[....] Starting enhanced syslogd: rsyslogd[ 15.612511] audit: type=1400 audit(1517745789.298:4): avc: denied { syslog } for pid=3653 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.230' (ECDSA) to the list of known hosts. 2018/02/04 12:03:29 fuzzer started 2018/02/04 12:03:29 dialing manager at 10.128.0.26:36279 2018/02/04 12:03:32 kcov=true, comps=false 2018/02/04 12:03:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000043e000-0x12)='net/igmp\x00') sendfile(r0, r0, &(0x7f0000c62000), 0x100000ffff) 2018/02/04 12:03:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000f99000-0x208)={0x14, 0x22, 0xafb, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, []}, 0x14}, 0x1}, 0x0) 2018/02/04 12:03:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000d1a000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00003a5000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f000087e000-0x2)='F', 0x1, 0x0, &(0x7f0000060000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/04 12:03:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00003a4000)={{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, {0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000371000-0x5c)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 2018/02/04 12:03:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) write(r0, &(0x7f0000e7e000)="1f0000003a0007811a003809bdff00020a3f20165fffffe400000028000000", 0x1f) 2018/02/04 12:03:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4f000-0x4)=0x1, 0x4) connect$inet(r0, &(0x7f0000607000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f000031c000-0x1)='{', 0x1, 0x4008000, &(0x7f0000de6000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00005f8000-0x1000)="93", 0x1, 0x0, &(0x7f0000a7f000)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/04 12:03:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000af0000/0x3000)=nil, 0x3000, 0x1020000000c) 2018/02/04 12:03:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000959000-0x103e)={@link_local={0x1, 0x80, 0xc2}, @random="bd75869612db", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80}}}}}}, &(0x7f0000ce9000)={0x0, 0x1, [0x0]}) syzkaller login: [ 40.133767] audit: type=1400 audit(1517745813.818:5): avc: denied { sys_admin } for pid=3875 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 40.204418] IPVS: Creating netns size=2536 id=1 [ 40.213980] audit: type=1400 audit(1517745813.898:6): avc: denied { net_admin } for pid=3879 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 40.239268] IPVS: Creating netns size=2536 id=2 [ 40.278006] IPVS: Creating netns size=2536 id=3 [ 40.315913] IPVS: Creating netns size=2536 id=4 [ 40.356874] IPVS: Creating netns size=2536 id=5 [ 40.402722] IPVS: Creating netns size=2536 id=6 [ 40.459236] IPVS: Creating netns size=2536 id=7 [ 40.503886] IPVS: Creating netns size=2536 id=8 [ 42.140830] audit: type=1400 audit(1517745815.828:7): avc: denied { sys_chroot } for pid=3879 comm="syz-executor4" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/04 12:03:36 executing program 3: mmap(&(0x7f0000ee5000/0x2000)=nil, 0x2000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000ee7000-0x5c)={{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, {0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, 0x5c) 2018/02/04 12:03:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000a37000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00002fc000)={0x8000, 0x0, 'client0\x00', 0x0, "76fe021c3607bd42", "3b4023132f49d79afd68cc051b1ce0bf6a7e09cfe1fd1fb3272ab387e5b8da49"}) [ 42.404090] audit: type=1400 audit(1517745816.088:8): avc: denied { create } for pid=4930 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/04 12:03:36 executing program 2: mmap(&(0x7f0000000000/0x10d000)=nil, 0x10d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000101000)={@random="f3e850ef1049", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="569cd569f6ad", @rand_addr, @empty, @dev={0xac, 0x14}}}}}, 0x0) 2018/02/04 12:03:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000a81000)={&(0x7f0000ce2000+0x6c4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000f4b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x1}, @RTA_ENCAP={0x8, 0x16, @nested={0xfffffffffffffd0f, 0x0, []}}]}, 0x2a6}, 0x1}, 0x0) 2018/02/04 12:03:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000544000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000097b000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x47, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4, r2, 0x0, 0x0) 2018/02/04 12:03:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000057c000)={0x2, 0x78, 0x48, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000e37000)=0x156) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000000+0xca6)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x100000000, 0x6) [ 42.441131] audit: type=1400 audit(1517745816.128:9): avc: denied { dac_override } for pid=4947 comm="syz-executor7" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/04 12:03:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000d26000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, 0xc) 2018/02/04 12:03:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f000081b000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "000701", 0x10, 0x88, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}}, 0x0) 2018/02/04 12:03:36 executing program 0: mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000011000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f000000f000)={@common='bridge0\x00', r1}) 2018/02/04 12:03:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000945000-0x22)="220000005e000721004f10f7e2ffd90000000000000000edff000000e700ff02f157", 0x22) 2018/02/04 12:03:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$KDGKBSENT(r0, 0xc004743e, &(0x7f000074b000-0x4)={0x0, 0x0, 0x103}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000276000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000ca000)=""/246) close(r0) 2018/02/04 12:03:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f00001e5000-0x8)=[], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000334000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0xa) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r3, &(0x7f00001bb000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001, {[]}}, @tcp={{0xffffffffffffffff, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) 2018/02/04 12:03:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ce1000)={{{@in=@multicast1=0xe0000001, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@loopback=0x7f000001}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) sendmsg(r0, &(0x7f00001f1000)={&(0x7f0000843000-0x1c)=@in6={0x2, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000367000-0x80)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/04 12:03:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082f000-0xf6)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f00009e7000)=""/174) ioctl$TUNSETOWNER(r0, 0x400454cc, &(0x7f00005b4000-0x4)) close(r0) 2018/02/04 12:03:36 executing program 5: mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000007000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000007000-0x1c)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}}, 0x1c) [ 42.590257] audit: type=1400 audit(1517745816.278:10): avc: denied { create } for pid=4992 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/04 12:03:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f00001e5000-0x8)=[], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00006fd000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) write$sndseq(r1, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000b0f000-0x68)={0x0, 0x9, 0x4}) 2018/02/04 12:03:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000657000), 0x800) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000a4000-0x1010)={0xf97cff8c, 0x8, 'SE Linux'}, 0x10) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) [ 42.607917] audit: type=1400 audit(1517745816.288:11): avc: denied { set_context_mgr } for pid=5000 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 42.612583] audit: type=1400 audit(1517745816.298:12): avc: denied { call } for pid=5000 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 42.616282] binder: 5000:5003 got transaction with invalid handle, 0 [ 42.616322] binder: 5000:5003 transaction failed 29201/-22, size 56-8 line 3219 [ 42.621323] binder_alloc: binder_alloc_mmap_handler: 5000 20000000-20002000 already mapped failed -16 [ 42.622903] binder: BINDER_SET_CONTEXT_MGR already set [ 42.622910] binder: 5000:5003 ioctl 40046207 0 returned -16 [ 42.630185] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.663050] device gre0 entered promiscuous mode [ 42.668954] binder: 5018:5022 got transaction with invalid handle, 0 [ 42.668978] binder: 5018:5022 transaction failed 29201/-22, size 56-8 line 3219 2018/02/04 12:03:36 executing program 0: 2018/02/04 12:03:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f00001e5000-0x8)=[], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:36 executing program 1: 2018/02/04 12:03:36 executing program 5: 2018/02/04 12:03:36 executing program 3: 2018/02/04 12:03:36 executing program 2: 2018/02/04 12:03:36 executing program 7: 2018/02/04 12:03:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000334000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0xa) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r3, &(0x7f00001bb000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001, {[]}}, @tcp={{0xffffffffffffffff, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) [ 42.673203] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/04 12:03:36 executing program 2: 2018/02/04 12:03:36 executing program 3: 2018/02/04 12:03:36 executing program 1: 2018/02/04 12:03:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000248000)={{{@in=@multicast1=0xe0000001, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@loopback=0x7f000001}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) sendmsg(r0, &(0x7f00001f1000)={&(0x7f0000843000-0x1c)=@in6={0x2, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000367000-0x80)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/04 12:03:36 executing program 0: 2018/02/04 12:03:36 executing program 7: 2018/02/04 12:03:36 executing program 4: 2018/02/04 12:03:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f00001e5000-0x8)=[], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:36 executing program 4: 2018/02/04 12:03:36 executing program 3: 2018/02/04 12:03:36 executing program 7: 2018/02/04 12:03:36 executing program 2: 2018/02/04 12:03:36 executing program 7: 2018/02/04 12:03:36 executing program 3: 2018/02/04 12:03:36 executing program 5: 2018/02/04 12:03:36 executing program 1: 2018/02/04 12:03:36 executing program 0: 2018/02/04 12:03:36 executing program 2: 2018/02/04 12:03:36 executing program 7: [ 42.794396] binder: 5039:5044 got transaction with invalid handle, 0 [ 42.798997] device gre0 entered promiscuous mode [ 42.805913] binder: 5039:5044 transaction failed 29201/-22, size 56-8 line 3219 [ 42.817856] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/04 12:03:36 executing program 3: 2018/02/04 12:03:36 executing program 4: 2018/02/04 12:03:36 executing program 0: 2018/02/04 12:03:36 executing program 5: 2018/02/04 12:03:36 executing program 2: 2018/02/04 12:03:36 executing program 1: 2018/02/04 12:03:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f00001e5000-0x8)=[], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:36 executing program 7: 2018/02/04 12:03:36 executing program 1: 2018/02/04 12:03:36 executing program 0: 2018/02/04 12:03:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000efc000-0x7e)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @dev={0xac, 0x14, 0x0, 0x13}, {[]}}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [{[]}, {[]}]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [{[]}, {[@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}]}]}, @rr={0x7, 0x13, 0x0, [@broadcast=0xffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @rand_addr, @empty]}, @lsrr={0x83, 0xf, 0x0, [@rand_addr, @empty, @empty]}]}}}}}}}, &(0x7f0000490000-0xc)={0x0, 0x0, []}) 2018/02/04 12:03:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000e37000)=0x156) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000000+0xca6)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x100000000, 0x6) 2018/02/04 12:03:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000b6e000)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}, 0x0) [ 42.879064] binder: 5053:5062 got transaction with invalid handle, 0 [ 42.885783] binder: 5053:5062 transaction failed 29201/-22, size 56-8 line 3219 [ 42.897002] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/04 12:03:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000af0000)='user\x00', &(0x7f0000a35000)={0x73, 0x79, 0x7a}, &(0x7f000065f000), 0x0, 0xfffffffffffffff8) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00007d8000)=0x4) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/04 12:03:36 executing program 0: mmap(&(0x7f0000000000/0xde5000)=nil, 0xde5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000dd5000), &(0x7f0000dd5000-0x4)=0x4) r1 = memfd_create(&(0x7f0000684000-0x1)='\x00', 0x1) mmap(&(0x7f0000de5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000c4f000-0xb8)={0x0, 0x401, 0x2, 0x7, 0x34, 0x2, 0x100, 0x1, {0x0, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x401, 0x7, 0x23, 0x10001, 0x5}}, &(0x7f0000de6000-0x4)=0xb8) mmap(&(0x7f0000de5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000de5000)={&(0x7f00006c1000-0x10)=@in={0x2, 0x1, @multicast1=0xe0000001}, 0x10, &(0x7f0000b3f000-0x30)=[{&(0x7f0000990000-0xc6)="f3c8d86290239592aadc71320e853ca5627b520d4e93c58c3d72343d8b7f5228227313bbd8409b1b9557a39b3487095b5dd8b0d6ff08c351f4c31328f529ac815166ca753e86b1580f8f911af2e9be5d8d6fe5ded7b131343ccd891df83e6814204b9bb522b0c6aad90c2ffdbf64082f5791143fe19c085c15c3827a21389d3377fd949aae6ec551bf75fff09c660466f35ebb317f120846c9670ecfa08cc4c10956181d89dedb5ee4adae452f4e4e0a940e5dc9e756a98471c250af6cfb93b3b2a7e94586bf", 0xc6}, {&(0x7f0000741000)="09cae9cddef31c8d1124ca043bfcf2653b0d08978311cf5620", 0x19}, {&(0x7f0000252000-0x7b)="6740d1808dd4fbb4de826ff56856a4b2547acafa9699f6dcd363d992ebcc75ee3d96a72e1a642f8c1ed6618df1a6374be2313263c60932a880cef2fb5db7e77e9cb2188dc420cd25dda1e658925d7dcc2306df1bc0ed96624b261a0d5ece5178c58a23e604f4327127c0d99290669d5858ad484b7bbb7e6d7d6a39", 0x7b}], 0x3, &(0x7f0000a83000-0x30)=[@sndinfo={0x20, 0x84, 0x2, {0x545, 0x0, 0x7ff, 0x5, r2}}], 0x30, 0x80}, 0x4000804) close(r0) 2018/02/04 12:03:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00008df000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f000078e000)=0x5, 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00008d9000-0x10)={0x0, 0x0, 0x7fff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000aef000)={r2, 0x80000, r1}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00002a2000)=0x0) fcntl$setownex(r1, 0xf, &(0x7f00000d2000-0x8)={0x0, r4}) r5 = dup3(r0, r1, 0x0) stat(&(0x7f0000314000)='./file0\x00', &(0x7f00009c4000)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000905000-0xc)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff]) lstat(&(0x7f0000768000)='./file0\x00', &(0x7f0000e9d000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) readahead(r5, 0x7a44, 0xfff) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00001b8000-0xc)={0x0, 0x0, 0x0}, &(0x7f00009b6000-0x4)=0xc) sendmsg$unix(r1, &(0x7f00006f5000)={&(0x7f00008de000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000685000)=[{&(0x7f0000953000-0x2f)="3017734e8ddd58158bac38de052577b4a2910952132bf5f1eded4e4d8e049cc02337eaf2f23cef7704137ddc5493bd", 0x2f}, {&(0x7f00005a2000)="ebaec9622d0f38cc1c70e311e59940f4a9fe7af0036ce2498fcd4c230c", 0x1d}, {&(0x7f0000fa9000)="c60e39a06d37fe9b260652624d3b02a14d08f090dc6d76a11b74f5ae41ad41b392234e19e77929731bc18716d79ef74f414d4ee3d02a617b6ba74bb71e5a83484837", 0x42}, {&(0x7f00005b1000)="2d2c4542e42fb3c747a02094d3130a25cd9fe01ffec0a620c907b91d854e29b2ed8cde6494f3bc8f0a4a8126e9c89a7a57fe6fe83fa14efaf424aa72fea740118b9c73c24d0099ef8f36db514e0b9ab5bfc813b8a6531907c3d88aca67f0c97f8bc1694101cfb7c54a9eba6550bfaa31ec28468f5c970f88ec8b25463cc1cb15022e9bf5819e5b8b567cf928773683ee", 0x90}, {&(0x7f0000272000-0x66)="42be45a14b4d0dbca19c0bd0c8da9592ddc8dc77680da279e0b3df9ab9f24573e2aa2b9c8d5a95134de3b0d41daf779871ea65a067807e60b8475a43e183c493ddc7c4cc57f77c263dd1f4612154efd752d025ca91036411ae1317949e4719c7d62a74a6a6b3", 0x66}, {&(0x7f00009f1000)="b165e86bb1a85c371ecd1a26fc45389e74c54b6308b037fe", 0x18}], 0x6, &(0x7f0000f0f000-0x98)=[@cred={0x20, 0x1, 0x2, r4, r6, r7}, @cred={0x20, 0x1, 0x2, r4, r8, r9}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r5, r5]}, @rights={0x20, 0x1, 0x1, [r3, r0, r3]}], 0x98, 0x40}, 0x40000) vmsplice(r1, &(0x7f0000cf8000-0x20)=[{&(0x7f00002a7000)='#', 0x1}], 0x1, 0x0) 2018/02/04 12:03:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000e000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00005c2000)) epoll_wait(r1, &(0x7f0000b11000)=[{}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfde000)=nil, 0xfde000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000006000)={0xaa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000e2d000-0x20)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000c6c000), 0x0) [ 42.919267] binder_alloc: 5075: binder_alloc_buf, no vma [ 42.928115] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 42.928131] CPU: 1 PID: 5084 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 42.928136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.928150] ffff8801b90a7938 ffffffff81d94b69 1ffff10037214f2a ffff8801c1631800 [ 42.928162] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b90a7a48 [ 42.928173] ffffffff81451ca2 024000c2b90a7988 0000000041b58ab3 ffffffff84195215 [ 42.928174] Call Trace: [ 42.928188] [] dump_stack+0xc1/0x128 [ 42.928197] [] warn_alloc+0x212/0x240 [ 42.928208] [] ? zone_watermark_ok_safe+0x280/0x280 [ 42.928218] [] ? avc_has_perm+0xb0/0x4f0 [ 42.928228] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 42.928236] [] __vmalloc_node_range+0x3f5/0x5f0 [ 42.928244] [] ? check_preemption_disabled+0x3b/0x200 [ 42.928252] [] ? task_has_security+0x130/0x270 [ 42.928259] [] vmalloc+0x5b/0x70 [ 42.928266] [] ? sel_write_load+0x130/0xfd0 [ 42.928273] [] sel_write_load+0x130/0xfd0 [ 42.928282] [] ? get_futex_key+0x1050/0x1050 [ 42.928289] [] ? sel_read_bool+0x250/0x250 [ 42.928298] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 42.928305] [] ? do_futex+0x3f8/0x15c0 [ 42.928313] [] ? sel_read_bool+0x250/0x250 [ 42.928322] [] __vfs_write+0x103/0x680 [ 42.928330] [] ? do_iter_readv_writev+0x400/0x400 [ 42.928338] [] ? __lock_is_held+0xa1/0xf0 [ 42.928346] [] ? __lock_is_held+0xa1/0xf0 [ 42.928354] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 42.928362] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 42.928369] [] ? __sb_start_write+0x14a/0x310 [ 42.928378] [] vfs_write+0x189/0x530 [ 42.928385] [] SyS_write+0xd9/0x1b0 [ 42.928392] [] ? SyS_read+0x1b0/0x1b0 [ 42.928400] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 42.928408] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 42.928417] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 42.935136] Mem-Info: [ 42.935159] active_anon:52139 inactive_anon:44 isolated_anon:0 [ 42.935159] active_file:3452 inactive_file:8284 isolated_file:0 [ 42.935159] unevictable:0 dirty:126 writeback:0 unstable:0 [ 42.935159] slab_reclaimable:5405 slab_unreclaimable:59558 [ 42.935159] mapped:24026 shmem:51 pagetables:732 bounce:0 [ 42.935159] free:1478580 free_pcp:364 free_cma:0 [ 42.935177] Node 0 active_anon:208556kB inactive_anon:176kB active_file:13808kB inactive_file:33136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96104kB dirty:504kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 42.935197] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 42.935227] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 42.935253] Normal free:2918328kB min:36824kB low:46028kB high:55232kB active_anon:208556kB inactive_anon:176kB active_file:13808kB inactive_file:33136kB unevictable:0kB writepending:504kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21620kB slab_unreclaimable:238232kB kernel_stack:5760kB pagetables:2928kB bounce:0kB free_pcp:820kB local_pcp:256kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 42.935302] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 629*4kB (UM) 45*8kB (UME) 25*16kB (UME) 60*32kB (UME) 71*64kB (UME) 15*128kB (UME) 4*256kB (ME) 3*512kB (ME) 44*1024kB (ME) 2*2048kB (UE) 697*4096kB (M) = 2918284kB [ 42.935395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 42.935397] 11786 total pagecache pages [ 42.935401] 0 pages in swap cache [ 42.935404] Swap cache stats: add 0, delete 0, find 0/0 [ 42.935406] Free swap = 0kB [ 42.935409] Total swap = 0kB [ 42.935411] 1965969 pages RAM [ 42.935413] 0 pages HighMem/MovableOnly [ 42.935415] 320509 pages reserved [ 42.942424] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 42.942433] CPU: 0 PID: 5091 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 42.942438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.942452] ffff8801c91af938 ffffffff81d94b69 1ffff10039235f2a ffff8801b6289800 [ 42.942461] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801c91afa48 [ 42.942470] ffffffff81451ca2 024000c2c91af988 0000000041b58ab3 ffffffff84195215 [ 42.942472] Call Trace: [ 42.942485] [] dump_stack+0xc1/0x128 [ 42.942496] [] warn_alloc+0x212/0x240 [ 42.942506] [] ? zone_watermark_ok_safe+0x280/0x280 [ 42.942514] [] ? avc_has_perm+0xb0/0x4f0 [ 42.942524] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 42.942533] [] __vmalloc_node_range+0x3f5/0x5f0 [ 42.942543] [] ? check_preemption_disabled+0x3b/0x200 [ 42.942551] [] ? task_has_security+0x130/0x270 [ 42.942558] [] vmalloc+0x5b/0x70 [ 42.942564] [] ? sel_write_load+0x130/0xfd0 [ 42.942572] [] sel_write_load+0x130/0xfd0 [ 42.942579] [] ? avc_has_extended_perms+0x3fc/0xf10 [ 42.942587] [] ? sel_read_bool+0x250/0x250 [ 42.942597] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 42.942605] [] ? __lock_acquire+0x629/0x3640 [ 42.942613] [] ? sel_read_bool+0x250/0x250 [ 42.942621] [] __vfs_write+0x103/0x680 [ 42.942629] [] ? do_iter_readv_writev+0x400/0x400 [ 42.942637] [] ? __lock_is_held+0xa1/0xf0 [ 42.942645] [] ? __lock_is_held+0xa1/0xf0 [ 42.942654] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 42.942662] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 42.942669] [] ? __sb_start_write+0x14a/0x310 [ 42.942677] [] vfs_write+0x189/0x530 [ 42.942685] [] SyS_write+0xd9/0x1b0 [ 42.942693] [] ? SyS_read+0x1b0/0x1b0 [ 42.942702] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 42.942710] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 42.942719] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 42.942722] Mem-Info: [ 42.942741] active_anon:51604 inactive_anon:44 isolated_anon:0 [ 42.942741] active_file:3452 inactive_file:8284 isolated_file:0 [ 42.942741] unevictable:0 dirty:126 writeback:0 unstable:0 [ 42.942741] slab_reclaimable:5405 slab_unreclaimable:59589 [ 42.942741] mapped:24026 shmem:51 pagetables:695 bounce:0 [ 42.942741] free:1479612 free_pcp:421 free_cma:0 [ 42.942759] Node 0 active_anon:206416kB inactive_anon:176kB active_file:13808kB inactive_file:33136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96104kB dirty:504kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 42.942780] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 42.942809] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 42.942836] Normal free:2922456kB min:36824kB low:46028kB high:55232kB active_anon:206416kB inactive_anon:176kB active_file:13808kB inactive_file:33136kB unevictable:0kB writepending:504kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21620kB slab_unreclaimable:238356kB kernel_stack:5792kB pagetables:2780kB bounce:0kB free_pcp:1028kB local_pcp:564kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 42.942887] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 629*4kB (UM) 45*8kB (UME) 25*16kB (UME) 58*32kB (UME) 71*64kB (UME) 15*128kB (UME) 4*256kB (ME) 3*512kB (ME) 44*1024kB (ME) 2*2048kB (UE) 698*4096kB (M) = 2922316kB [ 42.942987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 2018/02/04 12:03:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f00001e5000-0x8)=[], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:37 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002000-0xc)='/dev/rfkill\x00', 0x200, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000002000-0x18)={0x0, 0x5, 0x0, 0x200, 0x2}, &(0x7f0000001000-0x4)=0x18) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001000)={r1, 0x69, "2517a6e4e7dbc0f64ba4c8a01f6552415c12f1c026d98d37cf2b81927e582658bf1f879e9dccdd0d228ebde34d388ba19f29263ccfcba5b123c5616c638d4277eac1861579c95d130d8e290efa77f64bfd9e9b0105331c8421f51f600b6645a8cde6008da089129abf"}, &(0x7f0000001000)=0x71) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f0000001000-0xa)='encrypted\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002000-0x3c)="25766d6e6574307d637075736574707070305d255c6d696d655f74797065707070305c26e62840747275737465646367726f7570766d6e6574312900", 0xffffffffffffffff) keyctl$get_security(0x11, r2, &(0x7f000068b000)=""/50, 0x32) 2018/02/04 12:03:37 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) process_vm_readv(0x0, &(0x7f0000013000-0x60)=[{&(0x7f0000012000)=""/108, 0x6c}], 0x1, &(0x7f0000011000)=[], 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f00006cd000-0x10)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000bde000-0x68)={0xfffffffffffffff7, 0xecc, 0x2, {0x0, 0x989680}, 0x3515, 0xae59}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioperm(0x0, 0x101, 0x6) 2018/02/04 12:03:37 executing program 0: mmap(&(0x7f0000000000/0xe01000)=nil, 0xe01000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e01000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000e01000)='/dev/ppp\x00', 0x0, 0x0) mmap(&(0x7f0000e01000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f0000e01000)=""/80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000e01000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffff9c, 0x8927, &(0x7f0000e01000)={@common, @ifru_addrs=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00009bb000-0x8)={0x0, 0x80000001}, &(0x7f0000494000-0x4)=0x8) mmap(&(0x7f0000e01000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000ade000-0x20)={0x0, 0xd6bd, 0x8, 0x8001, 0x1, 0x6, 0x6, 0x8000, r3}, &(0x7f0000e01000)=0x20) getsockopt(r1, 0x0, 0x41, &(0x7f0000e00000)=""/17, &(0x7f0000e00000+0x26c)=0x28) 2018/02/04 12:03:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000424000-0x8)={0x0}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000b34000)={0x0, 0xef, "2cbf129cdeca83fba684e159bc7f29ee96a91fd2c01e82e53cbe5a63d548eb2346586d875dfae05ea4c728989f0a51840646d6a12d902e49bb95aeff36ce72cd57eaf7f2cb63884712b8441679199cc416fd1d0e93f856df90d884e6d784046e4717a98d13c2e5aa79fc096987c99997b2255501304b2cb2be720fccc5dc01aec6a86dbcd984f4a7e5e11d6dc422427f53d06f9651d2a1e8ad24dff86a75125ba960177f51b4fb18080196376a2af1545310c58f782b00ad9c6e4996026cc1bee92c605c7f30e1e1aa8ec984285bb5e90ed30979767d8c6e555a2dfda389ac8e666e76533f2e7589006b31572537f3"}, &(0x7f0000dcb000)=0xf7) r2 = add_key(&(0x7f0000117000)='user\x00', &(0x7f0000378000-0x5)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000b6a000)="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", 0x1000, 0xfffffffffffffffd) add_key$keyring(&(0x7f00007cc000)='keyring\x00', &(0x7f0000560000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r2) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f000037d000)=@assoc_value={r1}, 0x8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b1d000-0x4), 0x4) sendto$inet(r3, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmmsg(r3, &(0x7f000056a000-0x78)=[{{&(0x7f00001fb000)=@hci={0x1f}, 0x6, &(0x7f00007be000-0x20)=[{&(0x7f000023b000-0xd1)="fbe07f9ff6f3438a6c9d808bd8ba3c97e653b23099160770663454570d5c7da8e56a72c339b5f6d42ec5258cd655a114540b93f496c4bb16079034dc9a2594e41b833cb82eed207fc521b62af2e8b95a2b8b54674d04eed2f6a6ed66d7a708f129372d540ed348ea8c8307d0e836e03ffeda0c0a6be3e46736f2411c3e3059d71e96", 0x82}], 0x1, &(0x7f0000bae000-0x1d0)=[]}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00006fd000)="c3", 0x1, 0x51, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) exit(0x0) sendmsg$nl_route(r3, &(0x7f0000e7d000-0x38)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000212000-0x10)={&(0x7f00009d4000)=@ipmr_delroute={0x1c, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x80}, []}, 0x1c}, 0x1}, 0x0) 2018/02/04 12:03:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f00001e5000-0x8)=[], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:37 executing program 5: mmap(&(0x7f0000000000/0x61000)=nil, 0x61000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000043000)=""/230, &(0x7f0000015000)=0xe6) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f000005f000-0x15)='/dev/pktcdvd/control\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000060000-0x15)='/proc/self/net/pfkey\x00', 0x400, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f000002d000-0x2c)=[@in6={0xa, 0x1, 0x401, @mcast2={0xff, 0x2, [], 0x1}}, @in={0x2, 0x0, @multicast2=0xe0000002}], 0x2c) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000014000-0x4)) r3 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x42, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f000004f000)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000061000)={{{@in6=@ipv4={[], [], @local}, @in=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f0000061000)=0xe8) mmap(&(0x7f0000061000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000000a000-0xe8)={{{@in6=@dev, @in6=@empty, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000062000-0x4)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000001b000)={{{@in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x1, 0x3f, 0x3, 0x0, 0xa, 0x20, 0x20, 0x7f, r4, r5}, {0x3, 0x100000001, 0x8, 0x3, 0x200, 0xa8, 0xc, 0x3}, {0x80, 0x9, 0xffffffffffffffa0, 0x4}, 0x3d, 0x1, 0x0, 0x1, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x1, 0xff}, 0x2, @in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xc4fa, 0x200, 0x80}}, 0xe8) r6 = geteuid() mknodat(r2, &(0x7f0000050000)='./file0\x00', 0x4a, 0x80000002) setreuid(r6, r6) mq_notify(r3, &(0x7f000004e000-0x50)={0x5, 0x0, 0x0, @thr={&(0x7f0000007000), &(0x7f000001f000-0x10)}}) mmap(&(0x7f0000062000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000062000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(r2, &(0x7f0000063000-0x2)='\x00\x00', 0xffffffffffffff3f, 0x4, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000054000-0x4)=0x0) sched_getparam(r7, &(0x7f000005d000-0x4)) syz_open_pts(r1, 0x200200) [ 42.942989] 11786 total pagecache pages [ 42.942993] 0 pages in swap cache [ 42.942996] Swap cache stats: add 0, delete 0, find 0/0 [ 42.942999] Free swap = 0kB [ 42.943001] Total swap = 0kB [ 42.943003] 1965969 pages RAM [ 42.943005] 0 pages HighMem/MovableOnly [ 42.943007] 320509 pages reserved [ 43.900703] binder: 5075:5076 transaction failed 29189/-3, size 56-8 line 3127 [ 43.909557] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/04 12:03:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) [ 43.929802] binder_alloc: 5103: binder_alloc_buf, no vma [ 43.931807] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 43.931817] CPU: 1 PID: 5116 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 43.931822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.931836] ffff8801bfeaf938 ffffffff81d94b69 1ffff10037fd5f2a ffff8801bd791800 [ 43.931848] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801bfeafa48 [ 43.931859] ffffffff81451ca2 024000c2bfeaf988 0000000041b58ab3 ffffffff84195215 [ 43.931861] Call Trace: [ 43.931873] [] dump_stack+0xc1/0x128 [ 43.931883] [] warn_alloc+0x212/0x240 [ 43.931891] [] ? zone_watermark_ok_safe+0x280/0x280 [ 43.931900] [] ? avc_has_perm+0xb0/0x4f0 [ 43.931910] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 43.931920] [] __vmalloc_node_range+0x3f5/0x5f0 [ 43.931933] [] ? check_preemption_disabled+0x3b/0x200 [ 43.931943] [] ? task_has_security+0x130/0x270 [ 43.931950] [] vmalloc+0x5b/0x70 [ 43.931958] [] ? sel_write_load+0x130/0xfd0 [ 43.931965] [] sel_write_load+0x130/0xfd0 [ 43.931973] [] ? get_futex_key+0x1050/0x1050 [ 43.931980] [] ? sel_read_bool+0x250/0x250 [ 43.931990] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 43.931997] [] ? do_futex+0x3f8/0x15c0 [ 43.932005] [] ? sel_read_bool+0x250/0x250 [ 43.932012] [] __vfs_write+0x103/0x680 [ 43.932020] [] ? do_iter_readv_writev+0x400/0x400 [ 43.932028] [] ? __lock_is_held+0xa1/0xf0 [ 43.932036] [] ? __lock_is_held+0xa1/0xf0 [ 43.932044] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 43.932051] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 43.932058] [] ? __sb_start_write+0x14a/0x310 [ 43.932065] [] vfs_write+0x189/0x530 [ 43.932073] [] SyS_write+0xd9/0x1b0 [ 43.932080] [] ? SyS_read+0x1b0/0x1b0 [ 43.932089] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 43.932096] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 43.932105] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 43.932108] Mem-Info: [ 43.932125] active_anon:53262 inactive_anon:44 isolated_anon:0 [ 43.932125] active_file:3455 inactive_file:8281 isolated_file:0 [ 43.932125] unevictable:0 dirty:130 writeback:0 unstable:0 [ 43.932125] slab_reclaimable:5410 slab_unreclaimable:59530 [ 43.932125] mapped:24068 shmem:51 pagetables:695 bounce:0 [ 43.932125] free:1478034 free_pcp:272 free_cma:0 [ 43.932139] Node 0 active_anon:213048kB inactive_anon:176kB active_file:13820kB inactive_file:33124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96272kB dirty:520kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 73728kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 43.932155] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 43.932180] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 43.932206] Normal free:2916144kB min:36824kB low:46028kB high:55232kB active_anon:213048kB inactive_anon:176kB active_file:13820kB inactive_file:33124kB unevictable:0kB writepending:520kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21640kB slab_unreclaimable:238120kB kernel_stack:5888kB pagetables:2780kB bounce:0kB free_pcp:452kB local_pcp:112kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 43.933717] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 537*4kB (UME) 42*8kB (ME) 24*16kB (ME) 52*32kB (UME) 76*64kB (UME) 16*128kB (UME) 4*256kB (ME) 3*512kB (ME) 44*1024kB (ME) 4*2048kB (UME) 696*4096kB (M) = 2918068kB [ 43.933821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 43.933823] 11786 total pagecache pages [ 43.933827] 0 pages in swap cache [ 43.933831] Swap cache stats: add 0, delete 0, find 0/0 [ 43.933833] Free swap = 0kB [ 43.933835] Total swap = 0kB [ 43.933837] 1965969 pages RAM [ 43.933839] 0 pages HighMem/MovableOnly [ 43.933841] 320509 pages reserved [ 43.938345] binder: BINDER_SET_CONTEXT_MGR already set [ 43.938353] binder: 5107:5114 ioctl 40046207 0 returned -16 [ 43.953248] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 43.953258] CPU: 1 PID: 5123 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 43.953263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.953276] ffff8801ba70f938 ffffffff81d94b69 1ffff100374e1f2a ffff8801ba439800 [ 43.953287] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ba70fa48 [ 43.953299] ffffffff81451ca2 024000c2ba70f988 0000000041b58ab3 ffffffff84195215 [ 43.953300] Call Trace: [ 43.953313] [] dump_stack+0xc1/0x128 [ 43.953321] [] warn_alloc+0x212/0x240 [ 43.953330] [] ? zone_watermark_ok_safe+0x280/0x280 [ 43.953339] [] ? avc_has_perm+0xb0/0x4f0 [ 43.953349] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 43.953359] [] __vmalloc_node_range+0x3f5/0x5f0 [ 43.953369] [] ? check_preemption_disabled+0x3b/0x200 [ 43.953376] [] ? task_has_security+0x130/0x270 [ 43.953384] [] vmalloc+0x5b/0x70 [ 43.953391] [] ? sel_write_load+0x130/0xfd0 [ 43.953398] [] sel_write_load+0x130/0xfd0 [ 43.953405] [] ? get_futex_key+0x1050/0x1050 [ 43.953413] [] ? sel_read_bool+0x250/0x250 [ 43.953423] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 43.953429] [] ? do_futex+0x3f8/0x15c0 [ 43.953436] [] ? sel_read_bool+0x250/0x250 [ 43.953445] [] __vfs_write+0x103/0x680 [ 43.953452] [] ? do_iter_readv_writev+0x400/0x400 [ 43.953460] [] ? __lock_is_held+0xa1/0xf0 [ 43.953468] [] ? __lock_is_held+0xa1/0xf0 [ 43.953476] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 43.953483] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 43.953490] [] ? __sb_start_write+0x14a/0x310 [ 43.953497] [] vfs_write+0x189/0x530 [ 43.953505] [] SyS_write+0xd9/0x1b0 [ 43.953512] [] ? SyS_read+0x1b0/0x1b0 [ 43.953521] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 43.953529] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 43.953537] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 43.953540] Mem-Info: [ 43.953557] active_anon:53269 inactive_anon:44 isolated_anon:0 [ 43.953557] active_file:3455 inactive_file:8281 isolated_file:0 [ 43.953557] unevictable:0 dirty:130 writeback:0 unstable:0 [ 43.953557] slab_reclaimable:5410 slab_unreclaimable:59616 [ 43.953557] mapped:24093 shmem:51 pagetables:695 bounce:0 [ 43.953557] free:1477877 free_pcp:342 free_cma:0 [ 43.953572] Node 0 active_anon:213076kB inactive_anon:176kB active_file:13820kB inactive_file:33124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96372kB dirty:520kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 73728kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 43.953588] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 43.953616] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 43.953647] Normal free:2915516kB min:36824kB low:46028kB high:55232kB active_anon:213076kB inactive_anon:176kB active_file:13820kB inactive_file:33124kB unevictable:0kB writepending:520kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21640kB slab_unreclaimable:238464kB kernel_stack:5984kB pagetables:2780kB bounce:0kB free_pcp:732kB local_pcp:404kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 43.953695] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 503*4kB (ME) 44*8kB (UME) 24*16kB (ME) 38*32kB (UME) 76*64kB (UME) 16*128kB (UME) 4*256kB (ME) 3*512kB (ME) 44*1024kB (ME) 3*2048kB (UME) 696*4096kB (M) = 2915452kB [ 43.953804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 43.953807] 11786 total pagecache pages [ 43.953811] 0 pages in swap cache [ 43.953815] Swap cache stats: add 0, delete 0, find 0/0 [ 43.953817] Free swap = 0kB [ 43.953819] Total swap = 0kB [ 43.953821] 1965969 pages RAM [ 43.953825] 0 pages HighMem/MovableOnly [ 43.953826] 320509 pages reserved [ 43.963093] FAULT_FLAG_ALLOW_RETRY missing 30 [ 43.963108] CPU: 0 PID: 5113 Comm: syz-executor4 Not tainted 4.9.80-gb30d2b5 #28 [ 43.963113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.963127] ffff8801b7aa7600 ffffffff81d94b69 ffff8801b7aa78e0 0000000000000000 [ 43.963139] ffff8801bbda2110 ffff8801b7aa77d0 ffff8801bbda2000 ffff8801b7aa77f8 [ 43.963149] ffffffff816624ba 0000000000007be1 ffff8801bbf338f0 ffff8801bbf338a0 [ 43.963151] Call Trace: [ 43.963164] [] dump_stack+0xc1/0x128 [ 43.963172] [] handle_userfault+0xa3a/0x1310 [ 43.963187] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 43.963194] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 43.963201] [] ? handle_mm_fault+0x117b/0x2530 [ 43.963206] [] ? handle_mm_fault+0x1fc3/0x2530 [ 43.963212] [] handle_mm_fault+0x1fd1/0x2530 [ 43.963218] [] ? __pmd_alloc+0x410/0x410 [ 43.963227] [] __do_page_fault+0x5c2/0xd40 [ 43.963235] [] ? mm_fault_error+0x2c0/0x2c0 [ 43.963251] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 43.963260] [] do_page_fault+0x27/0x30 [ 43.963269] [] page_fault+0x28/0x30 [ 43.963279] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 43.963290] [] ? rw_copy_check_uvector+0xb8/0x2c0 [ 43.963300] [] import_iovec+0xc8/0x3c0 [ 43.963309] [] ? get_pages_array+0x60/0x60 [ 43.963317] [] process_vm_rw+0x106/0x210 [ 43.963324] [] ? process_vm_rw_core.isra.3+0xa70/0xa70 [ 43.963332] [] ? exit_robust_list+0x230/0x230 [ 43.963341] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 43.963349] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 43.963358] [] ? userfaultfd_release+0x650/0x650 [ 43.963365] [] ? do_vfs_ioctl+0x458/0x1140 [ 43.963373] [] ? ioctl_preallocate+0x220/0x220 [ 43.963380] [] ? selinux_file_ioctl+0x355/0x530 [ 43.963386] [] ? selinux_capable+0x40/0x40 [ 43.963393] [] ? SyS_futex+0x22e/0x2d0 [ 43.963399] [] ? do_futex+0x15c0/0x15c0 2018/02/04 12:03:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:38 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002000-0xc)='/dev/rfkill\x00', 0x200, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000002000-0x18)={0x0, 0x5, 0x0, 0x200, 0x2}, &(0x7f0000001000-0x4)=0x18) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001000)={r1, 0x69, "2517a6e4e7dbc0f64ba4c8a01f6552415c12f1c026d98d37cf2b81927e582658bf1f879e9dccdd0d228ebde34d388ba19f29263ccfcba5b123c5616c638d4277eac1861579c95d130d8e290efa77f64bfd9e9b0105331c8421f51f600b6645a8cde6008da089129abf"}, &(0x7f0000001000)=0x71) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f0000001000-0xa)='encrypted\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002000-0x3c)="25766d6e6574307d637075736574707070305d255c6d696d655f74797065707070305c26e62840747275737465646367726f7570766d6e6574312900", 0xffffffffffffffff) keyctl$get_security(0x11, r2, &(0x7f000068b000)=""/50, 0x32) 2018/02/04 12:03:38 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000014000-0xe)='/dev/keychord\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x200, @remote={0xfe, 0x80, [], 0x0, 0xbb}}]}, &(0x7f0000013000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000012000)=""/113, 0x71) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000011000)={0x0, 0x0, &(0x7f0000000000)=[]}, &(0x7f0000001000-0x4)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000012000-0xb8)={r1, 0xab79, 0x9, 0x100000001, 0x3, 0x5, 0x100000000, 0x6, {r2, @in={{0x2, 0x3, @empty}}, 0x8, 0x7ff, 0x1, 0x1, 0x7fff}}, &(0x7f0000013000-0x4)=0xb8) r3 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r3, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/04 12:03:38 executing program 5: mmap(&(0x7f0000000000/0x93f000)=nil, 0x93f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000093f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000940000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000083d000-0x3)={0x0, 0x1ff}, &(0x7f0000941000-0x4)=0x8) mmap(&(0x7f0000940000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000940000)={r1, @in={{0x2, 0x3, @multicast1=0xe0000001}}, 0x7, 0x9}, &(0x7f00001d8000-0x4)=0x98) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000940000-0xc)='/dev/autofs\x00', 0x2, 0x0) mmap(&(0x7f000093f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000073000-0xc)={0x0, 0xbd7, 0x2, [0x800, 0x80]}, &(0x7f0000940000-0x4)=0xc) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000754000-0xc)=""/12) mmap(&(0x7f0000940000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000940000)=0x3) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00008d5000)={r3, 0x100, 0x8, 0x3, 0xdc7e, 0x4}, &(0x7f0000193000)=0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000024d000)={@common='lo\x00', &(0x7f000093e000)=@ethtool_eeprom={0xc}}) 2018/02/04 12:03:38 executing program 1: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) r2 = syz_open_procfs(r0, &(0x7f0000004000)="706167656d61700029976c32d862fc7deaae881b11848f87a85be0a0e71c63f75b30984037b714efdf205de3692ae4ce4fd439e97b8e7d4832a8c5bf6cd05bf2f093ea99478ef29022f46baab3a38b9c3403d775025c048910742e85d4cb5226417dea53244635b7d776885d2a4cf8118250e8968dd2c46ce9c51041096371d032a640ce730c678066e48d3bd0a585e99acae3c27db4c8425f16a40a47ede146b98839273f5dd4816def57503bf464b65265fcc758a08d142faefb1bb300000000000080001c1d1035cc49522438d18bd2989b53bf635d2ffa") close(r1) ioctl$TCFLSH(r2, 0x540b, 0x0) 2018/02/04 12:03:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000004000-0xd)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x20) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000005000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(r1, &(0x7f0000007000-0x4d)="60f4749edaf8454d75995befdd2a02908c37bc9c97c4f6d15a94b98705ff205262c1941ff42c476836c277059120fb31beaeac52e98d084b4d03a24f5d4116331bbe71ef5481ee9030b464a8be", 0x4d, 0x100000000, &(0x7f0000003000-0x10)={0x0, 0x989680}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/26) rt_sigsuspend(&(0x7f0000008000-0x8)={0x4}, 0x8) 2018/02/04 12:03:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000578000)='./file0\x00', 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000bd8000-0xf)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$KDENABIO(r0, 0x4b36) lsetxattr(&(0x7f0000911000-0x8)='./file0\x00', &(0x7f0000fb0000-0x19)=@known='system.posix_acl_default\x00', &(0x7f0000fbf000)="0200000002000000000000000500de2d6a1f06a0", 0x14, 0x0) 2018/02/04 12:03:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f00001e5000-0x8)=[], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) [ 43.963406] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 43.963414] [] SyS_process_vm_readv+0x47/0x60 [ 43.963421] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 45.150385] binder: 5103:5111 transaction failed 29189/-3, size 56-8 line 3127 [ 45.150396] binder_alloc: 5103: binder_alloc_buf, no vma [ 45.150413] binder: 5107:5114 transaction failed 29189/-3, size 56-8 line 3127 [ 45.152631] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.177509] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/04 12:03:38 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ffe000)='/dev/sequencer\x00', 0x410000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netrom(r0, &(0x7f0000000000)=@ax25, &(0x7f0000002000-0x4)=0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001000)={0x0, 0x74, "01eba46fa263a5e5eecdfcd8a9205087fcb9e17f451cabac964709ccb26ed90291505d227b5d0244bd9fbfeae50e244aa1eece6d2aaeda25f48f7091956dd34245c510e11668b2259298749afd4ec63ce978bf27e4922315d6984d2d7252a6e275fd6dec23939b406b5c906119f2f690ff072c27"}, &(0x7f0000002000)=0x7c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000003000-0x1a)={r1, 0xfffffffffffffffb, 0x9, [0x3, 0x7, 0x10000, 0x10000, 0x5, 0x1, 0x7f, 0x81, 0x2]}, 0x1a) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000001000-0x4)=0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001000-0x8)=0x7) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2018/02/04 12:03:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f00001e5000-0x8)=[], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:38 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000e27000-0xd)='/dev/usbmon#\x00', 0x7, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000ae8000-0x4)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000494000-0x10)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}}, 0x10) sysfs$2(0x2, 0xb7b3, &(0x7f00005e4000)) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x2, 0x2, 0x8, 0x2, 0x1000}}) [ 45.193954] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 45.205858] binder_alloc: 5140: binder_alloc_buf, no vma [ 45.205876] binder: 5140:5145 transaction failed 29189/-3, size 56-8 line 3127 [ 45.208282] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.224500] binder: 5153:5154 got transaction with invalid handle, 0 2018/02/04 12:03:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cf000-0x78)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000adb000)="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", 0x7d0, 0x0, &(0x7f0000efc000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl(r0, 0x9, &(0x7f00000d3000-0x95)="d85e975c2f6f1c64241eb63927780ae0438b62f417785e7577438a07313b491bbd34035ef2efca62fa0e97b5edda559484fe922e9974445d4315c3abb5bbde10fa034c1695c497f531e5346a0962c482dff2e432c509a70fc8a588d2c85c8cfdfccdc10afe7cba7e7376679967f0ef375323da9b8dac1e9d3d9995aa24a2d7a6f1b1d432c267736fa58514122899888b2ca6c55733897e27698420d9a73508c3a6a5d06e1d586afbb4034e090d7274e0") 2018/02/04 12:03:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000366000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000f28000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f000081c000-0x4c)={0x9, 0x0, 0x7}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000980000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000620000-0xb0)={{0xfffffffffffffff9, 0x3}, 'port0\x00', 0x8, 0x10, 0x2, 0x4, 0xffff, 0xbcc, 0x100000000, 0x0, 0x4, 0x7}) 2018/02/04 12:03:38 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x0, [0x0, 0x0, 0x8001]}, 0x5c) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000206000-0xb)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00004eb000-0x24)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x60, &(0x7f0000000000), 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000a73000-0xe8)={{{@in6=@ipv4={[], [], @remote}, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f000034a000)=0xe8) [ 45.224526] binder: 5153:5154 transaction failed 29201/-22, size 56-8 line 3219 [ 45.226813] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.243085] binder_alloc: 5156: binder_alloc_buf, no vma [ 45.243101] binder: 5156:5159 transaction failed 29189/-3, size 56-8 line 3127 [ 45.245425] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.269786] binder: 5165:5172 transaction failed 29189/-22, size 56-8 line 3004 [ 45.274428] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.301156] CPU: 0 PID: 5144 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 45.308668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.318001] ffff8801beb47938 ffffffff81d94b69 1ffff10037d68f2a ffff8801b62c3000 [ 45.325977] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801beb47a48 [ 45.333948] ffffffff81451ca2 024000c2beb47988 0000000041b58ab3 ffffffff84195215 [ 45.341930] Call Trace: [ 45.344492] [] dump_stack+0xc1/0x128 [ 45.349831] [] warn_alloc+0x212/0x240 [ 45.355263] [] ? zone_watermark_ok_safe+0x280/0x280 [ 45.361908] [] ? avc_has_perm+0xb0/0x4f0 [ 45.368284] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 45.374748] [] __vmalloc_node_range+0x3f5/0x5f0 [ 45.381038] [] ? check_preemption_disabled+0x3b/0x200 [ 45.387848] [] ? task_has_security+0x130/0x270 [ 45.394054] [] vmalloc+0x5b/0x70 [ 45.399054] [] ? sel_write_load+0x130/0xfd0 [ 45.404995] [] sel_write_load+0x130/0xfd0 [ 45.410762] [] ? get_futex_key+0x1050/0x1050 [ 45.416794] [] ? sel_read_bool+0x250/0x250 [ 45.422649] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 45.429639] [] ? do_futex+0x3f8/0x15c0 [ 45.435150] [] ? sel_read_bool+0x250/0x250 [ 45.441004] [] __vfs_write+0x103/0x680 [ 45.446518] [] ? do_iter_readv_writev+0x400/0x400 [ 45.452981] [] ? __lock_is_held+0xa1/0xf0 [ 45.458747] [] ? __lock_is_held+0xa1/0xf0 [ 45.464515] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 45.471331] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 45.477895] [] ? __sb_start_write+0x14a/0x310 [ 45.484015] [] vfs_write+0x189/0x530 [ 45.489362] [] SyS_write+0xd9/0x1b0 [ 45.494610] [] ? SyS_read+0x1b0/0x1b0 [ 45.500037] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 45.506846] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 45.513397] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 45.521532] Mem-Info: [ 45.523940] active_anon:50041 inactive_anon:44 isolated_anon:0 [ 45.523940] active_file:3496 inactive_file:8264 isolated_file:0 [ 45.523940] unevictable:0 dirty:172 writeback:0 unstable:0 [ 45.523940] slab_reclaimable:5428 slab_unreclaimable:59568 [ 45.523940] mapped:23997 shmem:51 pagetables:619 bounce:0 [ 45.523940] free:1481326 free_pcp:433 free_cma:0 [ 45.557337] Node 0 active_anon:200164kB inactive_anon:176kB active_file:13984kB inactive_file:33056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95988kB dirty:688kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 69632kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 45.586682] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 45.616002] lowmem_reserve[]: 0 2908 6410 6410 [ 45.621203] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 45.652650] lowmem_reserve[]: 0 0 3501 3501 [ 45.657534] Normal free:2929344kB min:36824kB low:46028kB high:55232kB active_anon:200164kB inactive_anon:176kB active_file:13984kB inactive_file:33056kB unevictable:0kB writepending:700kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21712kB slab_unreclaimable:238272kB kernel_stack:5408kB pagetables:2476kB bounce:0kB free_pcp:1084kB local_pcp:416kB free_cma:0kB [ 45.691358] lowmem_reserve[]: 0 0 0 0 [ 45.695718] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 45.711172] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 45.728658] Normal: 632*4kB (UME) 66*8kB (UME) 25*16kB (UME) 58*32kB (UME) 78*64kB (UME) 17*128kB (UME) 4*256kB (ME) 3*512kB (ME) 44*1024kB (ME) 3*2048kB (UME) 699*4096kB (M) = 2929344kB 2018/02/04 12:03:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000ea1000-0x38)={0x0, 0x0, &(0x7f0000e0a000)=[], 0x0, 0x0, 0x0, 0x20008005}, 0x24040014) 2018/02/04 12:03:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x801, 0x0) pwrite64(r0, &(0x7f0000a7f000)="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", 0x1001, 0x0) 2018/02/04 12:03:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000006000-0x20)) clock_gettime(0x0, &(0x7f00005a1000-0x10)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000a1000)={{}, {r1, r2+10000000}}, &(0x7f0000adc000-0x20)) 2018/02/04 12:03:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001000-0x4)) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000573000)=r1) ptrace$setopts(0x463a373f75aaeac3, r1, 0x1, 0x100024) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001000-0xe)='/dev/keychord\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000629000)={0x2, [0x0, 0x0]}, &(0x7f0000c55000-0x4)=0xc) getgroups(0xfffffd94, &(0x7f00009e4000-0xc)=[0x0, 0x0, 0x0]) 2018/02/04 12:03:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000c6e000)={@generic, @ifru_addrs=@hci}) write$tun(r1, &(0x7f000089d000-0x116b)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0xf09, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@mpls_mc={0x8848, {[], @ipv6={0x0, 0x6, "3b47bf", 0xf8a, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}}}}}}}}}, 0xfca) 2018/02/04 12:03:39 executing program 4: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00008d0000)={0x0, 0x0, &(0x7f0000fd6000+0xedd)}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000772000-0x10)={0x0, 0x0, &(0x7f0000fd7000)}) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000fd5000)=""/205, 0xcd, 0x20, &(0x7f0000fd6000-0x1c)={0xa, 0x0, 0xb5, @dev={0xfe, 0x80, [], 0x0, 0x17}, 0x6}, 0x1c) 2018/02/04 12:03:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000919000-0x9)='/dev/rtc\x00', 0x400, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00001f0000-0x20)={0x2, 0x0, 0x2, 0x1000}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f000062e000-0x10)={0x6, r2}) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) pipe(&(0x7f000053b000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000e95000-0x14)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) ioctl$sock_netdev_private(r4, 0x89f3, &(0x7f0000cc8000-0xad)="1904e05b21150223c55d6208db1b55ab604a7388be9760b0e869a54ec1486acf6b519cace471e8110ae9c8bd24cf6b8e97f2124c775ab97d0bb13df84233c55d6329d71c70f35a126af1eaab5675d7f2a7196d98803c73fc0ec15f05d83404a6a234c8b262fb72779279bf88468d2d609dc1763d2bf389a17b5ab9a1b509eea2c857350809a24e6a1dc7df5c8bf23e7e637bdcad8764c854a7da119041f463d574983f3d73c04caa001167f9cb") [ 45.748122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 45.756767] 11818 total pagecache pages [ 45.760728] 0 pages in swap cache [ 45.764156] Swap cache stats: add 0, delete 0, find 0/0 [ 45.769483] Free swap = 0kB [ 45.772484] Total swap = 0kB [ 45.775477] 1965969 pages RAM [ 45.778546] 0 pages HighMem/MovableOnly [ 45.782503] 320509 pages reserved 2018/02/04 12:03:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, r0, 0xfff, 0x2f) r1 = syz_open_procfs(0x0, &(0x7f0000ad1000)='pagemap\x00') sendfile(r1, r1, &(0x7f0000014000), 0xffff) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00004e3000)={0x0, 0x11, 0x20, 0x401, 0x1}, &(0x7f0000939000)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00008b6000-0x8)={r2}, &(0x7f0000667000)=0x8) 2018/02/04 12:03:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00008ef000)={0x0, 0x0, 0xffffffffffffffff}) connect$inet(r0, &(0x7f0000932000+0x2c4)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dd000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000079000-0x96), 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccc000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x64) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f000007a000), &(0x7f00006d5000-0x1)=0x8) 2018/02/04 12:03:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000022000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000019000-0x10)={0x0, 0x2710}, 0x10) readv(r0, &(0x7f0000234000-0x10)=[{&(0x7f000002a000-0xd6)=""/214, 0xd6}], 0x1) 2018/02/04 12:03:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000433000-0xe)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010c000-0x9)='configfs\x00', 0x1001, &(0x7f0000a06000)) getpeername(r0, &(0x7f0000a86000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000b7000)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000bdc000)={{{@in6=@remote, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f000000c000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00009ab000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x2, 0x7fffffff, 0x0, 0x3, 0x2, 0x0, 0xa0, 0x32, r1, r2}, {0x4, 0x1, 0x8, 0x6ac, 0x340, 0x8, 0x7, 0x1f}, {0x3, 0xe2, 0xffffffffffffff43, 0x3}, 0x3, 0x9, 0x2, 0x1, 0x2, 0x1}, {{@in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x2, 0x2b}, 0x2, @in=@broadcast=0xffffffff, 0x2, 0x3, 0x1, 0x2, 0xe7f7, 0xb7f0, 0xfffffffffffffff9}}, 0xe8) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open(&(0x7f0000ca6000-0xe)='./file0/file0\x00', 0x0, 0x0) [ 45.800295] binder: 5186:5189 transaction failed 29189/-22, size 56-8 line 3004 [ 45.801825] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) 2018/02/04 12:03:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) [ 45.801834] CPU: 1 PID: 5181 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 45.801839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.801852] ffff8801b4d7f938 ffffffff81d94b69 1ffff100369aff2a ffff8801b4d74800 [ 45.801863] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b4d7fa48 [ 45.801875] ffffffff81451ca2 024000c2b4d7f988 0000000041b58ab3 ffffffff84195215 [ 45.801876] Call Trace: [ 45.801889] [] dump_stack+0xc1/0x128 [ 45.801899] [] warn_alloc+0x212/0x240 [ 45.801907] [] ? zone_watermark_ok_safe+0x280/0x280 [ 45.801915] [] ? avc_has_perm+0xb0/0x4f0 [ 45.801924] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 45.801932] [] __vmalloc_node_range+0x3f5/0x5f0 [ 45.801941] [] ? check_preemption_disabled+0x3b/0x200 [ 45.801949] [] ? task_has_security+0x130/0x270 [ 45.801956] [] vmalloc+0x5b/0x70 [ 45.801963] [] ? sel_write_load+0x130/0xfd0 [ 45.801970] [] sel_write_load+0x130/0xfd0 [ 45.801978] [] ? get_futex_key+0x1050/0x1050 [ 45.801985] [] ? sel_read_bool+0x250/0x250 [ 45.801995] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 45.802001] [] ? do_futex+0x3f8/0x15c0 [ 45.802009] [] ? sel_read_bool+0x250/0x250 [ 45.802017] [] __vfs_write+0x103/0x680 [ 45.802024] [] ? do_iter_readv_writev+0x400/0x400 [ 45.802032] [] ? __lock_is_held+0xa1/0xf0 [ 45.802040] [] ? __lock_is_held+0xa1/0xf0 [ 45.802048] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 45.802056] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 45.802062] [] ? __sb_start_write+0x14a/0x310 [ 45.802069] [] vfs_write+0x189/0x530 [ 45.802077] [] SyS_write+0xd9/0x1b0 [ 45.802084] [] ? SyS_read+0x1b0/0x1b0 [ 45.802092] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 45.802104] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 45.802113] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 45.802161] Mem-Info: [ 45.802185] active_anon:53762 inactive_anon:44 isolated_anon:0 [ 45.802185] active_file:3496 inactive_file:8270 isolated_file:0 [ 45.802185] unevictable:0 dirty:185 writeback:0 unstable:0 [ 45.802185] slab_reclaimable:5430 slab_unreclaimable:59570 [ 45.802185] mapped:24057 shmem:51 pagetables:717 bounce:0 [ 45.802185] free:1477429 free_pcp:294 free_cma:0 [ 45.802355] Node 0 active_anon:215048kB inactive_anon:176kB active_file:13984kB inactive_file:33080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96228kB dirty:740kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 67584kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 45.802375] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 45.802405] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 45.802434] Normal free:2913724kB min:36824kB low:46028kB high:55232kB active_anon:215048kB inactive_anon:176kB active_file:13984kB inactive_file:33080kB unevictable:0kB writepending:740kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21720kB slab_unreclaimable:238280kB kernel_stack:5920kB pagetables:2868kB bounce:0kB free_pcp:540kB local_pcp:292kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 45.802483] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 499*4kB (ME) 48*8kB (ME) 23*16kB (ME) 40*32kB (UME) 78*64kB (UME) 17*128kB (UME) 4*256kB (ME) 3*512kB (ME) 44*1024kB (ME) 2*2048kB (UE) 696*4096kB (M) = 2913724kB 2018/02/04 12:03:40 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 1: mmap(&(0x7f0000000000/0xaf2000)=nil, 0xaf2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) fsync(r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000af1000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000202000)=@ethtool_dump={0x3f}}) 2018/02/04 12:03:40 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005f9000-0x10)='/dev/sequencer2\x00', 0x10800, 0x0) fcntl$addseals(r0, 0x409, 0xd) mmap(&(0x7f0000000000/0x1e000)=nil, 0x1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000017000-0x150)=[{&(0x7f0000002000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f000001a000)=[], 0x0, &(0x7f000001a000)=[]}, {&(0x7f0000010000-0x8)=@abs, 0x8, &(0x7f000001a000)=[{&(0x7f000000c000-0x1000)}], 0x1, &(0x7f000001a000)=[]}], 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f0000017000-0x124)={0x28, 0x1e, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x7}, [@typed={0x3, 0x0, @ipv4=@empty}, @typed={0x8, 0xa}]}, 0x28}, 0x1}, 0x0) 2018/02/04 12:03:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x2) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x3, 0x3, 0x42, 0x3, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) 2018/02/04 12:03:40 executing program 7: mmap(&(0x7f0000000000/0xbff000)=nil, 0xbff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000bf9000-0xc)={0x4}) epoll_wait(r0, &(0x7f0000bfa000-0x60)=[{}], 0x1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 2018/02/04 12:03:40 executing program 5: mmap(&(0x7f0000000000/0xdfe000)=nil, 0xdfe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r0, &(0x7f0000df6000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x200000001}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe, &(0x7f0000c72000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) 2018/02/04 12:03:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:40 executing program 2: futex(&(0x7f00008d1000), 0x800000000008, 0x0, &(0x7f00007f3000-0x10), &(0x7f0000299000-0x4), 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001000-0x20)={{}, {0x77359400}}, &(0x7f0000771000)) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x42, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000001000)=0xb) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000001000)=0x20, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0}}) futex(&(0x7f0000000000+0x745)=0xfe, 0xc, 0x0, &(0x7f0000dac000)={r3}, &(0x7f0000048000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001000-0x4)=0xf4d, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000001000-0x4)) 2018/02/04 12:03:40 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000944000+0xc03)='/dev/net/tun\x00', 0x0, 0x400200) connect$ax25(0xffffffffffffffff, &(0x7f00006ea000-0x10)={0x3, {"99557347c72494"}, 0x8}, 0x10) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00001cc000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000995000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000ef0000-0x14)={@empty, 0x0}, &(0x7f0000d4a000-0x4)=0x14) connect$packet(r0, &(0x7f0000bf3000)={0x11, 0x1f, r1, 0x1, 0xbc2, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}}, 0x14) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/02/04 12:03:40 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000ace000-0x10)="818c002ecb29c8371b97e8a46c92f276", 0x10) sendto$inet(r0, &(0x7f0000eef000-0xd8e), 0x0, 0x4004000020000046, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x8001) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000002000-0x8)=@assoc_value={r3, 0x4}, 0x8) [ 45.802582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 45.802584] 11818 total pagecache pages [ 45.802587] 0 pages in swap cache [ 45.802592] Swap cache stats: add 0, delete 0, find 0/0 [ 45.802594] Free swap = 0kB [ 45.802596] Total swap = 0kB [ 45.802598] 1965969 pages RAM [ 45.802600] 0 pages HighMem/MovableOnly [ 45.802603] 320509 pages reserved [ 45.820147] device eql entered promiscuous mode [ 45.823138] skbuff: bad partial csum: csum=0/3849 len=3712 [ 46.345412] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/04 12:03:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) accept4$vsock_stream(r1, &(0x7f00004de000-0x10)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, 0x800) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000df6000)={0x0, 0x1}, &(0x7f0000a71000)=0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00002fe000)={0x80000000, 0x2, 0x20a, 0x3, 0x3, 0x9, 0x1, 0x9, r3}, &(0x7f0000a14000-0x4)=0x20) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000020000-0x4)) 2018/02/04 12:03:40 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0x5, 0x181800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000001000-0x10)={0x2, 0x1, @dev={0xac, 0x14, 0x0, 0x16}}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000a4000)='./control\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000042000-0xa)='./control\x00', 0x8100002a) creat(&(0x7f000000b000-0x10)='./control/file0\x00', 0x0) pipe(&(0x7f000002f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 2018/02/04 12:03:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = timerfd_create(0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f000024b000-0x9)='/dev/sg#\x00', 0x7f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000c1d000)) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f000097a000)={0x0, 0x0}) shutdown(r1, 0x0) fallocate(r4, 0x1, 0x2, 0x38) timerfd_settime(r2, 0x3, &(0x7f0000001000-0x20)={{}, {0x0, 0x989680}}, &(0x7f0000c20000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f000016f000-0x68)={0x8, 0x10001, 0x72dac9f, {}, 0x5, 0xebe3}) epoll_pwait(r0, &(0x7f0000301000)=[{}], 0x1, 0x0, &(0x7f00000fb000-0x8), 0x8) syz_open_dev$urandom(&(0x7f000061a000-0xd)='/dev/urandom\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000bda000-0x3a)=""/58) 2018/02/04 12:03:40 executing program 4: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002000)='/selinux/enforce\x00', 0x20000, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000d000-0xe8)={{{@in=@loopback, @in6=@mcast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000004000)=0xe8) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005000)={{{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, @in=@empty, 0x2, 0x9, 0x2, 0x2645, 0xa, 0x0, 0xa0, 0x2f, r1, r2}, {0x7fff, 0x2, 0x1000000000, 0x8, 0x8, 0x80000001, 0x3, 0x80000000}, {0x100000001, 0x6, 0x200, 0xffffffffffffffc1}, 0x5cb946ac, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x3}, {{@in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x2, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x0, 0x10}, 0x3, 0x3, 0x1, 0x101, 0x7fffffff, 0x1, 0x7}}, 0xe8) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f000000d000)='tls\x00', 0x4) symlink(&(0x7f000000c000-0x6)='./control\x00', &(0x7f000000b000-0x6)='./bus\x00') mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000014000)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000010000-0x6)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000018000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) renameat2(r4, &(0x7f0000017000)='./bus\x00', r4, &(0x7f0000019000-0xd)='./file0\x00', 0x2) 2018/02/04 12:03:40 executing program 1: mmap(&(0x7f0000000000/0xff9000)=nil, 0xff9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000ff9000-0x8)={0x0, 0x7530}, 0x10) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ffa000-0xc)='/dev/autofs\x00', 0x301200, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000ed8000-0x4), &(0x7f0000c1a000)=0x4) [ 46.382445] binder: 5231:5238 transaction failed 29189/-22, size 56-8 line 3004 2018/02/04 12:03:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000154000), &(0x7f0000630000)=0x4) [ 46.427124] binder: undelivered TRANSACTION_ERROR: 29189 [ 46.463481] binder_alloc: 5279: binder_alloc_buf, no vma 2018/02/04 12:03:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000313000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000b5f000)={0x1, 0x7e, &(0x7f0000882000)="ca379ed413845cb1115537b0e50c89441e437ef28520841de462b92cceb82bdf301ad4ba9bdd03a777d1e37ba9e323bb6ab351b88499f4f10ce2a43c111cc80c7254e243586838759088f21f799d9b7feef8c2d5e85c19c4605960957d77af76e6157b19fe129ecfff34c63696d1aebafb9bf0c4661ada9a823bd63d339d"}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00006e9000-0x4), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x26, &(0x7f000046c000-0x3), &(0x7f000016c000-0x4)=0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) 2018/02/04 12:03:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000000002, 0x0) bind$inet6(r0, &(0x7f000002e000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x100000003}, 0x1c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000002000-0x11)=[{0xffffffffffffffff}, {0xffffffffffffffff, 0x4061}], 0x2, 0x0) bind$inet6(r0, &(0x7f0000002000-0xe)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x10001}, 0x1c) syz_extract_tcp_res$synack(&(0x7f0000e52000-0x8), 0x1, 0x0) getsockname$inet6(r0, &(0x7f0000397000-0x1c)={0x0, 0x0, 0x0, @local={0x0, 0x0, [], 0x0}}, &(0x7f00004aa000)=0x1c) 2018/02/04 12:03:40 executing program 0: r0 = socket(0x19, 0x3, 0xffffffff80000000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0xb4)=""/180, &(0x7f00004f8000)=0xb4) 2018/02/04 12:03:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f00008b0000-0x4)=0xffffffffffffffff, 0x9, 0x100000001, &(0x7f000008a000)={0x0, 0x1c9c380}, &(0x7f00008ec000)=0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000801000-0x10)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0xffffffff) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000b73000-0x4)) r1 = mq_open(&(0x7f0000000000)='bdevppp0[\x00', 0x0, 0x0, &(0x7f0000665000-0x40)) r2 = epoll_create(0x1f) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000828000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000005000-0xc)={0xffffefd}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000ec9000)) ppoll(&(0x7f0000b5b000-0x8)=[{r2}], 0x1, &(0x7f00009c7000), &(0x7f0000839000-0x8), 0x8) 2018/02/04 12:03:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000000e000)={0x0, 0x0}, 0x84000) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f000098e000-0x8)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f000024d000)) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x7f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000c15000), &(0x7f0000984000-0x4)=0x4) r3 = syz_open_pts(r2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000bab000)) ioctl$TCXONC(r3, 0x540a, 0x2) 2018/02/04 12:03:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) [ 46.471524] binder: 5279:5283 transaction failed 29189/-3, size 56-8 line 3127 [ 46.476822] binder_alloc: 5279: binder_alloc_buf, no vma [ 46.476838] binder: 5287:5293 transaction failed 29189/-3, size 56-8 line 3127 [ 46.479185] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/04 12:03:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000f1d000)=0xfffffffffffffffb, 0x4) r1 = dup(r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00009ea000-0x8)={0x0, 0x10}, &(0x7f0000202000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00005c1000)={r2, 0x1ff}, &(0x7f000006b000)=0x8) bind$inet6(r1, &(0x7f0000876000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x39) 2018/02/04 12:03:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00006f5000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000132000-0x38)={&(0x7f0000380000)=@in6={0x0, 0x0, 0x0, @remote={0x0, 0x0, [], 0x0}}, 0x1c, &(0x7f0000299000-0x20)=[], 0x0, &(0x7f00007ac000-0x1000)=""/428, 0x1ac}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002a8000-0xc)={0x0}, &(0x7f000016e000-0x4)=0xc) ioprio_get$pid(0x2, r3) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) pselect6(0x10044, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40)={0x64, 0xfd}, &(0x7f000070b000-0x40), &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/04 12:03:40 executing program 0: mmap(&(0x7f0000000000/0x1e000)=nil, 0x1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000e000)=@ipv6_newroute={0x1c, 0x48, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x1c}, 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000000c000)='/dev/vga_arbiter\x00', 0x40000, 0x0) mmap(&(0x7f000001e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f000001e000)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000007000-0x4)=0x4200000000000000, 0x4) 2018/02/04 12:03:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:40 executing program 2: mmap(&(0x7f0000000000/0xf7d000)=nil, 0xf7d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0xdb) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000e72000-0x4)=0x2000000000003, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000f7d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000f7d000)={0x20, 0x3f, 0x1, 0xc00000000, 0xc240, 0xff}) mmap(&(0x7f0000f7d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000f7e000-0x4)=0x40, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f000049b000-0x4)=0xb93, 0x4) sendto$inet6(r0, &(0x7f0000f7a000-0x23), 0x0, 0x0, &(0x7f00004c7000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000f64000-0x59)=""/246, 0xf6, 0x23fffd, 0x0, 0xfffffffffffffd68) 2018/02/04 12:03:40 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) fchown(r1, 0x0, 0x0) clone(0x0, &(0x7f0000013000-0xd), &(0x7f0000011000), &(0x7f0000002000-0x4), &(0x7f0000003000-0xbf)) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000012000)=0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f000018f000)={&(0x7f00005da000/0x4000)=nil, 0x4000}) 2018/02/04 12:03:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) sched_rr_get_interval(r1, &(0x7f0000c06000-0x10)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00008b1000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00004c0000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f00007a8000)=0x101) listen(r3, 0x6e02) sendto$inet(r0, &(0x7f00009aa000-0x88), 0x0, 0x20008045, &(0x7f00000b0000)={0x2, 0x2, @empty}, 0x10) r4 = fcntl$getown(r3, 0x9) fcntl$lock(r0, 0x7, &(0x7f000012c000-0x20)={0x3, 0x4, 0x4, 0x3, r4}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000044e000)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @loopback}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000209000)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000f50000-0xe8)={{{@in=@empty, @in6=@ipv4={[], [], @local}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000aad000-0x4)=0xe8) sendmsg$nl_route(r2, &(0x7f0000622000-0x38)={&(0x7f000074d000-0xc)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000d68000)={&(0x7f0000720000-0x50)=@bridge_newneigh={0x50, 0x1c, 0x402, 0x0, 0x0, {0x1c, 0x0, 0x0, r5, 0x28, 0x10, 0x7}, [@NDA_IFINDEX={0x8, 0x8, r6}, @NDA_PORT={0x8, 0x6, 0x3}, @NDA_DST_MAC={0xc, 0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}}, @NDA_DST_MAC={0xc, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NDA_DST_MAC={0xc, 0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x12}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) dup2(r0, r3) [ 46.536905] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/04 12:03:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000fd000)=0xffffffffffffff80, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000873000)={&(0x7f0000187000-0xc)={0x10}, 0xc, &(0x7f0000452000)={&(0x7f0000009000)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/02/04 12:03:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000f1d000)=0xfffffffffffffffb, 0x4) r1 = dup(r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00009ea000-0x8)={0x0, 0x10}, &(0x7f0000202000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00005c1000)={r2, 0x1ff}, &(0x7f000006b000)=0x8) bind$inet6(r1, &(0x7f0000876000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x39) [ 46.590780] binder_alloc: 5324: binder_alloc_buf, no vma [ 46.601148] binder: 5324:5332 transaction failed 29189/-3, size 56-8 line 3127 2018/02/04 12:03:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x227d, &(0x7f0000f27000-0x10)=@buf={0xffffffffffffffe5, &(0x7f0000b82000-0xc4)}) 2018/02/04 12:03:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 5: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000c000-0x6)='./control\x00', &(0x7f000000b000-0x6)='./bus\x00') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f000000c000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000000b000)='/dev/sequencer2\x00', 0x2800, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000000c000+0x71c)='/selinux/enforce\x00', 0x200000, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000c000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000000d000-0x9)='/dev/rtc\x00', 0x280000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000008000)=0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x15, &(0x7f000000a000)="9033b6edc3bd58b6ad79fd4cb502b06664c73979464db88f7b3be5bd53027ed0912f25e06314055a04f6c313a14af379bcbe824f1b4bc3f6dbb5e9f39507bb9a344fb8c7d5917c9c21a742") mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000017000+0x994)='./control\x00', 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000010000-0x6)='./bus\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000017000-0x5c)={{0xa, 0x3, 0x9398, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0x2}, {0xa, 0x1, 0x20, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x7}, 0xfffffffffffffffd, [0x9, 0x80, 0x0, 0x8, 0x6468, 0x9, 0x7, 0x5]}, 0x5c) mmap(&(0x7f0000018000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) renameat2(r3, &(0x7f0000017000)='./bus\x00', r3, &(0x7f0000019000-0xd)='./file0\x00', 0x2) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001000)=@req={0x4, 0x48, 0xff, 0x7}, 0x10) [ 46.633689] binder: undelivered TRANSACTION_ERROR: 29189 [ 46.664407] binder_alloc: 5358: binder_alloc_buf, no vma [ 46.673534] binder: 5358:5361 transaction failed 29189/-3, size 56-8 line 3127 2018/02/04 12:03:40 executing program 7: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000258000)='/dev/rtc\x00', 0x22000, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000fd6000-0x34)={{0x3, 0x3, 0x2, 0x1, 0x7000000000000000}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r3, 0xa, 0x12) fcntl$setownex(r3, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r4, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r3, r4) tkill(r1, 0x15) 2018/02/04 12:03:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000c7e000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000814000-0xa)=@file={0x1, './file0\x00'}, 0xfffffffffffffce6) pipe2(&(0x7f00001f3000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup2(r0, r1) getpeername$netlink(r1, &(0x7f0000eff000), &(0x7f0000455000-0x4)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000216000)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}}, 0x0, 0x81}, &(0x7f00000a8000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000b57000)={r3, @in={{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0x11}}}}, 0x8c) socketpair(0x200020000000000, 0xb, 0x894, &(0x7f0000d35000)) 2018/02/04 12:03:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x227d, &(0x7f0000f27000-0x10)=@buf={0xffffffffffffffe5, &(0x7f0000b82000-0xc4)}) 2018/02/04 12:03:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000ef000)='./file0\x00', 0x12400, 0x142) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000076f000)={0x0, 0x7fff}, &(0x7f0000764000)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000969000)={r1, 0xf8, "2b673ad51496341c402e68a3a976cce866c21ae982b6f2ce7f951a217e96ca45a5a16c0cd533f0126175b420947a6f8d5a15a5cf1273b9a34c02ed436cbd1d4bbc7f37ad7c6dde1bbe063a57f544805aac53453ddbfa23971a8b40b90a0003aa6127137be3f1c4e5e043dff2b2e1d488ad5218e69ceecf8d8cc1b5b2a41a668c1c9e08b38cf47567a9c6634f0b8b8a865387bec59c37930a58d28c6f8a7ae2f1df5e280b19001fc9b82762d5287aa04f179e67d01a262e865686fe5f67081ccc390eacf5d5e8054e81fab9d5ffd7f3497aa36466a97059ed07338c1dbf3444f02e98a6654d3de86f03b1c4db6549d0abf87dd9057c61f110"}, &(0x7f0000322000-0x4)=0x100) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00007a8000)={@generic="c78672e22ab123da2cdb40d01ae33e81", @ifru_flags=0x800}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000c04000)=0x7b, 0x15) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f000026a000-0x4)=@assoc_id=0x0, &(0x7f000039b000-0x4)=0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00002e6000)={r3, @in={{0x2, 0x2, @multicast2=0xe0000002}}}, 0x8c) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0xffffff0e) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r2, &(0x7f0000618000-0x37)="03", 0x1, 0x20000000, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r2, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3afa31de40b14bf19ace3fa71bb9f9793afd75e15d5eca1403556dc5346ac0ea419ef0d73490e479b1b73bffc63a22fc7a6d698fbdaebfb8f29ac60cfdd6fbc017031bc443a766067457a6ec995fd4b7df3c85d636175f5041a42b6a84393f730c12bd79f07397bd93240c428b21e87", 0x150, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000a79000)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x54c, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="39fb0c9671939506203b525c183ccafbedf58b2a7a0ed0ee81f3b8ef25449e4f46bc2b588f9aaaffd05c29981d0ee5c45543ef6ff26ae63ddaea06e49871624aff17e161ce11a02ffa368c317a7129cedc057da92801e6f25ebe89014a61459be89fb3b7bf9c3c36ed251e0b6ceeb8e1388ceb6bf547058606111becd3fbc86be7e164cc89e8c9b640f69d92278286b79ae8b7c7997e4772d9edf4931875eed89f81e01356568bb3ba3455a3cf38a567df6dec382fce76308aae0bd0b8ab2845defd2f2a131d2cc6a0a233a6ce3c8a6008700023d44ed85f8259dadbf9c58b9fd4bf14bc17755b73bdc62929fdc5cb92c514c1ede9d134a9bb653e74aa2f9e22419a3aeda65461d60b7f90faeae8a979ead1da060aee97a0d92fe52562847afe4b6db858cbbe67b2f53b333c9a186f1c76e9897726251dbb2f3a31a034352cd8480483023ec43aad46ec4242e3f976c1e9b41ff5f061a99c1c010c115669d16322f93052266fae54f31a01ee54266a277b27604d9aca20604c3406226d5c0e384b43ac405b5c053002b0cf270ed580f775f860617389c871c7c6154e820b90997ab120455ee07ecc6d4b6d0fd31b2e6e78cebdeb068a12ac5e06ab99b09a9f17a228de0451ab6292730bcf0f6c72075361df44690cd36c3e64266082e2f91df60df1182da7f215ae064936e1dd5f3647be5af09a223e71f11dbee5cd65dbc7af024d5a112a2cd1cc92e144a359cbe14edf6cc4ccca68b6b6a703571f7e53c81b306745667b4a9cbc8cd85978eff4eff6ab358b8b097ed2f254098f0bd40ae87b7d83f1e75796657cc5d9d2f427a626e13e5cb687fd5b0ce9145c16aa218f4fafbcf54b91898667cad86f5e254e2065be59ad24ab60f65e2f48ab0a2732f276b1e3a67fefe845c9f0bc75cd23305320647c3ab29fab419adf1b0994679971207f0f56592e7213b9c2a753f790bfacda6c9ff75a494645d2dd8bf74cb87118b6160e2c857c8843c0ffd17d111788697cd7a48e94d44b563168a48ff7a30a34deee34c6abce51d689ad3402b8880468b1b7dfc4b8b1abee65ee9bfadd4e57cb37d6c99e6e47f1aef12c257261b5060b43a71def858ae0a15d5b7b9eb2fd4f8110bf4c0f96d7eaf62f5758daaa255c08b4d08c318a1ab554a91e1567b4533d7a93c3b6bff1a20064f28fb87d338dd0a09cad903e71dbb98b4020e1034d7d23c6c8687b79495ddb5f321768a5560092cb08398096fc557f212741f9be94c0aac91fb02c1206ef69c7a9536a7ce8a43fa20fed9a6c1ea5150601f92bed1501595d2b6968ff3df163e6efe0cb5d4b78610f3309342e4c4a901cb0d5c4b4654ef99110fc66d04981b8f599c5f88ce5a1dfdc3f313e6f7a2046a9a30d34d79f7f7497a2c71a50cfef305087341973b606798a2b53e695271e571a4751734a503b9394022b69000a17912abbd23a090ab069863ab0a4868a74d2035a5032d10c1250a623e6d0fbf3d6354233d0674bae1e7056d5719e9079a3aa5734937db85d8c1e7affc1c1a45e320dca02b0684b4991b273c2511da75914e17256104d9e4b9969984f9ffaeb509c078b58d20226a7a7480515a8d4404614c69216d91bbfc5d4545ae739a1c6fd789f1bddb31a533683b599c0cae6b89e106e3bbafe5dfa87bcaf271e8d708c53753c7a82c6d2fde23da77f3e6ac51f873a4d70cf043ce2076d08b0beefff7fc0d6d1f8e7884423dab46e5e506aaa8a7baa771625e27102b41894568d22d8be5f6365109a5f8202fad0d294fb1e01cdef7a31ca30a23dadda4f78990a3baa40c4993210dcefa46bda10e86e01a122c44a515c640847ca86c27cc91f9c48dc2a0213b792032cce43e9957ccc7ec77464cf3f2d"]}, 0x54c}, 0x1}, 0x0) 2018/02/04 12:03:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:40 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) fchown(r1, 0x0, 0x0) clone(0x0, &(0x7f0000013000-0xd), &(0x7f0000011000), &(0x7f0000002000-0x4), &(0x7f0000003000-0xbf)) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000012000)=0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f000018f000)={&(0x7f00005da000/0x4000)=nil, 0x4000}) 2018/02/04 12:03:40 executing program 5: mmap(&(0x7f0000003000/0x31000)=nil, 0x31000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) pause() mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x88040, 0x0) mount(&(0x7f0000034000-0xc)='./file0/bus\x00', &(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000033000-0x5)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open(&(0x7f0000033000)='./file0/bus\x00', 0x20200, 0x0) 2018/02/04 12:03:40 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00001d9000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000195000)=""/198, 0xc6, 0x140, &(0x7f0000001000-0x1c)={0xa, 0x0, 0x5, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$mice(&(0x7f00000f4000-0x10)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7ff, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000002000-0x60)={0x0, 0x3e, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000001000-0x4)=0x0) clock_gettime(0x0, &(0x7f0000001000-0x10)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_settime(r2, 0x0, &(0x7f0000001000)={{}, {r3, r4+10000000}}, &(0x7f0000001000-0x20)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001000)=[@in6={0xa, 0x1, 0x1, @loopback={0x0, 0x1}, 0x8}, @in6={0xa, 0x2, 0x401, @empty, 0x40}, @in6={0xa, 0x3, 0xb2a77c3, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x5bb}, @in6={0xa, 0x0, 0x9, @loopback={0x0, 0x1}, 0x5}], 0x70) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) connect$unix(r5, &(0x7f0000d6b000-0xa)=@file={0x0, './file0\x00'}, 0xa) 2018/02/04 12:03:40 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/dev/vga_arbiter\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000001000-0x4)=0x401, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xfffffffffffffffd) sendmsg$nl_route(r1, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000519000-0x134)=@newlink={0x50, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0x1c, 0x16, [{0x18, 0x1, [@nested={0x14, 0xb, [@typed={0x10, 0x0, @u64}]}]}]}]}, 0x50}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000789000)={0x2, 0x0, 0x8, 0x3, 0x0}, &(0x7f0000df1000)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f000042d000-0x8)={r2}, 0x8) [ 46.687159] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/04 12:03:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000fab000-0x4)=0x16) 2018/02/04 12:03:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:40 executing program 1: mmap(&(0x7f0000000000/0xf0d000)=nil, 0xf0d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000f0c000), 0x4) 2018/02/04 12:03:40 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000003000-0x30)={0x2, 0x6, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sa2={0x2, 0x13}, @sadb_ident={0x2}]}, 0x30}, 0x1}, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000002000)='/dev/pktcdvd/control\x00', 0xc0000, 0x0) getdents64(r1, &(0x7f0000004000-0xb3)=""/179, 0xb3) 2018/02/04 12:03:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00001b3000-0x44)={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0xffffffffffffffff, @rand_addr}, @common="00006e6c310011000000008000"}) splice(r0, &(0x7f00009fe000-0x8), r0, &(0x7f0000f56000), 0x4, 0x9) 2018/02/04 12:03:40 executing program 5: mmap(&(0x7f0000003000/0x31000)=nil, 0x31000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) pause() mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x88040, 0x0) mount(&(0x7f0000034000-0xc)='./file0/bus\x00', &(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000033000-0x5)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open(&(0x7f0000033000)='./file0/bus\x00', 0x20200, 0x0) 2018/02/04 12:03:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000860000-0x16)='/selinux/checkreqprot\x00', 0x410001, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000e5d000)={&(0x7f00009f7000-0x14)=[0x9, 0x4, 0x8001, 0x4, 0x10001], 0x5, 0xfffffffeffffffff, 0x1, 0x0, 0x1, 0x0, {0x6, 0x6e9a, 0x976, 0x100, 0x0, 0xbf, 0x3, 0x1, 0xffffffff, 0x481f, 0xffffffff, 0x9, 0x5, 0x2, "a918b33ae0391d2ec7e11e6b7b195a11ef973c2b7f873b0fb415365db1e7b826"}}) r1 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r1, 0x8, r2) fcntl$getownex(r1, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000ffc000)={&(0x7f0000cb9000-0x40)=""/64, 0x40}) 2018/02/04 12:03:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000bf9000)='/dev/sequencer2\x00', 0x10200, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000a71000-0x98)) 2018/02/04 12:03:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000b75000-0xf)="6d696d655f747970655d5b2ccd4000", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000028000-0xd)='/dev/snd/seq\x00', 0x0, 0x20002) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000422000)) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000041000)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\x00'}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) write$sndseq(r2, &(0x7f00001c4000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"226b5687b1a7de0baa89981c"}}], 0xff68) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000097d000-0x4)={0x0, 0x7, 0x8000}, 0x4) syz_emit_ethernet(0x34, &(0x7f0000aab000-0x34)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xb}, [{[{0x9100, 0x4, 0x5, 0x2}], {0x8100, 0xc479, 0x0, 0x400}}], {@mpls_uc={0x8847, {[{0xfffffffffffffff8, 0x8, 0x5, 0x10001}, {0x8, 0xab3d, 0x1, 0x10001}], @llc={@llc={0x82, 0xf8, "183d", "8ab1bbe1679992192711c90a7ccd43f9781a"}}}}}}, &(0x7f00005c9000)={0x1, 0x1, [0xea1]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) epoll_create(0xf000000000000000) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f000085a000-0x4)=0x800, 0x4) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00007aa000-0x4)) 2018/02/04 12:03:40 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/dev/pktcdvd/control\x00', 0x68001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, @in={0x2, 0x2, @broadcast=0xffffffff}], 0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000dd4000)={0x0, 0x0}, &(0x7f0000305000)=0xc) r2 = add_key$keyring(&(0x7f0000f7d000)='keyring\x00', &(0x7f00003ef000)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r1, r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000629000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VT_RELDISP(r4, 0x5605) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f00003d9000-0xc9)="18000300000001000000be5ea6cd88360000080203000008000006000e640002b900100000011c6900bb77a107567e5bdba17e19470055040097ec67a1e2010049fc2d63e000000000001418000a00000000130000c88ebbff06010000ad000000000000061475d7220342000747ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c4865c287b7e75ab4f1b8fc393d2696c0c3ba5aeae20000000000000013659c6120", 0xc8) fsetxattr(r4, &(0x7f0000bde000)=@known='user.syz\x00', &(0x7f0000b34000-0x18)='/selinux/avc/hash_stats\x00', 0x18, 0x1) getsockopt$nfc_llcp(r4, 0x118, 0x7, &(0x7f000064f000-0x12)=""/18, 0x12) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000bee000)={@local, @empty}, &(0x7f0000419000)=0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f000044a000)={{{{0x2, 0x1, @empty}}, {{0xa, 0x1, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x5}}}, 0xa9, 0x138, 0x9, "b238d4620a061fd81b6dff1a2f96656f04983a9eb8a8ce0b210713882b9946f8517b033ae61c751b150dc65cbb78b9eebe864d3a83dcbdffba4f99f34ce0d95294f4cd572b8248920a4b4c9fe96dff2f"}, 0x160) [ 47.015731] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 47.034275] CPU: 0 PID: 5421 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 47.041805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.051144] ffff8801b41d7938 ffffffff81d94b69 1ffff1003683af2a ffff8801b4749800 [ 47.059163] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b41d7a48 [ 47.067205] ffffffff81451ca2 024000c2b41d7988 0000000041b58ab3 ffffffff84195215 [ 47.075245] Call Trace: [ 47.077817] [] dump_stack+0xc1/0x128 [ 47.083175] [] warn_alloc+0x212/0x240 [ 47.088622] [] ? zone_watermark_ok_safe+0x280/0x280 [ 47.095292] [] ? avc_has_perm+0xb0/0x4f0 [ 47.100992] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 47.107455] [] __vmalloc_node_range+0x3f5/0x5f0 [ 47.113744] [] ? check_preemption_disabled+0x3b/0x200 [ 47.120554] [] ? task_has_security+0x130/0x270 [ 47.126754] [] vmalloc+0x5b/0x70 [ 47.131738] [] ? sel_write_load+0x130/0xfd0 [ 47.137677] [] sel_write_load+0x130/0xfd0 [ 47.143452] [] ? get_futex_key+0x1050/0x1050 [ 47.149477] [] ? sel_read_bool+0x250/0x250 [ 47.155329] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 47.162338] [] ? do_futex+0x3f8/0x15c0 [ 47.167843] [] ? sel_read_bool+0x250/0x250 [ 47.173696] [] __vfs_write+0x103/0x680 [ 47.179202] [] ? do_iter_readv_writev+0x400/0x400 [ 47.185663] [] ? __lock_is_held+0xa1/0xf0 [ 47.191428] [] ? __lock_is_held+0xa1/0xf0 [ 47.197195] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 47.204000] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 47.210555] [] ? __sb_start_write+0x14a/0x310 [ 47.216675] [] vfs_write+0x189/0x530 [ 47.222009] [] SyS_write+0xd9/0x1b0 [ 47.227254] [] ? SyS_read+0x1b0/0x1b0 [ 47.232675] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 47.239484] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 47.246034] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 47.253790] Mem-Info: [ 47.257218] active_anon:50572 inactive_anon:44 isolated_anon:0 [ 47.257218] active_file:3503 inactive_file:8273 isolated_file:0 [ 47.257218] unevictable:0 dirty:197 writeback:0 unstable:0 [ 47.257218] slab_reclaimable:5480 slab_unreclaimable:59421 [ 47.257218] mapped:24038 shmem:51 pagetables:592 bounce:0 [ 47.257218] free:1480299 free_pcp:482 free_cma:0 [ 47.290493] Node 0 active_anon:202288kB inactive_anon:176kB active_file:14012kB inactive_file:33092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96152kB dirty:788kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 47.320293] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 47.349635] lowmem_reserve[]: 0 2908 6410 6410 [ 47.354799] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 47.386266] lowmem_reserve[]: 0 0 3501 3501 [ 47.391188] Normal free:2925196kB min:36824kB low:46028kB high:55232kB active_anon:202308kB inactive_anon:176kB active_file:14020kB inactive_file:33104kB unevictable:0kB writepending:824kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21984kB slab_unreclaimable:237792kB kernel_stack:5472kB pagetables:2472kB bounce:0kB free_pcp:1260kB local_pcp:592kB free_cma:0kB [ 47.425190] lowmem_reserve[]: 0 0 0 0 [ 47.429580] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 47.444896] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 47.462176] Normal: 743*4kB (UM) 62*8kB (UME) 31*16kB (UME) 73*32kB (UME) 74*64kB (UME) 23*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 1*2048kB (E) 699*4096kB (M) = 2925212kB [ 47.481349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 47.490089] 11831 total pagecache pages [ 47.494044] 0 pages in swap cache [ 47.497465] Swap cache stats: add 0, delete 0, find 0/0 [ 47.502829] Free swap = 0kB [ 47.505824] Total swap = 0kB [ 47.508809] 1965969 pages RAM [ 47.512337] 0 pages HighMem/MovableOnly [ 47.516283] 320509 pages reserved [ 47.519881] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 47.529848] CPU: 0 PID: 5440 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 47.537355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.546678] ffff8801b438f938 ffffffff81d94b69 1ffff10036871f2a ffff8801b4673000 [ 47.554657] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b438fa48 [ 47.562627] ffffffff81451ca2 024000c2b438f988 0000000041b58ab3 ffffffff84195215 [ 47.570601] Call Trace: [ 47.573161] [] dump_stack+0xc1/0x128 [ 47.578495] [] warn_alloc+0x212/0x240 [ 47.583916] [] ? zone_watermark_ok_safe+0x280/0x280 [ 47.590552] [] ? avc_has_perm+0xb0/0x4f0 [ 47.596241] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 47.602702] [] __vmalloc_node_range+0x3f5/0x5f0 [ 47.608997] [] ? check_preemption_disabled+0x3b/0x200 [ 47.615807] [] ? task_has_security+0x130/0x270 [ 47.622007] [] vmalloc+0x5b/0x70 [ 47.626991] [] ? sel_write_load+0x130/0xfd0 [ 47.632936] [] sel_write_load+0x130/0xfd0 [ 47.638703] [] ? __free_pages_ok+0xbe5/0x16c0 [ 47.644818] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 47.651626] [] ? sel_read_bool+0x250/0x250 [ 47.657478] [] ? __free_pages+0x4f/0x80 [ 47.663071] [] ? put_task_stack+0x149/0x2d0 [ 47.669013] [] ? sel_read_bool+0x250/0x250 [ 47.674866] [] __vfs_write+0x103/0x680 [ 47.680374] [] ? do_iter_readv_writev+0x400/0x400 [ 47.686834] [] ? __lock_is_held+0xa1/0xf0 [ 47.692601] [] ? __lock_is_held+0xa1/0xf0 [ 47.698370] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 47.705176] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 47.711723] [] ? __sb_start_write+0x14a/0x310 [ 47.717838] [] vfs_write+0x189/0x530 [ 47.723168] [] SyS_write+0xd9/0x1b0 [ 47.728413] [] ? SyS_read+0x1b0/0x1b0 [ 47.733839] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 47.740650] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 47.747202] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 47.754696] Mem-Info: [ 47.757114] active_anon:50577 inactive_anon:44 isolated_anon:0 [ 47.757114] active_file:3505 inactive_file:8276 isolated_file:0 [ 47.757114] unevictable:0 dirty:209 writeback:0 unstable:0 [ 47.757114] slab_reclaimable:5496 slab_unreclaimable:59456 [ 47.757114] mapped:24010 shmem:51 pagetables:618 bounce:0 [ 47.757114] free:1480289 free_pcp:470 free_cma:0 [ 47.790408] Node 0 active_anon:202308kB inactive_anon:176kB active_file:14020kB inactive_file:33104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96040kB dirty:836kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 47.819746] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 47.849157] lowmem_reserve[]: 0 2908 6410 6410 [ 47.854319] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 47.885725] lowmem_reserve[]: 0 0 3501 3501 [ 47.890667] Normal free:2925164kB min:36824kB low:46028kB high:55232kB active_anon:202308kB inactive_anon:176kB active_file:14020kB inactive_file:33104kB unevictable:0kB writepending:848kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21984kB slab_unreclaimable:237824kB kernel_stack:5408kB pagetables:2472kB bounce:0kB free_pcp:1232kB local_pcp:592kB free_cma:0kB [ 47.924526] lowmem_reserve[]: 0 0 0 0 [ 47.928888] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 47.944160] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB 2018/02/04 12:03:41 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f000059f000-0x4)=0x0) rt_sigqueueinfo(r0, 0x0, &(0x7f0000084000-0x10)={0x21, 0x5, 0x4, 0x7ff}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000780000-0x18)=@generic={0x5, 0x5, 0x4a}) 2018/02/04 12:03:41 executing program 2: mmap(&(0x7f0000000000/0xd34000)=nil, 0xd34000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000c68000)='/dev/keychord\x00', 0x200000, 0x0) getpeername$inet6(r0, &(0x7f000026c000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @dev}, &(0x7f00008c2000-0x4)=0x1c) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000a2e000)='/selinux/user\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r2, &(0x7f0000d2a000-0x1c)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x1}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x4, 0x0, &(0x7f000000d000)="62164b44"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000191000)={&(0x7f00003c4000-0x8)=[0x0, 0x0], &(0x7f0000515000-0x8)=[0x0, 0x0], &(0x7f0000db7000-0x17)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000b71000-0x16)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x9, 0x6}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendto$inet6(r2, &(0x7f0000d32000), 0x0, 0xfffffefffffbfffe, &(0x7f0000d17000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x1}, 0x1c) 2018/02/04 12:03:41 executing program 1: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000406000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$inet(r0, &(0x7f0000043000-0x10)={0x0, 0xffffffffffffffff, @multicast2}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00007a7000-0x98)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0xb, 0x12, 0x11, "3c846835cef0188774bfd255f13c3e9eaf75a6bafe98a122f6a2b9b4ebedc759f9efe83399b0a6bd51914a655f7fa3052080cecf6079ee82121138e0ab9be879", "e4dda7b82b811df8eceb16fdf3b2170479077a2f892a895118d973d4c254dc70", [0x3e, 0x9]}) r3 = getpid() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r3}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000452000-0x10)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001fa000-0x20)=[]}, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00009ca000-0x8)) r4 = syz_open_dev$sg(&(0x7f0000afa000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffc, 0x80da14, 0x5, 0x20000000}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000e75000-0x58)={0x5, 0x8, 0x100000000, 0x1, 0x7, 0x4}) ioctl(r4, 0x2285, &(0x7f0000007000)='S') 2018/02/04 12:03:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000e77000), 0x4) fstat(r0, &(0x7f0000381000-0x44)) 2018/02/04 12:03:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$getname(0x10, &(0x7f0000d68000)=""/48) r0 = socket$inet6(0xa, 0x400000002, 0x0) sendmsg(r0, &(0x7f0000f66000-0x38)={&(0x7f00008f5000-0x80)=@generic={0x10000a, "daf8ffe6fffffef501f20000000000b61b340e63e94d691822e903e7d64ac8fef9507f0000000000000009fbbf26093d6b53efc1cb00880001186a68506776e9eba5ebd039273202a52700fa2e0000000000000033c1c99287b26eaece2900727e347f814dc256ce82cb2c8080002b00bff900000000000000076167b456"}, 0x80, &(0x7f0000fbd000)=[], 0x0, &(0x7f0000778000)=[]}, 0x0) 2018/02/04 12:03:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) sync_file_range(r1, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x0) bind$inet(r1, &(0x7f0000e71000)={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679c00800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000e9ffff48740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet(0x2, 0x80a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00008a4000-0x20)={@generic="944764bb257bba84528bed7706a44642", @ifru_addrs={0x2, 0x2, @multicast1=0xe0000001}}) fcntl$setlease(r0, 0x400, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f000040a000-0x10)=@common='bcsh0\x00', 0x10) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000642000-0x10)='/selinux/status\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000bd3000)={@common='ip_vti0\x00', @ifru_flags=0x400}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f000093e000-0x18)={0xaa, 0x60}) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000782000-0x43)="0cd116836338d1d5d9090f329b191c360df2d48a1cf5216c7b807a383dadf935792af1954e3d18636b57133d2d93d6633e0a08e417c9645a3495ef82630c78b0f702dd", 0x43) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000afd000-0x8)={0x0, 0xe5}, &(0x7f0000eb1000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000d39000-0x10)={r4, 0x402, 0x1, 0x51800000}, 0x10) 2018/02/04 12:03:41 executing program 0: ioprio_set$pid(0x2, 0x0, 0x7ffd) ioprio_get$pid(0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00004e8000-0x4)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000035000)={{{@in=@loopback, @in=@broadcast, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00008c1000)=0xe8) ioprio_set$uid(0x3, r1, 0x2) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000077e000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000001000-0xb)={0x800, 0x9, 0xffffffffffffffff, 0x4, 0x9, 0x1, 0x0, 0x6, 0x87, 0x4, 0x3}, 0xb) wait4(r0, &(0x7f00002be000+0x63d), 0x1000000, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netlink(r2, &(0x7f0000001000)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000002000-0x50)=[{&(0x7f000065f000-0x1258)={0x1258, 0x1f, 0x0, 0x7, 0x0, "", [@typed={0xc, 0x1d, @u32=0xffffffff}, @nested={0x38, 0xf, [@generic="c8eab89111c753c36a8a5ae5cb", @typed={0x18, 0x5b, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @typed={0xc, 0x3d, @u32=0x7}]}, @nested={0x154, 0x78, [@typed={0xa4, 0x65, @binary="fea2292ed96cf486780d22e3e75e20eab114f6f9bd7d37019ddeee1c79eb0634aa10e6e538f18ffe76d6e703e1f38b8cfcee7af0b7f87639526207a09274b567e369278de4ed5fdbccd7a09127ab75c5318124004a9692500660e45ace26d06553167fe7d7eff2dfe9e1b4342214bde33cd43be644dcfa8138ad353d82de4837d03b277975407dff2678b79f1d07f5631d5f4f8275e027b3c1"}, @typed={0xc, 0x18, @pid=r0}, @generic="04b5c3eb149f400c3b793b008458c65b4ce8d524e0b8c76d2ac57fc263c924abbde4b028ba305ee4eebbbdad54729e8ba2ef34f203d8f04a203b6f3f196c53e470268b2b96dee4f027413c0b2ffb92109cd2ab407baae32cd8de6477481d589736b94cddf5218eea6ff35a55540b614749afcf194cb385e0afd304220ba539731a53cc5784648068f0024fc4f9de3f3354585e5660d946640f08", @generic="4be68e"]}, @generic="5df4c277f0c4feb724c0cb92a3e9cbc100fb14070aaa27c8bed95a9a54c75ca75f84de5ef5e2b3598aa9498f40463ae19352a423d496eedc23810a439b64afcf52a7261fa51414d5a6aa2c8c3cbc7050fc5833a92bf805403d3a357e348dc492f63a6bf79dcebfb51ccbe1a8f72f25fd3f7e2377d7458ce936e5abcf3e41f39d029c4953d158f05f8c097c58b8afc4ba4a8cf31d0b305442215711975e8feed7da0519c4b9ac17bd9e7ca6c512d2", @generic="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"]}, 0x1258}, {&(0x7f0000000000)={0x140, 0x37, 0x212, 0x5, 0x0, "", [@generic="dd0e09ea6ed90f9de187fc1de0a66ec445bf5a46c97b23decc6f0fbc3662180077f577e1ed0761a9323b658057499e5aa05d9fe87dba7eff09c69beba63c9963db10b8d31055e03f738aa9653b47f590bcd2844595e25b8018b26b8cbdeef07928666bebed7939869771a086f975369320b16cf8304a26a55a60b1262a2c0ca166a58bd3234bc879740c08a4716906f512fd83c7668eea94d96fc3c511", @nested={0x3c, 0x36, [@typed={0x10, 0x7, @u64=0x76e}, @typed={0x28, 0x52, @str='/selinux/commit_pending_bools\x00'}]}, @typed={0x8, 0x1}, @generic="443eee9118dd919ae07d4a40c721f9d5429da17de889d8d92ae68b622d5969b8e1af759e64199cba8af3cdfabd5db145f81846", @typed={0xc, 0x13, @pid=r0}, @typed={0x10, 0x17, @u64=0x8}]}, 0x140}, {&(0x7f0000002000-0x219c)={0x219c, 0x3c, 0x20, 0x6, 0x3, "", [@typed={0xc, 0x5a, @u32=0x3}, @generic="adabfc2c84fe499696940276a1993890cb65e5c65308bc623fc829e928ec2854d35453346e801178e2ea20234c095ba2cc6267879a4521a9973233d9e561c13b761a22f3077d5db9bdc2f69ea161789b56435166075170b525fa9bb33c3285da1c67dd8886d13637c11b6c5a7b795e88e5c2382ac990f44d66b96c04c5096862a862ad7d097a7c4793548910", @nested={0x10d8, 0x58, [@typed={0x18, 0x44, @str='proc:$security\x00'}, @typed={0xc, 0x72, @pid=r0}, @generic="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", @typed={0xc, 0x94, @str=':}[\x00'}, @generic="657ef475d8f701257d1787c16e3b0b5177c2dc0e5c8d530e111bfa1058fb6a133bb6c60d8cf03f909a2c293ac63665fc48697a19ec7cb80707eec2c8c67e64f1cdeeeb27b111d1811f8d817d205c228e483d276b73ef8df84b3c8452177a8e49bfba2e43e99b4e1b0ac976aaa1597dde71ab4aa2342e20e49d3e5cdf57f68bdc0313a918df03a106eba91717e5b348f5659b184e44589b61", @typed={0xc, 0x36, @str='\x00'}]}, @typed={0xc, 0xc, @pid=r0}, @typed={0xc, 0x20, @u32=0xfffffffffffffffc}, @nested={0x1004, 0x84, [@generic="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"]}]}, 0x219c}, {&(0x7f0000001000)={0x26c, 0x23, 0x8, 0x6, 0x0, "", [@generic="b4f946c92eec99d282d88c848f1e6b2b33d24e31a25d497cf8616181faa63e16b8c20b1905f4b8ef51946e7849316777d3c7bc948ccb7eea5562fc9514b47b34713d4384286cc500d5fd6e1fff7f6bfbe79bafc3a787a3abac7e450a48aabf4fbd287908870ff96ef5576c9b90bcd52449f81b9b6bb43e1ab4dc77b00a38b033505bb3caf873913fe93684841856c42252001d690dfd54fb5f63b0c75526e43d8dd1e3c4a76385c4df0e4f1a006f0ec3a4f8e3211c3bc6819f79f04cf1336fc31187ff78f49a26439e6eeeef5743ca44d4027d6124c89f5bde3542", @typed={0xc, 0x65, @ipv4=@rand_addr=0x7}, @generic="0079fefcae7b1d0b441cdc06c39dcfd40805543e18de47bdc0823a7654a62818e954d0d1eca7c34d4ea7d272944f83c05cda1ec65c6f403b1e74d98bac6e146a4aad8ff34c710d4eb4a4dbe23a3a5613266fa1811e1ca7a317bbc7f6862c90b5167dbd35846184337739c53a458f67fc4c634cfc6641814c8642302b7cfc6e8699abe82c0a0f7648b7797e0ad3", @nested={0xe8, 0x5c, [@generic="50fc7bf3980ecf1683fbb0b44e9be67064f13fe002a672665d64d95ceff1f2b851b05eddcda83a8800e8c0995785fd848965976844d6d113a3c0e8873bd860a7cfb53152175d28370012d8d5d9bb9a1eb87e06641e5c0f5aad489dbfa8f3b6bdb0a1fb384ae32bf9bcc8a5f2438b89819aeba22eda1385cf97467df86f204e13cdcc2006f55d85332aa6f891f30606ed45a34ae0621a13fdf10c3e617a383626c2745247de7bcc4d907215cd6dcac668dacd4ed2755878440ce54cc1549e68b2ddc78fbc5566e71320c5", @typed={0xc, 0x33, @ipv4=@multicast2=0xe0000002}, @typed={0xc, 0x23, @u32=0x9}]}]}, 0x26c}, {&(0x7f0000212000-0x1198)={0x1198, 0x34, 0x30e, 0x6, 0x3, "", [@generic="904dac326d5b67e9ea103407a84d8f8cf5561c7a6648fb0a642b", @generic="258bdf6a99d0b640b500159165ddd0d5438aa0b560d95409894cee44d1aaa70f577fff050b995e055d9c436ca360950cd033f3fc1283f34c06f4d4d94138c20b25346f64172c0f464d55e19473030cbf11a91020cbaef6f698ad94f34fe3ade280156e4d29fe71660ee8639fd00654419c67036f2f0993a2a56f4dd2255e15bba27b067ee2e0ca8e7ed009025434d783357db5984b8b14ae2613bd4178f52f4b9152d492da898a8909ace578be0ae2fb3d72a9acceb9ce5259253af01974047de58179374cf786c844ff52218e1e60b640accbf6f534d667e740de78c6aa312be87074af27", @nested={0x1088, 0x5c, [@typed={0x8, 0x57}, @generic="c4f432a3b01e120192d9b020e2e86dfb46aabe56a45f0afbd01dfc61f4b2d93717c5d727f8", @generic="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", @generic="a6bf4fc84c120481865d5c0e5bd043f0ceb2027898c1cd243bb9a314b39af3d1d5cc9947e2de9956202cabfe10bcf5ef", @typed={0x18, 0x2b, @binary="f0206e10d64d5d4321fd868610"}, @typed={0xc, 0x11, @fd=r2}]}]}, 0x1198}], 0x5, &(0x7f0000002000-0x18)=[@rights={0x18, 0x1, 0x1, [r2, r2]}], 0x18, 0x8010}, 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f0000001000-0x90)) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000002000), &(0x7f0000005000)=0x4) 2018/02/04 12:03:41 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) [ 47.961314] Normal: 743*4kB (UM) 62*8kB (UME) 30*16kB (UME) 74*32kB (UME) 74*64kB (UME) 23*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 1*2048kB (E) 699*4096kB (M) = 2925228kB [ 47.980465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 47.989006] 11837 total pagecache pages [ 47.993136] 0 pages in swap cache [ 47.996570] Swap cache stats: add 0, delete 0, find 0/0 [ 48.002354] Free swap = 0kB [ 48.005362] Total swap = 0kB [ 48.008353] 1965969 pages RAM [ 48.011885] 0 pages HighMem/MovableOnly [ 48.015828] 320509 pages reserved 2018/02/04 12:03:41 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:41 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x3, 0xa, 0xd8, &(0x7f0000003000-0x8)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000002000)={{0x5ea08d328ff22faa, 0x0, 0x7, 0x2, 0x8}, 0x1e8d3ab6, 0x7f, 0x8000}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002000)={0x0, 0x1ce4000}, &(0x7f0000002000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000002000)={r3, @in={{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0x16}}}}, 0x8c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002000-0xc)=@ethtool_rxfh_indir={0x39, 0x0, []}}) 2018/02/04 12:03:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000d4e000)='/selinux/checkreqprot\x00', 0x42001, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000761000)=""/238) setitimer(0x0, &(0x7f000079a000)={{0x77359400}, {0x77359400}}, &(0x7f000023a000)) r1 = syz_open_dev$sndtimer(&(0x7f000084e000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) [ 48.037541] syz-executor3: [ 48.039064] audit: type=1400 audit(1517745821.718:13): avc: denied { net_raw } for pid=5451 comm="syz-executor4" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/04 12:03:41 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000003000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r0 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r0, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000014000-0x12)={@common='ipddp0\x00', 0x38}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000003000-0x20)={{0x77359400}, {0x77359400}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000bd0000-0x8)='./file0\x00', 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/04 12:03:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000d4e000)='/selinux/checkreqprot\x00', 0x42001, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000761000)=""/238) setitimer(0x0, &(0x7f000079a000)={{0x77359400}, {0x77359400}}, &(0x7f000023a000)) r1 = syz_open_dev$sndtimer(&(0x7f000084e000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/04 12:03:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000330000)=0xfec, 0x4) sendto(r0, &(0x7f0000cff000-0x12)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x10, &(0x7f00002e7000-0x80)=[], 0x0, &(0x7f0000878000)}, 0x0) shutdown(r0, 0x1) [ 48.040256] syz-executor4 uses obsolete (PF_INET,SOCK_PACKET) [ 48.076023] binder: 5447:5468 transaction failed 29189/-22, size 0-0 line 3004 [ 48.082891] binder: undelivered TRANSACTION_ERROR: 29189 [ 48.117728] binder: 5447:5487 transaction failed 29189/-22, size 0-0 line 3004 [ 48.122700] binder: undelivered TRANSACTION_ERROR: 29189 [ 48.153239] vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 48.162691] CPU: 1 PID: 5459 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 48.170229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.179567] ffff8801b3b17938 ffffffff81d94b69 1ffff10036762f2a ffff8801b3bf1800 [ 48.187535] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b3b17a48 [ 48.195503] ffffffff81451ca2 024000c2b3b17988 0000000041b58ab3 ffffffff84195215 [ 48.203462] Call Trace: [ 48.206028] [] dump_stack+0xc1/0x128 [ 48.211363] [] warn_alloc+0x212/0x240 [ 48.216780] [] ? zone_watermark_ok_safe+0x280/0x280 [ 48.223412] [] ? avc_has_perm+0xb0/0x4f0 [ 48.229091] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 48.235553] [] __vmalloc_node_range+0x3f5/0x5f0 [ 48.241845] [] ? check_preemption_disabled+0x3b/0x200 [ 48.248661] [] ? task_has_security+0x130/0x270 [ 48.254865] [] vmalloc+0x5b/0x70 [ 48.259853] [] ? sel_write_load+0x130/0xfd0 [ 48.265795] [] sel_write_load+0x130/0xfd0 [ 48.271562] [] ? get_futex_key+0x1050/0x1050 [ 48.277588] [] ? sel_read_bool+0x250/0x250 [ 48.283443] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 48.290426] [] ? do_futex+0x3f8/0x15c0 [ 48.295930] [] ? sel_read_bool+0x250/0x250 [ 48.301784] [] __vfs_write+0x103/0x680 [ 48.307288] [] ? do_iter_readv_writev+0x400/0x400 [ 48.313748] [] ? __lock_is_held+0xa1/0xf0 [ 48.319512] [] ? __lock_is_held+0xa1/0xf0 [ 48.325282] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 48.332090] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 48.338643] [] ? __sb_start_write+0x14a/0x310 [ 48.344756] [] vfs_write+0x189/0x530 [ 48.350089] [] SyS_write+0xd9/0x1b0 [ 48.355334] [] ? SyS_read+0x1b0/0x1b0 [ 48.360752] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 48.367564] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 48.374114] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 48.382125] Mem-Info: [ 48.384556] active_anon:50580 inactive_anon:44 isolated_anon:0 [ 48.384556] active_file:3505 inactive_file:8314 isolated_file:0 [ 48.384556] unevictable:0 dirty:216 writeback:0 unstable:0 [ 48.384556] slab_reclaimable:5512 slab_unreclaimable:59565 [ 48.384556] mapped:24014 shmem:51 pagetables:618 bounce:0 [ 48.384556] free:1480133 free_pcp:476 free_cma:0 [ 48.418096] Node 0 active_anon:202320kB inactive_anon:176kB active_file:14020kB inactive_file:33256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96056kB dirty:864kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 48.447479] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 48.476810] lowmem_reserve[]: 0 2908 6410 6410 [ 48.482016] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 48.512872] lowmem_reserve[]: 0 0 3501 3501 [ 48.517802] Normal free:2924988kB min:36824kB low:46028kB high:55232kB active_anon:202320kB inactive_anon:176kB active_file:14020kB inactive_file:33256kB unevictable:0kB writepending:872kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22048kB slab_unreclaimable:237784kB kernel_stack:5440kB pagetables:2472kB bounce:0kB free_pcp:1316kB local_pcp:612kB free_cma:0kB [ 48.551637] lowmem_reserve[]: 0 0 0 0 [ 48.556005] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 48.571337] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 48.588533] Normal: 679*4kB (UME) 62*8kB (UME) 33*16kB (ME) 65*32kB (UME) 76*64kB (UME) 24*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 3*2048kB (ME) 698*4096kB (M) = 2924988kB [ 48.607830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 48.616394] 11871 total pagecache pages [ 48.620500] 0 pages in swap cache [ 48.623925] Swap cache stats: add 0, delete 0, find 0/0 [ 48.629252] Free swap = 0kB [ 48.632261] Total swap = 0kB [ 48.635255] 1965969 pages RAM [ 48.638327] 0 pages HighMem/MovableOnly [ 48.642309] 320509 pages reserved [ 48.645787] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 48.655892] CPU: 0 PID: 5488 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 48.663393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.672718] ffff8801b44d7938 ffffffff81d94b69 1ffff1003689af2a ffff8801b4893000 [ 48.680693] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b44d7a48 [ 48.688663] ffffffff81451ca2 024000c2b44d7988 0000000041b58ab3 ffffffff84195215 [ 48.696627] Call Trace: [ 48.699183] [] dump_stack+0xc1/0x128 [ 48.704517] [] warn_alloc+0x212/0x240 [ 48.709936] [] ? zone_watermark_ok_safe+0x280/0x280 [ 48.716573] [] ? avc_has_perm+0xb0/0x4f0 [ 48.722252] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 48.728712] [] __vmalloc_node_range+0x3f5/0x5f0 [ 48.735003] [] ? check_preemption_disabled+0x3b/0x200 [ 48.741814] [] ? task_has_security+0x130/0x270 [ 48.748014] [] vmalloc+0x5b/0x70 [ 48.752998] [] ? sel_write_load+0x130/0xfd0 [ 48.758937] [] sel_write_load+0x130/0xfd0 [ 48.764704] [] ? set_next_entity+0x1bf/0xbe0 [ 48.770745] [] ? check_preemption_disabled+0x3b/0x200 [ 48.777550] [] ? sel_read_bool+0x250/0x250 [ 48.783404] [] ? mark_held_locks+0xaf/0x100 [ 48.789345] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 48.795633] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 48.802441] [] ? sel_read_bool+0x250/0x250 [ 48.808302] [] __vfs_write+0x103/0x680 [ 48.813824] [] ? do_iter_readv_writev+0x400/0x400 [ 48.820285] [] ? __lock_is_held+0xa1/0xf0 [ 48.826053] [] ? __lock_is_held+0xa1/0xf0 [ 48.831822] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 48.838635] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 48.845182] [] ? __sb_start_write+0x14a/0x310 [ 48.851297] [] vfs_write+0x189/0x530 [ 48.856629] [] SyS_write+0xd9/0x1b0 [ 48.861891] [] ? SyS_read+0x1b0/0x1b0 [ 48.867312] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 48.874119] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 48.880665] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 48.888285] Mem-Info: [ 48.890704] active_anon:50580 inactive_anon:44 isolated_anon:0 [ 48.890704] active_file:3505 inactive_file:8314 isolated_file:0 [ 48.890704] unevictable:0 dirty:225 writeback:0 unstable:0 [ 48.890704] slab_reclaimable:5512 slab_unreclaimable:59446 [ 48.890704] mapped:24014 shmem:51 pagetables:618 bounce:0 [ 48.890704] free:1480253 free_pcp:485 free_cma:0 [ 48.923986] Node 0 active_anon:202320kB inactive_anon:176kB active_file:14020kB inactive_file:33256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96056kB dirty:900kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 48.953627] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 48.982936] lowmem_reserve[]: 0 2908 6410 6410 [ 48.988096] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 49.019147] lowmem_reserve[]: 0 0 3501 3501 [ 49.024406] Normal free:2925020kB min:36824kB low:46028kB high:55232kB active_anon:202320kB inactive_anon:176kB active_file:14020kB inactive_file:33256kB unevictable:0kB writepending:912kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22048kB slab_unreclaimable:237784kB kernel_stack:5408kB pagetables:2472kB bounce:0kB free_pcp:1292kB local_pcp:704kB free_cma:0kB [ 49.058237] lowmem_reserve[]: 0 0 0 0 [ 49.062608] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 49.077845] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 49.095015] Normal: 679*4kB (UME) 62*8kB (UME) 33*16kB (ME) 66*32kB (UME) 76*64kB (UME) 24*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 3*2048kB (ME) 698*4096kB (M) = 2925020kB [ 49.114763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 49.123483] 11881 total pagecache pages [ 49.127438] 0 pages in swap cache [ 49.130882] Swap cache stats: add 0, delete 0, find 0/0 [ 49.136221] Free swap = 0kB [ 49.139203] Total swap = 0kB [ 49.142216] 1965969 pages RAM [ 49.145296] 0 pages HighMem/MovableOnly 2018/02/04 12:03:42 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='proclo}\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fchmod(r1, 0x0) close(r1) close(r0) 2018/02/04 12:03:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007ef000)={0x0}, 0x80000) timerfd_settime(r0, 0xe6722eb952c7feae, &(0x7f0000f61000)={{}, {0x0, 0x989680}}, &(0x7f000023e000-0x20)) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00002da000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000eb2000-0x4), &(0x7f0000c5c000)=0x4) pipe(&(0x7f000019f000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000bda000)={0x401, 0x9, 0x8}) flock(r2, 0x1fffffffffffe) flock(r1, 0x1) flock(r1, 0x1) 2018/02/04 12:03:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f00000e8000)="e135550093b8d212f2633c22b211861fb783d75adf04f9c73b685b4ebfc90464fc84c81919da29b2c1921a62deab53cf8a84f45691de9110ab0064dcc3251cb1f75ee1f4510792ec71d56c8688d87382a285d33f795deb4deacc4c342b4f0dc244656d658e4d2a0cc67be9edbdc365b06a8713723dadd3b66317b109fa5d92b3c08c062d54df24917b7151fb4dcb0506", 0x90) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f96000)='/dev/sequencer2\x00', 0x22400, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x4) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000cbe000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000b53000-0x10)={0x0, 0x0}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000785000-0x4)=0x1000) mmap(&(0x7f0000000000/0xf6c000)=nil, 0xf6c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000f6b000-0x24), &(0x7f0000f6a000)) mq_timedsend(r2, &(0x7f000085e000)="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", 0x1000, 0xc0a, &(0x7f0000699000-0x10)={r3, r4+10000000}) 2018/02/04 12:03:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:42 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000918000-0x9)='/dev/sg#\x00', 0x0, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) mmap(&(0x7f000095c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000095c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f000095c000)='keyring\x00', &(0x7f000095c000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f000095c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00007e7000-0x50)={{0x0, 0x0, 0x7, 0x3, 0x4}, 0x4, 0xffffffffffff8000, 0xff}) r2 = request_key(&(0x7f0000281000)='ceph\x00', &(0x7f000095c000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00003c0000-0xe)='keyringppp0&/\x00', 0xffffffffffffffff) keyctl$unlink(0x9, r1, r2) 2018/02/04 12:03:42 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000002000-0x10)='/dev/input/mice\x00', 0x0, 0x80) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001000-0x1000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000001000-0x10)={0x7ff, 0x9, 0x8}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000001000-0x4)=0x6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000002000)={r2, 0xfffffffffffffffc, 0x30, 0xffff, 0x100000000000005}, &(0x7f0000001000-0x4)=0x18) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000002000)=""/22) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000604000)=""/215) 2018/02/04 12:03:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000d5000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000), 0x1000000800000008) [ 49.149236] 320509 pages reserved [ 49.158832] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 49.180549] CPU: 1 PID: 5507 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 49.188085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2018/02/04 12:03:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000417000-0x8b)="eb4d8c078643771fbd020003170897ca3ae003ec16d1611974733ca1366c823428f54773a488b6e0af5b9d3439d4b7298e0de2e6a43010a19c7f50512b4885b571551769f3d683c6317ad2a87b0103302ecbefd141fc2828b40b3709c03e0f19b7468989392a58f0ad2825b16124d54cd9316481beaef82a7b494735f642fb87563b6252a0f7498611ff05", &(0x7f0000b70000), &(0x7f0000b20000), &(0x7f000097c000)) clock_gettime(0x7, &(0x7f00002c0000+0x68)) getrlimit(0x0, &(0x7f00008c9000)) 2018/02/04 12:03:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = syz_open_dev$sg(&(0x7f000049d000-0x9)='/dev/sg#\x00', 0x0, 0x0) fanotify_mark(r0, 0x6, 0x40000002, 0xffffffffffffffff, &(0x7f000018d000-0x8)='./file0\x00') fanotify_mark(r0, 0x80, 0x2, r0, &(0x7f000073f000-0x8)='./file0\x00') bind$inet6(r0, &(0x7f000082d000)={0xa, 0x3, 0x80000000, @loopback={0x0, 0x1}, 0x1}, 0x1c) 2018/02/04 12:03:42 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) acct(&(0x7f0000001000-0x8)='./file0\x00') mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$ipx(0xffffffffffffffff, &(0x7f0000006000-0x10), &(0x7f0000008000-0x4)=0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000008000-0x10), &(0x7f0000005000-0x4)=0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000007000)=[0x1, 0x1]) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) stat(&(0x7f0000006000+0xf7f)='./file0\x00', &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000006000)='./file0\x00', &(0x7f0000005000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_create1(0x80000) syz_fuse_mount(&(0x7f0000000000)='./file1\x00', 0xf000, r2, r3, 0x9, 0x0) read(r0, &(0x7f0000005000), 0x0) 2018/02/04 12:03:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}}) r1 = syz_open_dev$tun(&(0x7f00004d2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f000084b000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_mtu}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000189000-0x16)='/selinux/checkreqprot\x00', 0x80000, 0x0) 2018/02/04 12:03:42 executing program 4: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f00000a1000)="665babec505d7f7d7371104ceb1e4dcc944b6bce1a2c9293d3c2f60d6f20f6910acdf50dfbf1e79d838e496a7b73644ec3a3c4e7a63fbb2ed53d62ddd1c902492f8b449844ed5e262c44f934d38a3bcbd9215665887063c8cfbd31668dee1e89bbb77a94fce0fd4673c3fccd14ca", 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001000)="da", 0x1) [ 49.197427] ffff8801b3b57938 ffffffff81d94b69 1ffff1003676af2a ffff8801b42f0000 [ 49.205473] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b3b57a48 [ 49.213517] ffffffff81451ca2 024000c2b3b57988 0000000041b58ab3 ffffffff84195215 [ 49.221558] Call Trace: [ 49.224136] [] dump_stack+0xc1/0x128 [ 49.225351] device lo entered promiscuous mode [ 49.234059] [] warn_alloc+0x212/0x240 [ 49.239507] [] ? zone_watermark_ok_safe+0x280/0x280 2018/02/04 12:03:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:42 executing program 4: mmap(&(0x7f0000000000/0xffb000)=nil, 0xffb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00003b7000)='/dev/sequencer\x00', 0x4401, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) [ 49.246168] [] ? avc_has_perm+0xb0/0x4f0 [ 49.251873] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 49.258365] [] __vmalloc_node_range+0x3f5/0x5f0 [ 49.264687] [] ? check_preemption_disabled+0x3b/0x200 [ 49.264872] binder_alloc: 5549: binder_alloc_buf, no vma [ 49.264889] binder: 5549:5550 transaction failed 29189/-3, size 56-8 line 3127 [ 49.267457] binder: undelivered TRANSACTION_ERROR: 29189 [ 49.289724] [] ? task_has_security+0x130/0x270 [ 49.295945] [] vmalloc+0x5b/0x70 [ 49.300941] [] ? sel_write_load+0x130/0xfd0 [ 49.306893] [] sel_write_load+0x130/0xfd0 [ 49.312672] [] ? get_futex_key+0x1050/0x1050 [ 49.318704] [] ? sel_read_bool+0x250/0x250 [ 49.324565] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 49.331558] [] ? do_futex+0x3f8/0x15c0 [ 49.337083] [] ? sel_read_bool+0x250/0x250 [ 49.342943] [] __vfs_write+0x103/0x680 [ 49.348457] [] ? do_iter_readv_writev+0x400/0x400 [ 49.354925] [] ? __lock_is_held+0xa1/0xf0 [ 49.360712] [] ? __lock_is_held+0xa1/0xf0 [ 49.366491] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 49.373309] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 49.379868] [] ? __sb_start_write+0x14a/0x310 [ 49.385986] [] vfs_write+0x189/0x530 [ 49.391329] [] SyS_write+0xd9/0x1b0 [ 49.396578] [] ? SyS_read+0x1b0/0x1b0 [ 49.402019] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.408843] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.415405] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 49.422042] device lo left promiscuous mode [ 49.423768] Mem-Info: [ 49.423786] active_anon:54241 inactive_anon:44 isolated_anon:0 [ 49.423786] active_file:3505 inactive_file:8326 isolated_file:0 [ 49.423786] unevictable:0 dirty:228 writeback:0 unstable:0 2018/02/04 12:03:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:43 executing program 4: r0 = getpid() ptrace(0x4208, r0) mprotect(&(0x7f000046f000/0x4000)=nil, 0x4000, 0x2000003) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x1f, 0x4, 0x3, 'queue0\x00', 0x80}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000001000)=0x1ff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000002000)=0x5f3d3f78) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f000007d000-0x1000)=""/4096, 0x1000) ptrace$peek(0xffffffffffffffff, r0, &(0x7f0000380000-0x8)) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000003000)={0x21, &(0x7f0000002000-0x21)=""/33}) 2018/02/04 12:03:43 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00006cd000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000f07000-0xe)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000384000-0x4), &(0x7f0000fd2000)=0x4) 2018/02/04 12:03:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000a45000)=[{&(0x7f0000551000)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000ab3000)=[], 0x0, &(0x7f0000388000-0x150)=[@sndrcv={0x30, 0x84, 0x1}, @sndrcv={0x30, 0x84, 0x1}], 0x60}], 0x1, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00003c3000)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000ec8000-0x1c)={0x0, 0x14, "0eeeacd6dc69870e17cc09e8a2abe1b4875cbae4"}, &(0x7f000046c000-0x4)=0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f000078c000), &(0x7f0000462000)=0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000664000)=r2, 0x4) pause() setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f000002a000)={0x5, {{0x2, 0x0, @empty}}, 0x0, 0x3, [{{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x14}}}, {{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x1, @rand_addr=0x500}}]}, 0x230) 2018/02/04 12:03:43 executing program 4: r0 = getpid() ptrace(0x4208, r0) mprotect(&(0x7f000046f000/0x4000)=nil, 0x4000, 0x2000003) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x1f, 0x4, 0x3, 'queue0\x00', 0x80}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000001000)=0x1ff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000002000)=0x5f3d3f78) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f000007d000-0x1000)=""/4096, 0x1000) ptrace$peek(0xffffffffffffffff, r0, &(0x7f0000380000-0x8)) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000003000)={0x21, &(0x7f0000002000-0x21)=""/33}) [ 49.423786] slab_reclaimable:5522 slab_unreclaimable:59719 [ 49.423786] mapped:24049 shmem:51 pagetables:660 bounce:0 [ 49.423786] free:1476220 free_pcp:354 free_cma:0 [ 49.423801] Node 0 active_anon:216964kB inactive_anon:176kB active_file:14020kB inactive_file:33304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96196kB dirty:912kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 81920kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 49.423816] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 49.423841] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 49.423866] Normal free:2908888kB min:36824kB low:46028kB high:55232kB active_anon:216964kB inactive_anon:176kB active_file:14020kB inactive_file:33304kB unevictable:0kB writepending:912kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22088kB slab_unreclaimable:238876kB kernel_stack:5824kB pagetables:2640kB bounce:0kB free_pcp:780kB local_pcp:280kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 49.423914] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 642*4kB (UME) 58*8kB (UM) 30*16kB (ME) 28*32kB (UME) 71*64kB (UME) 24*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 2*2048kB (ME) 695*4096kB (M) = 2908920kB [ 49.424008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 49.424010] 11881 total pagecache pages [ 49.424014] 0 pages in swap cache [ 49.424017] Swap cache stats: add 0, delete 0, find 0/0 [ 49.424019] Free swap = 0kB [ 49.424021] Total swap = 0kB [ 49.424023] 1965969 pages RAM [ 49.424025] 0 pages HighMem/MovableOnly [ 49.424027] 320509 pages reserved [ 49.430197] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 49.430206] CPU: 1 PID: 5558 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 49.430211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.430224] ffff8801b3b27938 ffffffff81d94b69 1ffff10036764f2a ffff8801b3438000 [ 49.430250] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b3b27a48 [ 49.430261] ffffffff81451ca2 024000c2b3b27988 0000000041b58ab3 ffffffff84195215 [ 49.430262] Call Trace: [ 49.430276] [] dump_stack+0xc1/0x128 [ 49.430285] [] warn_alloc+0x212/0x240 [ 49.430293] [] ? zone_watermark_ok_safe+0x280/0x280 [ 49.430303] [] ? avc_has_perm+0xb0/0x4f0 [ 49.430315] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 49.430324] [] __vmalloc_node_range+0x3f5/0x5f0 [ 49.430335] [] ? check_preemption_disabled+0x3b/0x200 [ 49.430342] [] ? task_has_security+0x130/0x270 [ 49.430350] [] vmalloc+0x5b/0x70 [ 49.430357] [] ? sel_write_load+0x130/0xfd0 [ 49.430364] [] sel_write_load+0x130/0xfd0 [ 49.430372] [] ? get_futex_key+0x1050/0x1050 [ 49.430379] [] ? sel_read_bool+0x250/0x250 [ 49.430388] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 49.430394] [] ? do_futex+0x3f8/0x15c0 [ 49.430402] [] ? sel_read_bool+0x250/0x250 [ 49.430410] [] __vfs_write+0x103/0x680 [ 49.430418] [] ? do_iter_readv_writev+0x400/0x400 [ 49.430425] [] ? __lock_is_held+0xa1/0xf0 [ 49.430433] [] ? __lock_is_held+0xa1/0xf0 [ 49.430441] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 49.430448] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 49.430455] [] ? __sb_start_write+0x14a/0x310 [ 49.430462] [] vfs_write+0x189/0x530 [ 49.430470] [] SyS_write+0xd9/0x1b0 [ 49.430477] [] ? SyS_read+0x1b0/0x1b0 [ 49.430485] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.430493] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.430502] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 49.430505] Mem-Info: [ 49.430522] active_anon:54219 inactive_anon:44 isolated_anon:0 [ 49.430522] active_file:3505 inactive_file:8329 isolated_file:0 [ 49.430522] unevictable:0 dirty:231 writeback:0 unstable:0 [ 49.430522] slab_reclaimable:5522 slab_unreclaimable:59731 [ 49.430522] mapped:24049 shmem:51 pagetables:662 bounce:0 [ 49.430522] free:1476254 free_pcp:395 free_cma:0 [ 49.430541] Node 0 active_anon:216876kB inactive_anon:176kB active_file:14020kB inactive_file:33316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96196kB dirty:924kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 83968kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 49.430610] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 49.430641] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 49.430672] Normal free:2909024kB min:36824kB low:46028kB high:55232kB active_anon:216876kB inactive_anon:176kB active_file:14020kB inactive_file:33316kB unevictable:0kB writepending:924kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22088kB slab_unreclaimable:238924kB kernel_stack:5728kB pagetables:2648kB bounce:0kB free_pcp:944kB local_pcp:444kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 49.430722] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 642*4kB (UME) 59*8kB (UM) 30*16kB (ME) 31*32kB (UME) 71*64kB (UME) 24*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 2*2048kB (ME) 695*4096kB (M) = 2909024kB [ 49.430815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 49.430818] 11884 total pagecache pages [ 49.430821] 0 pages in swap cache [ 49.430825] Swap cache stats: add 0, delete 0, find 0/0 [ 49.430827] Free swap = 0kB [ 49.430829] Total swap = 0kB [ 49.430831] 1965969 pages RAM [ 49.430833] 0 pages HighMem/MovableOnly [ 49.430835] 320509 pages reserved [ 49.470588] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 49.470598] CPU: 0 PID: 5565 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 49.470602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.470615] ffff8801b3bcf938 ffffffff81d94b69 1ffff10036779f2a ffff8801b343e000 [ 49.470625] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b3bcfa48 [ 49.470635] ffffffff81451ca2 024000c2b3bcf988 0000000041b58ab3 ffffffff84195215 [ 49.470637] Call Trace: [ 49.470654] [] dump_stack+0xc1/0x128 [ 49.470666] [] warn_alloc+0x212/0x240 [ 49.470677] [] ? zone_watermark_ok_safe+0x280/0x280 [ 49.470687] [] ? avc_has_perm+0xb0/0x4f0 [ 49.470696] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 49.470704] [] __vmalloc_node_range+0x3f5/0x5f0 [ 49.470713] [] ? check_preemption_disabled+0x3b/0x200 [ 49.470720] [] ? task_has_security+0x130/0x270 [ 49.470735] [] vmalloc+0x5b/0x70 [ 49.470745] [] ? sel_write_load+0x130/0xfd0 [ 49.470755] [] sel_write_load+0x130/0xfd0 [ 49.470767] [] ? get_futex_key+0x1050/0x1050 [ 49.470777] [] ? sel_read_bool+0x250/0x250 [ 49.470791] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 49.470799] [] ? do_futex+0x3f8/0x15c0 [ 49.470808] [] ? sel_read_bool+0x250/0x250 [ 49.470818] [] __vfs_write+0x103/0x680 [ 49.470827] [] ? do_iter_readv_writev+0x400/0x400 [ 49.470837] [] ? __lock_is_held+0xa1/0xf0 [ 49.470846] [] ? __lock_is_held+0xa1/0xf0 [ 49.470856] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 49.470865] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 49.470873] [] ? __sb_start_write+0x14a/0x310 [ 49.470882] [] vfs_write+0x189/0x530 [ 49.470891] [] SyS_write+0xd9/0x1b0 [ 49.470900] [] ? SyS_read+0x1b0/0x1b0 [ 49.470910] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.470918] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.470929] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 49.471138] Mem-Info: [ 49.471159] active_anon:56336 inactive_anon:44 isolated_anon:0 [ 49.471159] active_file:3505 inactive_file:8329 isolated_file:0 [ 49.471159] unevictable:0 dirty:231 writeback:0 unstable:0 [ 49.471159] slab_reclaimable:5522 slab_unreclaimable:59662 [ 49.471159] mapped:24071 shmem:51 pagetables:710 bounce:0 [ 49.471159] free:1473734 free_pcp:254 free_cma:0 [ 49.471176] Node 0 active_anon:225344kB inactive_anon:176kB active_file:14020kB inactive_file:33316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96284kB dirty:924kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 81920kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 49.471192] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 49.471326] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 49.471399] Normal free:2898944kB min:36824kB low:46028kB high:55232kB active_anon:225344kB inactive_anon:176kB active_file:14020kB inactive_file:33316kB unevictable:0kB writepending:924kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22088kB slab_unreclaimable:238648kB kernel_stack:5920kB pagetables:2840kB bounce:0kB free_pcp:368kB local_pcp:112kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 49.471448] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 642*4kB (UME) 55*8kB (UM) 30*16kB (ME) 35*32kB (UME) 72*64kB (UME) 24*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 1*2048kB (E) 693*4096kB (M) [ 49.472110] binder_alloc: 5560: binder_alloc_buf, no vma [ 49.472127] binder: 5560:5566 transaction failed 29189/-3, size 56-8 line 3127 [ 49.472317] = 2898944kB [ 49.472324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 49.472327] 11884 total pagecache pages [ 49.472330] 0 pages in swap cache [ 49.472335] Swap cache stats: add 0, delete 0, find 0/0 [ 49.472337] Free swap = 0kB [ 49.472339] Total swap = 0kB [ 49.472342] 1965969 pages RAM [ 49.472344] 0 pages HighMem/MovableOnly [ 49.472346] 320509 pages reserved [ 49.475297] binder: undelivered TRANSACTION_ERROR: 29189 [ 49.476760] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 49.476768] CPU: 1 PID: 5565 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 49.476772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.476783] ffff8801b3bcf938 ffffffff81d94b69 1ffff10036779f2a ffff8801b343e000 [ 49.476794] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b3bcfa48 [ 49.476803] ffffffff81451ca2 024000c2b3bcf988 0000000041b58ab3 ffffffff84195215 [ 49.476805] Call Trace: [ 49.476816] [] dump_stack+0xc1/0x128 [ 49.476825] [] warn_alloc+0x212/0x240 [ 49.476833] [] ? zone_watermark_ok_safe+0x280/0x280 [ 49.476842] [] ? avc_has_perm+0xb0/0x4f0 [ 49.476851] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 49.476860] [] __vmalloc_node_range+0x3f5/0x5f0 [ 49.476871] [] ? check_preemption_disabled+0x3b/0x200 [ 49.476881] [] ? task_has_security+0x130/0x270 [ 49.476889] [] vmalloc+0x5b/0x70 [ 49.476896] [] ? sel_write_load+0x130/0xfd0 [ 49.476902] [] sel_write_load+0x130/0xfd0 [ 49.476910] [] ? get_futex_key+0x1050/0x1050 [ 49.476918] [] ? sel_read_bool+0x250/0x250 [ 49.476927] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 49.476933] [] ? do_futex+0x3f8/0x15c0 [ 49.476945] [] ? sel_read_bool+0x250/0x250 [ 49.476952] [] __vfs_write+0x103/0x680 [ 49.476960] [] ? do_iter_readv_writev+0x400/0x400 [ 49.476968] [] ? __lock_is_held+0xa1/0xf0 [ 49.476976] [] ? __lock_is_held+0xa1/0xf0 [ 49.476984] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 49.476992] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 49.476998] [] ? __sb_start_write+0x14a/0x310 [ 49.477006] [] vfs_write+0x189/0x530 [ 49.477013] [] SyS_write+0xd9/0x1b0 [ 49.477020] [] ? SyS_read+0x1b0/0x1b0 [ 49.477029] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.477036] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.477050] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 49.477086] Mem-Info: [ 49.477105] active_anon:55804 inactive_anon:44 isolated_anon:0 [ 49.477105] active_file:3505 inactive_file:8329 isolated_file:0 [ 49.477105] unevictable:0 dirty:231 writeback:0 unstable:0 [ 49.477105] slab_reclaimable:5522 slab_unreclaimable:59673 [ 49.477105] mapped:24060 shmem:51 pagetables:686 bounce:0 [ 49.477105] free:1474776 free_pcp:289 free_cma:0 [ 49.477125] Node 0 active_anon:223216kB inactive_anon:176kB active_file:14020kB inactive_file:33316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96240kB dirty:924kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 81920kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 49.477166] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 49.477191] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 49.477216] Normal free:2903112kB min:36824kB low:46028kB high:55232kB active_anon:223216kB inactive_anon:176kB active_file:14020kB inactive_file:33316kB unevictable:0kB writepending:924kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22088kB slab_unreclaimable:238692kB kernel_stack:5888kB pagetables:2744kB bounce:0kB free_pcp:520kB local_pcp:420kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 49.477288] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 642*4kB (UME) 56*8kB (UM) 30*16kB (ME) 36*32kB (UME) 72*64kB (UME) 24*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 3*2048kB (ME) 693*4096kB (M) = 2903080kB [ 49.477388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 49.477390] 11884 total pagecache pages [ 49.477393] 0 pages in swap cache [ 49.477397] Swap cache stats: add 0, delete 0, find 0/0 [ 49.477399] Free swap = 0kB [ 49.477401] Total swap = 0kB [ 49.477403] 1965969 pages RAM [ 49.477405] 0 pages HighMem/MovableOnly [ 49.477407] 320509 pages reserved [ 51.163992] device lo entered promiscuous mode [ 51.169529] device lo left promiscuous mode 2018/02/04 12:03:44 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) acct(&(0x7f0000001000-0x8)='./file0\x00') mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$ipx(0xffffffffffffffff, &(0x7f0000006000-0x10), &(0x7f0000008000-0x4)=0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000008000-0x10), &(0x7f0000005000-0x4)=0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000007000)=[0x1, 0x1]) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) stat(&(0x7f0000006000+0xf7f)='./file0\x00', &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000006000)='./file0\x00', &(0x7f0000005000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_create1(0x80000) syz_fuse_mount(&(0x7f0000000000)='./file1\x00', 0xf000, r2, r3, 0x9, 0x0) read(r0, &(0x7f0000005000), 0x0) 2018/02/04 12:03:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) sendmsg$key(r2, &(0x7f0000fa6000-0x38)={0x0, 0x0, &(0x7f0000857000)={&(0x7f0000a6a000)={0x2, 0xf, 0x0, 0x2, 0x18, 0x0, 0x2, 0x2, [@sadb_x_nat_t_port={0x1, 0x0, 0x2}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x2, @rand_addr=0x1000}, @in={0x2, 0x3, @loopback=0x7f000001}}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x0, 0xc}}, @in=@empty, 0x7, 0x10, 0x4}, @sadb_lifetime={0x4, 0x0, 0xffffffffffffffc0, 0xde0d, 0x5, 0xecc7}, @sadb_address={0x5, 0x6, 0x32, 0x80, 0x0, @in6={0xa, 0x1, 0x3, @dev={0xfe, 0x80, [], 0x0, 0xc}, 0x9f24}}, @sadb_sa={0x2, 0x1, 0x1, 0x8000, 0x100000000, 0x16, 0x1, 0x1}]}, 0xc0}, 0x1}, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000ed5000)=[{&(0x7f0000ed5000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000d30000-0x20)=[]}], 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000ed5000-0x10)=@buf={0x0, &(0x7f0000ed4000)}) socket$nl_generic(0x10, 0x3, 0x10) 2018/02/04 12:03:44 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000851000-0xe)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:44 executing program 1: mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000013000-0x39)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000e000-0x8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x14, 0x0, &(0x7f000000d000-0x98)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) r2 = dup3(r1, r0, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000018000-0x8)={0x0, 0x0}) r4 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000005000-0x28)={0x7fff, 0x7fff, r3, 0x0, r4, 0x3, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000-0x30)={0x10, 0x0, &(0x7f0000015000)=[@request_death={0x400c630e}], 0x1, 0x0, &(0x7f0000016000)='o'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/04 12:03:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000a45000)=[{&(0x7f0000551000)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000ab3000)=[], 0x0, &(0x7f0000388000-0x150)=[@sndrcv={0x30, 0x84, 0x1}, @sndrcv={0x30, 0x84, 0x1}], 0x60}], 0x1, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00003c3000)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000ec8000-0x1c)={0x0, 0x14, "0eeeacd6dc69870e17cc09e8a2abe1b4875cbae4"}, &(0x7f000046c000-0x4)=0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f000078c000), &(0x7f0000462000)=0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000664000)=r2, 0x4) pause() setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f000002a000)={0x5, {{0x2, 0x0, @empty}}, 0x0, 0x3, [{{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x14}}}, {{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x1, @rand_addr=0x500}}]}, 0x230) 2018/02/04 12:03:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00006cd000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000f07000-0xe)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000384000-0x4), &(0x7f0000fd2000)=0x4) 2018/02/04 12:03:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect(r0, &(0x7f0000eda000-0x1c)=@in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendto$inet6(r0, &(0x7f0000cf5000-0x5d), 0x0, 0x0, &(0x7f00009c1000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/04 12:03:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) userfaultfd(0x80f9d4bd09fe319c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil}, 0x1}) [ 51.298827] syz-executor4: [ 51.303683] audit: type=1400 audit(1517745824.988:14): avc: denied { write } for pid=5574 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 51.304569] audit: type=1400 audit(1517745824.988:15): avc: denied { ioctl } for pid=5574 comm="syz-executor7" path="socket:[13907]" dev="sockfs" ino=13907 ioctlcmd=0x8910 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 51.308179] binder_alloc: 5577: binder_alloc_buf, no vma [ 51.308196] binder: 5577:5587 transaction failed 29189/-3, size 56-8 line 3127 [ 51.312782] binder: undelivered TRANSACTION_ERROR: 29189 [ 51.315213] binder: 5579:5590 ioctl c0286405 20004fd8 returned -22 [ 51.315353] binder: 5579:5590 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 51.318954] binder: 5579:5593 tried to acquire reference to desc 0, got 1 instead [ 51.320674] binder: 5579:5593 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 51.324021] binder: 5579:5590 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 51.327113] binder: 5579:5593 ioctl c0286405 20004fd8 returned -22 [ 51.328289] binder: 5579:5590 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 51.328310] binder: 5579:5593 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 51.339976] binder: undelivered death notification, 0000000000000000 [ 51.447507] vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 51.456054] CPU: 0 PID: 5581 Comm: syz-executor4 Not tainted 4.9.80-gb30d2b5 #28 [ 51.463555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.472880] ffff8801b37cf938 ffffffff81d94b69 1ffff100366f9f2a ffff8801b431c800 [ 51.480846] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b37cfa48 [ 51.488807] ffffffff81451ca2 024000c2b37cf988 0000000041b58ab3 ffffffff84195215 [ 51.496771] Call Trace: [ 51.499329] [] dump_stack+0xc1/0x128 [ 51.504665] [] warn_alloc+0x212/0x240 [ 51.510084] [] ? zone_watermark_ok_safe+0x280/0x280 [ 51.516720] [] ? avc_has_perm+0xb0/0x4f0 [ 51.522405] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 51.528869] [] __vmalloc_node_range+0x3f5/0x5f0 [ 51.535158] [] ? check_preemption_disabled+0x3b/0x200 [ 51.541976] [] ? task_has_security+0x130/0x270 [ 51.548180] [] vmalloc+0x5b/0x70 [ 51.553165] [] ? sel_write_load+0x130/0xfd0 [ 51.559105] [] sel_write_load+0x130/0xfd0 [ 51.564874] [] ? get_futex_key+0x1050/0x1050 [ 51.570900] [] ? sel_read_bool+0x250/0x250 [ 51.576756] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 51.583744] [] ? do_futex+0x3f8/0x15c0 [ 51.589257] [] ? sel_read_bool+0x250/0x250 [ 51.595110] [] __vfs_write+0x103/0x680 [ 51.600616] [] ? do_iter_readv_writev+0x400/0x400 [ 51.607076] [] ? __lock_is_held+0xa1/0xf0 [ 51.612842] [] ? __lock_is_held+0xa1/0xf0 [ 51.618612] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 51.625422] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 51.631971] [] ? __sb_start_write+0x14a/0x310 [ 51.638092] [] vfs_write+0x189/0x530 [ 51.643432] [] SyS_write+0xd9/0x1b0 [ 51.648677] [] ? SyS_read+0x1b0/0x1b0 [ 51.654095] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 51.660904] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 51.667453] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 51.675010] Mem-Info: [ 51.677418] active_anon:50604 inactive_anon:44 isolated_anon:0 [ 51.677418] active_file:3509 inactive_file:8346 isolated_file:0 [ 51.677418] unevictable:0 dirty:258 writeback:0 unstable:0 [ 51.677418] slab_reclaimable:5530 slab_unreclaimable:59603 [ 51.677418] mapped:24028 shmem:51 pagetables:631 bounce:0 [ 51.677418] free:1480074 free_pcp:394 free_cma:0 [ 51.710658] Node 0 active_anon:202416kB inactive_anon:176kB active_file:14036kB inactive_file:33384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96112kB dirty:1032kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 51.740101] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 51.769420] lowmem_reserve[]: 0 2908 6410 6410 [ 51.774599] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 51.806020] lowmem_reserve[]: 0 0 3501 3501 [ 51.810955] Normal free:2924304kB min:36824kB low:46028kB high:55232kB active_anon:202416kB inactive_anon:176kB active_file:14036kB inactive_file:33384kB unevictable:0kB writepending:1032kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22120kB slab_unreclaimable:238412kB kernel_stack:5472kB pagetables:2524kB bounce:0kB free_pcp:940kB local_pcp:344kB free_cma:0kB [ 51.844784] lowmem_reserve[]: 0 0 0 0 [ 51.849154] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 51.864433] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 51.881696] Normal: 678*4kB (UM) 71*8kB (UM) 30*16kB (M) 44*32kB (UME) 75*64kB (UME) 24*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 1*2048kB (E) 699*4096kB (M) = 2924272kB [ 51.900640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 51.909180] 11911 total pagecache pages [ 51.913306] 0 pages in swap cache [ 51.916737] Swap cache stats: add 0, delete 0, find 0/0 [ 51.922099] Free swap = 0kB [ 51.925091] Total swap = 0kB [ 51.928076] 1965969 pages RAM [ 51.931615] 0 pages HighMem/MovableOnly [ 51.935559] 320509 pages reserved [ 51.939210] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 51.949179] CPU: 1 PID: 5583 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 51.956679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.966004] ffff8801b2c07938 ffffffff81d94b69 1ffff10036580f2a ffff8801b4f93000 [ 51.973976] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b2c07a48 [ 51.981945] ffffffff81451ca2 024000c2b2c07988 0000000041b58ab3 ffffffff84195215 [ 51.989919] Call Trace: [ 51.992477] [] dump_stack+0xc1/0x128 [ 51.997820] [] warn_alloc+0x212/0x240 [ 52.003240] [] ? zone_watermark_ok_safe+0x280/0x280 [ 52.009872] [] ? avc_has_perm+0xb0/0x4f0 [ 52.015554] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 52.022021] [] __vmalloc_node_range+0x3f5/0x5f0 [ 52.028310] [] ? check_preemption_disabled+0x3b/0x200 [ 52.035117] [] ? task_has_security+0x130/0x270 [ 52.041315] [] vmalloc+0x5b/0x70 [ 52.046299] [] ? sel_write_load+0x130/0xfd0 [ 52.052240] [] sel_write_load+0x130/0xfd0 [ 52.058004] [] ? get_futex_key+0x1050/0x1050 [ 52.064028] [] ? sel_read_bool+0x250/0x250 [ 52.069883] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.076863] [] ? do_futex+0x3f8/0x15c0 [ 52.082370] [] ? sel_read_bool+0x250/0x250 [ 52.088222] [] __vfs_write+0x103/0x680 [ 52.093727] [] ? do_iter_readv_writev+0x400/0x400 [ 52.100189] [] ? __lock_is_held+0xa1/0xf0 [ 52.105955] [] ? __lock_is_held+0xa1/0xf0 [ 52.111721] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 52.118525] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 52.125071] [] ? __sb_start_write+0x14a/0x310 [ 52.131188] [] vfs_write+0x189/0x530 [ 52.136520] [] SyS_write+0xd9/0x1b0 [ 52.141769] [] ? SyS_read+0x1b0/0x1b0 [ 52.147188] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.153993] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 52.160539] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 52.167516] Mem-Info: [ 52.169941] active_anon:50073 inactive_anon:44 isolated_anon:0 [ 52.169941] active_file:3509 inactive_file:8346 isolated_file:0 [ 52.169941] unevictable:0 dirty:261 writeback:0 unstable:0 [ 52.169941] slab_reclaimable:5530 slab_unreclaimable:59607 [ 52.169941] mapped:24028 shmem:51 pagetables:631 bounce:0 [ 52.169941] free:1480574 free_pcp:434 free_cma:0 [ 52.203177] Node 0 active_anon:200292kB inactive_anon:176kB active_file:14036kB inactive_file:33384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96112kB dirty:1044kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 52.232698] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 52.262024] lowmem_reserve[]: 0 2908 6410 6410 [ 52.267197] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 52.298110] lowmem_reserve[]: 0 0 3501 3501 [ 52.303032] Normal free:2926312kB min:36824kB low:46028kB high:55232kB active_anon:200268kB inactive_anon:176kB active_file:14036kB inactive_file:33384kB unevictable:0kB writepending:1056kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22124kB slab_unreclaimable:238468kB kernel_stack:5440kB pagetables:2468kB bounce:0kB free_pcp:1100kB local_pcp:584kB free_cma:0kB [ 52.336948] lowmem_reserve[]: 0 0 0 0 [ 52.341356] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 52.356580] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 52.373743] Normal: 678*4kB (UM) 72*8kB (UM) 31*16kB (UM) 43*32kB (UME) 75*64kB (UME) 24*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 2*2048kB (ME) 699*4096kB (M) = 2926312kB [ 52.392851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 52.401579] 11916 total pagecache pages [ 52.405533] 0 pages in swap cache [ 52.408962] Swap cache stats: add 0, delete 0, find 0/0 [ 52.414316] Free swap = 0kB [ 52.417310] Total swap = 0kB [ 52.420319] 1965969 pages RAM [ 52.423398] 0 pages HighMem/MovableOnly [ 52.427336] 320509 pages reserved [ 52.430814] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 52.440871] CPU: 1 PID: 5596 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 52.448373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.457696] ffff8801b2c87938 ffffffff81d94b69 1ffff10036590f2a ffff8801b36ae000 [ 52.465664] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b2c87a48 [ 52.473625] ffffffff81451ca2 024000c2b2c87988 0000000041b58ab3 ffffffff84195215 [ 52.481590] Call Trace: [ 52.484147] [] dump_stack+0xc1/0x128 [ 52.489479] [] warn_alloc+0x212/0x240 [ 52.494904] [] ? zone_watermark_ok_safe+0x280/0x280 [ 52.501553] [] ? avc_has_perm+0xb0/0x4f0 [ 52.507234] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 52.513696] [] __vmalloc_node_range+0x3f5/0x5f0 [ 52.519992] [] ? check_preemption_disabled+0x3b/0x200 [ 52.526806] [] ? task_has_security+0x130/0x270 [ 52.533007] [] vmalloc+0x5b/0x70 [ 52.537994] [] ? sel_write_load+0x130/0xfd0 [ 52.543932] [] sel_write_load+0x130/0xfd0 [ 52.549706] [] ? check_preemption_disabled+0x3b/0x200 [ 52.556511] [] ? sel_read_bool+0x250/0x250 [ 52.562362] [] ? mark_held_locks+0xaf/0x100 [ 52.568301] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 52.574591] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.581401] [] ? sel_read_bool+0x250/0x250 [ 52.587254] [] __vfs_write+0x103/0x680 [ 52.592771] [] ? do_iter_readv_writev+0x400/0x400 [ 52.599231] [] ? __lock_is_held+0xa1/0xf0 [ 52.605001] [] ? __lock_is_held+0xa1/0xf0 [ 52.610767] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 52.617576] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 52.624136] [] ? __sb_start_write+0x14a/0x310 [ 52.630255] [] vfs_write+0x189/0x530 [ 52.635599] [] SyS_write+0xd9/0x1b0 [ 52.640842] [] ? SyS_read+0x1b0/0x1b0 [ 52.646261] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.653076] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 52.659623] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 52.666486] Mem-Info: [ 52.668888] active_anon:50067 inactive_anon:44 isolated_anon:0 [ 52.668888] active_file:3509 inactive_file:8346 isolated_file:0 [ 52.668888] unevictable:0 dirty:268 writeback:0 unstable:0 [ 52.668888] slab_reclaimable:5532 slab_unreclaimable:59621 [ 52.668888] mapped:24014 shmem:51 pagetables:617 bounce:0 [ 52.668888] free:1480572 free_pcp:429 free_cma:0 [ 52.702138] Node 0 active_anon:200268kB inactive_anon:176kB active_file:14036kB inactive_file:33384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96056kB dirty:1072kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 69632kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 52.731582] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 52.760931] lowmem_reserve[]: 0 2908 6410 6410 [ 52.766085] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 52.796983] lowmem_reserve[]: 0 0 3501 3501 [ 52.801925] Normal free:2926296kB min:36824kB low:46028kB high:55232kB active_anon:200268kB inactive_anon:176kB active_file:14036kB inactive_file:33384kB unevictable:0kB writepending:1080kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22128kB slab_unreclaimable:238484kB kernel_stack:5408kB pagetables:2468kB bounce:0kB free_pcp:1072kB local_pcp:584kB free_cma:0kB [ 52.835856] lowmem_reserve[]: 0 0 0 0 [ 52.840237] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 52.855470] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 52.872648] Normal: 678*4kB (UM) 72*8kB (UM) 30*16kB (M) 44*32kB (UME) 75*64kB (UME) 24*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 2*2048kB (ME) 699*4096kB (M) = 2926328kB [ 52.891643] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 52.900375] 11922 total pagecache pages 2018/02/04 12:03:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000086b000-0x9)='/dev/rtc\x00', 0x8000, 0x0) accept4$netrom(r1, &(0x7f000037c000)=@full, &(0x7f0000088000-0x4)=0x48, 0x0) setsockopt$sock_int(r0, 0x1, 0x1a, &(0x7f00006e0000), 0x4) 2018/02/04 12:03:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000861000)={0x0, 0x1}, &(0x7f00002a4000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00009d7000-0x8)={r1, 0x400}, &(0x7f0000736000)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 2018/02/04 12:03:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000cb5000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, &(0x7f0000865000-0x4)=0x872) ioctl$int_out(r2, 0x2, &(0x7f000074c000-0x8)) readv(r0, &(0x7f0000005000)=[{&(0x7f0000040000)=""/108, 0x6c}], 0x1) close(r0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000f44000-0x8)) sendto$unix(r1, &(0x7f0000010000), 0xfffffffffffff000, 0x0, 0x0, 0x0) 2018/02/04 12:03:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = creat(&(0x7f0000ac5000-0x8)='./file0\x00', 0x1) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000cb1000-0x4)=0x9) r2 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) fcntl$setstatus(r0, 0x4, 0x40000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000c39000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) futimesat(r3, &(0x7f0000902000)='./file0\x00', &(0x7f0000376000-0x20)={{}, {0x0, 0x2710}}) r4 = request_key(&(0x7f00001f1000-0xc)='id_resolver\x00', &(0x7f0000d37000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x2)="c400", 0xfffffffffffffffa) r5 = add_key(&(0x7f0000d04000)='id_legacy\x00', &(0x7f00006d6000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000f15000-0xc3)="57b4642a536f9a347eead89792f5826330c1b4feb7670b5a4b7449d55ecbb64da9f6470964dfe5550c7db66ce0f7800c0c65b44a453fce4a45e2a2da7c9e3463e90f2671fd2dba7bb5139573d4b35bbc346925242824ba9e198d75f4b91264dc9e25b5baea4242828941d54dde588b2fd574b908716cc21cb3fe920c4264b709acd5bc2e26a24405d66e46dd10289219de39da1c4e6be28367730299385b0cb5c0a02596ddb218f4f6fbb16dad5b67787d4ff0d9b2e3c61243f0269e937d5a3af163c1", 0xc3, 0xfffffffffffffffd) r6 = add_key(&(0x7f000075d000-0x8)='rxrpc_s\x00', &(0x7f0000119000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00002ba000)="431d67349829638e7107d01995cf199350cf7f13d302b28e8cd77d6d703de6ed0d7157fcdbf0c641c101d1fb4e24e6fd702d91cdb26186663e668c8378477cde1e149c1195c39c2696cb7105f79cc81dd5d61aa35245e30464000ab674a76c98e1fcc02a96947b033b7805007e9d049a3d27d7f732d9a7ce", 0x78, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00004dc000-0xc)={r4, r5, r6}, &(0x7f00000a3000-0x2a)=""/42, 0x2a, &(0x7f0000ca5000-0x38)={&(0x7f00007f1000-0x40)={'sha512-ssse3\x00'}, &(0x7f000020d000-0x1000)="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", 0x1000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) getsockopt$inet_int(r1, 0x0, 0x22, &(0x7f000054c000-0x4), &(0x7f00005f7000-0x1)=0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000c86000-0x4)=0x0) ptrace$setregset(0x4205, r7, 0x200, &(0x7f0000c5f000)={&(0x7f0000ed2000-0xd)="66807bb4ebfeff6daa439a6e09", 0xd}) write$tun(r2, &(0x7f0000083000-0x10fc)=@hdr={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "3d589b", 0xf98, 0x2c, 0x0, @loopback={0x0, 0x1}, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}}}}}, 0xfca) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00006b6000)=0x9) pwritev(r2, &(0x7f00003e1000)=[{&(0x7f0000487000)="7a81b8554c6e6178d26fa5961275a9c2311eecf9aae5ef78beb2dce84b570f29f2ab2687437dacb191a2ccdcec255b83d0be86b2b12043b1605772295650ff5adbe5933f6ec2924024b138e4a91abca5d35842e415fb0fa0eceb66858fe867f5379ef81516928633412574bb23b55c73243580168927b26ebcfd70a7993b212a4cd39244b836405875513f0c5074785d1aba34ee7100f11311a1081282ef6c44f837d0ea518732ff", 0xa8}, {&(0x7f0000958000-0x9d)="c029c7adf46e4351c3c2725ea9140716620d02bb5aac7b55f948dd66f55b0b307e82adfffbdd77e58e6bf1659e91dde0f85ead46ba67f4f5043ae1d568bab905ca5b598e7e6506dc4b2280f43cdc268b471c9cefa40fa92eeb4ece80eb2ce703da08d3b8ee20334d67667e942cac7659a5c2827419d685f6e52e415db316d1029d327752ec2c6ffec935f99030bf577d962a9e2345ee66b10e9a2aadb4", 0x9d}, {&(0x7f0000564000)="9a8d00882f3a52f68b1c795c1c036b85de7e72f9297355ef30a92ad8a0948fa603f8d59687f127a252bcd9fc2cb301928b4f2cecc399bb221ac9441b3ecbf1dd99e5eadfaeefc5e6bbfbdca89b62c068f0ca935ba2683d64288b068f9075bd0705340a47292eb3ab7676ff4da61082ed8cf8c66dd0c9db19a1fc", 0x7a}], 0x3, 0x0) 2018/02/04 12:03:46 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) acct(&(0x7f0000001000-0x8)='./file0\x00') mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$ipx(0xffffffffffffffff, &(0x7f0000006000-0x10), &(0x7f0000008000-0x4)=0x10) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000008000-0x10), &(0x7f0000005000-0x4)=0x10) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000007000)=[0x1, 0x1]) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) stat(&(0x7f0000006000+0xf7f)='./file0\x00', &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000006000)='./file0\x00', &(0x7f0000005000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_create1(0x80000) syz_fuse_mount(&(0x7f0000000000)='./file1\x00', 0xf000, r2, r3, 0x9, 0x0) read(r0, &(0x7f0000005000), 0x0) 2018/02/04 12:03:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000340000)='/selinux/policy\x00', 0x0, 0x0) write$selinux_access(r1, &(0x7f0000d13000-0x36)={'system_u:object_r:checkpolicy_exec_t:s0', 0x20, 'unconfined', 0x20, 0x31, 0x36}, 0x36) r2 = gettid() ptrace$pokeuser(0x6, r2, 0x7, 0x1) openat$selinux_access(0xffffffffffffff9c, &(0x7f00004d4000-0x10)='/selinux/access\x00', 0x2, 0x0) 2018/02/04 12:03:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00006cd000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000f07000-0xe)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000384000-0x4), &(0x7f0000fd2000)=0x4) 2018/02/04 12:03:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) [ 52.904333] 0 pages in swap cache [ 52.907752] Swap cache stats: add 0, delete 0, find 0/0 [ 52.913221] Free swap = 0kB [ 52.916221] Total swap = 0kB [ 52.919212] 1965969 pages RAM [ 52.922315] 0 pages HighMem/MovableOnly [ 52.926268] 320509 pages reserved 2018/02/04 12:03:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:46 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = accept(r0, &(0x7f00002cf000-0x10)=@ethernet={0x0, @local}, &(0x7f0000757000)=0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000967000)={@loopback=0x7f000001, @multicast1=0xe0000001, 0x0, 0x5, [@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x12}, @loopback=0x7f000001, @multicast1=0xe0000001, @empty]}, 0x24) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095c000-0x4), 0x4) 2018/02/04 12:03:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:46 executing program 1: mmap(&(0x7f0000000000/0xfb4000)=nil, 0xfb4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000fad000)={0x1, &(0x7f0000fb2000-0x8)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) ioperm(0x0, 0x40, 0x0) mmap(&(0x7f0000fb4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000fb4000)='/dev/pktcdvd/control\x00', 0x200, 0x0) mmap(&(0x7f0000fb4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000fb5000-0x4), &(0x7f0000fb5000-0x4)=0x4) 2018/02/04 12:03:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:46 executing program 7: mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f73000-0x4)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000dcc000), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0x44f, 0x23fffd, 0x0, 0x0) [ 52.940521] syz-executor4: [ 52.941060] binder_alloc: 5599: binder_alloc_buf, no vma [ 52.941077] binder: 5599:5606 transaction failed 29189/-3, size 56-8 line 3127 [ 52.949970] binder: undelivered TRANSACTION_ERROR: 29189 [ 52.959434] device gre0 entered promiscuous mode [ 52.968637] binder_alloc: 5616: binder_alloc_buf, no vma [ 52.968654] binder: 5616:5618 transaction failed 29189/-3, size 56-8 line 3127 2018/02/04 12:03:46 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000001000-0x1)='\x00', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$ax25(r1, &(0x7f0000004000-0x10)={0x3, {"fc0769db58c305"}, 0xc00d}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) chmod(&(0x7f0000012000)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f000039b000), &(0x7f0000bda000)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/04 12:03:46 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x1, @loopback=0x7f000001}, @in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}], 0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001000-0x8)={0x0}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002000-0x8)={r1, 0x7fff}, 0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_wait(r0, &(0x7f0000002000)=[{}, {}, {}, {}, {}], 0x5, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000001000-0x3f)=""/63) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r1, 0x4}, 0x6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f000035f000-0x38)={&(0x7f0000748000)={0x10}, 0xc, &(0x7f00002ea000)={&(0x7f000091e000)=@ipv4_newroute={0x30, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, [@RTA_MULTIPATH={0x14, 0x9, [{0x8}, {}]}]}, 0x30}, 0x1}, 0x0) 2018/02/04 12:03:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) [ 52.976428] binder: undelivered TRANSACTION_ERROR: 29189 [ 52.988985] binder_alloc: 5623: binder_alloc_buf, no vma [ 52.989002] binder: 5623:5624 transaction failed 29189/-3, size 56-8 line 3127 [ 52.991689] binder: undelivered TRANSACTION_ERROR: 29189 [ 53.007159] binder: 5629:5632 transaction failed 29189/-22, size 56-8 line 3004 [ 53.011535] binder: undelivered TRANSACTION_ERROR: 29189 [ 53.025979] binder: 5635:5640 transaction failed 29189/-22, size 56-8 line 3004 [ 53.029538] binder: undelivered TRANSACTION_ERROR: 29189 [ 53.044989] binder_alloc: 5634: binder_alloc_buf, no vma [ 53.045006] binder: 5643:5646 transaction failed 29189/-3, size 56-8 line 3127 [ 53.047765] binder_alloc: 5634: binder_alloc_buf, no vma [ 53.047782] binder: 5634:5639 transaction failed 29189/-3, size 56-8 line 3127 [ 53.050510] binder: undelivered TRANSACTION_ERROR: 29189 [ 53.056326] binder: undelivered TRANSACTION_ERROR: 29189 [ 53.145964] vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 53.154551] CPU: 1 PID: 5610 Comm: syz-executor4 Not tainted 4.9.80-gb30d2b5 #28 [ 53.162057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.171385] ffff8801b2c07938 ffffffff81d94b69 1ffff10036580f2a ffff8801b2e4b000 [ 53.179380] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b2c07a48 [ 53.187365] ffffffff81451ca2 024000c2b2c07988 0000000041b58ab3 ffffffff84195215 [ 53.195367] Call Trace: [ 53.197925] [] dump_stack+0xc1/0x128 [ 53.203262] [] warn_alloc+0x212/0x240 [ 53.208686] [] ? zone_watermark_ok_safe+0x280/0x280 [ 53.215329] [] ? avc_has_perm+0xb0/0x4f0 [ 53.221021] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 53.227493] [] __vmalloc_node_range+0x3f5/0x5f0 [ 53.233784] [] ? check_preemption_disabled+0x3b/0x200 [ 53.240594] [] ? task_has_security+0x130/0x270 [ 53.246795] [] vmalloc+0x5b/0x70 [ 53.251790] [] ? sel_write_load+0x130/0xfd0 [ 53.257733] [] sel_write_load+0x130/0xfd0 [ 53.263505] [] ? get_futex_key+0x1050/0x1050 [ 53.269542] [] ? sel_read_bool+0x250/0x250 [ 53.275404] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 53.282387] [] ? do_futex+0x3f8/0x15c0 [ 53.287898] [] ? sel_read_bool+0x250/0x250 [ 53.293757] [] __vfs_write+0x103/0x680 [ 53.299267] [] ? do_iter_readv_writev+0x400/0x400 [ 53.305732] [] ? __lock_is_held+0xa1/0xf0 [ 53.311499] [] ? __lock_is_held+0xa1/0xf0 [ 53.317272] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 53.324088] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 53.330634] [] ? __sb_start_write+0x14a/0x310 [ 53.336747] [] vfs_write+0x189/0x530 [ 53.342079] [] SyS_write+0xd9/0x1b0 [ 53.347334] [] ? SyS_read+0x1b0/0x1b0 [ 53.352767] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 53.359584] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 53.366134] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 53.373055] Mem-Info: [ 53.375454] active_anon:52149 inactive_anon:44 isolated_anon:0 [ 53.375454] active_file:3513 inactive_file:8360 isolated_file:0 [ 53.375454] unevictable:0 dirty:277 writeback:0 unstable:0 [ 53.375454] slab_reclaimable:5555 slab_unreclaimable:59600 [ 53.375454] mapped:24029 shmem:51 pagetables:634 bounce:0 [ 53.375454] free:1478425 free_pcp:423 free_cma:0 [ 53.408705] Node 0 active_anon:208596kB inactive_anon:176kB active_file:14052kB inactive_file:33440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96116kB dirty:1108kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 77824kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 53.438142] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 53.467468] lowmem_reserve[]: 0 2908 6410 6410 [ 53.472657] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 53.503520] lowmem_reserve[]: 0 0 3501 3501 [ 53.508431] Normal free:2917708kB min:36824kB low:46028kB high:55232kB active_anon:208596kB inactive_anon:176kB active_file:14052kB inactive_file:33440kB unevictable:0kB writepending:1108kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22220kB slab_unreclaimable:238400kB kernel_stack:5568kB pagetables:2536kB bounce:0kB free_pcp:1048kB local_pcp:340kB free_cma:0kB [ 53.542353] lowmem_reserve[]: 0 0 0 0 [ 53.546722] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 53.562216] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 53.579367] Normal: 635*4kB (UM) 82*8kB (UM) 33*16kB (UM) 46*32kB (UME) 67*64kB (UME) 25*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 6*2048kB (ME) 695*4096kB (M) = 2917772kB [ 53.598468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 53.607030] 11928 total pagecache pages [ 53.611109] 0 pages in swap cache [ 53.614532] Swap cache stats: add 0, delete 0, find 0/0 [ 53.619887] Free swap = 0kB [ 53.622878] Total swap = 0kB [ 53.625861] 1965969 pages RAM [ 53.628932] 0 pages HighMem/MovableOnly [ 53.632901] 320509 pages reserved [ 53.636368] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 53.646594] CPU: 0 PID: 5614 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 53.654094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.663416] ffff8801b3a37938 ffffffff81d94b69 1ffff10036746f2a ffff8801b2e4e000 [ 53.671378] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b3a37a48 [ 53.679340] ffffffff81451ca2 024000c2b3a37988 0000000041b58ab3 ffffffff84195215 [ 53.687299] Call Trace: [ 53.689856] [] dump_stack+0xc1/0x128 [ 53.695191] [] warn_alloc+0x212/0x240 [ 53.700609] [] ? zone_watermark_ok_safe+0x280/0x280 [ 53.707243] [] ? avc_has_perm+0xb0/0x4f0 [ 53.712923] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 53.719381] [] __vmalloc_node_range+0x3f5/0x5f0 [ 53.725669] [] ? check_preemption_disabled+0x3b/0x200 [ 53.732476] [] ? task_has_security+0x130/0x270 [ 53.738675] [] vmalloc+0x5b/0x70 [ 53.743659] [] ? sel_write_load+0x130/0xfd0 [ 53.749596] [] sel_write_load+0x130/0xfd0 [ 53.755361] [] ? get_futex_key+0x1050/0x1050 [ 53.761385] [] ? sel_read_bool+0x250/0x250 [ 53.767238] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 53.774216] [] ? do_futex+0x3f8/0x15c0 [ 53.779722] [] ? sel_read_bool+0x250/0x250 [ 53.785576] [] __vfs_write+0x103/0x680 [ 53.791079] [] ? do_iter_readv_writev+0x400/0x400 [ 53.797538] [] ? __lock_is_held+0xa1/0xf0 [ 53.803306] [] ? __lock_is_held+0xa1/0xf0 [ 53.809080] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 53.815885] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 53.822431] [] ? __sb_start_write+0x14a/0x310 [ 53.828543] [] vfs_write+0x189/0x530 [ 53.833881] [] SyS_write+0xd9/0x1b0 [ 53.839125] [] ? SyS_read+0x1b0/0x1b0 [ 53.844543] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 53.851348] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 53.857897] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 53.865276] Mem-Info: [ 53.867686] active_anon:51610 inactive_anon:44 isolated_anon:0 [ 53.867686] active_file:3513 inactive_file:8360 isolated_file:0 [ 53.867686] unevictable:0 dirty:279 writeback:0 unstable:0 [ 53.867686] slab_reclaimable:5559 slab_unreclaimable:59602 [ 53.867686] mapped:24015 shmem:51 pagetables:620 bounce:0 [ 53.867686] free:1478941 free_pcp:463 free_cma:0 [ 53.900924] Node 0 active_anon:206440kB inactive_anon:176kB active_file:14052kB inactive_file:33440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96060kB dirty:1116kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 53.930354] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 53.959680] lowmem_reserve[]: 0 2908 6410 6410 [ 53.964831] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 53.996260] lowmem_reserve[]: 0 0 3501 3501 [ 54.001189] Normal free:2919772kB min:36824kB low:46028kB high:55232kB active_anon:206440kB inactive_anon:176kB active_file:14052kB inactive_file:33440kB unevictable:0kB writepending:1120kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22236kB slab_unreclaimable:238408kB kernel_stack:5504kB pagetables:2480kB bounce:0kB free_pcp:1212kB local_pcp:692kB free_cma:0kB [ 54.035105] lowmem_reserve[]: 0 0 0 0 [ 54.039479] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 54.054740] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 54.071885] Normal: 635*4kB (UM) 83*8kB (UM) 34*16kB (UME) 46*32kB (UM) 67*64kB (UME) 25*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 5*2048kB (ME) 696*4096kB (M) = 2919844kB [ 54.090976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 54.099526] 11931 total pagecache pages [ 54.103651] 0 pages in swap cache [ 54.107080] Swap cache stats: add 0, delete 0, find 0/0 [ 54.112598] Free swap = 0kB [ 54.115597] Total swap = 0kB [ 54.118581] 1965969 pages RAM [ 54.122107] 0 pages HighMem/MovableOnly [ 54.126053] 320509 pages reserved [ 54.135728] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 54.145850] CPU: 1 PID: 5638 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 54.153351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.162674] ffff8801b2e3f938 ffffffff81d94b69 1ffff100365c7f2a ffff8801b3bd4800 [ 54.170639] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b2e3fa48 [ 54.178612] ffffffff81451ca2 024000c2b2e3f988 0000000041b58ab3 ffffffff84195215 [ 54.186576] Call Trace: [ 54.189142] [] dump_stack+0xc1/0x128 [ 54.194480] [] warn_alloc+0x212/0x240 [ 54.199900] [] ? zone_watermark_ok_safe+0x280/0x280 [ 54.206535] [] ? avc_has_perm+0xb0/0x4f0 [ 54.212217] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 54.218676] [] __vmalloc_node_range+0x3f5/0x5f0 [ 54.224965] [] ? check_preemption_disabled+0x3b/0x200 [ 54.231772] [] ? task_has_security+0x130/0x270 [ 54.237973] [] vmalloc+0x5b/0x70 [ 54.242958] [] ? sel_write_load+0x130/0xfd0 [ 54.248897] [] sel_write_load+0x130/0xfd0 [ 54.254662] [] ? __free_pages_ok+0xbe5/0x16c0 [ 54.260783] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 54.267589] [] ? sel_read_bool+0x250/0x250 [ 54.273442] [] ? __free_pages+0x4f/0x80 [ 54.279034] [] ? put_task_stack+0x149/0x2d0 [ 54.284971] [] ? sel_read_bool+0x250/0x250 [ 54.290824] [] __vfs_write+0x103/0x680 [ 54.296329] [] ? do_iter_readv_writev+0x400/0x400 [ 54.302789] [] ? __lock_is_held+0xa1/0xf0 [ 54.308555] [] ? __lock_is_held+0xa1/0xf0 [ 54.314321] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 54.321131] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 54.327678] [] ? __sb_start_write+0x14a/0x310 [ 54.333791] [] vfs_write+0x189/0x530 [ 54.339124] [] SyS_write+0xd9/0x1b0 [ 54.344366] [] ? SyS_read+0x1b0/0x1b0 [ 54.349783] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 54.356588] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 54.363134] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 54.370155] Mem-Info: [ 54.372567] active_anon:51610 inactive_anon:44 isolated_anon:0 [ 54.372567] active_file:3513 inactive_file:8360 isolated_file:0 [ 54.372567] unevictable:0 dirty:287 writeback:0 unstable:0 [ 54.372567] slab_reclaimable:5561 slab_unreclaimable:59617 [ 54.372567] mapped:24015 shmem:51 pagetables:620 bounce:0 [ 54.372567] free:1478820 free_pcp:480 free_cma:0 [ 54.405887] Node 0 active_anon:206440kB inactive_anon:176kB active_file:14052kB inactive_file:33440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96060kB dirty:1148kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 54.435333] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 54.464646] lowmem_reserve[]: 0 2908 6410 6410 [ 54.469817] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 54.500685] lowmem_reserve[]: 0 0 3501 3501 [ 54.505587] Normal free:2919288kB min:36824kB low:46028kB high:55232kB active_anon:206444kB inactive_anon:176kB active_file:14052kB inactive_file:33492kB unevictable:0kB writepending:1156kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22248kB slab_unreclaimable:238468kB kernel_stack:5408kB pagetables:2480kB bounce:0kB free_pcp:1272kB local_pcp:612kB free_cma:0kB [ 54.539503] lowmem_reserve[]: 0 0 0 0 [ 54.543883] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 54.559133] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 54.576322] Normal: 584*4kB (ME) 65*8kB (M) 31*16kB (ME) 45*32kB (UM) 65*64kB (UME) 25*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 5*2048kB (ME) 696*4096kB (M) = 2919288kB 2018/02/04 12:03:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x10000000000010, &(0x7f0000506000-0x4)="07a94e67", 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000ba4000)='/dev/hwrng\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000248000)={0x0, 0xc78a, 0x30, 0x6, 0x4}, &(0x7f00004b4000-0x4)=0x18) accept4$packet(r1, &(0x7f00003a4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000fa1000-0x4)=0x14, 0x800) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000d21000)=@assoc_value={r2, 0xfff}, &(0x7f0000893000)=0x8) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f000059f000)='/selinux/checkreqprot\x00', 0x224800, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000862000), &(0x7f0000b11000-0x4)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00007aa000)={0x9, 0xbef0, 0x20, 0xfff, 0x7, 0x7d07}) 2018/02/04 12:03:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:48 executing program 7: mmap(&(0x7f0000000000/0x26000)=nil, 0x26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000009000-0x80)=[{&(0x7f0000011000)="8d3f5764690b0b141233d462f84214711b8332fa01106cc43d89759639aac6ccc0d2961908d671224ae32bddb547aef535015dd7c4b279", 0x37}], 0x1) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000001f000-0xc)='/dev/ashmem\x00', 0x0, 0x0) ftruncate(r0, 0x7f) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f000000a000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000026000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000026000), &(0x7f0000022000-0x4)=0x4) bind$netlink(r1, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r1, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r3, 0x400454d1, &(0x7f0000011000-0x4)) 2018/02/04 12:03:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000184000)=0x7f, 0x4) r2 = dup(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2d02) recvfrom$llc(r2, &(0x7f0000b3d000)=""/166, 0xa6, 0x100, 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00004e0000-0xb0)={{0x3, 0x8ea}, 'port1\x00', 0x20, 0x90000, 0x7, 0x7, 0x9, 0xedc3, 0x7ff, 0x0, 0x1, 0x9}) 2018/02/04 12:03:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) personality(0x1bb2baf3005ac117) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000e0e000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000030000)={0x400, 0x4, 0x1, 0xd2, "fb2f338da4464b3e64c2ae7cc625a01a5f4ed686c4b45fb401d851fb52e24cf7"}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000ead000)={0x70, 0x2, 0x1, 0x590}) mprotect(&(0x7f0000eee000/0x3000)=nil, 0x3000, 0x5) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000c74000), &(0x7f00000ca000)=0x4) 2018/02/04 12:03:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000196000)='/proc/self/net/pfkey\x00', 0x10b000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8001) r1 = request_key(&(0x7f00005e1000)='blacklist\x00', &(0x7f0000eea000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000176000-0xa)='mime_type\x00', 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r1, 0x9) memfd_create(&(0x7f0000487000)='**#^*keyring\x00', 0x3) syncfs(r0) 2018/02/04 12:03:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000af9000)='/selinux/load\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000388000-0x11)='/dev/vga_arbiter\x00', 0x501200, 0x0) accept$llc(r1, &(0x7f00000bd000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f000019d000-0x4)=0x10) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:48 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000001000-0x10)='/dev/input/mice\x00', 0x0, 0x80000) r1 = syz_open_dev$tun(&(0x7f0000de5000-0xd)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000001000), 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000d92000-0x4)=0x200020000000, 0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000c7d000)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1b, 0x4, "806d7ed3eac99bad2ed61385c23e8dbf62aa79f1a9ec7e8512ef107c6c57888c5fe391089ec1d745c49533f6b27ba5afbefc9aebb88058d0ee750e0ecb0f69fd", "e082d2cbd8ec89c239460152cef3bc40028ac508b461dd3cd6661d10960e6889dcd5a2aa751e14b6d69f4241c7a34046230002de551354fad50dc802a6ab934d", "ee2c216ce4e10f4f94e559cb5ee735e71f912ec6f00ee6854bdda0534e712816", [0x100000000, 0x400]}) dup3(r0, r1, 0x0) [ 54.595340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 54.603905] 11940 total pagecache pages [ 54.607853] 0 pages in swap cache [ 54.611471] Swap cache stats: add 0, delete 0, find 0/0 [ 54.616811] Free swap = 0kB [ 54.619819] Total swap = 0kB [ 54.622810] 1965969 pages RAM [ 54.625879] 0 pages HighMem/MovableOnly [ 54.629846] 320509 pages reserved 2018/02/04 12:03:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00007b1000/0x4000)=nil, 0x4000, 0x4, 0x84011, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000e4e000-0x10)='/selinux/policy\x00', 0x0, 0x0) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000006000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) lseek(r2, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000589000-0x10)=@common='sit0\x00', 0x10) sendfile(r1, r3, &(0x7f00008bf000), 0x200041c) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000a10000)) 2018/02/04 12:03:48 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001000)=""/105) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x4800) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000000)=""/103) [ 54.651879] audit: type=1400 audit(1517745828.338:16): avc: denied { create } for pid=5665 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 54.682767] syz-executor3: [ 54.687149] audit: type=1400 audit(1517745828.368:17): avc: denied { read accept } for pid=5684 comm="syz-executor5" path="socket:[13962]" dev="sockfs" ino=13962 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 54.721761] vmalloc: allocation failure: 0 bytes[ 54.725896] TCP: request_sock_TCP: Possible SYN flooding on port 20022. Sending cookies. Check SNMP counters. [ 54.736536] , mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 54.741904] CPU: 1 PID: 5676 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 54.749411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.758758] ffff8801b357f938 ffffffff81d94b69 1ffff100366aff2a ffff8801b2d6e000 [ 54.766744] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b357fa48 [ 54.774741] ffffffff81451ca2 024000c2b357f988 0000000041b58ab3 ffffffff84195215 [ 54.782743] Call Trace: [ 54.785304] [] dump_stack+0xc1/0x128 [ 54.790642] [] warn_alloc+0x212/0x240 [ 54.796065] [] ? zone_watermark_ok_safe+0x280/0x280 [ 54.802702] [] ? avc_has_perm+0xb0/0x4f0 [ 54.808388] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 54.814857] [] __vmalloc_node_range+0x3f5/0x5f0 [ 54.821144] [] ? check_preemption_disabled+0x3b/0x200 [ 54.827960] [] ? task_has_security+0x130/0x270 [ 54.834170] [] vmalloc+0x5b/0x70 [ 54.839161] [] ? sel_write_load+0x130/0xfd0 [ 54.845101] [] sel_write_load+0x130/0xfd0 [ 54.850870] [] ? get_futex_key+0x1050/0x1050 [ 54.856898] [] ? sel_read_bool+0x250/0x250 [ 54.862759] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 54.869747] [] ? do_futex+0x3f8/0x15c0 [ 54.875257] [] ? sel_read_bool+0x250/0x250 [ 54.881199] [] __vfs_write+0x103/0x680 [ 54.886714] [] ? do_iter_readv_writev+0x400/0x400 [ 54.893196] [] ? __lock_is_held+0xa1/0xf0 [ 54.898970] [] ? __lock_is_held+0xa1/0xf0 [ 54.904739] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 54.911549] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 54.918097] [] ? __sb_start_write+0x14a/0x310 [ 54.924213] [] vfs_write+0x189/0x530 [ 54.929544] [] SyS_write+0xd9/0x1b0 [ 54.934794] [] ? SyS_read+0x1b0/0x1b0 [ 54.940230] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 54.947048] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 54.953597] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 54.960534] Mem-Info: [ 54.962940] active_anon:53169 inactive_anon:44 isolated_anon:0 [ 54.962940] active_file:3513 inactive_file:8379 isolated_file:0 [ 54.962940] unevictable:0 dirty:293 writeback:0 unstable:0 [ 54.962940] slab_reclaimable:5566 slab_unreclaimable:59440 [ 54.962940] mapped:24020 shmem:51 pagetables:657 bounce:0 [ 54.962940] free:1477522 free_pcp:442 free_cma:0 [ 54.996373] Node 0 active_anon:212676kB inactive_anon:176kB active_file:14052kB inactive_file:33516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96080kB dirty:1172kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 55.025815] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.055156] lowmem_reserve[]: 0 2908 6410 6410 [ 55.060346] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 55.091271] lowmem_reserve[]: 0 0 3501 3501 [ 55.096192] Normal free:2914252kB min:36824kB low:46028kB high:55232kB active_anon:212676kB inactive_anon:176kB active_file:14052kB inactive_file:33516kB unevictable:0kB writepending:1180kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22264kB slab_unreclaimable:237784kB kernel_stack:5536kB pagetables:2628kB bounce:0kB free_pcp:992kB local_pcp:332kB free_cma:0kB [ 55.130240] lowmem_reserve[]: 0 0 0 0 [ 55.134618] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 55.149914] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 55.167244] Normal: 625*4kB (UM) 85*8kB (UME) 33*16kB (M) 51*32kB (UM) 73*64kB (UME) 25*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 2*2048kB (ME) 696*4096kB (M) = 2914204kB [ 55.186297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 55.194868] 11946 total pagecache pages [ 55.198818] 0 pages in swap cache [ 55.202450] Swap cache stats: add 0, delete 0, find 0/0 [ 55.207791] Free swap = 0kB [ 55.210802] Total swap = 0kB [ 55.213797] 1965969 pages RAM [ 55.216870] 0 pages HighMem/MovableOnly [ 55.220835] 320509 pages reserved [ 55.230976] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 55.241037] CPU: 0 PID: 5695 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 55.248541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.257865] ffff8801b2dcf938 ffffffff81d94b69 1ffff100365b9f2a ffff8801b2c03000 [ 55.265830] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b2dcfa48 [ 55.273791] ffffffff81451ca2 024000c2b2dcf988 0000000041b58ab3 ffffffff84195215 [ 55.281752] Call Trace: [ 55.284309] [] dump_stack+0xc1/0x128 [ 55.289647] [] warn_alloc+0x212/0x240 [ 55.295079] [] ? zone_watermark_ok_safe+0x280/0x280 [ 55.301715] [] ? avc_has_perm+0xb0/0x4f0 [ 55.307492] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 55.313956] [] __vmalloc_node_range+0x3f5/0x5f0 [ 55.320244] [] ? check_preemption_disabled+0x3b/0x200 [ 55.327053] [] ? task_has_security+0x130/0x270 [ 55.333253] [] vmalloc+0x5b/0x70 [ 55.338238] [] ? sel_write_load+0x130/0xfd0 [ 55.344179] [] sel_write_load+0x130/0xfd0 [ 55.349956] [] ? get_futex_key+0x1050/0x1050 [ 55.355982] [] ? sel_read_bool+0x250/0x250 [ 55.361837] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 55.368814] [] ? do_futex+0x3f8/0x15c0 [ 55.374317] [] ? sel_read_bool+0x250/0x250 [ 55.380170] [] __vfs_write+0x103/0x680 [ 55.385678] [] ? do_iter_readv_writev+0x400/0x400 [ 55.392138] [] ? __lock_is_held+0xa1/0xf0 [ 55.397902] [] ? __lock_is_held+0xa1/0xf0 [ 55.403694] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 55.410501] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 55.417047] [] ? __sb_start_write+0x14a/0x310 [ 55.423165] [] vfs_write+0x189/0x530 [ 55.428527] [] SyS_write+0xd9/0x1b0 [ 55.433772] [] ? SyS_read+0x1b0/0x1b0 [ 55.439189] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 55.445997] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.452544] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 55.460116] Mem-Info: [ 55.462525] active_anon:53169 inactive_anon:44 isolated_anon:0 [ 55.462525] active_file:3513 inactive_file:8379 isolated_file:0 [ 55.462525] unevictable:0 dirty:296 writeback:0 unstable:0 [ 55.462525] slab_reclaimable:5563 slab_unreclaimable:59474 [ 55.462525] mapped:24027 shmem:51 pagetables:636 bounce:0 [ 55.462525] free:1477472 free_pcp:364 free_cma:0 [ 55.495782] Node 0 active_anon:212676kB inactive_anon:176kB active_file:14052kB inactive_file:33516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96108kB dirty:1184kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 81920kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 55.525300] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.554623] lowmem_reserve[]: 0 2908 6410 6410 [ 55.559930] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 55.591290] lowmem_reserve[]: 0 0 3501 3501 [ 55.596175] Normal free:2913896kB min:36824kB low:46028kB high:55232kB active_anon:212676kB inactive_anon:176kB active_file:14052kB inactive_file:33516kB unevictable:0kB writepending:1184kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22252kB slab_unreclaimable:237896kB kernel_stack:5440kB pagetables:2544kB bounce:0kB free_pcp:808kB local_pcp:500kB free_cma:0kB [ 55.630455] lowmem_reserve[]: 0 0 0 0 [ 55.634805] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 55.650073] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 55.667657] Normal: 566*4kB (M) 68*8kB (UME) 33*16kB (M) 53*32kB (UM) 73*64kB (UME) 25*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 2*2048kB (ME) 696*4096kB (M) = 2913896kB [ 55.686738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 55.695295] 11947 total pagecache pages [ 55.699245] 0 pages in swap cache 2018/02/04 12:03:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000d0e000)="8d2572981021de067b5efd2404d9f8b399dbf62f6f85029905dcdcbe11a7b1457b2e5ba83dc67341e8da7710ff841ecc8020e92741453faccbb854d7305c06b5ace25b02103ce5da615c6e1422be26fa709aaa355428511c8790bc6e9e54e98c6ad54093c8fde3e86661c02e05e53943670896370f7b247069cad1925a00b1538c6f548c692dcec2b3abb739bcd491401c8630b35e0f485211a70c319448", 0x9e, 0x40, &(0x7f0000110000-0x1c)={0xa, 0x1, 0x6, @dev={0xfe, 0x80, [], 0x0, 0xa}, 0xde4}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}}) connect$inet(r0, &(0x7f0000561000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000a87000)) sendto$inet(r0, &(0x7f0000d05000)="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", 0x5c1, 0x8000, &(0x7f0000030000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000601000-0x10)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) sendmmsg(r0, &(0x7f0000f4e000)=[{{&(0x7f0000cd8000-0x60)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d526326c0b3b78b78a507be193da132ebe67f55c5b43b66cb15438108fbbf329a25e6b5bcca2b09c3a429d72be2de37fd9617ecb235b9472e3dda72c4186d8"}, 0x60, &(0x7f0000b32000-0x10)=[{&(0x7f00009b0000)="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", 0x5dd}], 0x1, &(0x7f0000fdc000)=[]}}], 0x1, 0x0) epoll_create(0xffff) 2018/02/04 12:03:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000d06000)=[], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f000084b000)={@common='tunl0\x00', @ifru_map}) getcwd(&(0x7f00005ac000-0xfe)=""/254, 0xfe) 2018/02/04 12:03:49 executing program 1: mmap(&(0x7f0000000000/0xfec000)=nil, 0xfec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000fec000)='eth1.\'.,:+security\x00', 0x40, 0x20, &(0x7f0000f72000-0x40)={0x200000000000000, 0x2, 0x8, 0x8, 0x1800000000000, 0x0, 0x80, 0x5}) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000262000-0x15)='/dev/pktcdvd/control\x00', 0x40, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f000000e000-0xb8)=[], 0x70, 0x0, &(0x7f0000dc3000)="2ba643936670b5ff79b167acc165d7acc2ce2278683c5189212f5dd8bda4c3f5f8665cf63927da08620c37fb75a1d9e46618bf948f5750935dd1b82234ec1dfa6aa44c118f12aec3805c7d13bbdc04122e98601742413f89d271358491fc5202d91dacd211c0f5180e1c803ec17a15e6"}) 2018/02/04 12:03:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00004e6000-0x122)="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", 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000203000)={0x0, 0xd3, "a71a29b2693cb13fce475ad713cdd3c8c05e928c3b86b2bef012cc0b93f452212f54679c8a1793de504aa7553af1deb81b3942ddeb80dad9d7db75e41a457250719f1fd69380fcf6ede6224bd884ad6f3f63804844641f53dc4222e4ce9c025c7e838d48208b069097ed2830ac74430d6c0ee76578e58a7fec5beea2554cc53ba8127b195e94d7457e9aa93a61116ac72671c5e72319f076273d514912cb32f5ded3ff17a56827d5e77e44156987e5edfead1f09891492601ebdbbe3a96ff111fad2d5669c4b7b271eecd816a791fb4b9fe9d1"}, &(0x7f0000577000)=0xdb) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00005d7000)={r1, 0x7, 0xf, "18c2f42afa476ed3675817e4a9f9c3"}, 0x17) 2018/02/04 12:03:49 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0x1ff, 0xc4402) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) faccessat(r0, &(0x7f0000001000-0x8)='./file0\x00', 0x12a, 0x200) mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000007000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f000001c000-0x12)={@common='bcsf0\x00', 0x7fff}) ioctl$int_in(r1, 0x1000000005432, &(0x7f0000018000)) 2018/02/04 12:03:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000d13000)='/dev/sg#\x00', 0x5, 0x80) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f000026a000-0x8)={0xff, 0x7, 0x2, 0x1f, 0x1}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00005a4000-0xc)) r2 = gettid() r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000763000)='/dev/keychord\x00', 0x40, 0x0) bind$netrom(r3, &(0x7f0000888000-0x10)=@ax25={0x3, {"2ee174e5fe0be1"}, 0x1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000f74000-0x10)={0x0, 0x0}) ppoll(&(0x7f000004f000-0x40)=[{r0, 0x1301}, {r1}], 0x2, &(0x7f000005b000+0xd56)={0x0, r4+10000000}, &(0x7f000005b000), 0xffffffffffffffb6) timer_settime(0x0, 0x0, &(0x7f000020b000-0x20)={{}, {0x0, r4}}, &(0x7f0000002000-0x20)) 2018/02/04 12:03:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000d06000)=[], 0x0, 0x0, &(0x7f0000176000-0x1)}) [ 55.703109] Swap cache stats: add 0, delete 0, find 0/0 [ 55.708440] Free swap = 0kB [ 55.711443] Total swap = 0kB [ 55.714438] 1965969 pages RAM [ 55.717508] 0 pages HighMem/MovableOnly [ 55.721472] 320509 pages reserved 2018/02/04 12:03:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00001e7000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000678000-0x38)={&(0x7f0000b6f000)={0x10}, 0xc, &(0x7f0000b27000-0x10)={&(0x7f00001aa000-0x58)=@ipv6_newroute={0x30, 0x18, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9, 0x0, 0x0, r1}, {}]}]}, 0x30}, 0x1}, 0x0) 2018/02/04 12:03:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000d06000)=[], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:49 executing program 1: mmap(&(0x7f0000000000/0x4f000)=nil, 0x4f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000049000)='selinux\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x8000000000142) mmap(&(0x7f000004f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utimensat(r0, &(0x7f0000032000-0x8)='./file0\x00', &(0x7f000004f000)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000050000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000051000-0x50)={0x2, 0x6, 0x8, 0x0, 0x7}) mmap(&(0x7f0000051000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000052000-0xaf)=""/175, 0xaf) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "0000da00001effe3", "a6e7fd491ca077ef11ae80ffea002000000004002ecd959baa11b50700000001"}) write$sndseq(r0, &(0x7f0000043000-0x90)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) dup2(r2, r0) 2018/02/04 12:03:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000928000)={0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x3, 0x7fffffff, &(0x7f0000868000)=""/235, &(0x7f0000001000-0x4)=0xeb) r1 = socket(0x2, 0x2, 0x0) recvfrom$inet6(r1, &(0x7f0000969000), 0x0, 0x0, &(0x7f0000292000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c) recvfrom(r1, &(0x7f0000c92000)=""/127, 0x7f, 0x0, &(0x7f00000b7000-0x58)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "af74d9d979b2f4704e557e83ca4e5588c16aea3c2a32a4e634ab34e0b7d3839f0ea199c1e332b7af150e5f3d0e686dcc0d696e369a8739c2fb04a48dc8ac8f"}, 0x60) shutdown(r1, 0x0) 2018/02/04 12:03:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000c52000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00008e1000-0x33)={&(0x7f00002f4000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000546000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000a80000)=[0x0], &(0x7f000055e000-0x18)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7, 0x1, 0x6}) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) renameat(0xffffffffffffffff, &(0x7f0000150000-0x8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000853000)='./file0\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000210000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000a0c000)='keyring\x00', &(0x7f000084a000-0x5)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r2) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000d29000)) mknod(&(0x7f0000e8c000)='./file0\x00', 0xc021, 0x6803) [ 55.754051] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 55.778525] CPU: 0 PID: 5713 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 55.786064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.790249] IPv6: NLM_F_REPLACE set, but no existing node found! 2018/02/04 12:03:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000af3000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000584000)=0x2, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xff2b, 0x800000120000001, &(0x7f0000172000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000118000)=""/194, 0xfffffffffffffee5, 0x2, &(0x7f0000b35000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect(r0, &(0x7f00008ef000-0x8)=@un=@abs={0x0, 0x0, 0x3}, 0x8) [ 55.801547] ffff8801b2e3f938 ffffffff81d94b69 1ffff100365c7f2a ffff8801b202c800 [ 55.809606] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b2e3fa48 [ 55.817643] ffffffff81451ca2 024000c2b2e3f988 0000000041b58ab3 ffffffff84195215 [ 55.825667] Call Trace: [ 55.828240] [] dump_stack+0xc1/0x128 [ 55.833589] [] warn_alloc+0x212/0x240 [ 55.839009] [] ? zone_watermark_ok_safe+0x280/0x280 [ 55.845650] [] ? avc_has_perm+0xb0/0x4f0 [ 55.851332] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 55.857798] [] __vmalloc_node_range+0x3f5/0x5f0 [ 55.864094] [] ? check_preemption_disabled+0x3b/0x200 [ 55.870922] [] ? task_has_security+0x130/0x270 [ 55.877137] [] vmalloc+0x5b/0x70 [ 55.882130] [] ? sel_write_load+0x130/0xfd0 [ 55.888077] [] sel_write_load+0x130/0xfd0 [ 55.893853] [] ? get_futex_key+0x1050/0x1050 [ 55.900670] [] ? sel_read_bool+0x250/0x250 [ 55.906532] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 55.913520] [] ? do_futex+0x3f8/0x15c0 [ 55.919027] [] ? sel_read_bool+0x250/0x250 [ 55.924882] [] __vfs_write+0x103/0x680 [ 55.930392] [] ? do_iter_readv_writev+0x400/0x400 [ 55.936863] [] ? __lock_is_held+0xa1/0xf0 [ 55.942631] [] ? __lock_is_held+0xa1/0xf0 [ 55.948400] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 55.955208] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 55.961764] [] ? __sb_start_write+0x14a/0x310 [ 55.967877] [] vfs_write+0x189/0x530 [ 55.973212] [] SyS_write+0xd9/0x1b0 [ 55.978459] [] ? SyS_read+0x1b0/0x1b0 [ 55.983877] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 55.990692] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.997242] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 56.008281] Mem-Info: [ 56.010806] active_anon:52139 inactive_anon:44 isolated_anon:0 [ 56.010806] active_file:3513 inactive_file:8379 isolated_file:0 [ 56.010806] unevictable:0 dirty:296 writeback:0 unstable:0 [ 56.010806] slab_reclaimable:5563 slab_unreclaimable:59731 [ 56.010806] mapped:24027 shmem:51 pagetables:636 bounce:0 [ 56.010806] free:1477751 free_pcp:385 free_cma:0 [ 56.010859] IPv6: NLM_F_REPLACE set, but no existing node found! [ 56.051811] Node 0 active_anon:200368kB inactive_anon:176kB active_file:14052kB inactive_file:33516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96108kB dirty:1184kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 81920kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 56.081901] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 56.111396] lowmem_reserve[]: 0 2908 6410 6410 [ 56.116569] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 56.147470] lowmem_reserve[]: 0 0 3501 3501 [ 56.152470] Normal free:2921480kB min:36824kB low:46028kB high:55232kB active_anon:204484kB inactive_anon:176kB active_file:14052kB inactive_file:33516kB unevictable:0kB writepending:1184kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22252kB slab_unreclaimable:238924kB kernel_stack:5472kB pagetables:2544kB bounce:0kB free_pcp:1084kB local_pcp:240kB free_cma:0kB [ 56.186880] lowmem_reserve[]: 0 0 0 0 [ 56.191531] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 56.206801] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 56.224164] Normal: 684*4kB (UME) 81*8kB (UM) 35*16kB (UM) 30*32kB (UME) 67*64kB (UME) 25*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 2*2048kB (ME) 698*4096kB (M) = 2921576kB [ 56.243390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 56.251955] 11947 total pagecache pages [ 56.255914] 0 pages in swap cache [ 56.259335] Swap cache stats: add 0, delete 0, find 0/0 [ 56.264684] Free swap = 0kB [ 56.267676] Total swap = 0kB [ 56.271115] 1965969 pages RAM [ 56.274189] 0 pages HighMem/MovableOnly [ 56.278127] 320509 pages reserved [ 56.281601] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 56.291715] CPU: 1 PID: 5742 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 56.299217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.308541] ffff8801bd557938 ffffffff81d94b69 1ffff10037aaaf2a ffff8801b2feb000 [ 56.316501] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801bd557a48 [ 56.324468] ffffffff81451ca2 024000c2bd557988 0000000041b58ab3 ffffffff84195215 [ 56.332430] Call Trace: [ 56.334986] [] dump_stack+0xc1/0x128 [ 56.340320] [] warn_alloc+0x212/0x240 [ 56.345737] [] ? zone_watermark_ok_safe+0x280/0x280 [ 56.352373] [] ? avc_has_perm+0xb0/0x4f0 [ 56.358061] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 56.364523] [] __vmalloc_node_range+0x3f5/0x5f0 [ 56.370811] [] ? check_preemption_disabled+0x3b/0x200 [ 56.377618] [] ? task_has_security+0x130/0x270 [ 56.383818] [] vmalloc+0x5b/0x70 [ 56.388798] [] ? sel_write_load+0x130/0xfd0 [ 56.394735] [] sel_write_load+0x130/0xfd0 [ 56.400500] [] ? check_preemption_disabled+0x3b/0x200 [ 56.407306] [] ? sel_read_bool+0x250/0x250 [ 56.413159] [] ? mark_held_locks+0xaf/0x100 [ 56.419097] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 56.425383] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 56.432192] [] ? sel_read_bool+0x250/0x250 [ 56.438045] [] __vfs_write+0x103/0x680 [ 56.443551] [] ? do_iter_readv_writev+0x400/0x400 [ 56.450012] [] ? __lock_is_held+0xa1/0xf0 [ 56.455775] [] ? __lock_is_held+0xa1/0xf0 [ 56.461543] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 56.468349] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 56.474897] [] ? __sb_start_write+0x14a/0x310 [ 56.481008] [] vfs_write+0x189/0x530 [ 56.486338] [] SyS_write+0xd9/0x1b0 [ 56.491585] [] ? SyS_read+0x1b0/0x1b0 [ 56.497002] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 56.503808] [] ? trace_hardirqs_on_thunk+0x1a/0x1c 2018/02/04 12:03:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x3, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000a23000-0x10)=@syzn, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000bcc000-0x4), 0x4) recvmsg(r0, &(0x7f0000dd8000)={&(0x7f0000fb3000)=@nfc_llcp, 0xffffffffffffff95, &(0x7f0000dac000)=[], 0x0, 0x0, 0x0, 0x3}, 0x8040000000) bind$inet(r0, &(0x7f0000ded000)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f00001cb000), 0x0, 0x0, &(0x7f0000a60000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000251000-0xe0)=""/224, 0xe0, 0x0, &(0x7f0000ade000-0x10)=@in={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f000000d000)=[@flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bb2000)={0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000332000-0xa)='net/igmp\x00') sendfile(r0, r1, &(0x7f00006dc000-0x8), 0x401) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000fc5000-0x58)={0x0, 0x8000, 0x40, 0x9b8, 0x5, 0x4}) fallocate(r0, 0x2, 0x0, 0xd0) 2018/02/04 12:03:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f00003e2000)='./file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f0000685000-0x9)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f0000d0e000-0x8)='./file0\x00', 0x200) mount(&(0x7f0000609000)='./file0\x00', &(0x7f0000712000)='./file0\x00', &(0x7f0000c7d000-0x7)='pipefs\x00', 0x40002001, &(0x7f0000d28000+0x47b)) r1 = accept$ipx(r0, 0x0, &(0x7f0000c05000)) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000363000-0x18)=@generic={0x2, 0xffffffff, 0x80000000}) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f00002b4000)=0xfff) sendmsg$nl_netfilter(r0, &(0x7f0000a01000)={&(0x7f0000efb000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000af2000)={&(0x7f000069e000-0x114)={0x114, 0x0, 0xb, 0x100, 0x4, 0x2, {0x0, 0x0, 0x6}, [@generic="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"]}, 0x114}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write$selinux_load(r0, &(0x7f0000285000)={0xf97cff8c, 0x8, 'SE Linux', "5486304d1343b18d5235d44f76ab6fe2fd18f0f32860d561e04beaa39192524abb79997b2e76e76d109f384d6ea7a74a9b6bc255dd4c4db509458ee7ca4277ba27627d063dfa7ce0eb778de4a63fc29c"}, 0x60) 2018/02/04 12:03:50 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000011000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000-0x8)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000737000-0xf)='/dev/sequencer\x00', 0x400a202, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f000078a000-0x30)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @raw8={"7a88d654f95067fe68d2359f"}}], 0x30) ioctl$TCSETA(r2, 0x5402, &(0x7f000032d000-0x14)) close(r2) write$sndseq(r1, &(0x7f00006c3000)=[{0x40081, 0x4, 0x0, 0x0, @tick, {}, {}, @time=@tick}], 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000a76000-0x9)='/dev/rtc\x00', 0x40, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000f57000-0x19)=""/25) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/04 12:03:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00006a7000-0x4), &(0x7f00008df000)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fed000)={@common='lo\x00', &(0x7f0000bd9000)=@ethtool_coalesce={0xf}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000d15000)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000ba5000-0x20)={0x3f, 0x1, 0x2, 0x7, 0x2b89, 0x4108b1ca, 0x3d, 0x4, 0x0}, &(0x7f0000ce9000-0x4)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000bb6000)={r2, 0x8001, 0xcf7}, &(0x7f0000fef000-0x3)=0x8) 2018/02/04 12:03:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000134000)=@generic, &(0x7f00001f1000-0x4)=0x80, 0x80800) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000d0e000)="8d2572981021de067b5efd2404d9f8b399dbf62f6f85029905dcdcbe11a7b1457b2e5ba83dc67341e8da7710ff841ecc8020e92741453faccbb854d7305c06b5ace25b02103ce5da615c6e1422be26fa709aaa355428511c8790bc6e9e54e98c6ad54093c8fde3e86661c02e05e53943670896370f7b247069cad1925a00b1538c6f548c692dcec2b3abb739bcd491401c8630b35e0f485211a70c319448", 0x9e, 0x40, &(0x7f0000110000-0x1c)={0xa, 0x1, 0x6, @dev={0xfe, 0x80, [], 0x0, 0xa}, 0xde4}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}}) connect$inet(r0, &(0x7f0000561000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000a87000)) sendto$inet(r0, &(0x7f0000d05000)="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", 0x5c1, 0x8000, &(0x7f0000030000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000601000-0x10)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) sendmmsg(r0, &(0x7f0000f4e000)=[{{&(0x7f0000cd8000-0x60)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d526326c0b3b78b78a507be193da132ebe67f55c5b43b66cb15438108fbbf329a25e6b5bcca2b09c3a429d72be2de37fd9617ecb235b9472e3dda72c4186d8"}, 0x60, &(0x7f0000b32000-0x10)=[{&(0x7f00009b0000)="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", 0x5dd}], 0x1, &(0x7f0000fdc000)=[]}}], 0x1, 0x0) epoll_create(0xffff) [ 56.510355] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 56.517255] Mem-Info: [ 56.519680] active_anon:51097 inactive_anon:44 isolated_anon:0 [ 56.519680] active_file:3513 inactive_file:8393 isolated_file:0 [ 56.519680] unevictable:0 dirty:307 writeback:0 unstable:0 [ 56.519680] slab_reclaimable:5568 slab_unreclaimable:59737 [ 56.519680] mapped:24015 shmem:51 pagetables:619 bounce:0 [ 56.519680] free:1479396 free_pcp:394 free_cma:0 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f000000d000)=[@flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00004bf000-0x5c)="d54417d216f0825a75158681aef383cc85577938654d764d9525ee4b8bf086b895a7dfd642f706b595856baf729ae50b349300000000000000071bf4ae2de3e3eb21b552e426e665f3e025aa9f6d04bb3905ac013b91dbd0c06befc5", 0x5c) 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f000000d000)=[@flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) [ 56.554052] Node 0 active_anon:204188kB inactive_anon:176kB active_file:14052kB inactive_file:33572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96060kB dirty:1228kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 73728kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 2018/02/04 12:03:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f000000d000)=[@flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000d000)=[@fda={0x66646185}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00006a7000-0x4), &(0x7f00008df000)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fed000)={@common='lo\x00', &(0x7f0000bd9000)=@ethtool_coalesce={0xf}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000d15000)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000ba5000-0x20)={0x3f, 0x1, 0x2, 0x7, 0x2b89, 0x4108b1ca, 0x3d, 0x4, 0x0}, &(0x7f0000ce9000-0x4)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000bb6000)={r2, 0x8001, 0xcf7}, &(0x7f0000fef000-0x3)=0x8) 2018/02/04 12:03:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000046e000-0x10)={0x2, &(0x7f0000225000-0x10)=[{0x20, 0x0, 0x0, 0x400}, {0x16}]}) r0 = syz_open_dev$sg(&(0x7f0000c4e000)='/dev/sg#\x00', 0x8, 0x101000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000539000-0x8)={0x0, 0x3}, &(0x7f00002cd000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000b88000-0x8)={r1, 0x6946}, 0x8) 2018/02/04 12:03:50 executing program 1: r0 = socket(0x18, 0x0, 0x4) accept$llc(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000002000-0x4)=0x10) socket$l2tp(0x18, 0x1, 0x1) 2018/02/04 12:03:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8, 0x3, 0x7, &(0x7f0000893000-0x8)={0x0, 0x0}) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000cf6000-0xc)={@loopback, @dev, @dev}, &(0x7f000000c000+0xfc0)=0xc) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000201000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000743000-0x20)={@generic="d68d89811468f1e95c3553c5cfa8da7b", @ifru_addrs={0x2, 0x3, @rand_addr=0x3}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000b76000)={{{@in=@multicast1, @in=@local, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f000078b000-0x4)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00005a1000)={@mcast1={0xff, 0x1, [], 0x1}, r3}, 0x14) write(r2, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000c9d000-0x1d54)=@newlink={0x58, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0x24, 0x16, [{0x20, 0x1, [@nested={0x1c, 0x9, [@typed={0x18, 0x0, @ipv6=@ipv4={[], [0xff, 0xff], @empty}}]}]}]}]}, 0x58}, 0x1}, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000865000-0x4)='tls\x00', 0x4) 2018/02/04 12:03:50 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000001000-0x10)='/dev/input/mice\x00', 0x0, 0x80000) r1 = syz_open_dev$tun(&(0x7f0000de5000-0xd)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000001000)=0x4, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0x7, &(0x7f0000001000-0x7)="9e6eed7b93d212") dup3(r0, r1, 0x0) 2018/02/04 12:03:50 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000011000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000-0x8)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000737000-0xf)='/dev/sequencer\x00', 0x400a202, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f000078a000-0x30)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @raw8={"7a88d654f95067fe68d2359f"}}], 0x30) ioctl$TCSETA(r2, 0x5402, &(0x7f000032d000-0x14)) close(r2) write$sndseq(r1, &(0x7f00006c3000)=[{0x40081, 0x4, 0x0, 0x0, @tick, {}, {}, @time=@tick}], 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000a76000-0x9)='/dev/rtc\x00', 0x40, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000f57000-0x19)=""/25) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 56.554068] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 56.554093] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 56.554117] Normal free:2921792kB min:36824kB low:46028kB high:55232kB active_anon:204188kB inactive_anon:176kB active_file:14052kB inactive_file:33572kB unevictable:0kB writepending:1228kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22272kB slab_unreclaimable:238948kB kernel_stack:5376kB pagetables:2476kB bounce:0kB free_pcp:1088kB local_pcp:712kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 56.554167] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 724*4kB (UME) 83*8kB (UM) 35*16kB (ME) 30*32kB (UME) 68*64kB (UME) 25*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 2*2048kB (ME) 698*4096kB (M) = 2921816kB [ 56.554263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 56.554265] 11960 total pagecache pages [ 56.554268] 0 pages in swap cache [ 56.554272] Swap cache stats: add 0, delete 0, find 0/0 [ 56.554274] Free swap = 0kB [ 56.554276] Total swap = 0kB [ 56.554279] 1965969 pages RAM [ 56.554281] 0 pages HighMem/MovableOnly 2018/02/04 12:03:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x9e2) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000581000-0x50)={@common='gre0\x00', @ifru_names=@common='ifb0\x00'}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000bb7000-0x4)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00005b2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xcd}) fchmodat(0xffffffffffffffff, &(0x7f0000b84000)='./file0\x00', 0x40) r2 = dup3(r0, r1, 0x0) rt_sigtimedwait(&(0x7f0000704000-0x8), &(0x7f00000f4000-0x10), &(0x7f0000a2e000)={0x0, 0x8000000}, 0x8) dup(0xffffffffffffffff) setsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000023000-0x1000)="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", 0x1000) 2018/02/04 12:03:50 executing program 4: mmap(&(0x7f0000000000/0xf79000)=nil, 0xf79000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000ea7000-0x1f)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) close(r0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000986000)) 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000d000)=[@fda={0x66646185}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b46000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f00004e5000-0x8)='./file0\x00', 0x66) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00007b9000)={0x1, 0x3, 0x8, 0x3, 0xfff}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000220000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00009e4000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00007fa000)={0x2, &(0x7f000017c000-0x10)=[{0xc}, {0x6}]}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f000090c000-0xe8)={{{@in6=@mcast1, @in=@broadcast, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00004d7000)=0xe8) lstat(&(0x7f00008c6000)='./file0\x00', &(0x7f00009cc000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000564000)='./file0\x00', r4, r5, 0x1000) write(r1, &(0x7f0000983000), 0x0) 2018/02/04 12:03:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000f5c000-0x15)='/proc/self/net/pfkey\x00', 0x20080, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000828000)='/dev/pktcdvd/control\x00', 0xc4100, 0x0) renameat2(r0, &(0x7f00009f7000+0x921)='./file0\x00', r0, &(0x7f0000a8a000)='./file0\x00', 0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000ad2000-0xe)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000de000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) prctl$getreaper(0x25, &(0x7f00002cf000-0x8)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000629000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00006f2000-0x4)=0x101, &(0x7f0000481000-0x4)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000d49000)=[@in6={0xa, 0x3, 0x3, @empty}, @in6={0xa, 0x0, 0x4, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x5}, @in6={0xa, 0x1, 0xda2, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, @in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}], 0x64) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f00000eb000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) membarrier(0x0, 0x0) 2018/02/04 12:03:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x662d2f5f, &(0x7f0000000000)="e2a21ec0a9f1886cd4625df7dcd9e324f95fe46dc9c246f57e5f6dd4ae8ea0946d517c19ace650c3578a5be93c") setsockopt$sock_void(r0, 0x29, 0x1, 0x0, 0x0) 2018/02/04 12:03:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000020f000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00007c0000-0x8)={0x0}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f5e000)=0x1, 0x4) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) r1 = creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000e02000-0x8)='./file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000a1b000-0x3)='\x00v\t', 0x1004, &(0x7f0000a06000)) inotify_add_watch(r1, &(0x7f0000376000-0xe)='./file0/file0\x00', 0x80000000) umount2(&(0x7f0000fbe000)='./file0\x00', 0x0) 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000d000)=[@fda={0x66646185}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) [ 56.554283] 320509 pages reserved [ 56.576457] binder: 5749:5756 got transaction with invalid offset (32, min 0 max 24) or object. [ 56.576483] binder: 5749:5756 transaction failed 29201/-22, size 24-8 line 3190 [ 56.577591] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 56.578369] CPU: 1 PID: 5758 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 2018/02/04 12:03:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_generic(r0, &(0x7f00008cd000-0x38)={&(0x7f00008e6000-0xc)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000031a000)={0x14, 0x42, 0x800010d, 0xffffffffffffffff, 0xffffffffffffffff, {0xfffffffffffffffc}, []}, 0x14}, 0x1}, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000103000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000975000-0x20)={0x779, 0x0, 0x1, 0xffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000f3e000-0x10)={r2, 0x5}) 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000f5c000-0x15)='/proc/self/net/pfkey\x00', 0x20080, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000828000)='/dev/pktcdvd/control\x00', 0xc4100, 0x0) renameat2(r0, &(0x7f00009f7000+0x921)='./file0\x00', r0, &(0x7f0000a8a000)='./file0\x00', 0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000ad2000-0xe)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) [ 56.578374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.578388] ffff8801c266f938 ffffffff81d94b69 1ffff100384cdf2a ffff8801c2660000 [ 56.578399] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801c266fa48 2018/02/04 12:03:50 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00007a8000-0x9)='/dev/ppp\x00', 0x80, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001000-0x4)=0x1, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) lseek(r1, 0x0, 0x4004) [ 56.578410] ffffffff81451ca2 024000c2c266f988 0000000041b58ab3 ffffffff84195215 [ 56.578412] Call Trace: [ 56.578424] [] dump_stack+0xc1/0x128 [ 56.578433] [] warn_alloc+0x212/0x240 [ 56.578441] [] ? zone_watermark_ok_safe+0x280/0x280 [ 56.578451] [] ? avc_has_perm+0xb0/0x4f0 [ 56.578463] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 56.578472] [] __vmalloc_node_range+0x3f5/0x5f0 [ 56.578483] [] ? check_preemption_disabled+0x3b/0x200 [ 56.578490] [] ? task_has_security+0x130/0x270 [ 56.578498] [] vmalloc+0x5b/0x70 [ 56.578505] [] ? sel_write_load+0x130/0xfd0 [ 56.578512] [] sel_write_load+0x130/0xfd0 [ 56.578519] [] ? get_futex_key+0x1050/0x1050 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 2: mmap(&(0x7f0000000000/0x9ff000)=nil, 0x9ff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) mmap(&(0x7f00009ff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$packet(r1, &(0x7f00009ff000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000642000)=0x14, 0x80000) mmap(&(0x7f00009ff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00009ff000)={@empty, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, 0x9bfc, 0x2, 0x8, 0x100, 0x3f, 0x10, r2}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00007e1000)={&(0x7f00002e2000/0x3000)=nil, 0x3000}) read(r0, &(0x7f000082f000)=""/72, 0x48) sendmsg$nl_generic(r0, &(0x7f0000673000)={&(0x7f0000185000-0xc)={0x10}, 0xc, &(0x7f0000786000-0x10)={&(0x7f000075b000-0x14)={0x14, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, []}, 0x14}, 0x1}, 0x0) 2018/02/04 12:03:50 executing program 5: mmap(&(0x7f0000000000/0xf26000)=nil, 0xf26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) connect$inet(r0, &(0x7f0000f20000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000f22000-0xf), 0xfd45, 0x0, &(0x7f00000a9000-0x10)={0x2, 0x2, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00006b8000)={{{{0x2, 0x2, @multicast2=0xe0000002}}, {{0xa, 0x0, 0x4, @mcast2={0xff, 0x2, [], 0x1}}}}, 0xa71a, 0x11b9db4c, 0xe261, "7d5acff369eaf4b6b33228a163921659ef26691b6b98eca064b0aa6fed372e3cbb5104bceca453ef43d1c8776c1257f502d5c219a108f613ae21ee57c0fb7ef2add1f1d694bf36f3a824169179169d83"}, 0x160) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000773000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000f26000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000f27000-0x10)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000291000)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000536000-0x150)=[{0x80, 0x839, 0x1, 0x8001, @time={r2, r3+10000000}, {0xc05, 0x3}, {0x80, 0x4}, @time=@time}, {0x3, 0xc6d1, 0x7fffffff, 0x3, @tick=0xfff, {0x906, 0x7}, {0xfff, 0x6}, @queue={0x0, {0x5, 0x3}}}, {0x100, 0xffffffff, 0x9, 0xec6, @tick=0xa06, {0x6}, {0xfff, 0x800b}, @result={0x7, 0x1}}, {0x41, 0x5, 0x0, 0x2, @tick=0xc3, {0xfffffffffffffffd, 0x8}, {0x0, 0x100000000}, @note={0xfffffffffffffffc, 0x2, 0x3, 0x47, 0x4}}, {0x4, 0x1, 0x6, 0x101, @tick=0x80, {0x10000, 0x70}, {0x7, 0xe3d2}, @ext={0x1000, &(0x7f0000e3d000)="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"}}, {0x20, 0x2, 0x9, 0x20, @time={0x77359400}, {0xb1, 0x101}, {0x4}, @connect={{0x5b5, 0x9}, {0xc63}}}, {0xc45, 0x5, 0x7d52, 0x100000001, @time={r4, r5+30000000}, {0x6434, 0x9}, {0x4, 0x5}, @addr={0x9, 0x9}}], 0x150) 2018/02/04 12:03:50 executing program 4: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f000027f000+0xd6e)='/dev/pktcdvd/control\x00', 0x101, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000507000-0x20)={0x8, 0x1, 0x8, 0x800, 0x5, 0x1f37, 0x71, 0x8, 0x0}, &(0x7f0000000000)=0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000ca5000)={r1, 0x5, 0x4, [0x9, 0xfffffffffffff001, 0x5, 0x4000000]}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$netrom(r0, &(0x7f0000001000-0x10)=@ax25, &(0x7f0000001000)=0x10, 0x800) mmap(&(0x7f0000000000/0xf6c000)=nil, 0xf6c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f00009fd000)=0x80, 0x4) 2018/02/04 12:03:50 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00007ee000), &(0x7f0000a26000-0x4), &(0x7f0000001000-0x4), &(0x7f0000710000)) msync(&(0x7f0000d10000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_getscheduler(r0) 2018/02/04 12:03:50 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00003be000)='/selinux/checkreqprot\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:50 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000002000-0x15)='/dev/pktcdvd/control\x00', 0x3fffe, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000f69000-0x1)={0x7fffffff}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000004000-0x7)=""/7, &(0x7f0000001000-0x4)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000002000-0x4), 0x4) 2018/02/04 12:03:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000aab000)='/dev/sg#\x00', 0x0, 0x10000) r0 = syz_open_dev$loop(&(0x7f0000de3000-0xb)='/dev/loop#\x00', 0x0, 0x8200000001) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000fd8000)) ioctl(r0, 0x440000000000127f, &(0x7f0000fd8000-0x2)) [ 56.578526] [] ? sel_read_bool+0x250/0x250 [ 56.578536] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 56.578542] [] ? do_futex+0x3f8/0x15c0 [ 56.578550] [] ? sel_read_bool+0x250/0x250 [ 56.578558] [] __vfs_write+0x103/0x680 [ 56.578572] [] ? do_iter_readv_writev+0x400/0x400 [ 56.578579] [] ? __lock_is_held+0xa1/0xf0 [ 56.578587] [] ? __lock_is_held+0xa1/0xf0 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000029d000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockname$inet6(r1, &(0x7f00007dd000)={0x0, 0xffffffffffffffff, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f0000ab5000-0x4)=0x1c) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:50 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00003be000)='/selinux/checkreqprot\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r0, &(0x7f0000e3f000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x8}, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000b9000-0x4)=0x81, 0x4) unlink(&(0x7f000046b000-0x8)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000a4d000-0x10)={0x0, 0x5, 0x10000}, &(0x7f0000ea4000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000051000-0x8)={r3, 0xfffffffffffffffb}, &(0x7f0000ac5000)=0x8) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000ced000-0x4), 0x4) r4 = socket(0x200000000010, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000fa0000)={0x5, 0x0, 0x1000, 0x20, 0x100}, 0x14) sendmsg$nl_generic(r2, &(0x7f00001cb000)={&(0x7f00008e6000-0xc)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019d000-0x1065)={0x14, 0x2a, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f00007e3000-0x18)={0x8, 0x60, 0x8, 0x3, 0x7, 0x81}) syz_open_dev$sg(&(0x7f0000ce6000)='/dev/sg#\x00', 0xda, 0x200400) write(r4, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/02/04 12:03:50 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00003be000)='/selinux/checkreqprot\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) [ 56.578596] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 56.578603] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 56.578610] [] ? __sb_start_write+0x14a/0x310 [ 56.578617] [] vfs_write+0x189/0x530 2018/02/04 12:03:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r0, &(0x7f00006ea000)="e8d311bae2f2fbd8dbaa26f3e853010f3268cef9e5ade2c66cfc90a096848a61cd45071d0c967bffa7f38be9b8cbda6265b16192dc404536c8d7be1655d3e168c71fda6c05d979a25530eaa6b61ef528838b32b3c0cb9763eb8c6c3211bffc435e95dd418d540e596f07e93432d531725120b41b9643b717f1600c715fa315ad3ef5c4d510902d381c8032b6da7676", 0x8f, 0x10, &(0x7f0000075000)=@ethernet={0x0, @empty}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000765000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffffffffffc0}}) 2018/02/04 12:03:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000a0000-0x90)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000031f000-0x2c)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x5, [@empty, @local={0xac, 0x14, 0x0, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}, @broadcast=0xffffffff, @rand_addr]}, 0x24) 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x85, 0x0, &(0x7f00005da000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000882000+0xe1b)={0x2, &(0x7f0000e9b000)=[{0x44}, {0x6}]}, 0x10) sendto$unix(r1, &(0x7f000005a000), 0x0, 0x0, &(0x7f000000e000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f000094b000-0xf)='/dev/sequencer\x00', 0x20003f, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000d0b000-0x4)={0x1d200000, 0x9, 0x1f}) 2018/02/04 12:03:50 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00003be000)='/selinux/checkreqprot\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0xffffffffffffff14) pipe(&(0x7f0000346000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f000020e000)=0x43, 0x4) 2018/02/04 12:03:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000c59000-0x8)='environ\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000ba3000)=0xc13b, 0x4) preadv(r0, &(0x7f0000942000)=[{&(0x7f0000fb4000-0xd9)=""/217, 0x55}], 0x361, 0x0) 2018/02/04 12:03:50 executing program 4: mmap(&(0x7f0000000000/0x36000)=nil, 0x36000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000002f000)={0x0, 0x0, &(0x7f0000003000-0x10)={&(0x7f000002e000)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) mmap(&(0x7f0000036000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000037000-0x9)='/dev/ppp\x00', 0x400, 0x0) epoll_wait(r1, &(0x7f000000b000-0x3c)=[{}, {}, {}, {}, {}], 0x5, 0x8) 2018/02/04 12:03:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00003be000)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) [ 56.578625] [] SyS_write+0xd9/0x1b0 [ 56.578632] [] ? SyS_read+0x1b0/0x1b0 [ 56.578641] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 56.578651] [] ? trace_hardirqs_on_thunk+0x1a/0x1c 2018/02/04 12:03:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000500000)='/dev/sequencer\x00', 0x20001, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000981000)={0x0, 0x401, 0x9d4, 0x0, 0x8, 0x3, 0x9, 0x8, 0x14, 0x6, 0x3, 0x9}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x3, 0x2, 0xfffffffffffffffd, 0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pwritev(r0, &(0x7f00002e8000+0x3cc)=[{&(0x7f0000eac000-0x27b)="6e5b926aedfd7d867822a50474b52c996b1ccb8d73a76bc6580eb2d78973b2882bccfe35851025e21f0f5dbb73863a85096495ef04000000", 0x38}], 0x1, 0x0) 2018/02/04 12:03:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000123000)={0x0}, 0x84800) accept$inet6(r0, &(0x7f0000a64000)={0x0, 0xffffffffffffffff, 0x0, @loopback}, &(0x7f00001f1000-0x4)=0x1c) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000da0000)={0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00007c4000)='/dev/sequencer2\x00', 0x80000, 0x0) sendfile(r1, r2, &(0x7f00002ef000), 0x101) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r3, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00003be000)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) r1 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000c60000)={{{@in=@empty, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000d94000)=0xe8) getgid() getpgid(r1) getresgid(&(0x7f0000c06000), &(0x7f0000498000), &(0x7f0000844000-0x4)) gettid() getresuid(&(0x7f0000e8e000), &(0x7f0000658000-0x4), &(0x7f00008cc000-0x4)) lstat(&(0x7f00000b4000)='./file0\x00', &(0x7f0000ea6000-0x44)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00004c2000)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000327000-0xe8)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000c12000)=0xfffffffffffffff3) lstat(&(0x7f0000c6b000-0x8)='./file0\x00', &(0x7f000041b000)) gettid() lstat(&(0x7f000058a000-0x8)='./file0\x00', &(0x7f000093c000-0x44)) getegid() getpid() getresuid(&(0x7f0000c2a000), &(0x7f0000cb0000), &(0x7f0000a41000)) fstat(r0, &(0x7f0000353000-0x44)) getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000001b000)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000e9c000)=0xe8) getgroups(0x1, &(0x7f000039c000-0x4)=[0x0]) fcntl$getown(r0, 0x9) lstat(&(0x7f0000a9f000-0x8)='./file0\x00', &(0x7f0000c91000)) getgroups(0x1, &(0x7f0000cc0000)=[0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000a3000-0x2)) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000107000-0xc), &(0x7f0000322000)=0xc) getpgid(0x0) getresuid(&(0x7f00001e2000), &(0x7f0000c07000), &(0x7f0000d27000-0x4)) getresgid(&(0x7f0000074000), &(0x7f00003f6000), &(0x7f00002bf000-0x4)) sendmmsg$unix(r0, &(0x7f0000938000)=[{&(0x7f0000183000-0x8)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000017000-0x48)=[{&(0x7f0000a59000-0xcf)="74b02629e9ada4e9f8f8d67f110947bd012ddc9c44224cd5752da36f21388ab0c9ea46c90d872067e9873a6fc77c830cc34b544e8ffa573f9d9526a4b1b9d93cbc96f320199df52910aa0183b8c60c1fee59694369b848c3aa3eaceb74b71eef70a6f88fa414e52a9e697e60d53edc1c0b10eb15903c2d7513e9929157828b2bdd29b524bcaf7dd0d4b4a95f440d5ad3ef4ac2dd9384bcf5349b8b00417142675ae1a1ad6165a22d85e24da5208de7fde8a3afaa69d62af28c856f73fd515ce7a8c8e16ba551436473f5edaf60d6b9", 0xcf}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000cc5000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r2, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f0000ac3000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x27ffe) sendmsg$nl_generic(r3, &(0x7f00004d5000)={&(0x7f0000530000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f00003f7000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x48080) sendfile(r3, r4, &(0x7f000053d000-0x4), 0x8080000001) [ 56.578660] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 56.578663] Mem-Info: [ 56.578679] active_anon:52073 inactive_anon:44 isolated_anon:0 [ 56.578679] active_file:3513 inactive_file:8393 isolated_file:0 [ 56.578679] unevictable:0 dirty:307 writeback:0 unstable:0 [ 56.578679] slab_reclaimable:5568 slab_unreclaimable:59791 [ 56.578679] mapped:24040 shmem:51 pagetables:656 bounce:0 [ 56.578679] free:1477743 free_pcp:308 free_cma:0 [ 56.578698] Node 0 active_anon:208292kB inactive_anon:176kB active_file:14052kB inactive_file:33572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96160kB dirty:1228kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 73728kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 56.579463] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 56.579494] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 2018/02/04 12:03:51 executing program 5: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000007000)={0x0, 0xffffffffffffffff, @multicast1}, &(0x7f0000007000-0x4)=0xffffffa1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000005000)=@assoc_id=0x0, &(0x7f0000004000-0x4)=0x4) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000008000)='./file0\x00', 0x101000, 0x1ac) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000008000-0xb0)={{0x2, 0x3}, 'port0\x00', 0x80, 0x4, 0xd58, 0x4, 0x0, 0x8000, 0x6, 0x0, 0x1, 0x9}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000004000)={r1, @in={{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}}, 0x0, 0xfb6c}, &(0x7f0000006000)=0x98) r3 = socket$key(0xf, 0x3, 0x2) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000004000), &(0x7f0000003000-0x4)=0x8) sendmsg$key(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000005000)={&(0x7f0000001000-0x20)={0x2, 0x6, 0x5, 0x0, 0x2, 0x0, 0x4, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/04 12:03:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) pipe(&(0x7f00003fe000-0x8)={0x0}) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f000045f000-0x98)=""/152, &(0x7f0000835000)=0x98) recvmmsg(r0, &(0x7f00005c0000)=[{{&(0x7f0000fbb000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @rand_addr}}}, 0xd, &(0x7f0000e24000)=[], 0x0, &(0x7f0000e08000-0x87)=""/135, 0x87, 0x5}}], 0x3c4, 0x2000, &(0x7f000065d000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00009d9000)={0x0, 0x29a6}, &(0x7f00003aa000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00002e5000-0x10)={r3, 0x80, &(0x7f0000f3e000-0x80)=[@in6={0xa, 0x3, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in6={0xa, 0x2, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1f}, @in={0x2, 0x1, @multicast1=0xe0000001}, @in6={0xa, 0x3, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x31e}, @in6={0xa, 0x1, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2cc}]}, &(0x7f0000a6e000-0x4)=0x10) alarm(0x20) write(r0, &(0x7f00000f9000-0x2f), 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00001d9000)={0x5, {0x2, 0x1, @rand_addr=0x2}, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, {0x2, 0x3, @rand_addr=0x100000001}, 0x40, 0x7, 0x2, 0xb7c0, 0x3, &(0x7f0000375000)=@common='ip6_vti0\x00', 0xfffffffffffffffd, 0x10000, 0x4}) 2018/02/04 12:03:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:51 executing program 4: mmap(&(0x7f0000000000/0x36000)=nil, 0x36000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000002f000)={0x0, 0x0, &(0x7f0000003000-0x10)={&(0x7f000002e000)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) mmap(&(0x7f0000036000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000037000-0x9)='/dev/ppp\x00', 0x400, 0x0) epoll_wait(r1, &(0x7f000000b000-0x3c)=[{}, {}, {}, {}, {}], 0x5, 0x8) 2018/02/04 12:03:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) r1 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000c60000)={{{@in=@empty, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000d94000)=0xe8) getgid() getpgid(r1) getresgid(&(0x7f0000c06000), &(0x7f0000498000), &(0x7f0000844000-0x4)) gettid() getresuid(&(0x7f0000e8e000), &(0x7f0000658000-0x4), &(0x7f00008cc000-0x4)) lstat(&(0x7f00000b4000)='./file0\x00', &(0x7f0000ea6000-0x44)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00004c2000)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000327000-0xe8)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000c12000)=0xfffffffffffffff3) lstat(&(0x7f0000c6b000-0x8)='./file0\x00', &(0x7f000041b000)) gettid() lstat(&(0x7f000058a000-0x8)='./file0\x00', &(0x7f000093c000-0x44)) getegid() getpid() getresuid(&(0x7f0000c2a000), &(0x7f0000cb0000), &(0x7f0000a41000)) fstat(r0, &(0x7f0000353000-0x44)) getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000001b000)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000e9c000)=0xe8) getgroups(0x1, &(0x7f000039c000-0x4)=[0x0]) fcntl$getown(r0, 0x9) lstat(&(0x7f0000a9f000-0x8)='./file0\x00', &(0x7f0000c91000)) getgroups(0x1, &(0x7f0000cc0000)=[0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000a3000-0x2)) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000107000-0xc), &(0x7f0000322000)=0xc) getpgid(0x0) getresuid(&(0x7f00001e2000), &(0x7f0000c07000), &(0x7f0000d27000-0x4)) getresgid(&(0x7f0000074000), &(0x7f00003f6000), &(0x7f00002bf000-0x4)) sendmmsg$unix(r0, &(0x7f0000938000)=[{&(0x7f0000183000-0x8)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000017000-0x48)=[{&(0x7f0000a59000-0xcf)="74b02629e9ada4e9f8f8d67f110947bd012ddc9c44224cd5752da36f21388ab0c9ea46c90d872067e9873a6fc77c830cc34b544e8ffa573f9d9526a4b1b9d93cbc96f320199df52910aa0183b8c60c1fee59694369b848c3aa3eaceb74b71eef70a6f88fa414e52a9e697e60d53edc1c0b10eb15903c2d7513e9929157828b2bdd29b524bcaf7dd0d4b4a95f440d5ad3ef4ac2dd9384bcf5349b8b00417142675ae1a1ad6165a22d85e24da5208de7fde8a3afaa69d62af28c856f73fd515ce7a8c8e16ba551436473f5edaf60d6b9", 0xcf}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000cc5000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r2, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f0000ac3000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x27ffe) sendmsg$nl_generic(r3, &(0x7f00004d5000)={&(0x7f0000530000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f00003f7000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x48080) sendfile(r3, r4, &(0x7f000053d000-0x4), 0x8080000001) 2018/02/04 12:03:51 executing program 7: munlockall() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) wait4(0xffffffffffffffff, &(0x7f0000efd000), 0x2, &(0x7f0000d23000)={{}, {0x0}}) getitimer(0x1, &(0x7f0000b74000)={{0x0}}) timerfd_settime(0xffffffffffffff9c, 0x1, &(0x7f000094b000)={{r1}, {r0, 0x1c9c380}}, &(0x7f0000828000-0x20)={{}, {0x0, 0x0}}) sigaltstack(&(0x7f00006c5000/0xd000)=nil, &(0x7f0000f30000)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000d17000-0x2)='/dev/rtc\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000a34000-0xb0)={{0x400, 0x6}, 'port1\x00', 0x40, 0x100000, 0x2, 0x3, 0x9, 0x79, 0x0, 0x0, 0x3, 0x5}) getuid() lgetxattr(&(0x7f0000d6d000)='./file0\x00', &(0x7f000095d000)=@random={'os2.', "5e73797374656d2c6c6f6d696d655f747970655db82900"}, &(0x7f000053e000)=""/191, 0xbf) futex(&(0x7f0000fbc000), 0x7, 0x20, &(0x7f0000000000)={0x0, r2}, &(0x7f0000777000), 0x0) 2018/02/04 12:03:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000474000-0x10)={0x0, 0xffffffffffffffff, @local}, &(0x7f00006d9000)=0x10, 0x80800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000a5e000)={0x0, 0x7ff}, &(0x7f0000ac7000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000eca000-0x98)={r1, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x81, 0x336f}, &(0x7f0000d53000)=0x98) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x5, 0xf, 0x200) ioctl$sock_ipx_SIOCIPXCFGDATA(r4, 0x89e2, &(0x7f0000c20000-0x4)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f000099b000)=0xf3c8, 0x4) bind$inet(r3, &(0x7f00005d6000-0xd)={0x2, 0x0, @rand_addr}, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000945000-0xe), &(0x7f0000bd6000)=0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x200000000000a, &(0x7f0000dee000-0x4)=0x2, 0x4) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000742000)={@mcast2, 0x0}, &(0x7f0000bf9000-0x4)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000a1e000)={{{@in6=@mcast1, @in6=@mcast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000375000-0x4)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000086d000-0xe8)={{{@in=@multicast1=0xe0000001, @in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0xa0, 0x33, r5, r6}, {0x6, 0x9, 0x7, 0x4e4fed61, 0x1, 0x8, 0x1, 0x751eb3cb}, {0x7, 0x6, 0x20}, 0x7, 0xb, 0x2, 0x1, 0x3, 0x1}, {{@in=@broadcast=0xffffffff, 0x1, 0x32}, 0xa, @in=@loopback=0x7f000001, 0x5, 0x1, 0x1, 0x3, 0x2, 0x10000, 0x4}}, 0xe8) sendto$inet(r3, &(0x7f0000de2000-0x1), 0x0, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000089e000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00008be000-0x3c)={0x54, 0x1, 0x0, {0x3, 0x9}, {0xfffffffffffffff9, 0x1f}, @period={0x59, 0x7, 0x3939, 0x9, 0x2, {0x7f, 0x3, 0xfc16, 0x6}, 0xa, [0x3, 0x8, 0x5, 0x7ff, 0x8, 0x9, 0xd6f, 0x8, 0x4e9, 0xfffffffffffffff7]}}) sendmsg$inet_sctp(r0, &(0x7f0000965000-0x38)={&(0x7f0000d57000-0x10)=@in={0x2, 0x2, @loopback=0x7f000001}, 0x10, &(0x7f00005f2000)=[{&(0x7f0000519000-0x5f)="bb79fe7fc83afeb8168e5dda7d3eb7b31cb9245ea2df5f6e8c78ad152e0c94dbd47a7d14d3398e1776776ab683ad9a46816a50cb06a55236a03040397900794671bc8be5157a65eae0f919e3294685782daa7afe61841620d4bab28dc6188d", 0x5f}, {&(0x7f0000ced000-0x6d)="c4c340e0731c653728df76c9eac2ffcaffc0eb935cf097e7a843c8dacb4f5c7e8d26c30e7658107e9ead6fd8831bb64ba7f1ab3e4cf555bff94227ea41d56ca19fe21c8483356c2cf6e55405f7d0b4a371c1d8b6ddd0321e19747a740b84b7eb324f14a47b66ae14c68e6e05f2", 0x6d}, {&(0x7f00000cc000-0x89)="07c9b4671da210f467dd0fd05e1ec9ef1377d946a2a6b4db4c6dcd361d88cc44ed8e9b12b5ec8fe92b7060bd64d1d945cf3fc30beb0c816ce53b9d27333d8f3629f7e870f74f85cdb13f1c66b450454c6ba29677be79c567ff8da9fb6bdabb076f90f396c53bc6801c0a906fdda39018e7be2dd816f415b38354d0043ab5012d946e5c32b8cc5cd7c4", 0x89}, {&(0x7f0000e82000-0xa8)="33849e1b190a5a38ebbb195d352870614851f97436aba4732682a1014f9c11770ba30cdb1b996d4cd3838c717df5d80a5b04507ea4755d2308f5a8fa8fbf7f45096fddafe14c7c28dfbff8b798d6591dd5a5f3b48a7816c65ca69f1b636dd96cee2a1db1034e51b5ac9c5fdf468b78dcc70dbf7c40e4bc9ed8a2990673b6d4b535e0fcda92d3d53947c070385dd307c2824eae9486aebfedc6150c747e647a4d18bcd053d385cffc", 0xa8}], 0x4, &(0x7f0000dd2000-0xf0)=[@init={0x18, 0x84, 0x0, {0x3, 0x3962631b, 0x4, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x10001, 0x1, 0x6, 0x4, r1}}, @init={0x18, 0x84, 0x0, {0x9, 0x6, 0x6, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0xfcdd, 0x8000, 0x6, 0x3, 0x7ff, 0xfffffffffffffbff, 0x21, r2}}, @sndrcv={0x30, 0x84, 0x1, {0xffff, 0x8001, 0x9, 0x3, 0x1000, 0x0, 0x8f1f, 0x80000001, r1}}], 0xf0}, 0x20000000) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000df0000-0x4), 0x4) sendto$inet(r3, &(0x7f0000b0c000)="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", 0x1001, 0xc004, 0x0, 0x0) shutdown(r3, 0x1) mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0x4, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000df7000-0x38)={&(0x7f0000df7000-0x80)=@generic, 0x80, &(0x7f0000df5000)=[{&(0x7f0000df6000-0x92)=""/146, 0x425}, {&(0x7f0000e13000)=""/140, 0x38f}, {&(0x7f0000df6000-0xe8)=""/232, 0xe8}, {&(0x7f000040a000-0x5e)=""/94, 0x5e}, {&(0x7f00007a8000-0xe7)=""/231, 0xe7}, {&(0x7f0000e64000-0xa9)=""/169, 0xa9}, {&(0x7f000022a000)=""/230, 0xe6}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000f9e000)=""/49, 0x31}], 0x9, &(0x7f0000c28000-0x7)=""/7, 0x7, 0x8000}, 0x40000100) 2018/02/04 12:03:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00003be000)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) [ 56.579522] Normal free:2914980kB min:36824kB low:46028kB high:55232kB active_anon:208292kB inactive_anon:176kB active_file:14052kB inactive_file:33572kB unevictable:0kB writepending:1228kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22272kB slab_unreclaimable:239164kB kernel_stack:5696kB pagetables:2624kB bounce:0kB free_pcp:588kB local_pcp:304kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 56.579574] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 681*4kB (UME) 81*8kB (UM) 36*16kB (UME) 23*32kB (ME) 63*64kB (UME) 25*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 1*2048kB (E) 697*4096kB (M) = 2914956kB 2018/02/04 12:03:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00003be000)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x0]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) munlockall() r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000d52000-0xd)='/selinux/mls\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000022000-0x4)=0x1ff, &(0x7f0000eb1000)=0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000e48000-0x11)='/dev/vga_arbiter\x00', 0x400, 0x0) connect$netlink(r1, &(0x7f0000bce000-0xc)=@unspec, 0xc) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00003be000)='/selinux/checkreqprot\x00', 0x100, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000d95000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getpeername$ax25(r0, &(0x7f00009aa000), &(0x7f0000ff0000-0x4)=0x10) prlimit64(0x0, 0x7, &(0x7f00007c4000), &(0x7f00008ab000-0x10)) signalfd4(0xffffffffffffffff, &(0x7f0000184000-0x8), 0x8, 0x0) 2018/02/04 12:03:51 executing program 2: mmap(&(0x7f0000000000/0xfcd000)=nil, 0xfcd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fcd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0xf, &(0x7f0000fce000-0xe9)=""/233, 0xe9) mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000001000-0x8)='./file0\x00', 0x4) rename(&(0x7f00007e3000)='./file0\x00', &(0x7f0000d4e000)='./control\x00') [ 56.579708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 56.579711] 11960 total pagecache pages [ 56.579714] 0 pages in swap cache [ 56.579718] Swap cache stats: add 0, delete 0, find 0/0 [ 56.579720] Free swap = 0kB [ 56.579723] Total swap = 0kB [ 56.579726] 1965969 pages RAM [ 56.579727] 0 pages HighMem/MovableOnly 2018/02/04 12:03:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00005a3000-0x8)='./file0\x00', 0x400000, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000db2000-0x8)=0x7fffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000cd6000-0x10)={0x0, 0x80, &(0x7f0000834000-0x80)=[@in6={0xa, 0x1, 0x7, @dev={0xfe, 0x80, [], 0x0, 0x17}, 0x2}, @in6={0xa, 0x2, 0xd6, @dev={0xfe, 0x80, [], 0x0, 0x16}, 0x5}, @in6={0xa, 0x1, 0x1, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x7fff}, @in6={0xa, 0x1, 0x3, @empty, 0x1}, @in={0x2, 0x3, @multicast2=0xe0000002}]}, &(0x7f000026b000)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000926000-0x6)={0x0, 0x44f}, &(0x7f00002e3000-0x4)=0x6) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000400000-0xe)={0x0, 0x7, 0x3, [0x8, 0x9, 0x0]}, &(0x7f0000633000)=0xe) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00009d1000-0x8)={0x0, 0x8001}, &(0x7f00000b4000-0x4)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00004c2000)={0x0, 0x78}, &(0x7f000060b000)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000388000)={0x0, 0x1}, &(0x7f000040c000)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000052000-0x8)={0x0, 0x40a8}, &(0x7f0000385000-0x4)=0x8) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000bce000)=0x1d1, &(0x7f0000578000)=0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000589000-0x8)={0x0, 0xf4}, &(0x7f0000b36000-0x4)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000197000)={0x0, 0x4}, &(0x7f0000a9d000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000128000)={0x0, @in={{0x2, 0x1, @rand_addr=0x1}}}, &(0x7f00004b4000-0x4)=0x8c) sendmmsg$inet_sctp(r0, &(0x7f00001ed000-0xa8)=[{&(0x7f0000314000-0x1c)=@in6={0xa, 0x0, 0x2, @ipv4={[], [0xff, 0xff], @rand_addr=0x3}}, 0x1c, &(0x7f0000eef000-0x10)=[{&(0x7f00004d5000-0x32)="9d7d6d95333d06c91870ab4bb1eac0225cb27678fbd82ec9e65abe120b1d8f2bbad65f423229ffec86ec44eac734cd9f645d", 0x32}], 0x1, &(0x7f0000c36000)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x5, 0x3, 0x8000, 0x2, 0x6, 0x3, 0x2, r1}}, @init={0x18, 0x84, 0x0, {0x10001, 0x10000, 0x3, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x800, 0x0, 0x6, 0x5785, r2}}], 0x90, 0x4000000}, {&(0x7f00000ea000)=@in6={0xa, 0x1, 0x7, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0x8}, 0x1c, &(0x7f0000ad9000+0x41a)=[{&(0x7f0000fa7000-0x68)="29e151f9e2b17612e1327d60e95065fb872e5da0316a468197fb8146460d0f0621fafd8342dac0479d555e96135d897b5fea6cbdfb96ec9b45b8a4f7aaa5936c427896c702cb295ba4a1841991beab3c46a2d9c4a46963e105375541025ccd36021205ffeb992a27", 0x68}, {&(0x7f00008d7000-0x7e)="bc1831aa555e05c5a77faf3f740de7a3f559500b7b7f42c75245a27cbcee14e837c221c148fde90f8ac2b273838d73ed4f85567b18688cfe43060028e3fca71c53235b2d78d65770d31d88b1d4d8bb08eac77df119c36531e42480264620e6d5fa3d4955342a455160878b506f012d6d46f7cf6121c2b90ee4f641276c3d", 0x7e}, {&(0x7f0000ed8000+0xf9c)="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", 0x1000}, {&(0x7f0000389000)="cc92f80f35d50d2d400b6c18ecb9ea8fb157ccd5afa7ca8e409ac7137c17a23530a7c726285ffbe7767df152ae35803f182202bbb4730eafa61463385ffbd567b335f74fba06bfdb5b6534da9991310c845cb6c4baa2fb2b50128bdf14623ce47d48548db384cbb818954859542f220c50d47f708f6d362eb17c", 0x7a}], 0x4, &(0x7f00002bf000)=[@sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffffd, 0x1, 0xc, 0xffffffff, 0x90d, 0x4, 0x28c000000000, 0x9, r3}}, @sndinfo={0x20, 0x84, 0x2, {0xcc0, 0x1, 0x6, 0x0, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x3f, 0x5, 0x5, 0x7, 0xc1ad, 0x10000, 0x81, 0x5, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x1, 0x1, 0x6, 0x0, 0x3, 0x80000000, 0xff, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x2, 0x7f, 0x7f, r7}}, @init={0x18, 0x84, 0x0, {0x9, 0x80, 0x400, 0x10}}, @sndinfo={0x20, 0x84, 0x2, {0xf4190d0, 0x8, 0x8, 0xffffffffffffff15, r8}}, @init={0x18, 0x84, 0x0, {0x6, 0x7ff, 0x1, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x5, 0x200, 0x8001, 0x401, 0x6, 0x3, 0x8bd, r9}}], 0x1b0, 0x4000004}, {&(0x7f0000444000-0x1c)=@in6={0xa, 0x0, 0xe, @loopback={0x0, 0x1}, 0xffffffffffffbeca}, 0x1c, &(0x7f0000ad4000)=[{&(0x7f0000c7f000-0xf3)="36dbefca1dcd2fb3003c42200045b35d2cc9fe1af8a6b25193126fefe792620a560dc328778e28855577fec7021be7ea83a8672f7ec1398471fff0d6991c32d2065275efe6651b0ef693c82a33eb01afa4bb5aaad10a244cdde1c1d2a749cddff6618a81d616e06025020aad9c6e710fe14ca892c2a3d98b3542e174a30928cf82133579d65a5257a956378e690814bf29624b9cb269447ad141b8d78fd293751e50427ea4cf5d20fbb577adc676531af70bda5736fd9efdbeead2f23e7be12ce837e015e4833d1be440b661b7f778750573e86ff534ef7419d472c8da9a49992da65b3c98307eaa39b2faa9d8ebd73d4e9651", 0xf3}, {&(0x7f0000746000-0x1000)="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", 0x1000}, {&(0x7f00002f0000-0xf7)="960cd87ff4921c4a6ee30285583c7920edc57fd8ce69636c2ec9d748a57d02cf522ba58fa4b926cc61b95d1d48fd3925c5bd8e861a1d0f5b34f9540c42210d08c1d99a2ca89898c52cc078005309feeeb7e298a18b140a9fa3c636615a8d0b5ca1186653eebf2718b0118b812a04b0d5ebaeb44195a3022e8f0c846648d1faeba0cfd9034a2acc59abe704a6ed65fa3ccc1206f335c1809a0c10364e8c4014e1de4732930f88505cb29d8b636a4ad006a1a3afac3882b4295d91ac445c42ce952a1436b8834e73ba027588cc0872dc671c909255a595b6aa94eee237cfd79d419fe1abbb6348be11ba68586184d351d66357c29f0e6802", 0xf7}, {&(0x7f00008aa000-0x1000)="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", 0x1000}, {&(0x7f00002a8000-0x3)="d9aa83", 0x3}, {&(0x7f00005fb000)="00cb065132f21962ac02c32b374588ab5d47fdb7e36c9dc46bf2f1cb58c66484a4154dce965ff44be948", 0x2a}], 0x6, &(0x7f0000fdf000-0x90)=[@init={0x18, 0x84, 0x0, {0x5f81, 0x3ff, 0x0, 0xfff}}, @init={0x18, 0x84, 0x0, {0x7, 0x3, 0x9, 0x81a}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x200, 0x200, 0xffffffff, r10}}], 0x90, 0x1}], 0x3, 0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00007c1000-0x14)={0x8, [0x0, 0xfffffffffffff870, 0xffffffff, 0x9, 0x6, 0x7, 0x1, 0x401]}, &(0x7f0000178000)=0x14) socket$inet6(0xa, 0x6, 0x100000000000000) 2018/02/04 12:03:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) [ 56.579730] 320509 pages reserved [ 56.584998] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.598400] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 56.598409] CPU: 1 PID: 5759 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 56.598414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.598428] ffff8801b4bef938 ffffffff81d94b69 1ffff1003697df2a ffff8801c2661800 [ 56.598439] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b4befa48 [ 56.598450] ffffffff81451ca2 024000c2b4bef988 0000000041b58ab3 ffffffff84195215 [ 56.598452] Call Trace: [ 56.598465] [] dump_stack+0xc1/0x128 2018/02/04 12:03:51 executing program 5: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000007000)={0x0, 0xffffffffffffffff, @multicast1}, &(0x7f0000007000-0x4)=0xffffffa1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000005000)=@assoc_id=0x0, &(0x7f0000004000-0x4)=0x4) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000008000)='./file0\x00', 0x101000, 0x1ac) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000008000-0xb0)={{0x2, 0x3}, 'port0\x00', 0x80, 0x4, 0xd58, 0x4, 0x0, 0x8000, 0x6, 0x0, 0x1, 0x9}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000004000)={r1, @in={{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}}, 0x0, 0xfb6c}, &(0x7f0000006000)=0x98) r3 = socket$key(0xf, 0x3, 0x2) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000004000), &(0x7f0000003000-0x4)=0x8) sendmsg$key(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000005000)={&(0x7f0000001000-0x20)={0x2, 0x6, 0x5, 0x0, 0x2, 0x0, 0x4, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/04 12:03:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000f1c000)='/selinux/enforce\x00', 0x80, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000f76000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_names=@common='sit0\x00'}) 2018/02/04 12:03:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x3f) write(r0, &(0x7f0000650000-0x23)="2210800142000721004f53f7e2ff05000200038e0100800008000200e700ff02ffff70", 0x23) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000c77000-0x10)='/dev/sequencer2\x00', 0x4000, 0x0) 2018/02/04 12:03:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x0]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:51 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000a4b000-0xe)='/selinux/load\x00', 0x2, 0x0) 2018/02/04 12:03:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x0]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = creat(&(0x7f00008a1000-0x8)='./file0\x00', 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000f86000-0x1000)=""/4096) 2018/02/04 12:03:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00001a3000-0x10)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16}]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000713000-0x9)='/dev/rtc\x00', 0x400000, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000eb4000), &(0x7f0000a6b000)=0x4) eventfd2(0x0, 0x0) 2018/02/04 12:03:51 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) [ 56.598476] [] warn_alloc+0x212/0x240 [ 56.598486] [] ? zone_watermark_ok_safe+0x280/0x280 [ 56.598496] [] ? avc_has_perm+0xb0/0x4f0 [ 56.598505] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 56.598513] [] __vmalloc_node_range+0x3f5/0x5f0 2018/02/04 12:03:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x0]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00009b9000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000385000-0x9)='/dev/sg#\x00', 0x8, 0xd2a6a5423e6439b6) recvfrom$unix(r0, &(0x7f0000583000)=""/144, 0x90, 0x40, &(0x7f00003aa000-0xa)=@file={0x1, './file0\x00'}, 0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000fdc000-0x108)={0x0, @in6={{0xa, 0x0, 0x4, @empty, 0x7fff}}, [0x6, 0x5, 0x7e, 0x9, 0x4, 0x7, 0x7, 0x0, 0x2, 0x80, 0x10001, 0x8, 0x5, 0x2]}, &(0x7f0000905000)=0x108) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000a66000-0x4)=@assoc_id=r2, 0x4) fcntl$lock(r0, 0x7, &(0x7f0000011000-0x20)={0x0, 0x0, 0x10000}) fcntl$lock(r1, 0x6, &(0x7f0000544000)={0x0, 0x4000000000000000, 0x9, 0x2}) 2018/02/04 12:03:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) [ 56.598523] [] ? check_preemption_disabled+0x3b/0x200 [ 56.598531] [] ? task_has_security+0x130/0x270 [ 56.598538] [] vmalloc+0x5b/0x70 [ 56.598545] [] ? sel_write_load+0x130/0xfd0 [ 56.598552] [] sel_write_load+0x130/0xfd0 2018/02/04 12:03:51 executing program 5: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000008000)="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", 0x1000, 0x10, &(0x7f0000014000-0x6)=@hci={0x1f, 0x1}, 0x6) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f0000017000-0x124)={0x14, 0x1c, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x7}, []}, 0x14}, 0x1}, 0x0) 2018/02/04 12:03:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f00009de000)="31e8197bde8f2e3551de6af9204b06b55cd60ad9e63f2b80", 0x18, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000a49000)='/dev/vga_arbiter\x00', 0x6080c0, 0x0) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f00000f6000-0x8)='./file0\x00', 0x2000000) inotify_rm_watch(r1, r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b16000-0xe)='/dev/keychord\x00', 0x181901, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00009bb000-0x10)={0x0, 0x7530}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) getrandom(&(0x7f00007cf000-0x21)=""/33, 0x21, 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f000022f000-0x8)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000043000)={0x8, {{0xa, 0x0, 0x10000, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x4}}}, 0x88) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00002e4000-0x8)) 2018/02/04 12:03:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000088d000)='./file0\x00', 0x0) getpeername$netrom(r0, &(0x7f0000dc2000)=@full, &(0x7f000089c000)=0x48) syz_open_dev$loop(&(0x7f00000eb000)='/dev/loop#\x00', 0x800, 0x2001) r1 = fcntl$dupfd(r0, 0x406, r0) getxattr(&(0x7f0000e4b000-0x8)='./file0\x00', &(0x7f00000b1000)=@known="73797374656d2e706f7369785f61636c5f6163636573731d", &(0x7f00009c0000)=""/87, 0x57) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000325000-0x4)=0x0) timer_create(0x0, &(0x7f0000722000)={0x0, 0x5, 0x0, @tid=r2}, &(0x7f0000571000)) 2018/02/04 12:03:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00004f5000-0x8)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000890000-0xf)='net/ip6_mr_vif\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(r0, r1, &(0x7f0000023000), 0x26a950b) 2018/02/04 12:03:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x3f) write(r0, &(0x7f0000650000-0x23)="2210800142000721004f53f7e2ff05000200038e0100800008000200e700ff02ffff70", 0x23) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000c77000-0x10)='/dev/sequencer2\x00', 0x4000, 0x0) [ 56.598568] [] ? get_futex_key+0x1050/0x1050 [ 56.598577] [] ? sel_read_bool+0x250/0x250 [ 56.598589] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 56.598595] [] ? do_futex+0x3f8/0x15c0 [ 56.598603] [] ? sel_read_bool+0x250/0x250 [ 56.598611] [] __vfs_write+0x103/0x680 2018/02/04 12:03:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a56000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000450000)) 2018/02/04 12:03:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000f10000-0x6)={0x19980330}, &(0x7f00008e7000)) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000013e000)='/selinux/policy\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000881000)=0x3) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000057000-0x28)={0x5, 0x1, 0x7, 0x1, 0x8}) inotify_add_watch(r0, &(0x7f0000d1b000-0xa)='./control\x00', 0x7) 2018/02/04 12:03:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) readahead(r0, 0x8, 0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000fd7000)='/selinux/checkreqprot\x00', 0x40, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000161000)={0x32d, 0x10e6, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x7) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:51 executing program 7: r0 = socket$inet6(0xa, 0x4, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00007f6000-0x50)={@mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}) 2018/02/04 12:03:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f0000d37000-0xda)="d4fc01e9ebc79565119b7e7c66357678a5ddad883a8d9f4ba9642bb83ddf6deb07707b648afe07a04e90922a319e93fd2be01def1b242b2db0af2742fc67632b515fc1dc79000942f5c81fefe5ea2229b6df0be10406f7b106684c7e74cd64aaca013ae1f9bafb1d13f994f168884d65dc4aba67b97eb463512bc672b6dd688ed412437448a8e0cb694ae580290acca3ed11758342fd3a29ab16e7f5ce25464bfad6afa13019d96cfa7f84860b87db3b193e6e87b00c2a255395b1eb12cff697fff7300a9ec01ade0335fbff4af01e0d02a6832cc536bb7c256e", 0xffffffffffffff0b) 2018/02/04 12:03:51 executing program 1: mmap(&(0x7f0000000000/0xf79000)=nil, 0xf79000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000000a000-0x38)={&(0x7f0000002000-0xc)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000169000)={0x28, 0x1a, 0x109, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, [@nested={0x14, 0x2, [@typed={0x10, 0x0, @u64}]}]}, 0x28}, 0x1}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00005b3000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 56.598619] [] ? do_iter_readv_writev+0x400/0x400 [ 56.598627] [] ? __lock_is_held+0xa1/0xf0 [ 56.598635] [] ? __lock_is_held+0xa1/0xf0 [ 56.598643] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 56.598651] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 56.598657] [] ? __sb_start_write+0x14a/0x310 2018/02/04 12:03:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:51 executing program 1: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf03f}]}) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f000000a000)="c0c73ff0") mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f000000b000)="0d526e724eff32b6f13fe0429380a4dd9c03f4b8e7f952e5aa10434aa28bc15cf5bf62836431590496f1b5566c296314073f2cfe329ecaa81d96a2a6a6b5dc4a7a1b0fe19d51ad293ef2744c527b5362b9b6f5ac8e6f610df9c9635e6f64f43f2f534d90c6b261e66f7975123ba8b079219e06e1e4668b4dcc17d48b92a6c1eb64d2382230beac5bb65d5f99d63f3be2de311ed38c87a5efeee7073ed838c6d2e1f6e37a6eb4f204c334ef17fc4da0c02922ae4b7a4cde5a3861746755a68dd89c4b19772ce71f8c7c4ebe11f76f29a62fd220dbb0a116df", 0xd8) 2018/02/04 12:03:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) [ 56.598665] [] vfs_write+0x189/0x530 [ 56.598672] [] SyS_write+0xd9/0x1b0 [ 56.598680] [] ? SyS_read+0x1b0/0x1b0 [ 56.598687] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 56.598696] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 56.598704] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 56.598707] Mem-Info: [ 56.598728] active_anon:52552 inactive_anon:44 isolated_anon:0 [ 56.598728] active_file:3513 inactive_file:8393 isolated_file:0 [ 56.598728] unevictable:0 dirty:307 writeback:0 unstable:0 [ 56.598728] slab_reclaimable:5540 slab_unreclaimable:59826 [ 56.598728] mapped:24065 shmem:51 pagetables:693 bounce:0 [ 56.598728] free:1476697 free_pcp:321 free_cma:0 [ 56.598754] Node 0 active_anon:210208kB inactive_anon:176kB active_file:14052kB inactive_file:33572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96260kB dirty:1228kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 73728kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 56.600802] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 56.600832] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 56.600860] Normal free:2912756kB min:36824kB low:46028kB high:55232kB active_anon:208192kB inactive_anon:176kB active_file:14052kB inactive_file:33572kB unevictable:0kB writepending:1228kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22160kB slab_unreclaimable:239304kB kernel_stack:5920kB pagetables:2772kB bounce:0kB free_pcp:612kB local_pcp:192kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 56.600907] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 721*4kB (UME) 84*8kB (UME) 49*16kB (UME) 24*32kB (UME) 54*64kB (UME) 25*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 4*2048kB (ME) 695*4096kB (M) = 2912756kB [ 56.603031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 56.603034] 11960 total pagecache pages [ 56.603037] 0 pages in swap cache [ 56.603042] Swap cache stats: add 0, delete 0, find 0/0 [ 56.603044] Free swap = 0kB [ 56.603046] Total swap = 0kB [ 56.603048] 1965969 pages RAM [ 56.603051] 0 pages HighMem/MovableOnly [ 56.603053] 320509 pages reserved [ 56.612197] binder: 5764:5773 got transaction with invalid offset (32, min 0 max 24) or object. [ 56.612222] binder: 5764:5773 transaction failed 29201/-22, size 24-8 line 3190 [ 56.616385] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.633809] binder: 5776:5780 got transaction with invalid offset (32, min 0 max 24) or object. [ 56.633832] binder: 5776:5780 transaction failed 29201/-22, size 24-8 line 3190 [ 56.636893] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.644809] binder: 5781:5782 got transaction with invalid offset (32, min 0 max 24) or object. [ 56.644833] binder: 5781:5782 transaction failed 29201/-22, size 24-8 line 3190 [ 56.653943] SELinux: policydb magic number 0xd21744d5 does not match expected magic number 0xf97cff8c [ 56.663879] SELinux: policydb magic number 0xd21744d5 does not match expected magic number 0xf97cff8c [ 56.671955] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.706663] binder: 5783:5792 got transaction with invalid offset (32, min 0 max 32) or object. [ 56.706688] binder: 5783:5792 transaction failed 29201/-22, size 32-8 line 3190 [ 56.709017] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.747671] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 56.747679] CPU: 1 PID: 5798 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 56.747684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.747697] ffff8801b4477938 ffffffff81d94b69 1ffff1003688ef2a ffff8801ca733000 [ 56.747708] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b4477a48 [ 56.747719] ffffffff81451ca2 024000c2b4477988 0000000041b58ab3 ffffffff84195215 [ 56.747721] Call Trace: [ 56.747734] [] dump_stack+0xc1/0x128 [ 56.747744] [] warn_alloc+0x212/0x240 [ 56.747753] [] ? zone_watermark_ok_safe+0x280/0x280 [ 56.747761] [] ? avc_has_perm+0xb0/0x4f0 [ 56.747773] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 56.747782] [] __vmalloc_node_range+0x3f5/0x5f0 [ 56.747794] [] ? check_preemption_disabled+0x3b/0x200 [ 56.747801] [] ? task_has_security+0x130/0x270 [ 56.747809] [] vmalloc+0x5b/0x70 [ 56.747816] [] ? sel_write_load+0x130/0xfd0 [ 56.747823] [] sel_write_load+0x130/0xfd0 [ 56.747831] [] ? get_futex_key+0x1050/0x1050 [ 56.747838] [] ? sel_read_bool+0x250/0x250 [ 56.747848] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 56.747854] [] ? do_futex+0x3f8/0x15c0 [ 56.747862] [] ? sel_read_bool+0x250/0x250 [ 56.747870] [] __vfs_write+0x103/0x680 [ 56.747878] [] ? do_iter_readv_writev+0x400/0x400 [ 56.747885] [] ? __lock_is_held+0xa1/0xf0 [ 56.747893] [] ? __lock_is_held+0xa1/0xf0 [ 56.747901] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 56.747909] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 56.747915] [] ? __sb_start_write+0x14a/0x310 [ 56.747923] [] vfs_write+0x189/0x530 [ 56.747930] [] SyS_write+0xd9/0x1b0 [ 56.747938] [] ? SyS_read+0x1b0/0x1b0 [ 56.747946] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 56.747954] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 56.747962] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 56.747966] Mem-Info: [ 56.747983] active_anon:53525 inactive_anon:44 isolated_anon:0 [ 56.747983] active_file:3513 inactive_file:8393 isolated_file:0 [ 56.747983] unevictable:0 dirty:307 writeback:0 unstable:0 [ 56.747983] slab_reclaimable:5540 slab_unreclaimable:59935 [ 56.747983] mapped:24040 shmem:51 pagetables:656 bounce:0 [ 56.747983] free:1476691 free_pcp:405 free_cma:0 [ 56.748000] Node 0 active_anon:214100kB inactive_anon:176kB active_file:14052kB inactive_file:33572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96160kB dirty:1228kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 73728kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 56.748023] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 56.748087] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 56.748118] Normal free:2910772kB min:36824kB low:46028kB high:55232kB active_anon:214100kB inactive_anon:176kB active_file:14052kB inactive_file:33572kB unevictable:0kB writepending:1228kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22160kB slab_unreclaimable:239740kB kernel_stack:5632kB pagetables:2624kB bounce:0kB free_pcp:984kB local_pcp:600kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 56.748175] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 817*4kB (UME) 97*8kB (UME) 50*16kB (UME) 24*32kB (UME) 47*64kB (ME) 25*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 1*2048kB (E) 696*4096kB (M) = 2910764kB [ 56.748276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 56.748278] 11960 total pagecache pages [ 56.748281] 0 pages in swap cache [ 56.748285] Swap cache stats: add 0, delete 0, find 0/0 [ 56.748287] Free swap = 0kB [ 56.748289] Total swap = 0kB [ 56.748291] 1965969 pages RAM [ 56.748293] 0 pages HighMem/MovableOnly [ 56.748295] 320509 pages reserved [ 56.897555] binder: 5815:5821 got transaction with invalid offset (32, min 0 max 32) or object. [ 56.897583] binder: 5815:5821 transaction failed 29201/-22, size 32-8 line 3190 [ 56.899558] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 56.899568] CPU: 1 PID: 5822 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 56.899574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.899587] ffff8801c4687938 ffffffff81d94b69 1ffff100388d0f2a ffff8801c8486000 [ 56.899599] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801c4687a48 [ 56.899615] ffffffff81451ca2 024000c2c4687988 0000000041b58ab3 ffffffff84195215 [ 56.899616] Call Trace: [ 56.899629] [] dump_stack+0xc1/0x128 [ 56.899640] [] warn_alloc+0x212/0x240 [ 56.899650] [] ? zone_watermark_ok_safe+0x280/0x280 [ 56.899660] [] ? avc_has_perm+0xb0/0x4f0 [ 56.899670] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 56.899678] [] __vmalloc_node_range+0x3f5/0x5f0 [ 56.899688] [] ? check_preemption_disabled+0x3b/0x200 [ 56.899696] [] ? task_has_security+0x130/0x270 [ 56.899703] [] vmalloc+0x5b/0x70 [ 56.899711] [] ? sel_write_load+0x130/0xfd0 [ 56.899718] [] sel_write_load+0x130/0xfd0 [ 56.899726] [] ? get_futex_key+0x1050/0x1050 [ 56.899733] [] ? sel_read_bool+0x250/0x250 [ 56.899742] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 56.899749] [] ? do_futex+0x3f8/0x15c0 [ 56.899757] [] ? sel_read_bool+0x250/0x250 [ 56.899765] [] __vfs_write+0x103/0x680 [ 56.899773] [] ? do_iter_readv_writev+0x400/0x400 [ 56.899780] [] ? __lock_is_held+0xa1/0xf0 [ 56.899788] [] ? __lock_is_held+0xa1/0xf0 [ 56.899797] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 56.899804] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 56.899811] [] ? __sb_start_write+0x14a/0x310 [ 56.899819] [] vfs_write+0x189/0x530 [ 56.899826] [] SyS_write+0xd9/0x1b0 [ 56.899834] [] ? SyS_read+0x1b0/0x1b0 [ 56.899842] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 56.899849] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 56.899858] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 56.901432] Mem-Info: [ 56.901457] active_anon:55120 inactive_anon:44 isolated_anon:0 [ 56.901457] active_file:3516 inactive_file:8397 isolated_file:0 [ 56.901457] unevictable:0 dirty:325 writeback:0 unstable:0 [ 56.901457] slab_reclaimable:5528 slab_unreclaimable:59920 [ 56.901457] mapped:24091 shmem:51 pagetables:654 bounce:0 [ 56.901457] free:1474099 free_pcp:253 free_cma:0 [ 56.901476] Node 0 active_anon:220480kB inactive_anon:176kB active_file:14064kB inactive_file:33588kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96364kB dirty:1300kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 57344kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 56.901496] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 56.901524] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 56.901560] Normal free:2900404kB min:36824kB low:46028kB high:55232kB active_anon:222528kB inactive_anon:176kB active_file:14064kB inactive_file:33588kB unevictable:0kB writepending:1300kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:22112kB slab_unreclaimable:239680kB kernel_stack:5888kB pagetables:2616kB bounce:0kB free_pcp:376kB local_pcp:256kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 56.901611] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 909*4kB (UME) 104*8kB (UME) 50*16kB (ME) 23*32kB (ME) 47*64kB (ME) 21*128kB (UME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 2*2048kB (ME) 692*4096kB (M) = 2896308kB [ 56.903001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 56.903004] 11963 total pagecache pages [ 56.903007] 0 pages in swap cache [ 56.903011] Swap cache stats: add 0, delete 0, find 0/0 [ 56.903013] Free swap = 0kB [ 56.903015] Total swap = 0kB [ 56.903018] 1965969 pages RAM [ 56.903020] 0 pages HighMem/MovableOnly [ 56.903023] 320509 pages reserved [ 56.909810] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.925170] audit: type=1400 audit(1517745830.618:18): avc: denied { write } for pid=5814 comm="syz-executor4" path="socket:[14073]" dev="sockfs" ino=14073 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 56.925362] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 56.928138] binder: 5831:5832 got transaction with invalid offset (32, min 0 max 32) or object. [ 56.928162] binder: 5831:5832 transaction failed 29201/-22, size 32-8 line 3190 [ 56.931174] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.938424] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 56.939724] audit: type=1400 audit(1517745830.628:19): avc: denied { ioctl } for pid=5814 comm="syz-executor4" path="socket:[14078]" dev="sockfs" ino=14078 ioctlcmd=0x7459 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 56.941927] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 56.943244] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 56.944659] binder: 5837:5840 got transaction with invalid offset (32, min 0 max 56) or object. [ 56.944683] binder: 5837:5840 transaction failed 29201/-22, size 56-8 line 3190 [ 56.950615] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.109443] audit: type=1400 audit(1517745830.798:20): avc: denied { accept } for pid=5857 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 57.113963] audit: type=1400 audit(1517745830.798:21): avc: denied { read } for pid=5857 comm="syz-executor2" path="socket:[14110]" dev="sockfs" ino=14110 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 57.114910] binder: 5859:5868 got transaction with invalid offset (32, min 0 max 56) or object. [ 57.114937] binder: 5859:5868 transaction failed 29201/-22, size 56-8 line 3190 [ 57.121388] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.161037] binder: 5880:5890 got transaction with invalid offset (32, min 0 max 56) or object. [ 57.161063] binder: 5880:5890 transaction failed 29201/-22, size 56-8 line 3190 [ 57.164049] binder: BINDER_SET_CONTEXT_MGR already set [ 57.164055] binder: 5884:5887 ioctl 40046207 0 returned -16 [ 57.164703] binder: 5884:5887 got transaction with invalid offset (32, min 0 max 56) or object. [ 57.164726] binder: 5884:5887 transaction failed 29201/-22, size 56-8 line 3190 [ 57.168243] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.174037] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.176154] audit: type=1400 audit(1517745830.868:22): avc: denied { create } for pid=5888 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 [ 57.201835] binder: release 5897:5899 transaction 81 out, still active [ 57.201839] binder: undelivered TRANSACTION_COMPLETE [ 57.201862] binder: send failed reply for transaction 81, target dead [ 57.261387] binder: release 5917:5920 transaction 83 out, still active [ 57.261391] binder: undelivered TRANSACTION_COMPLETE [ 57.261410] binder: send failed reply for transaction 83, target dead [ 57.502988] binder: release 5945:5952 transaction 85 out, still active [ 57.502992] binder: undelivered TRANSACTION_COMPLETE [ 57.503011] binder: send failed reply for transaction 85, target dead [ 57.552418] binder: 5964:5966 got transaction with invalid parent offset or type [ 57.552444] binder: 5964:5966 transaction failed 29201/-22, size 56-8 line 3250 [ 57.557570] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.669463] binder: 5990:5998 got transaction with invalid parent offset or type [ 57.669487] binder: 5990:5998 transaction failed 29201/-22, size 56-8 line 3250 [ 57.676753] binder: BINDER_SET_CONTEXT_MGR already set [ 57.676762] binder: 5995:6004 ioctl 40046207 0 returned -16 [ 57.677428] binder_alloc: 5990: binder_alloc_buf, no vma [ 57.677441] binder: 5995:6004 transaction failed 29189/-3, size 56-8 line 3127 [ 57.682100] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.686629] binder: undelivered TRANSACTION_ERROR: 29189 [ 57.710139] binder: 6013:6022 got transaction with invalid parent offset or type [ 57.710164] binder: 6013:6022 transaction failed 29201/-22, size 56-8 line 3250 [ 57.719536] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.772323] binder: 6026:6036 got transaction with invalid handle, 0 [ 57.772391] binder: 6026:6036 transaction failed 29201/-22, size 56-8 line 3219 [ 57.795330] binder: BINDER_SET_CONTEXT_MGR already set [ 57.795338] binder: 6026:6036 ioctl 40046207 0 returned -16 [ 57.795569] binder_alloc: 6026: binder_alloc_buf, no vma [ 57.795584] binder: 6026:6036 transaction failed 29189/-3, size 56-8 line 3127 [ 57.799320] binder: undelivered TRANSACTION_ERROR: 29189 [ 57.799427] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.830842] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) [ 57.840931] binder: 6051:6063 ioctl 401054d6 0 returned -22 [ 57.841539] binder: 6051:6063 got transaction with invalid handle, 0 [ 57.841564] binder: 6051:6063 transaction failed 29201/-22, size 56-8 line 3219 [ 57.855902] binder: BINDER_SET_CONTEXT_MGR already set [ 57.855911] binder: 6051:6065 ioctl 40046207 0 returned -16 [ 57.857221] binder: 6051:6065 ioctl 401054d6 0 returned -22 2018/02/04 12:03:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000a86000)='./file0\x00', 0x200000, 0x55) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000503000)=0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009d7000)={0x18, 0x0, &(0x7f0000085000-0x18)=[@increfs={0x40046304}, @clear_death={0x400c630f, 0x0, 0x2}], 0x1000, 0x0, &(0x7f000094e000-0x1000)="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"}) 2018/02/04 12:03:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f0000657000-0x116)="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", 0x254) 2018/02/04 12:03:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f000036f000-0xb4)=""/180, &(0x7f000044c000-0x4)=0xb4) r1 = syz_open_procfs(0x0, &(0x7f0000f0a000)='net/rt_cache\x00') sendfile(r0, r1, 0x0, 0x3ff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000f9000-0x8c)={0x1000, 0x800, 0x2, 'queue0\x00', 0x81}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00006bb000)={@generic="a5c7743a8c35339801da82c9e565edf5", 0x20}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000622000)=""/59) 2018/02/04 12:03:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000012a000-0xbc)="240000001a0025f0006bb404feff001c020b49ff6e10b500000700eb0800030001830000", 0x24) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000e42000)={0x77359400}, 0x10) 2018/02/04 12:03:53 executing program 5: mmap(&(0x7f0000000000/0xfde000)=nil, 0xfde000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e2d000-0x20)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000fdf000-0x8)={0x0, 0x0}) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000fde000)={{{@in=@loopback, @in6=@remote}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000e1b000-0x4)=0xe8) 2018/02/04 12:03:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) openat$selinux_user(0xffffffffffffff9c, &(0x7f00008a9000-0xe)='/selinux/user\x00', 0x2, 0x0) writev(r0, &(0x7f00003cf000-0x10)=[{&(0x7f0000b97000)="580000001500190000bb4b9600055c5d02ed3b850280e07648020ec818fe58a2b25205000000723e0100010000d7000000000004001741380a0031f800000000000e8d00002300000000000000006001ab1dda4ac3536301", 0x58}], 0x1) [ 57.866727] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/04 12:03:53 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) [ 59.791788] binder: 6081:6088 got transaction with invalid handle, 0 [ 59.798352] binder: 6081:6088 transaction failed 29201/-22, size 56-8 line 3219 [ 59.807874] SELinux: policydb magic number 0x3043ed00 does not match expected magic number 0xf97cff8c 2018/02/04 12:03:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00009b9000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f000065e000-0xb0)={{0x280}, "706f727430000000000000000000000000000000ff750000000b0000000000000000000035d4ed00000000000000000000af000000000100000001ffed00", 0x0, 0x0, 0x0, 0x0, 0x400}) 2018/02/04 12:03:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f000006c000-0xa)='security.\x00', 0x1) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000b2c000)="170000001a001bed0000132100f404fffffffffffffff7", 0x17) recvfrom$inet6(r0, &(0x7f00004d2000-0xd1)=""/209, 0xd1, 0x0, &(0x7f0000ca1000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}, 0x1c) recvmmsg(r0, &(0x7f0000f7c000-0x40)=[{{&(0x7f0000478000)=@hci, 0x5, &(0x7f0000ee0000-0x8)=[], 0xfc, &(0x7f0000579000)=""/221, 0xdd}}], 0x4444648, 0x0, &(0x7f0000d6c000)) 2018/02/04 12:03:53 executing program 5: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f000001c000)='/dev/input/mice\x00', 0x0, 0x2000) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f000000e000)=0x7fff, &(0x7f000001c000)=0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f0000017000-0x124)={0x14, 0x1c, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x7}, []}, 0x14}, 0x1}, 0x0) [ 59.838299] SELinux: policydb magic number 0x3043ed00 does not match expected magic number 0xf97cff8c [ 59.856837] binder_alloc: binder_alloc_mmap_handler: 6081 20000000-20002000 already mapped failed -16 [ 59.858354] binder: BINDER_SET_CONTEXT_MGR already set [ 59.858362] binder: 6081:6088 ioctl 40046207 0 returned -16 [ 59.858426] binder_alloc: 6081: binder_alloc_buf, no vma 2018/02/04 12:03:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000159000-0x2)="98", 0x1) r1 = accept(r0, &(0x7f00000f1000-0x10)=@nfc, &(0x7f0000ba5000-0x4)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000af4000)={0x0, 0x1a}, &(0x7f000082b000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000c40000-0x10)={r2, 0x1000, 0x80000001, 0x4}, &(0x7f0000964000-0x4)=0x10) 2018/02/04 12:03:53 executing program 6: mlock2(&(0x7f00009ae000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r0 = socket(0x13, 0x801, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00003b5000-0x38)={&(0x7f0000eb8000)={0x10}, 0xc, &(0x7f0000001000-0x10)={&(0x7f0000000000)=@flushpolicy={0x32c, 0x1d, 0x200, 0x5, 0x2, "", [@address_filter={0x28, 0x1a, {@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x2, 0x1, 0x4}}, @tmpl={0x284, 0x5, [{{@in6=@loopback={0x0, 0x1}, 0x1, 0x33}, 0xa, @in=@empty, 0x7, 0x3, 0x3, 0x672, 0x0, 0x3d, 0x8}, {{@in=@multicast2=0xe0000002, 0x3}, 0xa, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x1000, 0x1, 0x1ff}, {{@in=@multicast1=0xe0000001, 0x3, 0xff}, 0xa, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x0, 0x12}}, 0xffffffffffffffff, 0x6, 0x1, 0x92, 0x867, 0x20, 0x40}, {{@in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x3}, 0x2, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0xffffffffffffffff, 0x7, 0x3, 0x5, 0xffffffff, 0x1, 0x200}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x2, 0x33}, 0xa, @in6=@empty, 0x0, 0x2, 0x3, 0x8, 0x8, 0x1, 0x8}, {{@in=@loopback=0x7f000001, 0x1, 0x2b}, 0xa, @in6=@empty, 0x1, 0x4, 0x3, 0x10000000000, 0x9d, 0xe7, 0x6}, {{@in=@local={0xac, 0x14, 0x0, 0xaa}, 0x2, 0x2b}, 0xa, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffffffffff7, 0xe73d, 0x81, 0x1}, {{@in=@empty, 0x3, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x0, 0xd}, 0xffffffffffffffff, 0x4, 0x3, 0x8000, 0x200, 0x0, 0x80000001}, {{@in6=@loopback={0x0, 0x1}, 0x3, 0x3c}, 0xa, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x3, 0x6, 0x180000000}, {{@in=@multicast1=0xe0000001, 0x3, 0xff}, 0xa, @in6=@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x6, 0x2, 0x1, 0x100000001, 0x7f, 0xd5, 0xfff}]}, @lifetime_val={0x28, 0x9, {0xffffffff, 0x20d79ab1, 0x3, 0x3}}, @replay_val={0x10, 0xa, {0x3, 0x7, 0x100000000}}, @policy_type={0xc, 0x10, {0x1}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x2, 0x3, 0x6, 0x7, 0x3, [0xe2, 0xe2, 0x9, 0x4]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f00007a6000-0x38)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:03:53 executing program 1: mmap(&(0x7f0000000000/0x2c000)=nil, 0x2c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) mmap(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000022000-0x38)={0x0, 0x0, &(0x7f000002e000-0x10)=[{&(0x7f000002c000)="23c3481d91c86c021639c77e8452b6b30621ce9b6454b7e53def792d7ff8e5019b2e76e97dd0ca56ddf2c159d87c", 0x2e}], 0x1, &(0x7f000002d000)=[{0x0, 0x0, 0x7, "2c439145185d55b684d466d588cd8a34eab9011ca9865acd062038f3ea50cd7d1da002c76604cc926a59ea31dcc3f3c97612d36e776c02095aca1633a18f46e0d2eaba4773cf4cfd90486aaddd25a30c4d59ddf644e16a850964c7018cf0c328033d04c24be9eb3af31fc78254f4f5d97ef46a30"}, {0x0, 0x1, 0x5, "8c61881ea9b04f131f566ad89cc5a170b8cefa744de21f5f718a0fa5ea9d7eb1c581226ce5d612087d19e0d35eb4465fe0b1037a55a0d28895f279096bbc022487feea3d28db779d4cb74d618c93283c5dc01bba93ddeb2964f4cc2cc541c97f1585f3bdc72255057b4c10b98c2dd437d5e2a202790db06eb58fd9019446a4dc2b11fc6cea2fd151dc42fab24c7c4246346e0a57a7b245381d218aa59cd0b37549f7ace235334efb03bebc426d75"}, {0x0, 0x0, 0x9, "e6f2811b517b515a5b82f3c5ea51c3748456a19ed7f3ebedc98fff6c0f3fa5d55bbb1276b150260b39eb5bbf9b875e4f36a3064fd8ed0a8f75ad7df85c9c3edf4414cf5128e84fa51447180944f78f6cde5207f4ab8e129703bb563798dd0b9f1f3573988bbf49a9562952f571831f3331e220dfd89eeb7c6b01e0befba917a2bcfde42ede2958d02ee6f0331eab7988cfbcc66042e7746bc7aab1efb393e91623f8e10970773bef02786f8a9aa99949e0465488fd8214f34362556c963004f7514fac041e4a0fc30a1f4056a683547965f549ae4388656bea10738d4a74266e8fd6d9711e75949ad4"}, {0x0, 0x0, 0x7fffffff, "90c76a6c17ca00dcead2ae61cdf4e8bf5870e35f5c508d43f5895626c262937c8ab71c998d26cf0a6834feb0c99701af42e2744c79dd042cb0a084bd33b172964b1725aed8c31f45789ca407d691710d6f10e0f4e0422a9a995e63a5e311a73aaa131a2c6907118f1c176506d8e15c61bfc1c2b3274a9c292153247e6f6c3204e0f56c26cff9359f4e4f7a64159b6829449f9f786d2e2ae4fcff6b638ca838d84da6abadc424bf6f2888dcd027bd2fd7109e4622f82933cf9964e3fd367a63baa53619aca8d072e3d87dc8f8ba6a55fa729b00c6b8"}, {0x0, 0x11b, 0xb6e, "6fa4bc23baac4756dd0f576e5219008a8af2e8fbb0b626ebc4ba46243bfdb19ed1f8952b5b04fe7d9894be56009ad290e9829dbdbda40c28b4dd1a04a14c85451b343ef38fbd033ac4db513c9510d15cf9c49f233bf49806508d0c91b3fcbf25bb80e7e85cd362e6bdda543b17321cca9bf7cf6f027aabeb9f0a944eb37be5ef61b7cd5ac12f65484998652cf8b5fb6d75"}, {0x0, 0x117, 0x1, "aaae8c4326b6ac68c728803a81e3e4550700a5122ab8d027ac9fb0071beb41174f2f1425ea2686803bdfaf785cf961c19d4cc0f5dd2d0466b8f4bb232eb2da6622364ade4e60cbaca5040332aa12ee79eee06fd5fa"}, {0x0, 0x10c, 0x1f, "5e186bc898837f6a680eff0a59990ea9bba3bf5694ef416626d0259ad5b7b0398e6c5234a4d8af439f3c0fbc9c5094b239a1a0496720c5049d485ddfe9465482afc5d34bd80953eea8037a04891e22ec5c49503b74959a13117d9fb92500801d763c4609372d6daf1b069526677db029915af9ca215809ed4392b047ae29ccde9d89e265f8ac59d5290cb893f354a6245e444bb244114f4b"}, {0x0, 0xff, 0x9, "95fb9c7e683530df9056815e2ac117caf728694753674ded845b32ac182efc7bb5d9693270306dcbb4754279295b52f7440f565085bfe5e3e0c2c11f96a474dbc9b6c7066c491ccbbfcd9c8090729b29d65d947b77821ed124746f65aef3e3e615af690a991533e05bc69543048fcd38d6859af27d7f7ed6cc9ba74231e6b5556867e3160318ca43f6f7e3c9adc84f80b1647c67737213269c738a1f56f5cacce54971bc4af842cd9602c735e3b9f082767d98cf995ac030b578e4340a80f57dcbee0c5e2f41e16aef8cf728771980a700"}, {0x0, 0x11f, 0x9, "8ef57c5d076adb276f9eaec49e6f860b7f22b65065fddeead29895a02c6a7a788aa6d4ce528549685ce8c1f2880cca5a9abfba5ccd37301d62131226813c85781052a326ca33aa5fb06dc44b4ac616ada9d8"}, {0x0, 0x114, 0x1fc1, "fbddb111b4252e2d7827ed184c9fe251781395024d29a9b61d471bb4e51c4ab51a844b27e04947525ef6524904fbe48c27da22dbc0c2d29163e280851bdefc4cfc70c079fdba5d8644f7a0a4f28401155d44111a6ad0bffe1a"}], 0xffffffffffffff2f, 0xde386d450b7539cf}, 0x1) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000008000-0x8)) 2018/02/04 12:03:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgrp(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000099d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f000045c000-0x8)) fcntl$setownex(r0, 0xf, &(0x7f0000ec5000)={0x0, r1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd1000-0xc)='/dev/rfkill\x00', 0x8800, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000deb000)={{0xa, 0x1, 0x1, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x1, 0x9, @empty, 0x2}, 0x6, [0x8, 0x9a4, 0x7f, 0x0, 0x3, 0x100, 0x6c34a4f, 0x9]}, 0x5c) r4 = syz_open_dev$usbmon(&(0x7f0000b1f000)='/dev/usbmon#\x00', 0x94a, 0x400000) renameat2(r3, &(0x7f0000758000-0x8)='./file0\x00', r4, &(0x7f0000121000)='./file0\x00', 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000042000-0x4)=0x0) capget(&(0x7f0000a5c000)={0x20071026, r5}, &(0x7f0000faf000-0x18)) 2018/02/04 12:03:53 executing program 5: mmap(&(0x7f0000000000/0xfb1000)=nil, 0xfb1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000016000)='dead\x00', &(0x7f0000422000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000017000-0xfa), 0xfffffdfd, 0x0) unshare(0x28060400) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f000092a000-0xa)='id_legacy\x00', &(0x7f0000fb1000)={0x73, 0x79, 0x7a}, &(0x7f0000faf000-0x3)='+}\x00', 0x0) clone(0x2e882000, &(0x7f000091c000-0xc1), &(0x7f0000b44000), &(0x7f0000b70000), &(0x7f0000e77000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, r0, 0x0) 2018/02/04 12:03:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) lstat(&(0x7f0000322000-0x8)='./file0\x00', &(0x7f000033f000)) pkey_alloc(0x0, 0x2) [ 59.858441] binder: 6081:6104 transaction failed 29189/-3, size 56-8 line 3127 [ 59.874369] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.874462] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/04 12:03:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007d1000-0x8), 0x8) pipe2(&(0x7f00004bb000)={0x0, 0x0}, 0x80000) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000574000)=@req={0x7fffffff, 0x277c, 0x8, 0x80000000}, 0x10) clock_gettime(0x0, &(0x7f0000e86000)={0x0, 0x0}) ppoll(&(0x7f0000e06000)=[{r0}], 0x1, &(0x7f0000b41000-0x10)={0x0, r2+10000000}, &(0x7f00008dc000-0x8), 0x8) unshare(0x400) r3 = signalfd(0xffffffffffffffff, &(0x7f0000e82000), 0x8) signalfd4(r3, &(0x7f0000c18000-0x8), 0x8, 0x0) 2018/02/04 12:03:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 1: mmap(&(0x7f0000000000/0x2c000)=nil, 0x2c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000d000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) mmap(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000022000-0x38)={0x0, 0x0, &(0x7f000002e000-0x10)=[{&(0x7f000002c000)="23c3481d91c86c021639c77e8452b6b30621ce9b6454b7e53def792d7ff8e5019b2e76e97dd0ca56ddf2c159d87c", 0x2e}], 0x1, &(0x7f000002d000)=[{0x0, 0x0, 0x7, "2c439145185d55b684d466d588cd8a34eab9011ca9865acd062038f3ea50cd7d1da002c76604cc926a59ea31dcc3f3c97612d36e776c02095aca1633a18f46e0d2eaba4773cf4cfd90486aaddd25a30c4d59ddf644e16a850964c7018cf0c328033d04c24be9eb3af31fc78254f4f5d97ef46a30"}, {0x0, 0x1, 0x5, "8c61881ea9b04f131f566ad89cc5a170b8cefa744de21f5f718a0fa5ea9d7eb1c581226ce5d612087d19e0d35eb4465fe0b1037a55a0d28895f279096bbc022487feea3d28db779d4cb74d618c93283c5dc01bba93ddeb2964f4cc2cc541c97f1585f3bdc72255057b4c10b98c2dd437d5e2a202790db06eb58fd9019446a4dc2b11fc6cea2fd151dc42fab24c7c4246346e0a57a7b245381d218aa59cd0b37549f7ace235334efb03bebc426d75"}, {0x0, 0x0, 0x9, "e6f2811b517b515a5b82f3c5ea51c3748456a19ed7f3ebedc98fff6c0f3fa5d55bbb1276b150260b39eb5bbf9b875e4f36a3064fd8ed0a8f75ad7df85c9c3edf4414cf5128e84fa51447180944f78f6cde5207f4ab8e129703bb563798dd0b9f1f3573988bbf49a9562952f571831f3331e220dfd89eeb7c6b01e0befba917a2bcfde42ede2958d02ee6f0331eab7988cfbcc66042e7746bc7aab1efb393e91623f8e10970773bef02786f8a9aa99949e0465488fd8214f34362556c963004f7514fac041e4a0fc30a1f4056a683547965f549ae4388656bea10738d4a74266e8fd6d9711e75949ad4"}, {0x0, 0x0, 0x7fffffff, "90c76a6c17ca00dcead2ae61cdf4e8bf5870e35f5c508d43f5895626c262937c8ab71c998d26cf0a6834feb0c99701af42e2744c79dd042cb0a084bd33b172964b1725aed8c31f45789ca407d691710d6f10e0f4e0422a9a995e63a5e311a73aaa131a2c6907118f1c176506d8e15c61bfc1c2b3274a9c292153247e6f6c3204e0f56c26cff9359f4e4f7a64159b6829449f9f786d2e2ae4fcff6b638ca838d84da6abadc424bf6f2888dcd027bd2fd7109e4622f82933cf9964e3fd367a63baa53619aca8d072e3d87dc8f8ba6a55fa729b00c6b8"}, {0x0, 0x11b, 0xb6e, "6fa4bc23baac4756dd0f576e5219008a8af2e8fbb0b626ebc4ba46243bfdb19ed1f8952b5b04fe7d9894be56009ad290e9829dbdbda40c28b4dd1a04a14c85451b343ef38fbd033ac4db513c9510d15cf9c49f233bf49806508d0c91b3fcbf25bb80e7e85cd362e6bdda543b17321cca9bf7cf6f027aabeb9f0a944eb37be5ef61b7cd5ac12f65484998652cf8b5fb6d75"}, {0x0, 0x117, 0x1, "aaae8c4326b6ac68c728803a81e3e4550700a5122ab8d027ac9fb0071beb41174f2f1425ea2686803bdfaf785cf961c19d4cc0f5dd2d0466b8f4bb232eb2da6622364ade4e60cbaca5040332aa12ee79eee06fd5fa"}, {0x0, 0x10c, 0x1f, "5e186bc898837f6a680eff0a59990ea9bba3bf5694ef416626d0259ad5b7b0398e6c5234a4d8af439f3c0fbc9c5094b239a1a0496720c5049d485ddfe9465482afc5d34bd80953eea8037a04891e22ec5c49503b74959a13117d9fb92500801d763c4609372d6daf1b069526677db029915af9ca215809ed4392b047ae29ccde9d89e265f8ac59d5290cb893f354a6245e444bb244114f4b"}, {0x0, 0xff, 0x9, "95fb9c7e683530df9056815e2ac117caf728694753674ded845b32ac182efc7bb5d9693270306dcbb4754279295b52f7440f565085bfe5e3e0c2c11f96a474dbc9b6c7066c491ccbbfcd9c8090729b29d65d947b77821ed124746f65aef3e3e615af690a991533e05bc69543048fcd38d6859af27d7f7ed6cc9ba74231e6b5556867e3160318ca43f6f7e3c9adc84f80b1647c67737213269c738a1f56f5cacce54971bc4af842cd9602c735e3b9f082767d98cf995ac030b578e4340a80f57dcbee0c5e2f41e16aef8cf728771980a700"}, {0x0, 0x11f, 0x9, "8ef57c5d076adb276f9eaec49e6f860b7f22b65065fddeead29895a02c6a7a788aa6d4ce528549685ce8c1f2880cca5a9abfba5ccd37301d62131226813c85781052a326ca33aa5fb06dc44b4ac616ada9d8"}, {0x0, 0x114, 0x1fc1, "fbddb111b4252e2d7827ed184c9fe251781395024d29a9b61d471bb4e51c4ab51a844b27e04947525ef6524904fbe48c27da22dbc0c2d29163e280851bdefc4cfc70c079fdba5d8644f7a0a4f28401155d44111a6ad0bffe1a"}], 0xffffffffffffff2f, 0xde386d450b7539cf}, 0x1) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000008000-0x8)) [ 59.965757] warn_alloc: 21 callbacks suppressed 2018/02/04 12:03:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000d79000)='/selinux/context\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00007ad000-0xb)='/dev/hwrng\x00', 0x42, 0x0) openat(r1, &(0x7f0000375000-0x8)='./file0\x00', 0x40000, 0x10) write(r0, &(0x7f00000f9000-0x2f), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f000098c000-0xb)='/dev/hwrng\x00', 0x800, 0x0) r2 = open(&(0x7f0000520000-0x8)='./file0\x00', 0x88000, 0x80) write$selinux_context(r2, &(0x7f0000bdd000-0x23)='system_u:object_r:mtrr_device_t:s0\x00', 0x23) 2018/02/04 12:03:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) munlockall() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ad4000)='/dev/rfkill\x00', 0x2000, 0x0) getpeername$netlink(r0, &(0x7f00006c3000), &(0x7f0000208000-0x4)=0xc) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000da1000)=0x5, 0x4) [ 59.965760] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 60.012956] CPU: 0 PID: 6140 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 60.020493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.029838] ffff8801ae79f938 ffffffff81d94b69 1ffff10035cf3f2a ffff8801ae77b000 2018/02/04 12:03:53 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)='./file0\x00', 0x121102, 0x41) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) syz_emit_ethernet(0xe, &(0x7f0000cb4000-0x12)={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@generic={0x8100}}}, &(0x7f0000269000)={0x0, 0x1, [0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x109000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x3, 0xffffffff, @empty, 0xffffffffffffffe0}, {0xa, 0x3, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x18a00}, 0x101, [0x1, 0x80, 0x3ff, 0x542c, 0x7f, 0x8, 0x4b, 0x81]}, 0x5c) 2018/02/04 12:03:53 executing program 6: r0 = syz_open_dev$binder(&(0x7f00002c7000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) r1 = dup(r0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000001000-0x4)=0x1) 2018/02/04 12:03:53 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)='./file0\x00', 0x121102, 0x41) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) syz_emit_ethernet(0xe, &(0x7f0000cb4000-0x12)={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@generic={0x8100}}}, &(0x7f0000269000)={0x0, 0x1, [0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x109000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x3, 0xffffffff, @empty, 0xffffffffffffffe0}, {0xa, 0x3, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x18a00}, 0x101, [0x1, 0x80, 0x3ff, 0x542c, 0x7f, 0x8, 0x4b, 0x81]}, 0x5c) 2018/02/04 12:03:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) [ 60.037902] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ae79fa48 [ 60.045950] ffffffff81451ca2 024000c2ae79f988 0000000041b58ab3 ffffffff84195215 [ 60.054155] Call Trace: [ 60.056729] [] dump_stack+0xc1/0x128 [ 60.062091] [] warn_alloc+0x212/0x240 [ 60.067539] [] ? zone_watermark_ok_safe+0x280/0x280 [ 60.074197] [] ? avc_has_perm+0xb0/0x4f0 [ 60.079900] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 60.086389] [] __vmalloc_node_range+0x3f5/0x5f0 [ 60.092698] [] ? check_preemption_disabled+0x3b/0x200 [ 60.094420] binder: 6189:6190 got transaction with invalid handle, 0 [ 60.094443] binder: 6189:6190 transaction failed 29201/-22, size 56-8 line 3219 [ 60.104620] binder: BINDER_SET_CONTEXT_MGR already set [ 60.104628] binder: 6189:6193 ioctl 40046207 0 returned -16 [ 60.108584] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.129752] [] ? task_has_security+0x130/0x270 [ 60.135956] [] vmalloc+0x5b/0x70 [ 60.140941] [] ? sel_write_load+0x130/0xfd0 [ 60.146883] [] sel_write_load+0x130/0xfd0 [ 60.152648] [] ? get_futex_key+0x1050/0x1050 [ 60.158679] [] ? sel_read_bool+0x250/0x250 [ 60.164537] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 60.171517] [] ? do_futex+0x3f8/0x15c0 [ 60.177022] [] ? sel_read_bool+0x250/0x250 [ 60.182877] [] __vfs_write+0x103/0x680 [ 60.188382] [] ? do_iter_readv_writev+0x400/0x400 [ 60.194843] [] ? __lock_is_held+0xa1/0xf0 [ 60.200611] [] ? __lock_is_held+0xa1/0xf0 [ 60.206379] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 60.213186] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 60.219737] [] ? __sb_start_write+0x14a/0x310 [ 60.225853] [] vfs_write+0x189/0x530 [ 60.231277] [] SyS_write+0xd9/0x1b0 [ 60.236524] [] ? SyS_read+0x1b0/0x1b0 [ 60.241946] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 60.248757] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 60.255307] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 60.267332] Mem-Info: [ 60.270849] active_anon:55272 inactive_anon:44 isolated_anon:0 [ 60.270849] active_file:3518 inactive_file:8432 isolated_file:0 [ 60.270849] unevictable:0 dirty:302 writeback:0 unstable:0 [ 60.270849] slab_reclaimable:5406 slab_unreclaimable:60361 [ 60.270849] mapped:24054 shmem:51 pagetables:668 bounce:0 [ 60.270849] free:1474567 free_pcp:471 free_cma:0 [ 60.304203] Node 0 active_anon:221088kB inactive_anon:176kB active_file:14072kB inactive_file:33728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96216kB dirty:1208kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 88064kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 60.336957] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 60.367270] lowmem_reserve[]: 0 2908 6410 6410 [ 60.372546] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 60.403399] lowmem_reserve[]: 0 0 3501 3501 [ 60.408313] Normal free:2906652kB min:36824kB low:46028kB high:55232kB active_anon:216860kB inactive_anon:176kB active_file:14072kB inactive_file:33732kB unevictable:0kB writepending:1216kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21624kB slab_unreclaimable:241496kB kernel_stack:5568kB pagetables:2528kB bounce:0kB free_pcp:1324kB local_pcp:664kB free_cma:0kB [ 60.442266] lowmem_reserve[]: 0 0 0 0 [ 60.446634] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 60.462006] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 60.479216] Normal: 1393*4kB (UME) 207*8kB (UME) 126*16kB (UME) 42*32kB (UME) 48*64kB (UME) 12*128kB (UME) 5*256kB (UME) 5*512kB (UME) 42*1024kB (ME) 5*2048kB (UME) 692*4096kB (M) = 2906716kB [ 60.499139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 60.507708] 12003 total pagecache pages [ 60.511804] 0 pages in swap cache [ 60.515232] Swap cache stats: add 0, delete 0, find 0/0 [ 60.520578] Free swap = 0kB [ 60.523573] Total swap = 0kB [ 60.526560] 1965969 pages RAM [ 60.529657] 0 pages HighMem/MovableOnly [ 60.533605] 320509 pages reserved [ 60.537065] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 60.547484] CPU: 0 PID: 6167 Comm: syz-executor0 Not tainted 4.9.80-gb30d2b5 #28 [ 60.554982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.564310] ffff8801ad057938 ffffffff81d94b69 1ffff10035a0af2a ffff8801ad048000 [ 60.572272] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ad057a48 [ 60.580247] ffffffff81451ca2 024000c2ad057988 0000000041b58ab3 ffffffff84195215 [ 60.588209] Call Trace: [ 60.590767] [] dump_stack+0xc1/0x128 [ 60.597487] [] warn_alloc+0x212/0x240 [ 60.602904] [] ? zone_watermark_ok_safe+0x280/0x280 [ 60.609536] [] ? avc_has_perm+0xb0/0x4f0 [ 60.615215] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 60.621674] [] __vmalloc_node_range+0x3f5/0x5f0 [ 60.627964] [] ? check_preemption_disabled+0x3b/0x200 [ 60.634773] [] ? task_has_security+0x130/0x270 [ 60.640971] [] vmalloc+0x5b/0x70 [ 60.645951] [] ? sel_write_load+0x130/0xfd0 [ 60.651889] [] sel_write_load+0x130/0xfd0 [ 60.657652] [] ? get_futex_key+0x1050/0x1050 [ 60.663676] [] ? sel_read_bool+0x250/0x250 [ 60.669535] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 60.676549] [] ? do_futex+0x3f8/0x15c0 [ 60.682054] [] ? sel_read_bool+0x250/0x250 [ 60.687909] [] __vfs_write+0x103/0x680 [ 60.693412] [] ? do_iter_readv_writev+0x400/0x400 [ 60.699872] [] ? __lock_is_held+0xa1/0xf0 [ 60.705636] [] ? __lock_is_held+0xa1/0xf0 [ 60.711401] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 60.718208] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 60.724756] [] ? __sb_start_write+0x14a/0x310 [ 60.730868] [] vfs_write+0x189/0x530 [ 60.736201] [] SyS_write+0xd9/0x1b0 [ 60.741446] [] ? SyS_read+0x1b0/0x1b0 [ 60.746862] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 60.753674] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 60.760222] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 60.767599] Mem-Info: [ 60.770058] active_anon:54208 inactive_anon:44 isolated_anon:0 [ 60.770058] active_file:3518 inactive_file:8433 isolated_file:0 [ 60.770058] unevictable:0 dirty:308 writeback:0 unstable:0 [ 60.770058] slab_reclaimable:5406 slab_unreclaimable:60382 [ 60.770058] mapped:24042 shmem:51 pagetables:639 bounce:0 [ 60.770058] free:1475685 free_pcp:486 free_cma:0 [ 60.803745] Node 0 active_anon:216832kB inactive_anon:176kB active_file:14072kB inactive_file:33732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96168kB dirty:1232kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 86016kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 60.833183] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 60.862824] lowmem_reserve[]: 0 2908 6410 6410 [ 60.867989] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 60.899012] lowmem_reserve[]: 0 0 3501 3501 [ 60.903931] Normal free:2906748kB min:36824kB low:46028kB high:55232kB active_anon:216832kB inactive_anon:176kB active_file:14072kB inactive_file:33732kB unevictable:0kB writepending:1236kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21624kB slab_unreclaimable:241528kB kernel_stack:5472kB pagetables:2556kB bounce:0kB free_pcp:1304kB local_pcp:656kB free_cma:0kB [ 60.938311] lowmem_reserve[]: 0 0 0 0 [ 60.942706] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 60.957941] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 60.975099] Normal: 1368*4kB (UME) 204*8kB (UME) 126*16kB (UME) 43*32kB (UME) 48*64kB (UME) 12*128kB (UME) 5*256kB (UME) 5*512kB (UME) 42*1024kB (ME) 5*2048kB (UME) 692*4096kB (M) = 2906624kB [ 60.994965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 61.004097] 12009 total pagecache pages [ 61.008044] 0 pages in swap cache [ 61.011497] Swap cache stats: add 0, delete 0, find 0/0 [ 61.016836] Free swap = 0kB [ 61.019857] Total swap = 0kB [ 61.022850] 1965969 pages RAM [ 61.025924] 0 pages HighMem/MovableOnly [ 61.029898] 320509 pages reserved [ 61.033378] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 61.043449] CPU: 1 PID: 6176 Comm: syz-executor0 Not tainted 4.9.80-gb30d2b5 #28 [ 61.051057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.060400] ffff8801ad09f938 ffffffff81d94b69 1ffff10035a13f2a ffff8801ad090000 [ 61.068364] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ad09fa48 [ 61.076327] ffffffff81451ca2 024000c2ad09f988 0000000041b58ab3 ffffffff84195215 [ 61.084292] Call Trace: [ 61.086848] [] dump_stack+0xc1/0x128 [ 61.092181] [] warn_alloc+0x212/0x240 [ 61.097598] [] ? zone_watermark_ok_safe+0x280/0x280 [ 61.104238] [] ? avc_has_perm+0xb0/0x4f0 [ 61.109919] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 61.116380] [] __vmalloc_node_range+0x3f5/0x5f0 [ 61.122667] [] ? check_preemption_disabled+0x3b/0x200 [ 61.129474] [] ? task_has_security+0x130/0x270 [ 61.135673] [] vmalloc+0x5b/0x70 [ 61.140656] [] ? sel_write_load+0x130/0xfd0 [ 61.146594] [] sel_write_load+0x130/0xfd0 [ 61.152367] [] ? get_futex_key+0x1050/0x1050 [ 61.158399] [] ? sel_read_bool+0x250/0x250 [ 61.164253] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 61.171234] [] ? do_futex+0x3f8/0x15c0 [ 61.176738] [] ? sel_read_bool+0x250/0x250 [ 61.182591] [] __vfs_write+0x103/0x680 [ 61.188094] [] ? do_iter_readv_writev+0x400/0x400 [ 61.194554] [] ? __lock_is_held+0xa1/0xf0 [ 61.200322] [] ? __lock_is_held+0xa1/0xf0 [ 61.206089] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 61.212895] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 61.219442] [] ? __sb_start_write+0x14a/0x310 [ 61.225564] [] vfs_write+0x189/0x530 [ 61.230897] [] SyS_write+0xd9/0x1b0 [ 61.236141] [] ? SyS_read+0x1b0/0x1b0 [ 61.241561] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 61.248370] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 61.254918] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 61.261892] Mem-Info: [ 61.264308] active_anon:54208 inactive_anon:44 isolated_anon:0 [ 61.264308] active_file:3518 inactive_file:8433 isolated_file:0 [ 61.264308] unevictable:0 dirty:314 writeback:0 unstable:0 [ 61.264308] slab_reclaimable:5407 slab_unreclaimable:60383 [ 61.264308] mapped:24042 shmem:51 pagetables:639 bounce:0 [ 61.264308] free:1475662 free_pcp:508 free_cma:0 [ 61.297700] Node 0 active_anon:216832kB inactive_anon:176kB active_file:14072kB inactive_file:33732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96168kB dirty:1256kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 86016kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 61.327221] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.356546] lowmem_reserve[]: 0 2908 6410 6410 [ 61.361721] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 61.392570] lowmem_reserve[]: 0 0 3501 3501 [ 61.397459] Normal free:2906656kB min:36824kB low:46028kB high:55232kB active_anon:216832kB inactive_anon:176kB active_file:14072kB inactive_file:33732kB unevictable:0kB writepending:1344kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21628kB slab_unreclaimable:241532kB kernel_stack:5440kB pagetables:2556kB bounce:0kB free_pcp:1388kB local_pcp:760kB free_cma:0kB [ 61.431371] lowmem_reserve[]: 0 0 0 0 [ 61.435724] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 61.450998] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 61.468143] Normal: 1368*4kB (UME) 204*8kB (UME) 126*16kB (UME) 44*32kB (UME) 48*64kB (UME) 12*128kB (UME) 5*256kB (UME) 5*512kB (UME) 42*1024kB (ME) 5*2048kB (UME) 692*4096kB (M) = 2906656kB [ 61.488029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 61.496590] 12015 total pagecache pages [ 61.500663] 0 pages in swap cache [ 61.504087] Swap cache stats: add 0, delete 0, find 0/0 [ 61.509416] Free swap = 0kB [ 61.512424] Total swap = 0kB [ 61.515416] 1965969 pages RAM [ 61.518487] 0 pages HighMem/MovableOnly [ 61.522450] 320509 pages reserved [ 61.525919] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 61.536302] CPU: 0 PID: 6196 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 61.543809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.553133] ffff8801ae70f938 ffffffff81d94b69 1ffff10035ce1f2a ffff8801ba4b8000 [ 61.561096] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ae70fa48 [ 61.569055] ffffffff81451ca2 024000c2ae70f988 0000000041b58ab3 ffffffff84195215 [ 61.577032] Call Trace: [ 61.579601] [] dump_stack+0xc1/0x128 [ 61.584938] [] warn_alloc+0x212/0x240 [ 61.590357] [] ? zone_watermark_ok_safe+0x280/0x280 [ 61.596988] [] ? avc_has_perm+0xb0/0x4f0 [ 61.602668] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 61.609127] [] __vmalloc_node_range+0x3f5/0x5f0 [ 61.615416] [] ? check_preemption_disabled+0x3b/0x200 [ 61.622225] [] ? task_has_security+0x130/0x270 [ 61.628425] [] vmalloc+0x5b/0x70 [ 61.633408] [] ? sel_write_load+0x130/0xfd0 [ 61.639346] [] sel_write_load+0x130/0xfd0 [ 61.645204] [] ? __free_pages_ok+0xbe5/0x16c0 [ 61.651317] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 61.658122] [] ? sel_read_bool+0x250/0x250 [ 61.663981] [] ? __free_pages+0x4f/0x80 [ 61.669572] [] ? put_task_stack+0x149/0x2d0 [ 61.675522] [] ? sel_read_bool+0x250/0x250 [ 61.681375] [] __vfs_write+0x103/0x680 [ 61.686881] [] ? do_iter_readv_writev+0x400/0x400 [ 61.693341] [] ? __lock_is_held+0xa1/0xf0 [ 61.699111] [] ? __lock_is_held+0xa1/0xf0 [ 61.704877] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 61.711684] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 61.718229] [] ? __sb_start_write+0x14a/0x310 [ 61.724343] [] vfs_write+0x189/0x530 [ 61.729674] [] SyS_write+0xd9/0x1b0 [ 61.734916] [] ? SyS_read+0x1b0/0x1b0 [ 61.740334] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 61.747149] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 61.753698] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 61.761092] Mem-Info: [ 61.763496] active_anon:50603 inactive_anon:44 isolated_anon:0 [ 61.763496] active_file:3518 inactive_file:8433 isolated_file:0 [ 61.763496] unevictable:0 dirty:338 writeback:0 unstable:0 [ 61.763496] slab_reclaimable:5407 slab_unreclaimable:60383 [ 61.763496] mapped:24042 shmem:51 pagetables:639 bounce:0 [ 61.763496] free:1479308 free_pcp:494 free_cma:0 [ 61.796745] Node 0 active_anon:202412kB inactive_anon:176kB active_file:14072kB inactive_file:33732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96168kB dirty:1352kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 86016kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 61.826535] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.855853] lowmem_reserve[]: 0 2908 6410 6410 [ 61.861062] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 61.892479] lowmem_reserve[]: 0 0 3501 3501 [ 61.897367] Normal free:2921240kB min:36824kB low:46028kB high:55232kB active_anon:202412kB inactive_anon:176kB active_file:14072kB inactive_file:33732kB unevictable:0kB writepending:1352kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21628kB slab_unreclaimable:241532kB kernel_stack:5408kB pagetables:2556kB bounce:0kB free_pcp:1336kB local_pcp:620kB free_cma:0kB [ 61.931298] lowmem_reserve[]: 0 0 0 0 [ 61.935665] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 61.951258] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 61.968427] Normal: 1410*4kB (UME) 213*8kB (UME) 127*16kB (UME) 45*32kB (UME) 48*64kB (UME) 12*128kB (UME) 5*256kB (UME) 5*512kB (UME) 42*1024kB (ME) 4*2048kB (UME) 696*4096kB (M) = 2921280kB [ 61.988318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 61.997501] 12017 total pagecache pages 2018/02/04 12:03:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000058000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000972000)=0x5) recvmsg(r0, &(0x7f0000ded000)={&(0x7f000025a000)=@in={0x0, 0xffffffffffffffff, @dev}, 0x10, &(0x7f000025e000)=[], 0x0, &(0x7f0000ea5000-0x1000)=""/4096, 0x1000}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r1, 0x2) 2018/02/04 12:03:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000092c000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000dd7000-0x9)='loginuid\x00') read$eventfd(r1, &(0x7f000028b000), 0x8) write(r1, &(0x7f0000d44000-0xba), 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1f) 2018/02/04 12:03:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_free(r1) 2018/02/04 12:03:55 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000615000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @mcast2}}}, &(0x7f0000d84000-0x4)=0x3a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$unix(r0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000d18000-0x4)={0x0, []}, &(0x7f0000c16000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:55 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lookup_dcookie(0x6, &(0x7f0000004000)=""/77, 0x4d) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000002000-0x73)="390000001300090468fe0000810000000700004003000000450001070000001419001a000400020007000012020000080001010c00f41ee400", 0x39}], 0x1) 2018/02/04 12:03:55 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000)='\x00', 0x1) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x200080, 0x160) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000001000-0x50)={@generic="dfd025038d5c68de68c552d492c72d6a", @ifru_addrs=@in={0x2, 0x0, @multicast1=0xe0000001}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f000045f000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000037000-0x10)=@ethtool_pauseparam={0x0, 0xfffffffffffffffd}}) r2 = syz_open_dev$tun(&(0x7f0000fce000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00004fc000-0x4)) 2018/02/04 12:03:55 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7f) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00001ce000-0xc)='/dev/autofs\x00', 0x311000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0xfffe) [ 62.001589] 0 pages in swap cache [ 62.005010] Swap cache stats: add 0, delete 0, find 0/0 [ 62.010357] Free swap = 0kB [ 62.013349] Total swap = 0kB [ 62.016332] 1965969 pages RAM [ 62.019402] 0 pages HighMem/MovableOnly [ 62.023830] 320509 pages reserved [ 62.037961] syz-executor3: [ 62.040147] binder: 6207:6209 got transaction with invalid handle, 0 [ 62.040173] binder: 6207:6209 transaction failed 29201/-22, size 56-8 line 3219 [ 62.040269] binder: 6207:6209 ioctl 40046205 7f returned -22 [ 62.044454] binder_alloc: binder_alloc_mmap_handler: 6207 20000000-20002000 already mapped failed -16 [ 62.052422] binder: BINDER_SET_CONTEXT_MGR already set [ 62.052430] binder: 6207:6209 ioctl 40046207 0 returned -16 [ 62.052482] binder_alloc: 6207: binder_alloc_buf, no vma [ 62.052501] binder: 6207:6215 transaction failed 29189/-3, size 56-8 line 3127 [ 62.060712] binder: 6207:6209 ioctl 40046205 7f returned -22 [ 62.070147] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.070168] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.120183] vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 62.128727] CPU: 1 PID: 6200 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 62.136228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.145640] ffff8801b227f938 ffffffff81d94b69 1ffff1003644ff2a ffff8801ba4bb000 [ 62.153620] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b227fa48 [ 62.161595] ffffffff81451ca2 024000c2b227f988 0000000041b58ab3 ffffffff84195215 [ 62.169572] Call Trace: [ 62.172132] [] dump_stack+0xc1/0x128 [ 62.177465] [] warn_alloc+0x212/0x240 [ 62.182884] [] ? zone_watermark_ok_safe+0x280/0x280 [ 62.189528] [] ? avc_has_perm+0xb0/0x4f0 [ 62.195208] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 62.201667] [] __vmalloc_node_range+0x3f5/0x5f0 [ 62.207957] [] ? check_preemption_disabled+0x3b/0x200 [ 62.214765] [] ? task_has_security+0x130/0x270 [ 62.220972] [] vmalloc+0x5b/0x70 [ 62.225966] [] ? sel_write_load+0x130/0xfd0 [ 62.231916] [] sel_write_load+0x130/0xfd0 [ 62.237692] [] ? get_futex_key+0x1050/0x1050 [ 62.243729] [] ? sel_read_bool+0x250/0x250 [ 62.249607] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 62.256599] [] ? do_futex+0x3f8/0x15c0 [ 62.262111] [] ? sel_read_bool+0x250/0x250 [ 62.267968] [] __vfs_write+0x103/0x680 [ 62.273481] [] ? do_iter_readv_writev+0x400/0x400 [ 62.279949] [] ? __lock_is_held+0xa1/0xf0 [ 62.285721] [] ? __lock_is_held+0xa1/0xf0 [ 62.291501] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 62.298312] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 62.304864] [] ? __sb_start_write+0x14a/0x310 [ 62.310979] [] vfs_write+0x189/0x530 [ 62.316313] [] SyS_write+0xd9/0x1b0 [ 62.321563] [] ? SyS_read+0x1b0/0x1b0 [ 62.326988] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 62.333801] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 62.340361] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 62.347244] Mem-Info: [ 62.349680] active_anon:50623 inactive_anon:44 isolated_anon:0 [ 62.349680] active_file:3520 inactive_file:8452 isolated_file:0 [ 62.349680] unevictable:0 dirty:347 writeback:0 unstable:0 [ 62.349680] slab_reclaimable:5411 slab_unreclaimable:60024 [ 62.349680] mapped:24042 shmem:51 pagetables:632 bounce:0 [ 62.349680] free:1479569 free_pcp:518 free_cma:0 [ 62.382962] Node 0 active_anon:202492kB inactive_anon:176kB active_file:14080kB inactive_file:33808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96168kB dirty:1388kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 62.412398] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 62.441729] lowmem_reserve[]: 0 2908 6410 6410 [ 62.446888] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 62.477749] lowmem_reserve[]: 0 0 3501 3501 [ 62.482676] Normal free:2922284kB min:36824kB low:46028kB high:55232kB active_anon:202492kB inactive_anon:176kB active_file:14080kB inactive_file:33808kB unevictable:0kB writepending:1388kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21644kB slab_unreclaimable:240096kB kernel_stack:5504kB pagetables:2528kB bounce:0kB free_pcp:1436kB local_pcp:740kB free_cma:0kB [ 62.516623] lowmem_reserve[]: 0 0 0 0 [ 62.520989] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 62.536275] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 62.553495] Normal: 1353*4kB (UME) 225*8kB (UME) 130*16kB (UME) 85*32kB (UME) 47*64kB (ME) 11*128kB (ME) 5*256kB (UME) 5*512kB (UME) 42*1024kB (ME) 2*2048kB (UE) 697*4096kB (M) = 2922284kB [ 62.573120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 62.581842] 12026 total pagecache pages [ 62.585795] 0 pages in swap cache [ 62.589215] Swap cache stats: add 0, delete 0, find 0/0 [ 62.594618] Free swap = 0kB [ 62.597614] Total swap = 0kB [ 62.600637] 1965969 pages RAM [ 62.603716] 0 pages HighMem/MovableOnly [ 62.607655] 320509 pages reserved [ 62.611133] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 62.621407] CPU: 0 PID: 6213 Comm: syz-executor0 Not tainted 4.9.80-gb30d2b5 #28 [ 62.628911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.638236] ffff8801ad137938 ffffffff81d94b69 1ffff10035a26f2a ffff8801ad128000 [ 62.646230] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ad137a48 [ 62.654193] ffffffff81451ca2 024000c2ad137988 0000000041b58ab3 ffffffff84195215 [ 62.662165] Call Trace: [ 62.664726] [] dump_stack+0xc1/0x128 [ 62.670061] [] warn_alloc+0x212/0x240 [ 62.675480] [] ? zone_watermark_ok_safe+0x280/0x280 [ 62.682144] [] ? avc_has_perm+0xb0/0x4f0 [ 62.687826] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 62.694289] [] __vmalloc_node_range+0x3f5/0x5f0 [ 62.700599] [] ? check_preemption_disabled+0x3b/0x200 [ 62.707405] [] ? task_has_security+0x130/0x270 [ 62.713607] [] vmalloc+0x5b/0x70 [ 62.718591] [] ? sel_write_load+0x130/0xfd0 [ 62.724533] [] sel_write_load+0x130/0xfd0 [ 62.730301] [] ? get_futex_key+0x1050/0x1050 [ 62.736326] [] ? sel_read_bool+0x250/0x250 [ 62.742180] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 62.749163] [] ? do_futex+0x3f8/0x15c0 [ 62.754674] [] ? sel_read_bool+0x250/0x250 [ 62.760530] [] __vfs_write+0x103/0x680 [ 62.766035] [] ? do_iter_readv_writev+0x400/0x400 [ 62.772502] [] ? __lock_is_held+0xa1/0xf0 [ 62.778267] [] ? __lock_is_held+0xa1/0xf0 [ 62.784036] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 62.790850] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 62.797398] [] ? __sb_start_write+0x14a/0x310 [ 62.803512] [] vfs_write+0x189/0x530 [ 62.808852] [] SyS_write+0xd9/0x1b0 [ 62.814186] [] ? SyS_read+0x1b0/0x1b0 [ 62.819605] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 62.826420] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 62.832977] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 62.840408] Mem-Info: [ 62.842816] active_anon:50623 inactive_anon:44 isolated_anon:0 [ 62.842816] active_file:3520 inactive_file:8452 isolated_file:0 [ 62.842816] unevictable:0 dirty:350 writeback:0 unstable:0 [ 62.842816] slab_reclaimable:5411 slab_unreclaimable:60024 [ 62.842816] mapped:24042 shmem:51 pagetables:632 bounce:0 [ 62.842816] free:1479577 free_pcp:513 free_cma:0 [ 62.876063] Node 0 active_anon:202492kB inactive_anon:176kB active_file:14080kB inactive_file:33808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96168kB dirty:1400kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 62.905499] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 62.934819] lowmem_reserve[]: 0 2908 6410 6410 [ 62.940006] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 62.971431] lowmem_reserve[]: 0 0 3501 3501 [ 62.976319] Normal free:2922316kB min:36824kB low:46028kB high:55232kB active_anon:202492kB inactive_anon:176kB active_file:14080kB inactive_file:33808kB unevictable:0kB writepending:1404kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21644kB slab_unreclaimable:240096kB kernel_stack:5472kB pagetables:2528kB bounce:0kB free_pcp:1412kB local_pcp:688kB free_cma:0kB [ 63.010236] lowmem_reserve[]: 0 0 0 0 [ 63.014592] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 63.029839] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 63.047011] Normal: 1353*4kB (UME) 225*8kB (UME) 130*16kB (UME) 86*32kB (UME) 47*64kB (ME) 11*128kB (ME) 5*256kB (UME) 5*512kB (UME) 42*1024kB (ME) 2*2048kB (UE) 697*4096kB (M) = 2922316kB [ 63.066629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 63.075191] 12030 total pagecache pages [ 63.079140] 0 pages in swap cache [ 63.082749] Swap cache stats: add 0, delete 0, find 0/0 [ 63.088088] Free swap = 0kB [ 63.091097] Total swap = 0kB [ 63.094092] 1965969 pages RAM [ 63.097162] 0 pages HighMem/MovableOnly [ 63.101559] 320509 pages reserved [ 63.105028] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 63.115108] CPU: 0 PID: 6222 Comm: syz-executor0 Not tainted 4.9.80-gb30d2b5 #28 [ 63.122606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.131928] ffff8801ae76f938 ffffffff81d94b69 1ffff10035cedf2a ffff8801ad089800 [ 63.139898] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ae76fa48 [ 63.147857] ffffffff81451ca2 024000c2ae76f988 0000000041b58ab3 ffffffff84195215 [ 63.155816] Call Trace: [ 63.158373] [] dump_stack+0xc1/0x128 [ 63.163706] [] warn_alloc+0x212/0x240 [ 63.169127] [] ? zone_watermark_ok_safe+0x280/0x280 [ 63.175763] [] ? avc_has_perm+0xb0/0x4f0 [ 63.181441] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 63.187909] [] __vmalloc_node_range+0x3f5/0x5f0 [ 63.194198] [] ? check_preemption_disabled+0x3b/0x200 [ 63.201004] [] ? task_has_security+0x130/0x270 [ 63.207202] [] vmalloc+0x5b/0x70 [ 63.212188] [] ? sel_write_load+0x130/0xfd0 [ 63.218127] [] sel_write_load+0x130/0xfd0 [ 63.223893] [] ? check_preemption_disabled+0x3b/0x200 [ 63.230705] [] ? sel_read_bool+0x250/0x250 [ 63.236560] [] ? mark_held_locks+0xaf/0x100 [ 63.242498] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 63.248790] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 63.255602] [] ? sel_read_bool+0x250/0x250 [ 63.261457] [] __vfs_write+0x103/0x680 [ 63.266963] [] ? do_iter_readv_writev+0x400/0x400 [ 63.273425] [] ? __lock_is_held+0xa1/0xf0 [ 63.279195] [] ? __lock_is_held+0xa1/0xf0 [ 63.284960] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.291768] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 63.298315] [] ? __sb_start_write+0x14a/0x310 [ 63.304429] [] vfs_write+0x189/0x530 [ 63.309768] [] SyS_write+0xd9/0x1b0 [ 63.315021] [] ? SyS_read+0x1b0/0x1b0 [ 63.320439] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 63.327248] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 63.333803] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 63.341563] Mem-Info: [ 63.343964] active_anon:50623 inactive_anon:44 isolated_anon:0 [ 63.343964] active_file:3520 inactive_file:8452 isolated_file:0 [ 63.343964] unevictable:0 dirty:354 writeback:0 unstable:0 [ 63.343964] slab_reclaimable:5411 slab_unreclaimable:60024 [ 63.343964] mapped:24042 shmem:51 pagetables:632 bounce:0 [ 63.343964] free:1479585 free_pcp:507 free_cma:0 [ 63.377206] Node 0 active_anon:202492kB inactive_anon:176kB active_file:14080kB inactive_file:33808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96168kB dirty:1416kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 63.406648] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 63.435995] lowmem_reserve[]: 0 2908 6410 6410 [ 63.441176] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 63.472630] lowmem_reserve[]: 0 0 3501 3501 [ 63.477515] Normal free:2922348kB min:36824kB low:46028kB high:55232kB active_anon:202492kB inactive_anon:176kB active_file:14080kB inactive_file:33808kB unevictable:0kB writepending:1416kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21644kB slab_unreclaimable:240096kB kernel_stack:5440kB pagetables:2528kB bounce:0kB free_pcp:1384kB local_pcp:688kB free_cma:0kB [ 63.511431] lowmem_reserve[]: 0 0 0 0 [ 63.515820] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 63.531130] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 63.548279] Normal: 1353*4kB (UME) 225*8kB (UME) 130*16kB (UME) 87*32kB (UME) 47*64kB (ME) 11*128kB (ME) 5*256kB (UME) 5*512kB (UME) 42*1024kB (ME) 2*2048kB (UE) 697*4096kB (M) = 2922348kB [ 63.567874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 63.576436] 12033 total pagecache pages [ 63.580511] 0 pages in swap cache [ 63.583933] Swap cache stats: add 0, delete 0, find 0/0 [ 63.589258] Free swap = 0kB [ 63.592259] Total swap = 0kB [ 63.595250] 1965969 pages RAM [ 63.598319] 0 pages HighMem/MovableOnly [ 63.602714] 320509 pages reserved [ 63.606187] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 63.616316] CPU: 1 PID: 6221 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 63.623815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.633138] ffff8801ae6cf938 ffffffff81d94b69 1ffff10035cd9f2a ffff8801ad088000 [ 63.641120] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ae6cfa48 [ 63.649085] ffffffff81451ca2 024000c2ae6cf988 0000000041b58ab3 ffffffff84195215 [ 63.657148] Call Trace: [ 63.659708] [] dump_stack+0xc1/0x128 [ 63.665042] [] warn_alloc+0x212/0x240 [ 63.670460] [] ? zone_watermark_ok_safe+0x280/0x280 [ 63.677095] [] ? avc_has_perm+0xb0/0x4f0 [ 63.682774] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 63.689242] [] __vmalloc_node_range+0x3f5/0x5f0 [ 63.695536] [] ? check_preemption_disabled+0x3b/0x200 [ 63.702346] [] ? task_has_security+0x130/0x270 [ 63.708546] [] vmalloc+0x5b/0x70 [ 63.713532] [] ? sel_write_load+0x130/0xfd0 [ 63.719469] [] sel_write_load+0x130/0xfd0 [ 63.725236] [] ? check_preemption_disabled+0x3b/0x200 [ 63.732045] [] ? sel_read_bool+0x250/0x250 [ 63.737901] [] ? mark_held_locks+0xaf/0x100 [ 63.743861] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 63.750157] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 63.756967] [] ? sel_read_bool+0x250/0x250 [ 63.762821] [] __vfs_write+0x103/0x680 [ 63.768326] [] ? do_iter_readv_writev+0x400/0x400 [ 63.774873] [] ? __lock_is_held+0xa1/0xf0 [ 63.780642] [] ? __lock_is_held+0xa1/0xf0 [ 63.786408] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.793213] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 63.799763] [] ? __sb_start_write+0x14a/0x310 [ 63.805883] [] vfs_write+0x189/0x530 [ 63.811218] [] SyS_write+0xd9/0x1b0 [ 63.816469] [] ? SyS_read+0x1b0/0x1b0 [ 63.821892] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 63.829464] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 63.836016] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 63.843070] Mem-Info: [ 63.845485] active_anon:50085 inactive_anon:44 isolated_anon:0 [ 63.845485] active_file:3520 inactive_file:8458 isolated_file:0 [ 63.845485] unevictable:0 dirty:357 writeback:0 unstable:0 [ 63.845485] slab_reclaimable:5411 slab_unreclaimable:60024 [ 63.845485] mapped:24033 shmem:51 pagetables:619 bounce:0 [ 63.845485] free:1480169 free_pcp:487 free_cma:0 [ 63.878775] Node 0 active_anon:200340kB inactive_anon:176kB active_file:14080kB inactive_file:33832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96132kB dirty:1428kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 69632kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 63.908202] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 63.937521] lowmem_reserve[]: 0 2908 6410 6410 [ 63.942696] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 63.973561] lowmem_reserve[]: 0 0 3501 3501 [ 63.978451] Normal free:2924684kB min:36824kB low:46028kB high:55232kB active_anon:200340kB inactive_anon:176kB active_file:14080kB inactive_file:33832kB unevictable:0kB writepending:1436kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21644kB slab_unreclaimable:240096kB kernel_stack:5408kB pagetables:2476kB bounce:0kB free_pcp:1304kB local_pcp:696kB free_cma:0kB [ 64.012386] lowmem_reserve[]: 0 0 0 0 [ 64.016764] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 64.032052] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB 2018/02/04 12:03:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:57 executing program 5: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b5f000-0x10)={0x2, &(0x7f0000fc0000)=[{0x28}, {0x80000006}]}, 0x10) sendto(r0, &(0x7f000002b000-0xd8), 0xfd09, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000171000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000fc1000)={0x4, 0x0, 0x2}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000fc1000)={r3, 0x5}) 2018/02/04 12:03:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$mice(&(0x7f0000fcd000)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/251, &(0x7f0000001000-0x4)=0xfb) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001000-0x14)={0x0, 0x8, 0xf7, 0x8400000000000000, 0x0, 0x100000000}, &(0x7f000001d000)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001000-0x98)={r2, @in6={{0xa, 0x0, 0x6, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x1}}, 0x3f, 0x47bf}, 0x98) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000001000)=""/8) r3 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0xffff, @mcast2={0xff, 0x2, [], 0x1}, 0x5e}}}, &(0x7f0000001000-0x4)=0x8c) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0xa972, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000001000-0x8)={0x0, 0x100}, &(0x7f0000a94000-0x4)=0x8) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xffffffff80000000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001000-0x8)={r5, 0xffffffffffffffff}, &(0x7f0000a97000-0x4)=0x8) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000a94000)=0x3, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/dev/pktcdvd/control\x00', 0x0, 0x0) 2018/02/04 12:03:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000db1000)={&(0x7f0000dff000-0xc)={0x10}, 0xfcfa, &(0x7f000009b000)={&(0x7f0000685000)=@bridge_newneigh={0x1c, 0x1c, 0x511, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x1a}, 0x1}, 0x0) 2018/02/04 12:03:57 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00001de000-0x15)='/proc/self/net/pfkey\x00', 0x280901, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000130000-0x4)=0x1, 0x4) setpriority(0x1, r0, 0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000eea000)='/selinux/user\x00', 0x2, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r2, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:57 executing program 4: unshare(0x8044000) clone(0x0, &(0x7f000065a000-0x2), &(0x7f0000f5d000), &(0x7f0000555000), &(0x7f00007c4000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0x8, 0x80) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xdf60, 0xfffffffffffffffc}, 0x8) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000e15000)=""/151) 2018/02/04 12:03:57 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) times(&(0x7f0000251000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000f77000)='/dev/hwrng\x00', 0x40, 0x0) r1 = mmap$binder(&(0x7f0000068000/0x2000)=nil, 0x2000, 0x4, 0x810, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000bb1000-0x18)={r1}) fcntl$getownex(r0, 0x10, &(0x7f0000dde000-0x8)) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000aee000-0xe)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f0000db8000)="52c9f3d37756bb818d98c13d65d7b4c7c04d93ffda5cbb0ebc29ba62fa000098837a73d4cf0b41787ff0b4efb579180867f9f545876e8f3cae8a255a840d2d64d94d9ef6933dfe31f4dcf44e9c0c72d30c08b3f137876810a44ba761ce3e09ceaa", 0xffffffffffffff45) 2018/02/04 12:03:57 executing program 6: socketpair$ax25(0x3, 0x2, 0xcf, &(0x7f00003f5000)={0x0, 0x0}) r1 = accept(r0, &(0x7f0000f59000-0x10)=@nfc, &(0x7f0000094000-0x4)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000c95000-0x40)={&(0x7f0000011000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000098000-0xc)=[0x0, 0x0, 0x0], &(0x7f0000e53000-0x20)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00009e7000)=[0x0], 0x4, 0x3, 0x8, 0x1}) r4 = mmap$binder(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00001ee000-0x5c)={{0xa, 0x3, 0x3f, @empty, 0x8}, {0xa, 0x2, 0x8, @dev={0xfe, 0x80, [], 0x0, 0x13}, 0x2}, 0x5, [0x100, 0x1, 0x40, 0x1, 0x6, 0xd4b, 0xebe, 0x5]}, 0x5c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85, 0x0, r4}], &(0x7f0000006000)=[]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) setsockopt$inet_dccp_int(r1, 0x21, 0x7, &(0x7f0000608000-0x4)=0x6, 0x4) [ 64.049236] Normal: 1399*4kB (UME) 232*8kB (UME) 131*16kB (UME) 88*32kB (UME) 47*64kB (ME) 11*128kB (ME) 5*256kB (UME) 5*512kB (UME) 42*1024kB (ME) 3*2048kB (UME) 697*4096kB (M) = 2924684kB [ 64.068950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 64.077514] 12039 total pagecache pages [ 64.081602] 0 pages in swap cache [ 64.085024] Swap cache stats: add 0, delete 0, find 0/0 [ 64.090377] Free swap = 0kB [ 64.093371] Total swap = 0kB [ 64.096358] 1965969 pages RAM [ 64.099435] 0 pages HighMem/MovableOnly [ 64.103418] 320509 pages reserved 2018/02/04 12:03:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x5, &(0x7f0000d3b000-0x10)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) socketpair$ax25(0x3, 0x3, 0xfd, &(0x7f000079d000-0x8)) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f0000a96000), &(0x7f0000048000)=0x1, 0x0) 2018/02/04 12:03:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) restart_syscall() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00004d1000-0x4)=0x2, 0x4) r1 = dup3(r0, r0, 0x80000) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f000058f000-0x8)) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000b00000)={0x7, &(0x7f00005ae000-0x1c)=[{}, {}, {}, {}, {}, {}, {}]}) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f00002e0000-0xc)={0x10}, 0xffffffffffffff7b, &(0x7f0000fd1000)={&(0x7f0000a23000-0x225c)={0x20, 0x7, 0xa, 0xfffffffffffffffd, 0x6, 0xffffffffffffffff, {}, [@typed={0xc, 0x53, @u32}]}, 0x20}, 0x1}, 0x0) 2018/02/04 12:03:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000405000-0x15)='attr/prev\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000c49000-0x4)=0x7ff, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000b90000-0x6)={0x0, 0x8}, &(0x7f00006b9000)=0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000d68000)={r1, 0x8bf3, 0x6}, &(0x7f0000537000-0x4)=0x8) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000c2d000-0x8)={@empty, @local}, &(0x7f0000717000)=0x8) setrlimit(0x1, &(0x7f0000011000)) ftruncate(r0, 0x3d) 2018/02/04 12:03:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000d75000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000b07000-0x8)=0x2, 0x8) 2018/02/04 12:03:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000bb2000)='/selinux/load\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00002aa000)='/dev/sg#\x00', 0x7, 0x4000) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f000056d000)={0x0, 0x4}) write(r0, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:03:57 executing program 7: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, @local}, &(0x7f0000e74000)=0x1c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x2000}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001000-0xa4)=""/164) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000bef000-0x10)={&(0x7f000063e000-0x1d4)=@newsa={0x13c, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast1=0xe0000001, @in=@rand_addr}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x3c}, @in6=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_aead={0x4c, 0x12, {{'ccm_base(pcbc(aes-aesni),sm3-generic)\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/02/04 12:03:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) [ 64.112758] syz-executor3: [ 64.141624] binder_alloc: binder_alloc_mmap_handler: 6232 20529000-2052b000 already mapped failed -16 2018/02/04 12:03:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000978000)='ppp1\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f000032f000)='/selinux/context\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7fff) ftruncate(r0, 0x10002) write$selinux_load(r0, &(0x7f0000c10000-0x1a)={0xf97cff8c, 0x8, 'SE Linux', "af1c186d1ee9545eaaa5"}, 0x1a) write(r0, &(0x7f00007fc000-0x3)='H', 0x1) sendfile(r0, r0, &(0x7f0000470000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) quotactl(0x0, &(0x7f0000001000)='./file0\x00', 0x0, &(0x7f0000001000-0x85)) [ 64.161212] audit: type=1400 audit(1517745837.848:23): avc: denied { setopt } for pid=6257 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/04 12:03:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fchdir(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00007a4000)='/dev/pktcdvd/control\x00', 0x10040, 0x0) connect$vsock_stream(r1, &(0x7f00002cb000)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) [ 64.161530] audit: type=1400 audit(1517745837.848:24): avc: denied { net_broadcast } for pid=6257 comm="syz-executor7" capability=11 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 64.180997] binder_alloc: binder_alloc_mmap_handler: 6232 20000000-20002000 already mapped failed -16 [ 64.182266] binder: BINDER_SET_CONTEXT_MGR already set [ 64.182275] binder: 6232:6235 ioctl 40046207 0 returned -16 [ 64.185685] binder_alloc: 6232: binder_alloc_buf, no vma [ 64.185703] binder: 6232:6269 transaction failed 29189/-3, size 56-0 line 3127 [ 64.190436] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.190543] binder: release 6232:6235 transaction 107 out, still active [ 64.190547] binder: undelivered TRANSACTION_COMPLETE [ 64.190563] binder: send failed reply for transaction 107, target dead [ 64.198883] binder: 6277:6280 got transaction with invalid handle, 0 [ 64.198908] binder: 6277:6280 transaction failed 29201/-22, size 56-8 line 3219 [ 64.202029] binder_alloc: binder_alloc_mmap_handler: 6277 20000000-20002000 already mapped failed -16 [ 64.202076] binder: BINDER_SET_CONTEXT_MGR already set [ 64.202081] binder: 6277:6280 ioctl 40046207 0 returned -16 [ 64.202668] binder_alloc: 6277: binder_alloc_buf, no vma [ 64.202683] binder: 6277:6280 transaction failed 29189/-3, size 56-8 line 3127 [ 64.204546] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.204634] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.256061] binder: 6287:6289 got transaction with invalid handle, 0 [ 64.256087] binder: 6287:6289 transaction failed 29201/-22, size 56-8 line 3219 [ 64.270720] binder: BINDER_SET_CONTEXT_MGR already set [ 64.270728] binder: 6287:6291 ioctl 40046207 0 returned -16 [ 64.280302] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.408695] vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 64.417401] CPU: 1 PID: 6226 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 64.424906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.434231] ffff8801b3ac7938 ffffffff81d94b69 1ffff10036758f2a ffff8801ad131800 [ 64.442211] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b3ac7a48 [ 64.450178] ffffffff81451ca2 024000c2b3ac7988 0000000041b58ab3 ffffffff84195215 [ 64.458145] Call Trace: [ 64.460702] [] dump_stack+0xc1/0x128 [ 64.466038] [] warn_alloc+0x212/0x240 [ 64.471459] [] ? zone_watermark_ok_safe+0x280/0x280 [ 64.478092] [] ? avc_has_perm+0xb0/0x4f0 [ 64.483780] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 64.490247] [] __vmalloc_node_range+0x3f5/0x5f0 [ 64.496538] [] ? check_preemption_disabled+0x3b/0x200 [ 64.503346] [] ? task_has_security+0x130/0x270 [ 64.509546] [] vmalloc+0x5b/0x70 [ 64.514531] [] ? sel_write_load+0x130/0xfd0 [ 64.520481] [] sel_write_load+0x130/0xfd0 [ 64.526247] [] ? get_futex_key+0x1050/0x1050 [ 64.532279] [] ? sel_read_bool+0x250/0x250 [ 64.538133] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 64.545116] [] ? do_futex+0x3f8/0x15c0 [ 64.550623] [] ? sel_read_bool+0x250/0x250 [ 64.556486] [] __vfs_write+0x103/0x680 [ 64.562006] [] ? do_iter_readv_writev+0x400/0x400 [ 64.568470] [] ? __lock_is_held+0xa1/0xf0 [ 64.574235] [] ? __lock_is_held+0xa1/0xf0 [ 64.580003] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 64.586811] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 64.593370] [] ? __sb_start_write+0x14a/0x310 [ 64.599491] [] vfs_write+0x189/0x530 [ 64.604844] [] SyS_write+0xd9/0x1b0 [ 64.610098] [] ? SyS_read+0x1b0/0x1b0 [ 64.615527] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 64.622340] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 64.628894] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 64.635726] Mem-Info: [ 64.638124] active_anon:53214 inactive_anon:44 isolated_anon:0 [ 64.638124] active_file:3520 inactive_file:8474 isolated_file:0 [ 64.638124] unevictable:0 dirty:365 writeback:0 unstable:0 [ 64.638124] slab_reclaimable:5391 slab_unreclaimable:60139 [ 64.638124] mapped:24055 shmem:51 pagetables:651 bounce:0 [ 64.638124] free:1476923 free_pcp:425 free_cma:0 [ 64.671400] Node 0 active_anon:212856kB inactive_anon:176kB active_file:14080kB inactive_file:33896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96220kB dirty:1460kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 81920kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 64.700814] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 64.730129] lowmem_reserve[]: 0 2908 6410 6410 [ 64.735297] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 64.766183] lowmem_reserve[]: 0 0 3501 3501 [ 64.771120] Normal free:2911700kB min:36824kB low:46028kB high:55232kB active_anon:212856kB inactive_anon:176kB active_file:14080kB inactive_file:33896kB unevictable:0kB writepending:1460kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21564kB slab_unreclaimable:240556kB kernel_stack:5536kB pagetables:2604kB bounce:0kB free_pcp:1064kB local_pcp:740kB free_cma:0kB [ 64.805037] lowmem_reserve[]: 0 0 0 0 [ 64.809408] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 64.824692] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 64.841876] Normal: 1369*4kB (UME) 274*8kB (UME) 156*16kB (UME) 51*32kB (UME) 49*64kB (UME) 11*128kB (ME) 4*256kB (ME) 5*512kB (UME) 42*1024kB (ME) 7*2048kB (UME) 692*4096kB (M) = 2911700kB [ 64.861567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 64.870289] 12044 total pagecache pages [ 64.874240] 0 pages in swap cache [ 64.877659] Swap cache stats: add 0, delete 0, find 0/0 [ 64.883013] Free swap = 0kB [ 64.886007] Total swap = 0kB [ 64.888990] 1965969 pages RAM [ 64.892086] 0 pages HighMem/MovableOnly [ 64.896034] 320509 pages reserved [ 64.899495] syz-executor2: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 64.910175] CPU: 0 PID: 6266 Comm: syz-executor2 Not tainted 4.9.80-gb30d2b5 #28 [ 64.917679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.927004] ffff8801c9177938 ffffffff81d94b69 1ffff1003922ef2a ffff8801ca540000 [ 64.934979] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801c9177a48 [ 64.942941] ffffffff81451ca2 024000c2c9177988 0000000041b58ab3 ffffffff84195215 [ 64.950907] Call Trace: [ 64.953464] [] dump_stack+0xc1/0x128 [ 64.958797] [] warn_alloc+0x212/0x240 [ 64.964215] [] ? zone_watermark_ok_safe+0x280/0x280 [ 64.970850] [] ? avc_has_perm+0xb0/0x4f0 [ 64.976532] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 64.982994] [] __vmalloc_node_range+0x3f5/0x5f0 [ 64.989285] [] ? check_preemption_disabled+0x3b/0x200 [ 64.996102] [] ? task_has_security+0x130/0x270 [ 65.002303] [] vmalloc+0x5b/0x70 [ 65.007293] [] ? sel_write_load+0x130/0xfd0 [ 65.013233] [] sel_write_load+0x130/0xfd0 [ 65.018999] [] ? get_futex_key+0x1050/0x1050 [ 65.025025] [] ? sel_read_bool+0x250/0x250 [ 65.030883] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 65.037865] [] ? do_futex+0x3f8/0x15c0 [ 65.043378] [] ? sel_read_bool+0x250/0x250 [ 65.049231] [] __vfs_write+0x103/0x680 [ 65.054737] [] ? do_iter_readv_writev+0x400/0x400 [ 65.061197] [] ? __lock_is_held+0xa1/0xf0 [ 65.066972] [] ? __lock_is_held+0xa1/0xf0 [ 65.072745] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 65.079566] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 65.086112] [] ? __sb_start_write+0x14a/0x310 [ 65.092234] [] vfs_write+0x189/0x530 [ 65.097568] [] SyS_write+0xd9/0x1b0 [ 65.102814] [] ? SyS_read+0x1b0/0x1b0 [ 65.108231] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 65.115044] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 65.121593] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 65.128978] Mem-Info: [ 65.131399] active_anon:52673 inactive_anon:44 isolated_anon:0 [ 65.131399] active_file:3520 inactive_file:8474 isolated_file:0 [ 65.131399] unevictable:0 dirty:367 writeback:0 unstable:0 [ 65.131399] slab_reclaimable:5391 slab_unreclaimable:60140 [ 65.131399] mapped:24041 shmem:51 pagetables:637 bounce:0 [ 65.131399] free:1477507 free_pcp:407 free_cma:0 [ 65.164655] Node 0 active_anon:210692kB inactive_anon:176kB active_file:14080kB inactive_file:33896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96164kB dirty:1468kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 79872kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 65.194070] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 65.223387] lowmem_reserve[]: 0 2908 6410 6410 [ 65.228565] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 65.260041] lowmem_reserve[]: 0 0 3501 3501 [ 65.264937] Normal free:2914036kB min:36824kB low:46028kB high:55232kB active_anon:210692kB inactive_anon:176kB active_file:14080kB inactive_file:33896kB unevictable:0kB writepending:1472kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21564kB slab_unreclaimable:240560kB kernel_stack:5504kB pagetables:2548kB bounce:0kB free_pcp:988kB local_pcp:312kB free_cma:0kB [ 65.298776] lowmem_reserve[]: 0 0 0 0 [ 65.303173] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 65.318630] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 65.335844] Normal: 1399*4kB (UME) 281*8kB (UME) 161*16kB (UME) 52*32kB (UME) 49*64kB (UME) 11*128kB (ME) 4*256kB (ME) 5*512kB (UME) 42*1024kB (ME) 6*2048kB (UME) 693*4096kB (M) = 2914036kB [ 65.355543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 65.364280] 12056 total pagecache pages [ 65.368245] 0 pages in swap cache [ 65.371703] Swap cache stats: add 0, delete 0, find 0/0 [ 65.377039] Free swap = 0kB [ 65.380052] Total swap = 0kB [ 65.383046] 1965969 pages RAM [ 65.386116] 0 pages HighMem/MovableOnly [ 65.390549] 320509 pages reserved [ 65.394023] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 65.404147] CPU: 1 PID: 6271 Comm: syz-executor0 Not tainted 4.9.80-gb30d2b5 #28 [ 65.411652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.420976] ffff8801b408f938 ffffffff81d94b69 1ffff10036811f2a ffff8801ca4bb000 [ 65.428948] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b408fa48 [ 65.436963] ffffffff81451ca2 024000c2b408f988 0000000041b58ab3 ffffffff84195215 [ 65.444943] Call Trace: [ 65.447680] [] dump_stack+0xc1/0x128 [ 65.453014] [] warn_alloc+0x212/0x240 [ 65.458435] [] ? zone_watermark_ok_safe+0x280/0x280 [ 65.465072] [] ? avc_has_perm+0xb0/0x4f0 [ 65.470755] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 65.477221] [] __vmalloc_node_range+0x3f5/0x5f0 [ 65.483513] [] ? check_preemption_disabled+0x3b/0x200 [ 65.490322] [] ? task_has_security+0x130/0x270 [ 65.496524] [] vmalloc+0x5b/0x70 [ 65.501508] [] ? sel_write_load+0x130/0xfd0 [ 65.507447] [] sel_write_load+0x130/0xfd0 [ 65.513224] [] ? get_futex_key+0x1050/0x1050 [ 65.519251] [] ? sel_read_bool+0x250/0x250 [ 65.525109] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 65.532097] [] ? do_futex+0x3f8/0x15c0 [ 65.537609] [] ? sel_read_bool+0x250/0x250 [ 65.543465] [] __vfs_write+0x103/0x680 [ 65.548970] [] ? do_iter_readv_writev+0x400/0x400 [ 65.555433] [] ? __lock_is_held+0xa1/0xf0 [ 65.561198] [] ? __lock_is_held+0xa1/0xf0 [ 65.566964] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 65.573769] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 65.580318] [] ? __sb_start_write+0x14a/0x310 [ 65.586439] [] vfs_write+0x189/0x530 [ 65.591784] [] SyS_write+0xd9/0x1b0 [ 65.597029] [] ? SyS_read+0x1b0/0x1b0 [ 65.602447] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 65.609255] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 65.615809] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 65.623087] Mem-Info: [ 65.625485] active_anon:52673 inactive_anon:44 isolated_anon:0 [ 65.625485] active_file:3520 inactive_file:8474 isolated_file:0 [ 65.625485] unevictable:0 dirty:377 writeback:0 unstable:0 [ 65.625485] slab_reclaimable:5391 slab_unreclaimable:60140 [ 65.625485] mapped:24041 shmem:51 pagetables:637 bounce:0 [ 65.625485] free:1477515 free_pcp:403 free_cma:0 [ 65.658778] Node 0 active_anon:210692kB inactive_anon:176kB active_file:14080kB inactive_file:33896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96164kB dirty:1508kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 79872kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 65.688192] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 65.717584] lowmem_reserve[]: 0 2908 6410 6410 [ 65.722777] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 65.753627] lowmem_reserve[]: 0 0 3501 3501 [ 65.758518] Normal free:2914068kB min:36824kB low:46028kB high:55232kB active_anon:210692kB inactive_anon:176kB active_file:14080kB inactive_file:33896kB unevictable:0kB writepending:1520kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21564kB slab_unreclaimable:240560kB kernel_stack:5472kB pagetables:2548kB bounce:0kB free_pcp:964kB local_pcp:664kB free_cma:0kB [ 65.792687] lowmem_reserve[]: 0 0 0 0 [ 65.797046] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 65.812310] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 65.829575] Normal: 1399*4kB (UME) 281*8kB (UME) 161*16kB (UME) 53*32kB (UME) 49*64kB (UME) 11*128kB (ME) 4*256kB (ME) 5*512kB (UME) 42*1024kB (ME) 6*2048kB (UME) 693*4096kB (M) = 2914068kB [ 65.849530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 65.858103] 12059 total pagecache pages [ 65.862175] 0 pages in swap cache [ 65.865595] Swap cache stats: add 0, delete 0, find 0/0 [ 65.870951] Free swap = 0kB [ 65.873943] Total swap = 0kB [ 65.876928] 1965969 pages RAM [ 65.880022] 0 pages HighMem/MovableOnly [ 65.883969] 320509 pages reserved [ 65.887425] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 65.897527] CPU: 0 PID: 6293 Comm: syz-executor0 Not tainted 4.9.80-gb30d2b5 #28 [ 65.905025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.914348] ffff8801b2067938 ffffffff81d94b69 1ffff1003640cf2a ffff8801d8019800 [ 65.922309] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b2067a48 [ 65.930271] ffffffff81451ca2 024000c2b2067988 0000000041b58ab3 ffffffff84195215 [ 65.938236] Call Trace: [ 65.940796] [] dump_stack+0xc1/0x128 [ 65.946130] [] warn_alloc+0x212/0x240 [ 65.951549] [] ? zone_watermark_ok_safe+0x280/0x280 [ 65.958188] [] ? avc_has_perm+0xb0/0x4f0 [ 65.963871] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 65.970334] [] __vmalloc_node_range+0x3f5/0x5f0 [ 65.976624] [] ? check_preemption_disabled+0x3b/0x200 [ 65.983432] [] ? task_has_security+0x130/0x270 [ 65.989637] [] vmalloc+0x5b/0x70 [ 65.994631] [] ? sel_write_load+0x130/0xfd0 [ 66.000570] [] sel_write_load+0x130/0xfd0 [ 66.006334] [] ? get_futex_key+0x1050/0x1050 [ 66.012773] [] ? sel_read_bool+0x250/0x250 [ 66.018630] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 66.025609] [] ? do_futex+0x3f8/0x15c0 [ 66.031114] [] ? sel_read_bool+0x250/0x250 [ 66.036973] [] __vfs_write+0x103/0x680 [ 66.042477] [] ? do_iter_readv_writev+0x400/0x400 [ 66.048938] [] ? __lock_is_held+0xa1/0xf0 [ 66.054702] [] ? __lock_is_held+0xa1/0xf0 [ 66.060470] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 66.067278] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 66.073823] [] ? __sb_start_write+0x14a/0x310 [ 66.079936] [] vfs_write+0x189/0x530 [ 66.085269] [] SyS_write+0xd9/0x1b0 [ 66.090513] [] ? SyS_read+0x1b0/0x1b0 [ 66.095929] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 66.102737] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 66.109284] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 66.116909] Mem-Info: [ 66.119306] active_anon:52673 inactive_anon:44 isolated_anon:0 [ 66.119306] active_file:3520 inactive_file:8474 isolated_file:0 [ 66.119306] unevictable:0 dirty:380 writeback:0 unstable:0 [ 66.119306] slab_reclaimable:5391 slab_unreclaimable:60140 [ 66.119306] mapped:24041 shmem:51 pagetables:637 bounce:0 [ 66.119306] free:1477515 free_pcp:397 free_cma:0 [ 66.152603] Node 0 active_anon:210692kB inactive_anon:176kB active_file:14080kB inactive_file:33896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96164kB dirty:1520kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 79872kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 66.182038] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 66.211855] lowmem_reserve[]: 0 2908 6410 6410 [ 66.217001] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 66.248035] lowmem_reserve[]: 0 0 3501 3501 [ 66.252939] Normal free:2914068kB min:36824kB low:46028kB high:55232kB active_anon:210692kB inactive_anon:176kB active_file:14080kB inactive_file:33896kB unevictable:0kB writepending:1520kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21564kB slab_unreclaimable:240560kB kernel_stack:5440kB pagetables:2548kB bounce:0kB free_pcp:1060kB local_pcp:288kB free_cma:0kB [ 66.286854] lowmem_reserve[]: 0 0 0 0 [ 66.291220] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 66.306551] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 66.324048] Normal: 1368*4kB (UME) 281*8kB (UME) 161*16kB (UME) 54*32kB (UME) 49*64kB (UME) 11*128kB (ME) 4*256kB (ME) 5*512kB (UME) 42*1024kB (ME) 6*2048kB (UME) 693*4096kB (M) = 2913976kB [ 66.343755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 66.352507] 12070 total pagecache pages [ 66.356462] 0 pages in swap cache [ 66.359911] Swap cache stats: add 0, delete 0, find 0/0 [ 66.365247] Free swap = 0kB [ 66.368233] Total swap = 0kB [ 66.371244] 1965969 pages RAM [ 66.374326] 0 pages HighMem/MovableOnly [ 66.378271] 320509 pages reserved [ 66.381755] syz-executor2: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 66.392490] CPU: 1 PID: 6284 Comm: syz-executor2 Not tainted 4.9.80-gb30d2b5 #28 [ 66.399994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.409316] ffff8801c2597938 ffffffff81d94b69 1ffff100384b2f2a ffff8801bbe0e000 [ 66.417288] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801c2597a48 [ 66.425256] ffffffff81451ca2 024000c2c2597988 0000000041b58ab3 ffffffff84195215 [ 66.433223] Call Trace: [ 66.435783] [] dump_stack+0xc1/0x128 [ 66.441119] [] warn_alloc+0x212/0x240 [ 66.446885] [] ? zone_watermark_ok_safe+0x280/0x280 [ 66.453522] [] ? avc_has_perm+0xb0/0x4f0 [ 66.459201] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 66.465669] [] __vmalloc_node_range+0x3f5/0x5f0 [ 66.471957] [] ? check_preemption_disabled+0x3b/0x200 [ 66.478766] [] ? task_has_security+0x130/0x270 [ 66.484987] [] vmalloc+0x5b/0x70 [ 66.489974] [] ? sel_write_load+0x130/0xfd0 [ 66.495912] [] sel_write_load+0x130/0xfd0 [ 66.501677] [] ? set_next_entity+0x1bf/0xbe0 [ 66.507700] [] ? check_preemption_disabled+0x3b/0x200 [ 66.514507] [] ? sel_read_bool+0x250/0x250 [ 66.520368] [] ? mark_held_locks+0xaf/0x100 [ 66.526306] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 66.532593] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 66.539403] [] ? sel_read_bool+0x250/0x250 [ 66.545258] [] __vfs_write+0x103/0x680 [ 66.550762] [] ? do_iter_readv_writev+0x400/0x400 [ 66.557221] [] ? __lock_is_held+0xa1/0xf0 [ 66.562984] [] ? __lock_is_held+0xa1/0xf0 [ 66.568749] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 66.575558] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 66.582104] [] ? __sb_start_write+0x14a/0x310 [ 66.588215] [] vfs_write+0x189/0x530 [ 66.593547] [] SyS_write+0xd9/0x1b0 [ 66.598796] [] ? SyS_read+0x1b0/0x1b0 [ 66.604214] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 66.611021] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 66.617566] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 66.624594] Mem-Info: [ 66.627004] active_anon:51110 inactive_anon:44 isolated_anon:0 [ 66.627004] active_file:3520 inactive_file:8489 isolated_file:0 [ 66.627004] unevictable:0 dirty:394 writeback:0 unstable:0 [ 66.627004] slab_reclaimable:5392 slab_unreclaimable:60149 [ 66.627004] mapped:24032 shmem:51 pagetables:622 bounce:0 [ 66.627004] free:1479030 free_pcp:466 free_cma:0 [ 66.660246] Node 0 active_anon:204440kB inactive_anon:176kB active_file:14080kB inactive_file:33956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96128kB dirty:1576kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 73728kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 66.689720] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 66.719041] lowmem_reserve[]: 0 2908 6410 6410 [ 66.724216] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 66.755068] lowmem_reserve[]: 0 0 3501 3501 [ 66.760001] Normal free:2920128kB min:36824kB low:46028kB high:55232kB active_anon:204440kB inactive_anon:176kB active_file:14080kB inactive_file:33956kB unevictable:0kB writepending:1584kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21568kB slab_unreclaimable:240596kB kernel_stack:5408kB pagetables:2488kB bounce:0kB free_pcp:1220kB local_pcp:760kB free_cma:0kB [ 66.793907] lowmem_reserve[]: 0 0 0 0 [ 66.798287] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 66.813541] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 66.830694] Normal: 1368*4kB (UME) 282*8kB (UME) 161*16kB (UME) 54*32kB (UME) 49*64kB (UME) 11*128kB (ME) 4*256kB (ME) 5*512kB (UME) 42*1024kB (ME) 3*2048kB (UME) 696*4096kB (M) = 2920128kB 2018/02/04 12:04:00 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000013000-0x8)={0x0}, 0x4800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000011000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000013000-0x10)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000014000-0x10)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000012000)=[{0x5, 0x401, 0x80000000, 0x1000, @time={r1, r2+30000000}, {0x9, 0xffffffffffffffb5}, {0x5, 0x7d0}, @raw8={"316a123ffc0ff4505b6d7710"}}, {0xffffffff, 0x7, 0x7, 0x8, @tick=0x80000001, {0x9}, {0x4, 0x6}, @time=@time}, {0x1, 0x4, 0x1f, 0x4, @time={r3, r4+10000000}, {0x8001, 0x1f}, {0x8, 0x7}, @quote={{0x6b80869, 0x81}, 0xffffffff7fffffff, &(0x7f0000013000)={0x0, 0x400, 0x0, 0x100000000, @time={0x77359400}, {0x6, 0x4}, {0x0, 0x8}, @queue={0x7, {0x4, 0x8}}}}}, {0x40, 0x4, 0x83, 0x9, @time={r5, r6+30000000}, {0x2617, 0x3}, {0x7}, @queue={0xfffffffffffffffa, {0x3, 0x15e}}}, {0x1, 0x1d39cb4f, 0x1, 0xcb62, @tick=0xb2, {0x1, 0x8}, {0x100000000, 0x5}, @queue={0x4, {0x1f, 0x3}}}, {0x3, 0xcd41, 0x508a, 0x3ff, @tick=0x8, {0x6b0, 0x1}, {0x7c2645ec, 0x67}, @note={0x8, 0x2, 0x3f, 0x4, 0x100}}, {0x20, 0x4, 0x4, 0xfffffffffffffff9, @time={r7, r8+10000000}, {0x1f, 0x248}, {0x1, 0x100000001}, @addr={0x4, 0x3}}], 0x150) pselect6(0x40, &(0x7f0000001000-0x40), &(0x7f0000002000-0x40), &(0x7f0000001000-0x40), &(0x7f0000001000-0x10), &(0x7f0000001000-0x10)={&(0x7f0000014000-0x8), 0x8}) 2018/02/04 12:04:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000405000-0x15)='attr/prev\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000c49000-0x4)=0x7ff, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000b90000-0x6)={0x0, 0x8}, &(0x7f00006b9000)=0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000d68000)={r1, 0x8bf3, 0x6}, &(0x7f0000537000-0x4)=0x8) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000c2d000-0x8)={@empty, @local}, &(0x7f0000717000)=0x8) setrlimit(0x1, &(0x7f0000011000)) ftruncate(r0, 0x3d) 2018/02/04 12:04:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00007d9000)={@common="6c6f0000000000000000000000000001", &(0x7f0000222000-0x5c)=@ethtool_coalesce={0xf, 0x1, 0x7fffffff, 0x101, 0xcb6, 0x8, 0x6805365, 0x400006, 0x400, 0x2, 0x6, 0x8, 0xfff, 0x81, 0xcc7, 0x20, 0x9, 0x101, 0xa, 0x200, 0x21db, 0x7, 0x33}}) 2018/02/04 12:04:00 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000e6d000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000d8c000)=0x9, 0x4) 2018/02/04 12:04:00 executing program 1: mmap(&(0x7f0000000000/0xf84000)=nil, 0xf84000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000001000-0x12)='big_key\x00', &(0x7f000084f000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001000-0xb6), 0x0, 0x400000000001) mmap(&(0x7f0000f84000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f84000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f00009f5000)='blacklist\x00', &(0x7f0000f84000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000f84000)='big_key\x00', r0) 2018/02/04 12:04:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f000029d000)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f00000f9000-0x2f), 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000129000)='/dev/rtc\x00', 0x404200, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000be1000)) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f000038d000)=0x7) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00009d3000-0x94)={0x0, 0x8c, "b3cfaebddf2d56cf5bdc7ae2c3e61e915221ab319f2e97a66282c5413ac13ec2148dea3879cbda16260bbfde71919a4a98d76037da381a4144930cb051cdcaf94260650135bff60c17e822213a258ecca4fea00e13ca4a42d15682bf9184895e3b274c960142971c8e27a6661eeaccb087d692a952d32f856ba09c36ca8a826b7c6058076f055d17352b05e0"}, &(0x7f0000c6b000-0x4)=0x94) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000c1b000-0x18)={r2, 0x4, 0x0, 0x200, 0x66d}, &(0x7f0000ae3000)=0x18) 2018/02/04 12:04:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) pipe(&(0x7f00004c6000)={0x0}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f000075d000-0x98)) write(r0, &(0x7f00009b0000), 0x0) 2018/02/04 12:04:00 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$getregs(0xffffffffffffffff, r0, 0x9, &(0x7f00008f1000-0x39)=""/57) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) write(r1, &(0x7f00000f9000-0x2f), 0x0) [ 66.850391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 66.858934] 12076 total pagecache pages [ 66.863066] 0 pages in swap cache [ 66.866498] Swap cache stats: add 0, delete 0, find 0/0 [ 66.871858] Free swap = 0kB [ 66.874853] Total swap = 0kB [ 66.877836] 1965969 pages RAM [ 66.880939] 0 pages HighMem/MovableOnly [ 66.884887] 320509 pages reserved 2018/02/04 12:04:00 executing program 4: mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000002000-0x5)='user\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000feb000-0x10), 0x10) r2 = gettid() ftruncate(r1, 0x0) tkill(r2, 0x16) close(r0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 2018/02/04 12:04:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000c2b000-0x38)={&(0x7f0000a4b000-0xc)={0x10}, 0xc, &(0x7f00006ea000-0x10)={&(0x7f00002f1000+0xd99)=@newspdinfo={0x1c, 0x24, 0x61b, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000a45000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000dc8000-0x8)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000cb6000)={{{@in=@dev, @in=@rand_addr, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f00005d6000)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000c6000)={{{@in6=@mcast2, @in6=@mcast1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000c39000)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000a41000-0xe8)={{{@in=@multicast1=0xe0000001, @in6=@empty, 0x2, 0x9, 0x1, 0x0, 0x2, 0x80, 0x20, 0xff, r1, r2}, {0x0, 0xd3b, 0x918, 0x800, 0x548, 0x401, 0x6, 0x1572}, {0x8001, 0x1, 0x8, 0x6}, 0x7fffffff, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, {{@in=@broadcast=0xffffffff, 0x0, 0xff}, 0x2, @in=@empty, 0x1, 0x0, 0x3, 0x6, 0xfffffffffffffff7, 0xa40, 0x8}}, 0xe8) 2018/02/04 12:04:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)='/dev/sequencer\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000c80000)='/dev/autofs\x00', 0x8000, 0x0) clock_gettime(0x0, &(0x7f0000227000)={0x0, 0x0}) poll(&(0x7f0000e3c000-0x28)=[{r1, 0x498}, {r1, 0x1000}, {r0, 0x1}, {r2, 0x400}, {r0, 0x2}], 0x5, 0xffffffff) futimesat(r0, &(0x7f000035a000-0x8)='./file0\x00', &(0x7f00000c8000-0x20)={{}, {r3, r4/1000+30000}}) r5 = dup2(r0, r1) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f000013d000)=0x2) accept$packet(r5, &(0x7f0000962000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00001a6000-0x4)=0x14) 2018/02/04 12:04:00 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) connect$l2tp(0xffffffffffffffff, &(0x7f0000485000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @empty}, 0x0, 0x2, 0x2, 0x2}}, 0x26) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000eb9000-0xe8)={{{@in6=@loopback, @in6=@mcast2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000747000-0x4)=0xe8) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000bf0000)={r2, @remote={0xac, 0x14, 0x0, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}}, 0xc) rt_sigtimedwait(&(0x7f00006c3000)={0x3}, &(0x7f0000d2a000), &(0x7f00000aa000-0x10), 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) r3 = socket(0x1, 0x3, 0xfffffffffffffff8) lseek(0xffffffffffffffff, 0x0, 0x6) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000a39000)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000ff5000)={0x0, 0x9}, &(0x7f00002b6000)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000981000)={r4, 0x800, 0x2, [0x4000000000000, 0x80000001]}, &(0x7f0000941000-0x4)=0x5) [ 66.901272] syz-executor3: [ 66.907246] binder: 6299:6304 got transaction with invalid handle, 0 [ 66.907271] binder: 6299:6304 transaction failed 29201/-22, size 56-8 line 3219 [ 66.921428] binder_alloc: binder_alloc_mmap_handler: 6299 20000000-20002000 already mapped failed -16 [ 66.923279] binder_alloc: 6299: binder_alloc_buf, no vma 2018/02/04 12:04:00 executing program 7: mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000027000)={0x0}) mmap(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000028000-0x10)={0x1, 0x0, 0x3, 0x6, 0x0}, &(0x7f0000028000-0x4)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000002000-0xc)=@sack_info={r2, 0x7fffffff, 0x3}, &(0x7f0000024000)=0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000010000-0x29)={0x0, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0xe4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000023000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}}) mmap(&(0x7f0000028000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000028000)) mmap(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000028000-0x4)) mmap(&(0x7f0000028000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000028000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$nfc_llcp(r1, &(0x7f0000028000), &(0x7f0000029000-0x4)=0x60, 0x80000) 2018/02/04 12:04:00 executing program 1: mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000002000)={{}, 0x0, 0x3b865ee7}) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000007000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1, 0x0, 0x0, 0xff7fffffffffffff}}, 0x8) setsockopt(r0, 0x111, 0x3, &(0x7f0000155000-0x32)="0d9cd50f", 0x4) 2018/02/04 12:04:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f00005a2000-0xd)='/dev/usbmon#\x00', 0x100000001, 0x10000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000d04000)={0x9, &(0x7f0000f95000-0x48)=[{}, {}, {}, {}, {}, {}, {}, {0x0}, {}]}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000f3c000-0x4)=0x7fffffff, 0x3) sendmsg$nl_netfilter(r0, &(0x7f000024c000)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f0000f74000)={0x14, 0x2000000000010, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00006a3000-0x8)={r2, 0x10}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000e8b000-0x44)={{0x2, 0x2, @multicast2=0xe0000002}, {0x306, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x15}}, 0x20, {0x2, 0x2, @multicast1=0xe0000001}, @syzn={0x73, 0x79, 0x7a, 0x0}}) modify_ldt$write2(0x11, &(0x7f00001bf000-0x10)={0x7f, 0x0, 0x0, 0x177ab279, 0x63, 0x100, 0x4, 0x6, 0x4, 0x8001}, 0x10) [ 66.923296] binder: 6299:6311 transaction failed 29189/-3, size 56-8 line 3127 [ 66.923399] binder: BINDER_SET_CONTEXT_MGR already set [ 66.923408] binder: 6299:6304 ioctl 40046207 0 returned -16 [ 66.937001] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.937020] binder: undelivered TRANSACTION_ERROR: 29201 [ 66.955781] binder: 6320:6323 got transaction with invalid handle, 0 [ 66.955807] binder: 6320:6323 transaction failed 29201/-22, size 56-8 line 3219 [ 66.991052] binder: BINDER_SET_CONTEXT_MGR already set [ 66.991060] binder: 6320:6328 ioctl 40046207 0 returned -16 [ 66.997234] binder_alloc: 6320: binder_alloc_buf, no vma [ 66.997273] binder: 6320:6323 transaction failed 29189/-3, size 56-8 line 3127 [ 67.022153] binder: undelivered TRANSACTION_ERROR: 29189 [ 67.022268] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.066160] vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 67.074707] CPU: 0 PID: 6303 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 67.082210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.091536] ffff8801b20b7938 ffffffff81d94b69 1ffff10036416f2a ffff8801ca591800 [ 67.099512] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b20b7a48 [ 67.107670] ffffffff81451ca2 024000c2b20b7988 0000000041b58ab3 ffffffff84195215 [ 67.115636] Call Trace: [ 67.118223] [] dump_stack+0xc1/0x128 [ 67.123564] [] warn_alloc+0x212/0x240 [ 67.129028] [] ? zone_watermark_ok_safe+0x280/0x280 [ 67.135665] [] ? avc_has_perm+0xb0/0x4f0 [ 67.141355] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 67.147824] [] __vmalloc_node_range+0x3f5/0x5f0 [ 67.154125] [] ? check_preemption_disabled+0x3b/0x200 [ 67.160934] [] ? task_has_security+0x130/0x270 [ 67.167137] [] vmalloc+0x5b/0x70 [ 67.172132] [] ? sel_write_load+0x130/0xfd0 [ 67.178075] [] sel_write_load+0x130/0xfd0 [ 67.183843] [] ? get_futex_key+0x1050/0x1050 [ 67.189880] [] ? sel_read_bool+0x250/0x250 [ 67.195743] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 67.202726] [] ? do_futex+0x3f8/0x15c0 [ 67.208249] [] ? sel_read_bool+0x250/0x250 [ 67.214110] [] __vfs_write+0x103/0x680 [ 67.219632] [] ? do_iter_readv_writev+0x400/0x400 [ 67.226102] [] ? __lock_is_held+0xa1/0xf0 [ 67.231877] [] ? __lock_is_held+0xa1/0xf0 [ 67.237658] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 67.244473] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 67.251024] [] ? __sb_start_write+0x14a/0x310 [ 67.257153] [] vfs_write+0x189/0x530 [ 67.262495] [] SyS_write+0xd9/0x1b0 [ 67.267741] [] ? SyS_read+0x1b0/0x1b0 [ 67.273170] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 67.279981] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 67.286534] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 67.294094] Mem-Info: [ 67.296500] active_anon:53724 inactive_anon:44 isolated_anon:0 [ 67.296500] active_file:3522 inactive_file:8504 isolated_file:0 [ 67.296500] unevictable:0 dirty:400 writeback:0 unstable:0 [ 67.296500] slab_reclaimable:5392 slab_unreclaimable:60158 [ 67.296500] mapped:24055 shmem:51 pagetables:648 bounce:0 [ 67.296500] free:1476357 free_pcp:422 free_cma:0 [ 67.329785] Node 0 active_anon:214896kB inactive_anon:176kB active_file:14088kB inactive_file:34016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96220kB dirty:1600kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 83968kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 67.359212] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.388547] lowmem_reserve[]: 0 2908 6410 6410 [ 67.393734] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 67.425180] lowmem_reserve[]: 0 0 3501 3501 [ 67.430107] Normal free:2909420kB min:36824kB low:46028kB high:55232kB active_anon:214896kB inactive_anon:176kB active_file:14088kB inactive_file:34016kB unevictable:0kB writepending:1600kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21584kB slab_unreclaimable:240660kB kernel_stack:5568kB pagetables:2604kB bounce:0kB free_pcp:1040kB local_pcp:336kB free_cma:0kB [ 67.464032] lowmem_reserve[]: 0 0 0 0 [ 67.468401] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 67.483654] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 67.500816] Normal: 1259*4kB (UME) 282*8kB (UME) 154*16kB (UME) 70*32kB (UME) 50*64kB (UME) 11*128kB (ME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 6*2048kB (UME) 692*4096kB (M) = 2909404kB [ 67.520417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 67.528962] 12079 total pagecache pages [ 67.533087] 0 pages in swap cache [ 67.536518] Swap cache stats: add 0, delete 0, find 0/0 [ 67.541868] Free swap = 0kB [ 67.544862] Total swap = 0kB [ 67.547848] 1965969 pages RAM [ 67.551371] 0 pages HighMem/MovableOnly [ 67.555314] 320509 pages reserved [ 67.558775] syz-executor3: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 67.568734] CPU: 0 PID: 6327 Comm: syz-executor3 Not tainted 4.9.80-gb30d2b5 #28 [ 67.576233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.585563] ffff8801ad1d7938 ffffffff81d94b69 1ffff10035a3af2a ffff8801ad1a3000 [ 67.593529] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ad1d7a48 [ 67.601494] ffffffff81451ca2 024000c2ad1d7988 0000000041b58ab3 ffffffff84195215 [ 67.609453] Call Trace: [ 67.612012] [] dump_stack+0xc1/0x128 [ 67.617355] [] warn_alloc+0x212/0x240 [ 67.622782] [] ? zone_watermark_ok_safe+0x280/0x280 [ 67.629426] [] ? avc_has_perm+0xb0/0x4f0 [ 67.635114] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 67.641573] [] __vmalloc_node_range+0x3f5/0x5f0 [ 67.647861] [] ? check_preemption_disabled+0x3b/0x200 [ 67.654669] [] ? task_has_security+0x130/0x270 [ 67.660877] [] vmalloc+0x5b/0x70 [ 67.665874] [] ? sel_write_load+0x130/0xfd0 [ 67.671822] [] sel_write_load+0x130/0xfd0 [ 67.677594] [] ? set_next_entity+0x1bf/0xbe0 [ 67.683641] [] ? check_preemption_disabled+0x3b/0x200 [ 67.690458] [] ? sel_read_bool+0x250/0x250 [ 67.696321] [] ? mark_held_locks+0xaf/0x100 [ 67.702278] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 67.708582] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 67.715399] [] ? sel_read_bool+0x250/0x250 [ 67.721273] [] __vfs_write+0x103/0x680 [ 67.726789] [] ? do_iter_readv_writev+0x400/0x400 [ 67.733261] [] ? __lock_is_held+0xa1/0xf0 [ 67.739039] [] ? __lock_is_held+0xa1/0xf0 [ 67.744815] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 67.751624] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 67.758170] [] ? __sb_start_write+0x14a/0x310 [ 67.764281] [] vfs_write+0x189/0x530 [ 67.769612] [] SyS_write+0xd9/0x1b0 [ 67.774869] [] ? SyS_read+0x1b0/0x1b0 [ 67.780286] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 67.787094] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 67.793639] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 67.801131] Mem-Info: [ 67.803536] active_anon:53724 inactive_anon:44 isolated_anon:0 [ 67.803536] active_file:3522 inactive_file:8504 isolated_file:0 [ 67.803536] unevictable:0 dirty:400 writeback:0 unstable:0 [ 67.803536] slab_reclaimable:5396 slab_unreclaimable:60165 [ 67.803536] mapped:24055 shmem:51 pagetables:651 bounce:0 [ 67.803536] free:1476326 free_pcp:446 free_cma:0 [ 67.836814] Node 0 active_anon:214896kB inactive_anon:176kB active_file:14088kB inactive_file:34016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96220kB dirty:1600kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 83968kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 67.866239] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.895555] lowmem_reserve[]: 0 2908 6410 6410 [ 67.900717] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 67.932144] lowmem_reserve[]: 0 0 3501 3501 [ 67.937032] Normal free:2909312kB min:36824kB low:46028kB high:55232kB active_anon:214896kB inactive_anon:176kB active_file:14088kB inactive_file:34016kB unevictable:0kB writepending:1600kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21584kB slab_unreclaimable:240660kB kernel_stack:5536kB pagetables:2604kB bounce:0kB free_pcp:1140kB local_pcp:336kB free_cma:0kB [ 67.970952] lowmem_reserve[]: 0 0 0 0 [ 67.975305] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 67.990567] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 68.008265] Normal: 1228*4kB (UME) 282*8kB (UME) 153*16kB (UME) 71*32kB (UME) 50*64kB (UME) 11*128kB (ME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 6*2048kB (UME) 692*4096kB (M) = 2909296kB [ 68.027891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 68.036454] 12079 total pagecache pages [ 68.040523] 0 pages in swap cache [ 68.043943] Swap cache stats: add 0, delete 0, find 0/0 [ 68.049270] Free swap = 0kB [ 68.052271] Total swap = 0kB [ 68.055276] 1965969 pages RAM [ 68.058345] 0 pages HighMem/MovableOnly [ 68.062742] 320509 pages reserved [ 68.066214] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 68.077128] CPU: 1 PID: 6308 Comm: syz-executor0 Not tainted 4.9.80-gb30d2b5 #28 [ 68.084627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.093951] ffff8801ad14f938 ffffffff81d94b69 1ffff10035a29f2a ffff8801d8c23000 [ 68.101920] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ad14fa48 [ 68.109883] ffffffff81451ca2 024000c2ad14f988 0000000041b58ab3 ffffffff84195215 [ 68.117845] Call Trace: [ 68.120404] [] dump_stack+0xc1/0x128 [ 68.125735] [] warn_alloc+0x212/0x240 [ 68.131155] [] ? zone_watermark_ok_safe+0x280/0x280 [ 68.137790] [] ? avc_has_perm+0xb0/0x4f0 [ 68.143472] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 68.149937] [] __vmalloc_node_range+0x3f5/0x5f0 [ 68.156227] [] ? check_preemption_disabled+0x3b/0x200 [ 68.163035] [] ? task_has_security+0x130/0x270 [ 68.169235] [] vmalloc+0x5b/0x70 [ 68.174216] [] ? sel_write_load+0x130/0xfd0 [ 68.180153] [] sel_write_load+0x130/0xfd0 [ 68.185918] [] ? get_futex_key+0x1050/0x1050 [ 68.191943] [] ? sel_read_bool+0x250/0x250 [ 68.197794] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 68.204772] [] ? do_futex+0x3f8/0x15c0 [ 68.210278] [] ? sel_read_bool+0x250/0x250 [ 68.216132] [] __vfs_write+0x103/0x680 [ 68.221638] [] ? do_iter_readv_writev+0x400/0x400 [ 68.228095] [] ? __lock_is_held+0xa1/0xf0 [ 68.233860] [] ? __lock_is_held+0xa1/0xf0 [ 68.239630] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 68.246446] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 68.252992] [] ? __sb_start_write+0x14a/0x310 [ 68.259107] [] vfs_write+0x189/0x530 [ 68.264441] [] SyS_write+0xd9/0x1b0 [ 68.269691] [] ? SyS_read+0x1b0/0x1b0 [ 68.275111] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 68.281920] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 68.288479] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 68.295372] Mem-Info: [ 68.297772] active_anon:53185 inactive_anon:44 isolated_anon:0 [ 68.297772] active_file:3522 inactive_file:8504 isolated_file:0 [ 68.297772] unevictable:0 dirty:412 writeback:0 unstable:0 [ 68.297772] slab_reclaimable:5397 slab_unreclaimable:60174 [ 68.297772] mapped:24041 shmem:51 pagetables:638 bounce:0 [ 68.297772] free:1476844 free_pcp:486 free_cma:0 [ 68.331010] Node 0 active_anon:212740kB inactive_anon:176kB active_file:14088kB inactive_file:34016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96164kB dirty:1648kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 81920kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 68.360448] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.389772] lowmem_reserve[]: 0 2908 6410 6410 [ 68.394920] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 68.425779] lowmem_reserve[]: 0 0 3501 3501 [ 68.430707] Normal free:2911384kB min:36824kB low:46028kB high:55232kB active_anon:212740kB inactive_anon:176kB active_file:14088kB inactive_file:34016kB unevictable:0kB writepending:1648kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21588kB slab_unreclaimable:240696kB kernel_stack:5504kB pagetables:2552kB bounce:0kB free_pcp:1308kB local_pcp:800kB free_cma:0kB [ 68.464704] lowmem_reserve[]: 0 0 0 0 [ 68.469068] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 68.484322] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 68.501495] Normal: 1228*4kB (UME) 283*8kB (UME) 152*16kB (UME) 70*32kB (UME) 51*64kB (UME) 11*128kB (ME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 5*2048kB (UME) 693*4096kB (M) = 2911368kB [ 68.521102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 68.529826] 12091 total pagecache pages [ 68.533777] 0 pages in swap cache [ 68.537198] Swap cache stats: add 0, delete 0, find 0/0 [ 68.542550] Free swap = 0kB [ 68.545543] Total swap = 0kB [ 68.548529] 1965969 pages RAM [ 68.551627] 0 pages HighMem/MovableOnly [ 68.555576] 320509 pages reserved [ 68.559047] syz-executor2: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 68.568997] CPU: 0 PID: 6306 Comm: syz-executor2 Not tainted 4.9.80-gb30d2b5 #28 [ 68.576498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.585833] ffff8801d812f938 ffffffff81d94b69 1ffff1003b025f2a ffff8801d8c21800 [ 68.593815] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801d812fa48 [ 68.601783] ffffffff81451ca2 024000c2d812f988 0000000041b58ab3 ffffffff84195215 [ 68.609758] Call Trace: [ 68.612329] [] dump_stack+0xc1/0x128 [ 68.617662] [] warn_alloc+0x212/0x240 [ 68.623080] [] ? zone_watermark_ok_safe+0x280/0x280 [ 68.629713] [] ? avc_has_perm+0xb0/0x4f0 [ 68.635391] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 68.641852] [] __vmalloc_node_range+0x3f5/0x5f0 [ 68.648139] [] ? check_preemption_disabled+0x3b/0x200 [ 68.654951] [] ? task_has_security+0x130/0x270 [ 68.661148] [] vmalloc+0x5b/0x70 [ 68.666130] [] ? sel_write_load+0x130/0xfd0 [ 68.672067] [] sel_write_load+0x130/0xfd0 [ 68.677839] [] ? get_futex_key+0x1050/0x1050 [ 68.683862] [] ? sel_read_bool+0x250/0x250 [ 68.689717] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 68.696696] [] ? do_futex+0x3f8/0x15c0 [ 68.702200] [] ? sel_read_bool+0x250/0x250 [ 68.708053] [] __vfs_write+0x103/0x680 [ 68.713555] [] ? do_iter_readv_writev+0x400/0x400 [ 68.720014] [] ? __lock_is_held+0xa1/0xf0 [ 68.725779] [] ? __lock_is_held+0xa1/0xf0 [ 68.731546] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 68.738353] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 68.744898] [] ? __sb_start_write+0x14a/0x310 [ 68.751010] [] vfs_write+0x189/0x530 [ 68.756343] [] SyS_write+0xd9/0x1b0 [ 68.761588] [] ? SyS_read+0x1b0/0x1b0 [ 68.767005] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 68.773813] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 68.780367] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 68.787741] Mem-Info: [ 68.790158] active_anon:53186 inactive_anon:44 isolated_anon:0 [ 68.790158] active_file:3522 inactive_file:8517 isolated_file:0 [ 68.790158] unevictable:0 dirty:415 writeback:0 unstable:0 [ 68.790158] slab_reclaimable:5397 slab_unreclaimable:60174 [ 68.790158] mapped:24041 shmem:51 pagetables:638 bounce:0 [ 68.790158] free:1476852 free_pcp:480 free_cma:0 [ 68.823392] Node 0 active_anon:212744kB inactive_anon:176kB active_file:14088kB inactive_file:34068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96164kB dirty:1660kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 81920kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 68.852890] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.882205] lowmem_reserve[]: 0 2908 6410 6410 [ 68.887353] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB [ 68.918786] lowmem_reserve[]: 0 0 3501 3501 [ 68.923700] Normal free:2911416kB min:36824kB low:46028kB high:55232kB active_anon:212744kB inactive_anon:176kB active_file:14088kB inactive_file:34068kB unevictable:0kB writepending:1660kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21588kB slab_unreclaimable:240696kB kernel_stack:5472kB pagetables:2552kB bounce:0kB free_pcp:1284kB local_pcp:496kB free_cma:0kB [ 68.957604] lowmem_reserve[]: 0 0 0 0 [ 68.961977] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 68.977208] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 68.994374] Normal: 1228*4kB (UME) 283*8kB (UME) 152*16kB (UME) 71*32kB (UME) 51*64kB (UME) 11*128kB (ME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 5*2048kB (UME) 693*4096kB (M) = 2911400kB [ 69.013998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 69.022718] 12095 total pagecache pages [ 69.026668] 0 pages in swap cache [ 69.030110] Swap cache stats: add 0, delete 0, find 0/0 [ 69.035444] Free swap = 0kB [ 69.038429] Total swap = 0kB [ 69.041881] 1965969 pages RAM [ 69.044965] 0 pages HighMem/MovableOnly [ 69.048907] 320509 pages reserved [ 69.052390] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 69.062696] CPU: 1 PID: 6326 Comm: syz-executor0 Not tainted 4.9.80-gb30d2b5 #28 [ 69.070215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.079538] ffff8801ad1bf938 ffffffff81d94b69 1ffff10035a37f2a ffff8801ad18b000 [ 69.087501] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ad1bfa48 [ 69.095471] ffffffff81451ca2 024000c2ad1bf988 0000000041b58ab3 ffffffff84195215 [ 69.103435] Call Trace: [ 69.105998] [] dump_stack+0xc1/0x128 [ 69.111332] [] warn_alloc+0x212/0x240 [ 69.116748] [] ? zone_watermark_ok_safe+0x280/0x280 [ 69.123382] [] ? avc_has_perm+0xb0/0x4f0 [ 69.129066] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 69.135526] [] __vmalloc_node_range+0x3f5/0x5f0 [ 69.141824] [] ? check_preemption_disabled+0x3b/0x200 [ 69.148629] [] ? task_has_security+0x130/0x270 [ 69.154830] [] vmalloc+0x5b/0x70 [ 69.159814] [] ? sel_write_load+0x130/0xfd0 [ 69.165753] [] sel_write_load+0x130/0xfd0 [ 69.171519] [] ? get_futex_key+0x1050/0x1050 [ 69.177546] [] ? sel_read_bool+0x250/0x250 [ 69.183401] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 69.190381] [] ? do_futex+0x3f8/0x15c0 [ 69.195888] [] ? sel_read_bool+0x250/0x250 [ 69.201740] [] __vfs_write+0x103/0x680 [ 69.207243] [] ? do_iter_readv_writev+0x400/0x400 [ 69.213700] [] ? __lock_is_held+0xa1/0xf0 [ 69.219466] [] ? __lock_is_held+0xa1/0xf0 [ 69.225231] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 69.232042] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 69.238592] [] ? __sb_start_write+0x14a/0x310 [ 69.244706] [] vfs_write+0x189/0x530 [ 69.250073] [] SyS_write+0xd9/0x1b0 [ 69.255317] [] ? SyS_read+0x1b0/0x1b0 [ 69.260736] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 69.267542] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 69.274097] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 69.281492] Mem-Info: [ 69.283889] active_anon:53186 inactive_anon:44 isolated_anon:0 [ 69.283889] active_file:3522 inactive_file:8517 isolated_file:0 [ 69.283889] unevictable:0 dirty:418 writeback:0 unstable:0 [ 69.283889] slab_reclaimable:5397 slab_unreclaimable:60178 [ 69.283889] mapped:24041 shmem:51 pagetables:638 bounce:0 [ 69.283889] free:1476848 free_pcp:475 free_cma:0 [ 69.317178] Node 0 active_anon:212744kB inactive_anon:176kB active_file:14088kB inactive_file:34068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96164kB dirty:1680kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 81920kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 69.346603] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 69.375916] lowmem_reserve[]: 0 2908 6410 6410 [ 69.381103] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 69.411954] lowmem_reserve[]: 0 0 3501 3501 [ 69.416842] Normal free:2911416kB min:36824kB low:46028kB high:55232kB active_anon:212744kB inactive_anon:176kB active_file:14088kB inactive_file:34068kB unevictable:0kB writepending:1696kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21588kB slab_unreclaimable:240728kB kernel_stack:5440kB pagetables:2552kB bounce:0kB free_pcp:1260kB local_pcp:768kB free_cma:0kB [ 69.450754] lowmem_reserve[]: 0 0 0 0 [ 69.455196] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 69.470430] DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB [ 69.487567] Normal: 1228*4kB (UME) 283*8kB (UME) 151*16kB (UME) 72*32kB (UME) 51*64kB (UME) 11*128kB (ME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 5*2048kB (UME) 693*4096kB (M) = 2911416kB [ 69.507150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 69.515708] 12103 total pagecache pages [ 69.519779] 0 pages in swap cache [ 69.523198] Swap cache stats: add 0, delete 0, find 0/0 [ 69.528524] Free swap = 0kB [ 69.531523] Total swap = 0kB [ 69.534516] 1965969 pages RAM [ 69.537587] 0 pages HighMem/MovableOnly [ 69.541546] 320509 pages reserved [ 69.545014] syz-executor2: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 69.555746] CPU: 0 PID: 6334 Comm: syz-executor2 Not tainted 4.9.80-gb30d2b5 #28 [ 69.563254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.572575] ffff8801ad157938 ffffffff81d94b69 1ffff10035a2af2a ffff8801ad18e000 [ 69.580542] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801ad157a48 [ 69.588500] ffffffff81451ca2 024000c2ad157988 0000000041b58ab3 ffffffff84195215 [ 69.596457] Call Trace: [ 69.599013] [] dump_stack+0xc1/0x128 [ 69.604346] [] warn_alloc+0x212/0x240 [ 69.609763] [] ? zone_watermark_ok_safe+0x280/0x280 [ 69.616397] [] ? avc_has_perm+0xb0/0x4f0 [ 69.622076] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 69.628542] [] __vmalloc_node_range+0x3f5/0x5f0 [ 69.634829] [] ? check_preemption_disabled+0x3b/0x200 [ 69.641646] [] ? task_has_security+0x130/0x270 [ 69.647848] [] vmalloc+0x5b/0x70 [ 69.652831] [] ? sel_write_load+0x130/0xfd0 [ 69.658772] [] sel_write_load+0x130/0xfd0 [ 69.664539] [] ? set_next_entity+0x1bf/0xbe0 [ 69.670565] [] ? check_preemption_disabled+0x3b/0x200 [ 69.677370] [] ? sel_read_bool+0x250/0x250 [ 69.683221] [] ? mark_held_locks+0xaf/0x100 [ 69.689165] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 69.695450] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 69.702256] [] ? sel_read_bool+0x250/0x250 [ 69.708107] [] __vfs_write+0x103/0x680 [ 69.713611] [] ? do_iter_readv_writev+0x400/0x400 [ 69.720071] [] ? __lock_is_held+0xa1/0xf0 [ 69.725838] [] ? __lock_is_held+0xa1/0xf0 [ 69.731605] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 69.738413] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 69.744962] [] ? __sb_start_write+0x14a/0x310 [ 69.751083] [] vfs_write+0x189/0x530 [ 69.756413] [] SyS_write+0xd9/0x1b0 [ 69.761668] [] ? SyS_read+0x1b0/0x1b0 2018/02/04 12:04:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000069c000-0x22)="220000001a00070b00000000ef001201014b81bf0500010007fffc00000000000500", 0x22) 2018/02/04 12:04:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = gettid() waitid(0x0, r1, 0x0, 0x40000009, &(0x7f0000812000)) ptrace$pokeuser(0x6, r1, 0x20, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:04:03 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='n#]/\x00', 0x2) ioctl$TIOCCONS(r0, 0x541d) unshare(0x12820800) r1 = socket(0x18, 0x0, 0x4) getsockname(r1, &(0x7f00007f2000)=@generic, &(0x7f0000fad000)=0x80) 2018/02/04 12:04:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000a29000)='/selinux/checkreqprot\x00', 0x400, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000d50000-0x10)=[@in={0x2, 0x1, @multicast1=0xe0000001}], 0x10) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r1 = inotify_init1(0xfffffff7ffffffff) inotify_add_watch(r1, &(0x7f0000dcb000-0xa)='./control\x00', 0x20) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000054000-0x10)='/dev/sequencer2\x00', 0x1, 0x0) mq_timedsend(r2, &(0x7f0000843000)="639f4c62a1f2a5dbe5622d4b0b769537753d3ab87d2afd7ffbfc035637a3b3eefd5437f546fb015542261527d5c23d53dbbd96b846f7f54e05b02500fdba5fe934c43ff0b76288e94c6c", 0x4a, 0x9, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000170000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000182000-0xf8)={{0xffffffffffffffff, 0x2, 0x61a, 0x3, 0x7d}, 0x800, 0x9, 'id0\x00', 'timer0\x00', 0x0, 0x5, 0x4, 0x2, 0x1}) open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) open$dir(&(0x7f0000ba6000)='./control\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x2) 2018/02/04 12:04:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00007b5000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f000011d000-0x4c)={0xfffffffffffffffc, 0x1f, 0x7}) rename(&(0x7f0000348000-0x8)='./file0\x00', &(0x7f0000c2a000)='./file0\x00') mkdir(&(0x7f0000047000-0x6)='./bus\x00', 0x0) statfs(&(0x7f0000c83000)='./bus\x00', &(0x7f0000582000-0x91)=""/145) r1 = open$dir(&(0x7f0000029000)='./bus\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000a76000-0x18)=""/24, 0x18) 2018/02/04 12:04:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ax25(0x3, 0x3, 0xf1, &(0x7f0000d04000-0x8)={0x0, 0x0}) flistxattr(r0, &(0x7f000084f000)=""/200, 0xc8) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00003e7000-0xe)='/selinux/load\x00', 0x2, 0x0) accept(r0, &(0x7f000040f000-0x58)=@alg, &(0x7f00006c9000)=0x58) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000bc2000)='/dev/sequencer2\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000ca4000-0x8)={0x0, 0x100000000}, &(0x7f0000221000-0x4)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000ca0000)={r3, 0xa}, &(0x7f000058d000-0x4)=0x16c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000852000)={r4, @in6={{0xa, 0x3, 0xfff, @mcast1={0xff, 0x1, [], 0x1}, 0x6}}, [0x319, 0x8, 0x5, 0x100000000, 0x9, 0x4, 0xffff, 0x0, 0x7, 0x7ff, 0x10000, 0x40, 0x3ff, 0xffffffffffff8001, 0xaeb5]}, &(0x7f0000dba000)=0x108) ioctl$int_in(r1, 0x5421, &(0x7f0000f76000)=0x9) write(r1, &(0x7f00000f9000-0x2f), 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000557000)={0x74, &(0x7f0000f79000)="6836d4f12878aa38eb25ad52d3c0282a04933759053638ac3348db6029308f67d8f00f6d9a53c581eb40b43bc4301843c2682310e548c981151c9ac542491a27e713eea870ee47298614f196b5f5c97f560aacbc66b411a19969277d02e0da698ba7b071bda83b736bb2f01fdd1d868b68012a14"}) 2018/02/04 12:04:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrlimit(0xb, &(0x7f000072a000)) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000715000-0x15)='/dev/pktcdvd/control\x00', 0x400, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000e2a000)={0x4, 0x8, 0x100000000, 0x3da, 0x1}) write(r0, &(0x7f00000f9000-0x2f), 0x0) r2 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000083000)={0x2000}) 2018/02/04 12:04:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000f75000-0xbc)={0x3ff, 0x3, 'client0\x00', 0xffffffff80000000, "ae44fc9e1fd78eed", "827a902b0ce59338aee8f2ab27c82936a4d298134f0c6c97cb766bd6b8b0e5a7", 0x100000001, 0x6}) write(r0, &(0x7f00000f9000-0x2f), 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e73000)='/dev/sequencer2\x00', 0x400, 0x0) fcntl$notify(r0, 0x402, 0x80000004) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000672000-0x4)={0xce}, 0x4) 2018/02/04 12:04:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a3000-0x10)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f000084b000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f000029c000)) 2018/02/04 12:04:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000b89000-0x10)="200000000000000031253a000030f10b", 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000441000)={0x0, 0xffffffffffffffff}, &(0x7f0000c18000)=0x8) write(r0, &(0x7f0000793000)="74772a62136bfb3549b8a483e57ab096d078251dc8b52609569afe6640ea6582597e9e93594e63f5b33d4fc2365710c19c84cd0bbff344e80b8f2234a3e16fb3ab3caecf12de89adcb26503eb63fa4a521c339c83d6913428fd19e989ca327c921f6c9724c82c1b25a65cfe31830ac811664de2a46ae58", 0x77) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) [ 69.767114] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 69.767123] [] ? trace_hardirqs_on_thunk+0x1a/0x1c 2018/02/04 12:04:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000188000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00002e8000)={0x0, 0xf99, 0x30, 0x9}, &(0x7f0000881000-0x4)=0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00005e8000)={r2, @in6={{0xa, 0x1, 0xffffffffffffff00, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}}, 0x8c) ioctl$KDSKBLED(r0, 0x4b65, 0xd7f) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f000080d000-0x65)=""/101, &(0x7f0000aac000-0x4)=0x65) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000f97000-0x4)=0x9, 0x4) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000e62000-0x4)) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000b92000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000462000-0x4)) write(r3, &(0x7f00000f9000-0x2f), 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f000008d000)=""/65) ioctl(r1, 0x4, &(0x7f00008c7000)="cbb1e674e53bbb09b7ad53e63a176bb052b0be93511d97b1c75e7c5a18b359544bf8bbad7dc1e18e6e3f49d9b38e54a2684b56f1f008df88285ea17195c1abd313a120839b497bb7dcd23be96542cf7c8b472627c3ed520f8d0806e9ef6478c0189a9b2241c3d34376b9542d028442c92b504d3e6173c0c4b772c422b8b4c8cae76243d3f0d80c0f70234fd3e16bf2166baf9dc6c0b7999c113fb1a37640043b37ca1a958a0119d28009960e7f9eaaabd802d777648cc4cd5d0bf5ad4274f77d966d3657939f7b177e76c4c6d9") 2018/02/04 12:04:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000069c000-0x22)="220000001a00070b00000000ef001201014b81bf0500010007fffc00000000000500", 0x22) 2018/02/04 12:04:03 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000d4e000-0x4)=0x0) ptrace$peek(0x1, r0, &(0x7f0000540000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000f90000-0xe)='/dev/keychord\x00', 0x400840, 0x0) bind$pptp(r1, &(0x7f0000b75000)={0x18, 0x2, {0x1, @multicast1=0xe0000001}}, 0x20) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x0) write(r2, &(0x7f00000f9000-0x2f), 0x0) 2018/02/04 12:04:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) 2018/02/04 12:04:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$KDGKBSENT(r0, 0xc004743e, &(0x7f000074b000-0x4)={0x0, 0x0, 0x103}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000276000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000ca000)=""/246) close(r1) [ 69.767131] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 69.768926] Mem-Info: [ 69.768943] active_anon:52093 inactive_anon:44 isolated_anon:0 [ 69.768943] active_file:3522 inactive_file:8524 isolated_file:0 2018/02/04 12:04:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x14, &(0x7f00000c6000-0x18)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@generic={0x8863, "94a7030000e8"}}}, &(0x7f0000efe000)={0x0, 0x0, []}) 2018/02/04 12:04:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000242000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000697000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009a9000)={0x20, 0x0, &(0x7f00004e4000-0x20)=[@acquire_done={0x40106309, r1}, @release={0x40046306, 0x4}, @exit_looper={0x630d}], 0x35, 0x0, &(0x7f0000a69000)="a78416148aee4da75f46444941cbd4edd00cf145ad35853a09951e23381ba73e13baf43537f9406df16aa8ae33a90ca28b9dce1d42"}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000176000-0x1)}) 2018/02/04 12:04:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000950000-0x38)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0xc, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/04 12:04:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00005cb000-0xb)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000f58000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3ffffff000065000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867dfffe0200"}) 2018/02/04 12:04:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00001ea000)='/selinux/load\x00', 0x2, 0x0) syz_open_dev$loop(&(0x7f0000c2c000)='/dev/loop#\x00', 0x2291, 0x302) write(r0, &(0x7f00000f9000-0x2f), 0x0) [ 69.768943] unevictable:0 dirty:425 writeback:0 unstable:0 [ 69.768943] slab_reclaimable:5397 slab_unreclaimable:60195 [ 69.768943] mapped:24031 shmem:51 pagetables:619 bounce:0 [ 69.768943] free:1477998 free_pcp:431 free_cma:0 [ 69.768958] Node 0 active_anon:208372kB inactive_anon:176kB active_file:14088kB inactive_file:34096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96124kB dirty:1700kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 77824kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 69.768973] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 69.768998] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:636kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 69.769024] Normal free:2916000kB min:36824kB low:46028kB high:55232kB active_anon:208372kB inactive_anon:176kB active_file:14088kB inactive_file:34096kB unevictable:0kB writepending:1700kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21588kB slab_unreclaimable:240780kB kernel_stack:5408kB pagetables:2476kB bounce:0kB free_pcp:1088kB local_pcp:476kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 69.769072] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 1338*4kB (UME) 291*8kB (UME) 150*16kB (UME) 70*32kB (UME) 52*64kB (UME) 11*128kB (ME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 5*2048kB (UME) 694*4096kB (M) = 2916000kB [ 69.769167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 69.769169] 12104 total pagecache pages [ 69.769172] 0 pages in swap cache [ 69.769176] Swap cache stats: add 0, delete 0, find 0/0 [ 69.769178] Free swap = 0kB [ 69.769180] Total swap = 0kB [ 69.769182] 1965969 pages RAM [ 69.769184] 0 pages HighMem/MovableOnly [ 69.769186] 320509 pages reserved [ 69.790963] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 69.790972] CPU: 1 PID: 6360 Comm: syz-executor0 Not tainted 4.9.80-gb30d2b5 #28 [ 69.790978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.790992] ffff8801b2e3f938 ffffffff81d94b69 1ffff100365c7f2a ffff8801d8401800 [ 69.791004] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b2e3fa48 [ 69.791016] ffffffff81451ca2 024000c2b2e3f988 0000000041b58ab3 ffffffff84195215 [ 69.791018] Call Trace: [ 69.791032] [] dump_stack+0xc1/0x128 [ 69.791042] [] warn_alloc+0x212/0x240 [ 69.791052] [] ? zone_watermark_ok_safe+0x280/0x280 [ 69.791063] [] ? avc_has_perm+0xb0/0x4f0 [ 69.791073] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 69.791082] [] __vmalloc_node_range+0x3f5/0x5f0 [ 69.791092] [] ? check_preemption_disabled+0x3b/0x200 [ 69.791101] [] ? task_has_security+0x130/0x270 [ 69.791109] [] vmalloc+0x5b/0x70 [ 69.791117] [] ? sel_write_load+0x130/0xfd0 [ 69.791124] [] sel_write_load+0x130/0xfd0 [ 69.791131] [] ? get_futex_key+0x1050/0x1050 [ 69.791139] [] ? sel_read_bool+0x250/0x250 [ 69.791150] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 69.791156] [] ? do_futex+0x3f8/0x15c0 [ 69.791165] [] ? sel_read_bool+0x250/0x250 [ 69.791174] [] __vfs_write+0x103/0x680 [ 69.791181] [] ? do_iter_readv_writev+0x400/0x400 [ 69.791189] [] ? __lock_is_held+0xa1/0xf0 [ 69.791196] [] ? __lock_is_held+0xa1/0xf0 [ 69.791205] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 69.791213] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 69.791220] [] ? __sb_start_write+0x14a/0x310 [ 69.791228] [] vfs_write+0x189/0x530 [ 69.791235] [] SyS_write+0xd9/0x1b0 [ 69.791243] [] ? SyS_read+0x1b0/0x1b0 [ 69.791251] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 69.791258] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 69.791268] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 69.791272] Mem-Info: [ 69.791290] active_anon:51027 inactive_anon:44 isolated_anon:0 [ 69.791290] active_file:3522 inactive_file:8524 isolated_file:0 [ 69.791290] unevictable:0 dirty:425 writeback:0 unstable:0 [ 69.791290] slab_reclaimable:5397 slab_unreclaimable:60304 [ 69.791290] mapped:24081 shmem:51 pagetables:693 bounce:0 [ 69.791290] free:1478218 free_pcp:399 free_cma:0 [ 69.791307] Node 0 active_anon:204108kB inactive_anon:176kB active_file:14088kB inactive_file:34096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96324kB dirty:1700kB writeback:0kB shmem:204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 77824kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 69.791338] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 69.791370] DMA32 free:2980084kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 69.791402] Normal free:2916880kB min:36824kB low:46028kB high:55232kB active_anon:204108kB inactive_anon:176kB active_file:14088kB inactive_file:34096kB unevictable:0kB writepending:1700kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:21588kB slab_unreclaimable:241216kB kernel_stack:5920kB pagetables:2772kB bounce:0kB free_pcp:956kB local_pcp:408kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 69.791451] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980084kB Normal: 1270*4kB (UME) 287*8kB (UME) 150*16kB (UME) 38*32kB (UME) 53*64kB (UME) 11*128kB (ME) 4*256kB (ME) 4*512kB (ME) 42*1024kB (ME) 2*2048kB (UE) 696*4096kB (M) = 2916784kB [ 69.791550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 69.791553] 12104 total pagecache pages [ 69.791556] 0 pages in swap cache [ 69.791560] Swap cache stats: add 0, delete 0, find 0/0 [ 69.791562] Free swap = 0kB [ 69.791564] Total swap = 0kB [ 69.791567] 1965969 pages RAM [ 69.791569] 0 pages HighMem/MovableOnly [ 69.791571] 320509 pages reserved [ 69.793271] binder: 6353:6367 got transaction with invalid handle, 0 [ 69.793294] binder: 6353:6367 transaction failed 29201/-22, size 56-8 line 3219 [ 69.798798] binder_alloc: binder_alloc_mmap_handler: 6353 20000000-20002000 already mapped failed -16 [ 69.800005] binder: BINDER_SET_CONTEXT_MGR already set [ 69.800013] binder: 6353:6367 ioctl 40046207 0 returned -16 [ 69.807078] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.843760] binder: 6380:6384 got transaction with invalid handle, 0 [ 69.843786] binder: 6380:6384 transaction failed 29201/-22, size 56-8 line 3219 [ 69.862549] binder: BINDER_SET_CONTEXT_MGR already set [ 69.862557] binder: 6380:6384 ioctl 40046207 0 returned -16 [ 69.862599] binder_alloc: 6380: binder_alloc_buf, no vma [ 69.862614] binder: 6380:6398 transaction failed 29189/-3, size 56-8 line 3127 [ 69.867297] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.867465] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.914943] binder: 6404:6409 BC_ACQUIRE_DONE u0000000000000000 no match [ 69.914954] binder: 6404:6409 Release 1 refcount change on invalid ref 4 ret -22 [ 69.917026] ================================================================== [ 69.917041] BUG: KASAN: double-free or invalid-free in relay_open+0x603/0x860 [ 69.917042] [ 69.917053] CPU: 1 PID: 6412 Comm: syz-executor7 Not tainted 4.9.80-gb30d2b5 #28 [ 69.917058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.917073] ffff8801b13c78b8 ffffffff81d94b69 ffffea0007054380 ffff8801c150e000 [ 69.917084] ffff8801da001280 ffffffff8137d8a3 0000000000000282 ffff8801b13c78f0 [ 69.917095] ffffffff8153e093 ffff8801c150e000 ffffffff8137d8a3 ffff8801da001280 [ 69.917098] Call Trace: [ 69.917111] [] dump_stack+0xc1/0x128 [ 69.917120] [] ? relay_open+0x603/0x860 [ 69.917130] [] print_address_description+0x73/0x280 [ 69.917137] [] ? relay_open+0x603/0x860 [ 69.917144] [] ? relay_open+0x603/0x860 [ 69.917152] [] kasan_report_double_free+0x64/0xa0 [ 69.917159] [] kasan_slab_free+0xa4/0xc0 [ 69.917165] [] kfree+0x103/0x300 [ 69.917172] [] relay_open+0x603/0x860 [ 69.917180] [] do_blk_trace_setup+0x3e9/0x950 [ 69.917186] [] blk_trace_setup+0xe0/0x1a0 [ 69.917193] [] ? do_blk_trace_setup+0x950/0x950 [ 69.917199] [] ? disk_name+0x98/0x100 [ 69.917206] [] blk_trace_ioctl+0x1de/0x300 [ 69.917213] [] ? compat_blk_trace_setup+0x250/0x250 [ 69.917221] [] ? avc_has_extended_perms+0x3fc/0xf10 [ 69.917228] [] ? get_futex_key+0x1050/0x1050 [ 69.917236] [] ? save_stack_trace+0x16/0x20 [ 69.917243] [] ? save_stack+0x43/0xd0 [ 69.917250] [] ? kasan_slab_free+0x72/0xc0 [ 69.917258] [] blkdev_ioctl+0xb00/0x1a60 [ 69.917265] [] ? blkpg_ioctl+0x930/0x930 [ 69.917274] [] ? __lock_acquire+0x629/0x3640 [ 69.917280] [] ? do_futex+0x3f8/0x15c0 [ 69.917289] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 69.917297] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 69.917306] [] block_ioctl+0xde/0x120 [ 69.917320] [] ? blkdev_fallocate+0x440/0x440 [ 69.917330] [] do_vfs_ioctl+0x1aa/0x1140 [ 69.917339] [] ? ioctl_preallocate+0x220/0x220 [ 69.917346] [] ? selinux_file_ioctl+0x355/0x530 [ 69.917354] [] ? selinux_capable+0x40/0x40 [ 69.917360] [] ? __fget+0x201/0x3a0 [ 69.917366] [] ? __fget+0x228/0x3a0 [ 69.917372] [] ? __fget+0x47/0x3a0 [ 69.917380] [] ? security_file_ioctl+0x89/0xb0 [ 69.917386] [] SyS_ioctl+0x8f/0xc0 [ 69.917394] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 69.917396] [ 69.917400] Allocated by task 6412: [ 69.917406] save_stack_trace+0x16/0x20 [ 69.917412] save_stack+0x43/0xd0 [ 69.917417] kasan_kmalloc+0xad/0xe0 [ 69.917423] kmem_cache_alloc_trace+0xfb/0x2a0 [ 69.917429] relay_open+0x91/0x860 [ 69.917434] do_blk_trace_setup+0x3e9/0x950 [ 69.917439] blk_trace_setup+0xe0/0x1a0 [ 69.917445] blk_trace_ioctl+0x1de/0x300 [ 69.917451] blkdev_ioctl+0xb00/0x1a60 [ 69.917457] block_ioctl+0xde/0x120 [ 69.917462] do_vfs_ioctl+0x1aa/0x1140 [ 69.917467] SyS_ioctl+0x8f/0xc0 [ 69.917473] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 69.917474] [ 69.917477] Freed by task 6412: [ 69.917482] save_stack_trace+0x16/0x20 [ 69.917487] save_stack+0x43/0xd0 [ 69.917493] kasan_slab_free+0x72/0xc0 [ 69.917498] kfree+0x103/0x300 [ 69.917504] relay_destroy_channel+0x16/0x20 [ 69.917509] relay_open+0x5ea/0x860 [ 69.917516] do_blk_trace_setup+0x3e9/0x950 [ 69.917524] blk_trace_setup+0xe0/0x1a0 [ 69.917531] blk_trace_ioctl+0x1de/0x300 [ 69.917539] blkdev_ioctl+0xb00/0x1a60 [ 69.917546] block_ioctl+0xde/0x120 [ 69.917550] do_vfs_ioctl+0x1aa/0x1140 [ 69.917555] SyS_ioctl+0x8f/0xc0 [ 69.917561] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 69.917562] [ 69.917567] The buggy address belongs to the object at ffff8801c150e000 [ 69.917567] which belongs to the cache kmalloc-512 of size 512 [ 69.917572] The buggy address is located 0 bytes inside of [ 69.917572] 512-byte region [ffff8801c150e000, ffff8801c150e200) [ 69.917574] The buggy address belongs to the page: [ 69.917583] page:ffffea0007054380 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 69.917587] flags: 0x8000000000004080(slab|head) [ 69.917590] page dumped because: kasan: bad access detected [ 69.917591] [ 69.917593] Memory state around the buggy address: [ 69.917599] ffff8801c150df00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.917604] ffff8801c150df80: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 69.917609] >ffff8801c150e000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.917611] ^ [ 69.917616] ffff8801c150e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.917621] ffff8801c150e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.917623] ================================================================== [ 69.917624] Disabling lock debugging due to kernel taint [ 69.917710] Kernel panic - not syncing: panic_on_warn set ... [ 69.917710] [ 69.917717] CPU: 1 PID: 6412 Comm: syz-executor7 Tainted: G B 4.9.80-gb30d2b5 #28 [ 69.917720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.917729] ffff8801b13c7810 ffffffff81d94b69 ffffffff841970af ffff8801b13c78e8 [ 69.917736] ffff8801da001200 ffffffff8137d8a3 0000000000000282 ffff8801b13c78d8 [ 69.917743] ffffffff8142f541 0000000041b58ab3 ffffffff8418ab20 ffffffff8142f385 [ 69.917744] Call Trace: [ 69.917752] [] dump_stack+0xc1/0x128 [ 69.917758] [] ? relay_open+0x603/0x860 [ 69.917767] [] panic+0x1bc/0x3a8 [ 69.917775] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 69.917784] [] ? preempt_schedule+0x25/0x30 [ 69.917790] [] ? ___preempt_schedule+0x16/0x18 [ 69.917797] [] ? relay_open+0x603/0x860 [ 69.917803] [] ? relay_open+0x603/0x860 [ 69.917809] [] kasan_end_report+0x50/0x50 [ 69.917816] [] kasan_report_double_free+0x81/0xa0 [ 69.917823] [] kasan_slab_free+0xa4/0xc0 [ 69.917829] [] kfree+0x103/0x300 [ 69.917835] [] relay_open+0x603/0x860 [ 69.917841] [] do_blk_trace_setup+0x3e9/0x950 [ 69.917847] [] blk_trace_setup+0xe0/0x1a0 [ 69.917853] [] ? do_blk_trace_setup+0x950/0x950 [ 69.917860] [] ? disk_name+0x98/0x100 [ 69.917867] [] blk_trace_ioctl+0x1de/0x300 [ 69.917873] [] ? compat_blk_trace_setup+0x250/0x250 [ 69.917880] [] ? avc_has_extended_perms+0x3fc/0xf10 [ 69.917887] [] ? get_futex_key+0x1050/0x1050 [ 69.917892] [] ? save_stack_trace+0x16/0x20 [ 69.917899] [] ? save_stack+0x43/0xd0 [ 69.917905] [] ? kasan_slab_free+0x72/0xc0 [ 69.917912] [] blkdev_ioctl+0xb00/0x1a60 [ 69.917919] [] ? blkpg_ioctl+0x930/0x930 [ 69.917927] [] ? __lock_acquire+0x629/0x3640 [ 69.917933] [] ? do_futex+0x3f8/0x15c0 [ 69.917939] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 69.917946] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 69.917954] [] block_ioctl+0xde/0x120 [ 69.917961] [] ? blkdev_fallocate+0x440/0x440 [ 69.917967] [] do_vfs_ioctl+0x1aa/0x1140 [ 69.917974] [] ? ioctl_preallocate+0x220/0x220 [ 69.917980] [] ? selinux_file_ioctl+0x355/0x530 [ 69.917985] [] ? selinux_capable+0x40/0x40 [ 69.917992] [] ? __fget+0x201/0x3a0 [ 69.917997] [] ? __fget+0x228/0x3a0 [ 69.918002] [] ? __fget+0x47/0x3a0 [ 69.918009] [] ? security_file_ioctl+0x89/0xb0 [ 69.918015] [] SyS_ioctl+0x8f/0xc0 [ 69.918021] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 69.918458] Dumping ftrace buffer: [ 69.918461] (ftrace buffer empty) [ 69.918464] Kernel Offset: disabled [ 71.518941] Rebooting in 86400 seconds..