, &(0x7f0000048000-0x8), 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083c000-0x10)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x1267, &(0x7f00009be000)) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f00009a5000/0x4000)=nil, 0x4000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000c25000/0x1000)=nil, 0x1000}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000c87000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000080000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000fc4000-0x68)={0x1, 0x0, [{0x9, 0x2, 0x0, 0x0, @adapter={0xffffffff}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f000010e000)={0x400000009, 0x5}) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008dd000)=0x2000000000101) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000057000), 0x8, 0x0) readv(r0, &(0x7f0000e7b000-0x48)=[{&(0x7f0000e7a000)=""/195, 0x86}], 0x1) signalfd4(r0, &(0x7f00002af000-0x8), 0x8, 0x0) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000c07000-0x3e)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @igmp={0x16, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000a61000-0xc)={0x0, 0x0, []}) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00005fe000-0x10), 0x0) inotify_init1(0x0) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b8d000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000ec1000)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00005a6000)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00005e4000)=@assoc_value, 0x8) 2018/02/16 17:38:32 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00008d6000), 0x3) 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000755000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000440000)='\x00', 0x1) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00007cb000)='mounts\x00') unshare(0x8000400) select(0x40, &(0x7f0000039000-0x40), &(0x7f0000001000-0x40)={0x80200}, &(0x7f0000032000-0x40), &(0x7f000004c000)={0x77359400}) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000061a000)={0x40000000010, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f00001ca000-0x8)='./file0\x00', 0x0) rmdir(&(0x7f000022e000)='./file0\x00') 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003000)=@mangle={'mangle\x00', 0x1f, 0x4, 0x3b0, 0x0, 0xa8, 0x0, 0xa8, 0xa8, 0xd0, 0xd0, 0xd0, 0xd0, 0xd0, 0x4, &(0x7f0000004000-0x40), {[{{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @ipv4={[], [0xff, 0xff], @rand_addr}, [], [], @syzn={0x73, 0x79, 0x7a}, @common='bpq0\x00'}, 0x0, 0xa8, 0x1d7, 0x0, {}, []}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @generic="60cb6c277bf811a836fb69207dc91f96", @generic="25ae2decb03380c74a94c94fe4fb00fe"}, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, []}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@empty, @empty, [], [], @generic, @generic}, 0x0, 0x0, 0x0, 0x0, {}, []}, @common=@unspec=@STANDARD}, {{@ipv6={@empty, @empty, [], [], @generic, @generic}, 0x0, 0x0, 0x0, 0x0, {}, []}, @common=@unspec=@STANDARD}], {{[], 0x0, 0xa8, 0xfffffffffffffed2}, {0x28}}}}, 0x410) 2018/02/16 17:38:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20028000) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000dad000-0x18)={r0, &(0x7f00007af000), &(0x7f0000dd5000)=""/211}, 0x105) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000063a000-0x4)=0x1, 0x10781a9e1ae7ea53) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000ce6000-0x4)=0x100000001, 0x4) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000638000)=0x0) r4 = syz_open_dev$usbmon(&(0x7f0000b86000)='/dev/usbmon#\x00', 0x5, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000f65000)={{0x3, 0x100000001}, {0x9, 0x3}, 0x1000000000000000, 0x2, 0xb5}) ptrace$cont(0x1f, r3, 0x80000001, 0x3) r5 = add_key(&(0x7f0000b08000-0xc)='id_resolver\x00', &(0x7f0000963000)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) poll(&(0x7f0000602000-0x7)=[{r2, 0x10}], 0x1, 0x674a) keyctl$get_security(0x11, r5, &(0x7f00001a8000-0x6f)=""/111, 0x6f) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00005e5000-0x5)='user\x00', &(0x7f000098f000)={0x73, 0x79, 0x7a}, &(0x7f0000af0000), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f0000141000), 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000cc5000-0x10)=@common='tunl0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f00000fd000)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000357000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}}, &(0x7f0000d20000)=0xb8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00004de000-0x8)=@assoc_value, 0x8) bind$inet(r1, &(0x7f0000a62000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000fa1000-0x1), 0x0, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000a81000-0x38)={&(0x7f00006f8000-0x8)=@sco={0x1f}, 0x8, &(0x7f000027f000-0x50)=[{&(0x7f0000b83000-0x94)='A', 0x1}], 0x1, &(0x7f00009fc000)=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) shutdown(r1, 0x1) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000075000-0x8)='keyring\x00', &(0x7f0000696000-0x5)={0x73, 0x79, 0x7a}, &(0x7f000020f000-0xb)='selfnodev*\x00', 0xffffffffffffffff) r0 = add_key(&(0x7f000017d000)='keyring\x00', &(0x7f0000976000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) keyctl$unlink(0x1d, r0, 0x0) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001000)={@common='ip6gretap0\x00', &(0x7f0000004000-0x2c)=@ethtool_cmd={0x8}}) 2018/02/16 17:38:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000e73000-0x4)) io_setup(0x3fe, &(0x7f00008c2000-0x8)) io_setup(0x40, &(0x7f00009f6000-0x8)) io_setup(0x80, &(0x7f000020a000-0x8)) io_setup(0x7, &(0x7f00004e4000-0x8)) 2018/02/16 17:38:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x1, 0x800000000006, 0x0, &(0x7f00003b7000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x3, 0x0, &(0x7f0000e6e000), &(0x7f0000061000-0x4), 0x0) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00006b5000)='/dev/loop#\x00', 0x0, 0x181001) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000de000-0x8), 0x100000001) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00001b2000-0x4)={0xffffffffffffffff}) 2018/02/16 17:38:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt(r0, 0x800000000000084, 0x8000000007a, &(0x7f000023b000)=""/8, &(0x7f00004ee000-0x4)=0x8) 2018/02/16 17:38:32 executing program 0: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001000)={@common='ip6gretap0\x00', &(0x7f0000004000-0x2c)=@ethtool_cmd={0x8}}) 2018/02/16 17:38:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000023000)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000033000-0x40), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={0x150, 'hashlimit\x00', 0x2, {'bcsh0\x00', {0x0, 0x1f, 0x0, 0x0, 0x0, 0x3f, 0x4}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @common='dummy0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) connect$inet(r0, &(0x7f0000004000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) 2018/02/16 17:38:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000075000-0x8)='keyring\x00', &(0x7f0000696000-0x5)={0x73, 0x79, 0x7a}, &(0x7f000020f000-0xb)='selfnodev*\x00', 0xffffffffffffffff) r0 = add_key(&(0x7f000017d000)='keyring\x00', &(0x7f0000976000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) keyctl$unlink(0x1d, r0, 0x0) 2018/02/16 17:38:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x7f, &(0x7f0000e8b000), &(0x7f0000444000)) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001000)={@common='ip6gretap0\x00', &(0x7f0000004000-0x2c)=@ethtool_cmd={0x8}}) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000075000-0x8)='keyring\x00', &(0x7f0000696000-0x5)={0x73, 0x79, 0x7a}, &(0x7f000020f000-0xb)='selfnodev*\x00', 0xffffffffffffffff) r0 = add_key(&(0x7f000017d000)='keyring\x00', &(0x7f0000976000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) keyctl$unlink(0x1d, r0, 0x0) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000383000)="dd", 0x1, 0x20000805, &(0x7f0000deb000-0x10)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000304000)) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001000)={@common='ip6gretap0\x00', &(0x7f0000004000-0x2c)=@ethtool_cmd={0x8}}) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20028000) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000dad000-0x18)={r0, &(0x7f00007af000), &(0x7f0000dd5000)=""/211}, 0x105) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000063a000-0x4)=0x1, 0x10781a9e1ae7ea53) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000ce6000-0x4)=0x100000001, 0x4) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000638000)=0x0) r4 = syz_open_dev$usbmon(&(0x7f0000b86000)='/dev/usbmon#\x00', 0x5, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000f65000)={{0x3, 0x100000001}, {0x9, 0x3}, 0x1000000000000000, 0x2, 0xb5}) ptrace$cont(0x1f, r3, 0x80000001, 0x3) r5 = add_key(&(0x7f0000b08000-0xc)='id_resolver\x00', &(0x7f0000963000)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) poll(&(0x7f0000602000-0x7)=[{r2, 0x10}], 0x1, 0x674a) keyctl$get_security(0x11, r5, &(0x7f00001a8000-0x6f)=""/111, 0x6f) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00005e5000-0x5)='user\x00', &(0x7f000098f000)={0x73, 0x79, 0x7a}, &(0x7f0000af0000), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f0000141000), 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000cc5000-0x10)=@common='tunl0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f00000fd000)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000357000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}}, &(0x7f0000d20000)=0xb8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00004de000-0x8)=@assoc_value, 0x8) bind$inet(r1, &(0x7f0000a62000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000fa1000-0x1), 0x0, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000a81000-0x38)={&(0x7f00006f8000-0x8)=@sco={0x1f}, 0x8, &(0x7f000027f000-0x50)=[{&(0x7f0000b83000-0x94)='A', 0x1}], 0x1, &(0x7f00009fc000)=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) shutdown(r1, 0x1) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f000019e000)={0xa, 0x3, 0x0, @empty}, 0x1c) listen(r0, 0x40000000009) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x3, @empty}, 0x10) sendmmsg(r1, &(0x7f0000167000)=[{{&(0x7f0000de5000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0x26, &(0x7f0000612000-0x50)=[], 0x0, &(0x7f0000ccd000)=[]}}], 0x8000000000000ea, 0x0) 2018/02/16 17:38:33 executing program 4: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000014000)='/dev/dmmidi#\x00', 0x2, 0x902) writev(r0, &(0x7f0000022000-0x50)=[{&(0x7f0000029000-0x8)="a8", 0x1}], 0x1) 2018/02/16 17:38:33 executing program 3: shmctl$IPC_RMID(0x0, 0x198) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000075000-0x8)='keyring\x00', &(0x7f0000696000-0x5)={0x73, 0x79, 0x7a}, &(0x7f000020f000-0xb)='selfnodev*\x00', 0xffffffffffffffff) r0 = add_key(&(0x7f000017d000)='keyring\x00', &(0x7f0000976000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) keyctl$unlink(0x1d, r0, 0x0) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00002c3000)={&(0x7f0000968000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f00004e1000-0x10a4)={0x14, 0x23, 0x2fd, 0xffffffffffffffff, 0xffffffffffffffff, {0x15}, []}, 0x14}, 0x1}, 0x0) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000004a000)='id_resolver\x00', &(0x7f0000052000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000526000-0x9)='\'em1em1\'\x00', 0xfffffffffffffffc) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d17000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000b40000-0x1), 0x0, 0x0, &(0x7f0000686000)=@generic={0x0, "2e057ee6d4265355f4b43860ed0bc8d9588d409019e6be6c7f7b46883a3de11e7552eedd95c13940719be0d41337a6460aeb3529cebd06fb6a10f17ff153abe805e6ddd55a70990cb57d5f5e443d330d3e1739f833947d768d97a102736b4db356112c24a7608daf36427e5f88303cd3229dc2da1d9566aa5a4e6dfc56c4"}, 0x80) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xff2000)=nil, 0xff2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00005f9000-0x4), 0x4) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b02000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00001e1000-0x18)={0x0, []}) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a3000-0x17)='oom_score_adj\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000b77000-0x8), 0xfffffffc) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfbc000)=nil, 0xfbc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fb0000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000fb4000)={0x1000000000000066, 0x0, [{0x200004b564d03, 0x0, 0x6952}]}) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00005b7000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000), 0x4) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000000+0x31e)) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000057e000)={0x2, 0x78, 0x6ac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000754000-0xf)=""/15, 0xfffffffffffffeec, 0x3) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20028000) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000dad000-0x18)={r0, &(0x7f00007af000), &(0x7f0000dd5000)=""/211}, 0x105) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000063a000-0x4)=0x1, 0x10781a9e1ae7ea53) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000ce6000-0x4)=0x100000001, 0x4) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000638000)=0x0) r4 = syz_open_dev$usbmon(&(0x7f0000b86000)='/dev/usbmon#\x00', 0x5, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000f65000)={{0x3, 0x100000001}, {0x9, 0x3}, 0x1000000000000000, 0x2, 0xb5}) ptrace$cont(0x1f, r3, 0x80000001, 0x3) r5 = add_key(&(0x7f0000b08000-0xc)='id_resolver\x00', &(0x7f0000963000)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) poll(&(0x7f0000602000-0x7)=[{r2, 0x10}], 0x1, 0x674a) keyctl$get_security(0x11, r5, &(0x7f00001a8000-0x6f)=""/111, 0x6f) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00005e5000-0x5)='user\x00', &(0x7f000098f000)={0x73, 0x79, 0x7a}, &(0x7f0000af0000), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f0000141000), 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000cc5000-0x10)=@common='tunl0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f00000fd000)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000357000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}}, &(0x7f0000d20000)=0xb8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00004de000-0x8)=@assoc_value, 0x8) bind$inet(r1, &(0x7f0000a62000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000fa1000-0x1), 0x0, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000a81000-0x38)={&(0x7f00006f8000-0x8)=@sco={0x1f}, 0x8, &(0x7f000027f000-0x50)=[{&(0x7f0000b83000-0x94)='A', 0x1}], 0x1, &(0x7f00009fc000)=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) shutdown(r1, 0x1) 2018/02/16 17:38:33 executing program 0: r0 = inotify_init() ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000004000)) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000099000-0x24)={0x20}) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x61, 0xffffffffffffffff, 0x0, 0x0, 0x888, 0x0, @rand_addr=0xfffffffffffffdf9, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, "e7980d8d1ac32f57116ba4871ef777b75aaef655204a236063cec1f8d05fd0a6484d2a5ac7e0189425adfe7d7c1ee8be41dcfa6eca71d19835e6c9a9d3fdd633013a887471"}}}}}, &(0x7f0000001000)={0x0, 0x1, [0x0]}) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89fa, &(0x7f0000009000)={@common='sit0\x00', @ifru_data=&(0x7f0000010000)="6b6be70000000070a40d000072ca66ee2b10bb62bc0c89b4c13f0641cb9d3cb0"}) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000003000-0x30)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sa2={0x2, 0x13}]}, 0x20}, 0x1}, 0x0) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00005b7000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/16 17:38:33 executing program 4: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000014000)='/dev/dmmidi#\x00', 0x2, 0x902) writev(r0, &(0x7f0000022000-0x50)=[{&(0x7f0000029000-0x8)="a8", 0x1}], 0x1) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xfffffffe) connect$inet(r0, &(0x7f000061f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00005b7000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000852000), 0x0, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000fff000-0x48)=[], 0x203) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7a78a04a646", 0x1b}], 0x1, &(0x7f0000335000-0xd8)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000d9000+0xca6)='/dev/sg#\x00', 0x0, 0x102) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x6, 0x6}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00005c8000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x5) flock(r0, 0x1) close(r0) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000879000)=""/246) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f000089c000), 0x8) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000018f000-0x4)=0x1c, 0x4) connect(r0, &(0x7f0000932000-0xc)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00005b7000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20028000) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000dad000-0x18)={r0, &(0x7f00007af000), &(0x7f0000dd5000)=""/211}, 0x105) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000063a000-0x4)=0x1, 0x10781a9e1ae7ea53) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000ce6000-0x4)=0x100000001, 0x4) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000638000)=0x0) r4 = syz_open_dev$usbmon(&(0x7f0000b86000)='/dev/usbmon#\x00', 0x5, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000f65000)={{0x3, 0x100000001}, {0x9, 0x3}, 0x1000000000000000, 0x2, 0xb5}) ptrace$cont(0x1f, r3, 0x80000001, 0x3) r5 = add_key(&(0x7f0000b08000-0xc)='id_resolver\x00', &(0x7f0000963000)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) poll(&(0x7f0000602000-0x7)=[{r2, 0x10}], 0x1, 0x674a) keyctl$get_security(0x11, r5, &(0x7f00001a8000-0x6f)=""/111, 0x6f) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00005e5000-0x5)='user\x00', &(0x7f000098f000)={0x73, 0x79, 0x7a}, &(0x7f0000af0000), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f0000141000), 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000cc5000-0x10)=@common='tunl0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f00000fd000)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000357000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}}, &(0x7f0000d20000)=0xb8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00004de000-0x8)=@assoc_value, 0x8) bind$inet(r1, &(0x7f0000a62000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000fa1000-0x1), 0x0, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000a81000-0x38)={&(0x7f00006f8000-0x8)=@sco={0x1f}, 0x8, &(0x7f000027f000-0x50)=[{&(0x7f0000b83000-0x94)='A', 0x1}], 0x1, &(0x7f00009fc000)=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) shutdown(r1, 0x1) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r0, &(0x7f0000bae000)={&(0x7f0000aee000-0x1c)=@in6={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f000047b000)=[], 0x0, &(0x7f0000497000-0x18)=[{0x10, 0x400000000000029, 0xb}], 0x10}, 0x0) 2018/02/16 17:38:33 executing program 4: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000014000)='/dev/dmmidi#\x00', 0x2, 0x902) writev(r0, &(0x7f0000022000-0x50)=[{&(0x7f0000029000-0x8)="a8", 0x1}], 0x1) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000003001201000000e9ffff00000cdb1ee9ff4435eade", 0x26) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000ef4000)="2400000052001f0014f9f407002304000afff51108000100febfffff0800020001000000", 0x24) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000d3f000)=[@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/02/16 17:38:33 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) lstat(&(0x7f0000a3c000-0x8)='./file0\x00', &(0x7f0000272000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000634000)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x290, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000e9b000-0x40), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x0, 0x0, 0x1}}, @common=@unspec=@conntrack3={0xc8, 'conntrack\x00', 0x3, {{@ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [], @ipv6=@dev={0xfe, 0x80}, [], @ipv6=@empty, [], @ipv6=@loopback={0x0, 0x1}, [], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8a4}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@empty, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, [], [], @generic="39003b5f34d0939a33210c34b08185f7", @common='syzkaller1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x490) sendmsg(r0, &(0x7f00009f2000-0x38)={&(0x7f0000db5000)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00007de000-0x70)=[]}, 0x0) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000018000-0x20c)=@ipv6_newroute={0x1c, 0x48, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x1c}, 0x1}, 0x0) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000697000)={0x1, 0x3, &(0x7f000051a000-0x58)=@framed={{0x18}, [], {0x95}}, &(0x7f0000c43000)='GPL\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) unshare(0x20000400) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00005c3000)=r0, 0x4) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00009a4000)={@common='bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00001c9000)={@mcast1={0xff, 0x1, [], 0x1}, @empty, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000020007, r1}) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00001b1000-0x68)={0x1, {&(0x7f00006ad000-0x3f)=""/63, 0x3f, &(0x7f0000496000)=""/49}}, 0x68) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000351000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000c0a000)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f00009a1000)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f75000-0x1c)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00002a1000-0x8)=@assoc_value, 0x8) sendto$inet6(r0, &(0x7f0000857000-0x8f)='1', 0x1, 0x0, &(0x7f00004b0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000528000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00009b9000)=0x1000000, 0x4) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a63000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() poll(&(0x7f0000585000-0x50)=[{r0}], 0x1, 0x0) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) write(r0, &(0x7f00007a0000), 0x0) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00006b4000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000080000001bf3ffffff000065000000010000007db0e6330ee7f9b319d8000018e58d1c43473000e85026fb0040f9b55bd1a7335d5bffff0001f3", "cfa40005000000f7ffffffff00000000000000ffb833220182ab867d00"}) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x800400000484, &(0x7f0000137000)="0600000000000000ed1800000000feffffffffffff6db86078032ea94addbcc1de84de4442ed43ffb02bf212", 0x2c) 2018/02/16 17:38:33 executing program 4: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000014000)='/dev/dmmidi#\x00', 0x2, 0x902) writev(r0, &(0x7f0000022000-0x50)=[{&(0x7f0000029000-0x8)="a8", 0x1}], 0x1) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f75000-0x1c)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00002a1000-0x8)=@assoc_value, 0x8) sendto$inet6(r0, &(0x7f0000857000-0x8f)='1', 0x1, 0x0, &(0x7f00004b0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000697000)={0x1, 0x3, &(0x7f000051a000-0x58)=@framed={{0x18}, [], {0x95}}, &(0x7f0000c43000)='GPL\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) unshare(0x20000400) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00005c3000)=r0, 0x4) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00001b5000)={@dev={0xfe, 0x80, [], 0xffffffffffffffff, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000b06000)=0x20) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000f92000-0x40), &(0x7f0000df1000), &(0x7f0000001000-0x40), &(0x7f0000b4e000)={0x0, 0x989680}, &(0x7f0000001000-0x10)={&(0x7f0000000000), 0x8}) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f75000-0x1c)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00002a1000-0x8)=@assoc_value, 0x8) sendto$inet6(r0, &(0x7f0000857000-0x8f)='1', 0x1, 0x0, &(0x7f00004b0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000697000)={0x1, 0x3, &(0x7f000051a000-0x58)=@framed={{0x18}, [], {0x95}}, &(0x7f0000c43000)='GPL\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) unshare(0x20000400) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00005c3000)=r0, 0x4) 2018/02/16 17:38:33 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x69032, 0xffffffffffffffff, 0xc700000000000000) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00006b4000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000080000001bf3ffffff000065000000010000007db0e6330ee7f9b319d8000018e58d1c43473000e85026fb0040f9b55bd1a7335d5bffff0001f3", "cfa40005000000f7ffffffff00000000000000ffb833220182ab867d00"}) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00001b5000)={@dev={0xfe, 0x80, [], 0xffffffffffffffff, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000b06000)=0x20) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0505405, &(0x7f0000003000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000c69000)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x98, 0x158, 0x98, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@iprange={0x68, 'iprange\x00', 0x1, {@ipv4=@rand_addr, @ipv4=@multicast2=0xe0000002, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x350) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000d8a000-0xc)={0x10}, 0xc, &(0x7f00007d8000-0x10)={&(0x7f0000c67000)=@bridge_dellink={0x24, 0x11, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0x1a, []}]}, 0x24}, 0x1}, 0x0) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00001b5000)={@dev={0xfe, 0x80, [], 0xffffffffffffffff, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000b06000)=0x20) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000067f000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000970000)={0x0, 0x0, 0x0, &(0x7f0000ad6000)}) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000697000)={0x1, 0x3, &(0x7f000051a000-0x58)=@framed={{0x18}, [], {0x95}}, &(0x7f0000c43000)='GPL\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) unshare(0x20000400) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00005c3000)=r0, 0x4) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f75000-0x1c)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00002a1000-0x8)=@assoc_value, 0x8) sendto$inet6(r0, &(0x7f0000857000-0x8f)='1', 0x1, 0x0, &(0x7f00004b0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00006b4000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000080000001bf3ffffff000065000000010000007db0e6330ee7f9b319d8000018e58d1c43473000e85026fb0040f9b55bd1a7335d5bffff0001f3", "cfa40005000000f7ffffffff00000000000000ffb833220182ab867d00"}) 2018/02/16 17:38:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000fdb000-0x8)='environ\x00') r1 = syz_open_dev$urandom(&(0x7f0000ba5000)='/dev/urandom\x00', 0x0, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000fda000-0x8), 0x100000001) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/audio\x00', 0x10000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001000-0x50)={@common='ipddp0\x00', @ifru_mtu=0x1}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$llc(r0, &(0x7f0000ff7000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000ac3000)=0x10, 0x80000) openat$cuse(0xffffffffffffff9c, &(0x7f000054c000-0xa)='/dev/cuse\x00', 0x4000, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(0xffffffffffffffff, 0x89e0, &(0x7f0000b46000)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b33000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f00009f6000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00001b5000)={@dev={0xfe, 0x80, [], 0xffffffffffffffff, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000b06000)=0x20) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00006b4000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000080000001bf3ffffff000065000000010000007db0e6330ee7f9b319d8000018e58d1c43473000e85026fb0040f9b55bd1a7335d5bffff0001f3", "cfa40005000000f7ffffffff00000000000000ffb833220182ab867d00"}) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003000-0x1c)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000a000)=@ipv6_newroute={0xb8, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9}, {}]}, @RTA_METRICS={0x88, 0x8, "8200106b2fbf63a425238e5946b775175da4c25257282298148ceef06464926e00fa5f73693d3fda29aa099a7437572c83e9e992bd8dc8f59e919303b40339b561b0f7ba05481f6c9f4fd2991c52b42266034e386d66dc781e5547908553a77e0b6fa2edeedd6e19622fb8e4005677b3aca379c80fc11735039f2aa6fb565277ad"}]}, 0xb8}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f00001ff000-0xb)='/dev/vcsa#\x00', 0x0, 0x0) add_key$user(&(0x7f0000f43000-0x5)='user\x00', &(0x7f0000063000-0x2)={0x73, 0x79, 0x7a}, &(0x7f00002fb000), 0x0, 0xfffffffffffffffb) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000471000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00003d0000-0x50)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000067f000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000970000)={0x0, 0x0, 0x0, &(0x7f0000ad6000)}) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/audio\x00', 0x10000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001000-0x50)={@common='ipddp0\x00', @ifru_mtu=0x1}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$llc(r0, &(0x7f0000ff7000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000ac3000)=0x10, 0x80000) openat$cuse(0xffffffffffffff9c, &(0x7f000054c000-0xa)='/dev/cuse\x00', 0x4000, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) 2018/02/16 17:38:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x40084504, &(0x7f0000000000)=""/157) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f000016c000)=[{&(0x7f0000947000-0x5d)=""/93, 0x5d}], 0x1, &(0x7f0000df3000-0x90)=[{&(0x7f0000a46000)=""/164, 0xa4}], 0x1, 0x0) open(&(0x7f0000364000-0x8)='./file0\x00', 0x401, 0x0) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000014a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x2, &(0x7f000000b000)=[{0x10004d}, {0x6}]}, 0x10) writev(r1, &(0x7f00005c2000-0x10)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000067f000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000970000)={0x0, 0x0, 0x0, &(0x7f0000ad6000)}) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2288, &(0x7f0000c96000-0x2)) 2018/02/16 17:38:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f000061b000-0x9a), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f00001ca000-0x40)=[{&(0x7f0000c4f000)=""/4096, 0x1000}], 0x1) read(r0, &(0x7f0000b09000)=""/224, 0xe0) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) writev(r0, &(0x7f0000447000-0x40)=[{&(0x7f0000f63000)="87ab9ff215d91a28a7cf317ca993fddd1b765e163edc8dc58d4e305c22dbb87e6b709e4ccb13513d97f66341adda8cf8150eba9b93cdc893003e67f2d8e3b49114ceef6fb15342c32ea2b387ec06aee361d02cdc4a40ce41951b97b781f3b0346b136cd108190d04cebee246b7845bcf399636fb8f062266d045feefcb31f2b231d7", 0x82}], 0x1) writev(r0, &(0x7f00002e2000-0x20)=[{&(0x7f0000c63000-0x9b)="db", 0x1}], 0x1) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003000-0x1c)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000a000)=@ipv6_newroute={0xb8, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9}, {}]}, @RTA_METRICS={0x88, 0x8, "8200106b2fbf63a425238e5946b775175da4c25257282298148ceef06464926e00fa5f73693d3fda29aa099a7437572c83e9e992bd8dc8f59e919303b40339b561b0f7ba05481f6c9f4fd2991c52b42266034e386d66dc781e5547908553a77e0b6fa2edeedd6e19622fb8e4005677b3aca379c80fc11735039f2aa6fb565277ad"}]}, 0xb8}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f00001ff000-0xb)='/dev/vcsa#\x00', 0x0, 0x0) add_key$user(&(0x7f0000f43000-0x5)='user\x00', &(0x7f0000063000-0x2)={0x73, 0x79, 0x7a}, &(0x7f00002fb000), 0x0, 0xfffffffffffffffb) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/audio\x00', 0x10000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001000-0x50)={@common='ipddp0\x00', @ifru_mtu=0x1}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$llc(r0, &(0x7f0000ff7000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000ac3000)=0x10, 0x80000) openat$cuse(0xffffffffffffff9c, &(0x7f000054c000-0xa)='/dev/cuse\x00', 0x4000, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) 2018/02/16 17:38:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xe2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000839000-0xe8)={{{@in6=@empty, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000a}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0xff}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) close(r0) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000014a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x2, &(0x7f000000b000)=[{0x10004d}, {0x6}]}, 0x10) writev(r1, &(0x7f00005c2000-0x10)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000014a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x2, &(0x7f000000b000)=[{0x10004d}, {0x6}]}, 0x10) writev(r1, &(0x7f00005c2000-0x10)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000067f000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000970000)={0x0, 0x0, 0x0, &(0x7f0000ad6000)}) 2018/02/16 17:38:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003000-0x1c)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000a000)=@ipv6_newroute={0xb8, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9}, {}]}, @RTA_METRICS={0x88, 0x8, "8200106b2fbf63a425238e5946b775175da4c25257282298148ceef06464926e00fa5f73693d3fda29aa099a7437572c83e9e992bd8dc8f59e919303b40339b561b0f7ba05481f6c9f4fd2991c52b42266034e386d66dc781e5547908553a77e0b6fa2edeedd6e19622fb8e4005677b3aca379c80fc11735039f2aa6fb565277ad"}]}, 0xb8}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f00001ff000-0xb)='/dev/vcsa#\x00', 0x0, 0x0) add_key$user(&(0x7f0000f43000-0x5)='user\x00', &(0x7f0000063000-0x2)={0x73, 0x79, 0x7a}, &(0x7f00002fb000), 0x0, 0xfffffffffffffffb) 2018/02/16 17:38:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/audio\x00', 0x10000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001000-0x50)={@common='ipddp0\x00', @ifru_mtu=0x1}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$llc(r0, &(0x7f0000ff7000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000ac3000)=0x10, 0x80000) openat$cuse(0xffffffffffffff9c, &(0x7f000054c000-0xa)='/dev/cuse\x00', 0x4000, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) 2018/02/16 17:38:33 executing program 2: mmap(&(0x7f0000000000/0x23000)=nil, 0x23000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x30, &(0x7f0000021000)=@nat={"6e6174000000000002000000e000", 0x1b, 0x4, 0x328, 0x70, 0x0, 0xffffffff, 0x70, 0x70, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, &(0x7f000001e000-0x1b), {[{{@ip={@multicast1=0xe0000001, @broadcast=0xffffffff, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common="677265746170e30000feffff0200", {0x2}}, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1=0xe0000001, @empty, @gre_key, @icmp_id}}}}, {{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr, 0x0, 0x0, @common='nr0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0xa8, 0x0, {}, []}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {}, []}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2=0xe0000002, @dev={0xac, 0x14}, @gre_key, @icmp_id}}}}, {{@ip={@empty, @empty, 0x0, 0x0, @generic, @generic}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@STANDARD={0x28}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x70}}}}, 0x388) 2018/02/16 17:38:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000014a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x2, &(0x7f000000b000)=[{0x10004d}, {0x6}]}, 0x10) writev(r1, &(0x7f00005c2000-0x10)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000014a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x2, &(0x7f000000b000)=[{0x10004d}, {0x6}]}, 0x10) writev(r1, &(0x7f00005c2000-0x10)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/16 17:38:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f000098a000-0x1)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000337000-0xa8)={0x0, 0x0, []}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df6000-0x28)={0x0, 0x0, &(0x7f00003ad000-0x69)=""/105, &(0x7f00001d6000)=""/228, &(0x7f000017d000)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x0, 0x1, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fe000-0xae)=""/174}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f83000-0x4)=0x1) 2018/02/16 17:38:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000014a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x2, &(0x7f000000b000)=[{0x10004d}, {0