[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 19.155772] audit: type=1400 audit(1517502184.989:6): avc: denied { map } for pid=4147 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. 2018/02/01 16:23:11 fuzzer started syzkaller login: [ 25.865625] audit: type=1400 audit(1517502191.699:7): avc: denied { map } for pid=4158 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/01 16:23:12 dialing manager at 10.128.0.26:42425 [ 30.595110] can: request_module (can-proto-0) failed. [ 30.604771] can: request_module (can-proto-0) failed. 2018/02/01 16:23:16 kcov=true, comps=true [ 31.155064] audit: type=1400 audit(1517502196.988:8): avc: denied { map } for pid=4158 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1043 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/01 16:23:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000478000-0x60)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000cf3000)}}) execve(&(0x7f000059f000)='./file0\x00', &(0x7f00008db000-0x8)=[], &(0x7f0000dad000)=[]) 2018/02/01 16:23:19 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) execve(&(0x7f0000014000-0x8)='./file0\x00', &(0x7f0000013000-0x38)=[], &(0x7f0000004000-0x18)=[]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000a80000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00008de000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000028000-0xd)='/dev/snd/seq\x00', 0x0, 0x20002) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000041000)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\x00'}) write$evdev(r0, &(0x7f0000a89000-0xa8)=[{{0x0, 0x2710}}, {}, {{0x77359400}}, {{0x0, 0x2710}, 0x20}, {{}, 0x0, 0x0, 0x100000001}, {}], 0x90) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000607000+0x9c9)={0x3, @tick}) 2018/02/01 16:23:19 executing program 1: mmap(&(0x7f0000000000/0x54000)=nil, 0x54000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000054000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000005000)) 2018/02/01 16:23:19 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000002000)) 2018/02/01 16:23:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000009000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000007000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) 2018/02/01 16:23:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000af6000-0x69), 0x0) 2018/02/01 16:23:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x2, &(0x7f0000dfa000)={0x0, 0x0}) clock_nanosleep(0x2, 0x1, &(0x7f0000c87000)={0x0, r0}, &(0x7f0000a2c000-0x10)) [ 33.413270] audit: type=1400 audit(1517502199.247:9): avc: denied { map } for pid=4158 comm="syz-fuzzer" path="/root/syzkaller-shm349696785" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.468516] audit: type=1400 audit(1517502199.302:10): avc: denied { sys_admin } for pid=4202 comm="syz-executor7" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.483258] IPVS: ftp: loaded support on port[0] = 21 [ 33.551418] audit: type=1400 audit(1517502199.384:11): avc: denied { net_admin } for pid=4207 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 33.553560] IPVS: ftp: loaded support on port[0] = 21 [ 33.595252] IPVS: ftp: loaded support on port[0] = 21 [ 33.644158] IPVS: ftp: loaded support on port[0] = 21 [ 33.714290] IPVS: ftp: loaded support on port[0] = 21 [ 33.789154] IPVS: ftp: loaded support on port[0] = 21 [ 33.881345] IPVS: ftp: loaded support on port[0] = 21 [ 34.003281] IPVS: ftp: loaded support on port[0] = 21 [ 34.856759] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.949461] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 34.973726] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.156865] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.170798] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.369164] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.531479] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 35.667461] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.463549] audit: type=1400 audit(1517502203.297:12): avc: denied { sys_chroot } for pid=4207 comm="syz-executor4" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/01 16:23:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x3}, 0x1c) 2018/02/01 16:23:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000cf0000), 0x4) timerfd_gettime(r0, &(0x7f0000d93000)) [ 37.501621] device syz4 entered promiscuous mode [ 37.502637] device syz4 left promiscuous mode [ 37.511813] device syz4 entered promiscuous mode 2018/02/01 16:23:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000-0x16)='net/ip_tables_targets\x00') setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x80000000, 0x4) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000057000-0x8)) fallocate(r1, 0x1, 0x0, 0x8000) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000ba6000-0xc)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000cee000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000da8000)={r2, r3}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000528000)={0x80000001}, 0x1) sync() setrlimit(0xc, &(0x7f000066f000)={0x4, 0x200}) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0xbe, 0x7, 0x2}) 2018/02/01 16:23:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000cf0000), 0x4) timerfd_gettime(r0, &(0x7f0000d93000)) [ 37.525689] device syz4 left promiscuous mode [ 37.612874] audit: type=1400 audit(1517502203.330:13): avc: denied { net_raw } for pid=5154 comm="syz-executor4" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/01 16:23:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00009b6000-0x6)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000ef5000-0xb4)=[{{&(0x7f000016e000-0x60)=@nfc_llcp, 0x60, &(0x7f000046c000-0x20)=[]}}], 0x1, 0x0, &(0x7f00009ea000-0x10)={0x77359400}) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xfffffffffffffefc, 0x0, 0x0, 0x21c) [ 37.671681] audit: type=1400 audit(1517502203.503:14): avc: denied { dac_override } for pid=5194 comm="syz-executor5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/01 16:23:23 executing program 2: r0 = request_key(&(0x7f0000e6c000-0x8)='keyring\x00', &(0x7f0000b9f000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000bd9000-0x1)='\x00', 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) 2018/02/01 16:23:23 executing program 5: r0 = add_key$keyring(&(0x7f0000386000)='keyring\x00', &(0x7f0000965000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 2018/02/01 16:23:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000378000)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f000006b000-0x8)) mincore(&(0x7f00004df000/0x3000)=nil, 0x3000, &(0x7f0000e3f000)=""/4) [ 37.746825] syz-executor2 uses obsolete (PF_INET,SOCK_PACKET) 2018/02/01 16:23:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) sendmsg(r0, &(0x7f0000bcc000-0x38)={&(0x7f0000917000)=@in6={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000c03000-0x60)=[], 0x0, &(0x7f000056d000-0x260)=[{0x10, 0x29, 0x2}], 0x10}, 0x0) 2018/02/01 16:23:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmmsg(r1, &(0x7f0000f4d000-0x3c)=[{{&(0x7f00002ae000)=@rc={0x1f}, 0x9, &(0x7f0000ca7000-0x30)=[{&(0x7f000050c000)="302a94d687c221952974dcbec6c2bae4529c8da7b759fbe491203ccdab3c0e25d02c06e9e8aef98ae369963503299da2c11696bdcc0cd3f2ba47f21ed7c574f89c8f3835eb1ab8bc9e886e9f6ea67e6dcadbe1f4a65bc5160d8791b7a823575329cabca93a579b1af3b7de54bf19f3674e54d2d57949c68e34b40e62781314f444314ba9787ea45e836e2b5796fc6d43dd625a14dfb002cf9abd722bee15251b14b68bf6605d13790c80cb8ea3678bc0fb963367b209e7aad259da2b30f78cd6f15a2326fba6e6b60dcc74a865651cc8765aba4443e9f183", 0xd8}], 0x1, &(0x7f0000c6d000)=[], 0x0, 0x800}, 0x4}], 0x1, 0x8000) sendmsg(r1, &(0x7f0000b82000)={&(0x7f0000930000-0x6)=@hci={0x1f}, 0x6, &(0x7f0000e42000)=[{&(0x7f0000781000)="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", 0x4df}], 0x1, &(0x7f0000634000)=[]}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058d000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a58000-0x20)=[{&(0x7f0000787000-0x1000)="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", 0x3fd}], 0x1, &(0x7f0000f89000-0x80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8c000-0xb1)=""/177, 0xb1}], 0x2) recvmsg(r1, &(0x7f0000a33000-0x38)={&(0x7f0000856000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @mcast1}, 0xf, &(0x7f000087f000)=[{&(0x7f00004ad000-0xbf)=""/191, 0xfcd3}], 0x1, &(0x7f0000156000-0xc2)=""/194, 0xc2}, 0x0) sendmsg$netlink(r1, &(0x7f0000791000)={&(0x7f0000757000-0xc)=@proc={0x10}, 0xc, &(0x7f0000713000)=[{&(0x7f00006aa000-0x164)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, "", []}, 0x10}], 0x1}, 0x0) 2018/02/01 16:23:23 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000dc4000), 0x1) 2018/02/01 16:23:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) sendmmsg(r0, &(0x7f0000d96000-0x60)=[{{&(0x7f0000e26000-0x10)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000aa9000)=[], 0x0, &(0x7f0000afd000)=[{0xc}], 0xc}}], 0x1, 0x0) 2018/02/01 16:23:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000378000)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f000006b000-0x8)) mincore(&(0x7f00004df000/0x3000)=nil, 0x3000, &(0x7f0000e3f000)=""/4) 2018/02/01 16:23:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000c00000)='net/fib_triestat\x00') sendfile(r0, r0, &(0x7f00001a7000-0x4), 0x400) 2018/02/01 16:23:23 executing program 1: mmap(&(0x7f0000000000/0xfc2000)=nil, 0xfc2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000020000-0x8)='./file0\x00', &(0x7f000001f000)='./file0\x00', &(0x7f0000014000)='ramfs.', 0x0, &(0x7f000000a000)) 2018/02/01 16:23:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000002, &(0x7f0000691000-0x4)=0x77, 0xfc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00007f4000-0x5)='yeah\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f54000-0x1), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x3, @empty}, 0x10) 2018/02/01 16:23:23 executing program 5: mmap(&(0x7f0000064000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000065000-0x10)={0x4, 0x9}, &(0x7f000002b000-0x10)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() mmap(&(0x7f0000b37000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b37000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f0000013000-0x8d), 0x0, 0x0, &(0x7f0000013000-0x10)=@ax25={0x6, {"2d13d4162d9f33"}}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r4, &(0x7f000004c000-0x5e)=""/1, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) tkill(r0, 0x16) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 38.120364] audit: type=1400 audit(1517502203.953:15): avc: denied { dac_read_search } for pid=4217 comm="syz-executor1" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/01 16:23:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000410000-0x4)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) socket(0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000004000)="8c8b7a4e507db2b66d345722f00dea1ab6267267d4df14cb474a18e2", 0x1c) close(r0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5111, &(0x7f0000697000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00003f7000)={0x0, 0x0, 0x0, 'queue0\x00'}) recvfrom(0xffffffffffffffff, &(0x7f000047c000)=""/124, 0x7c, 0x0, &(0x7f00008ca000-0x10)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10) 2018/02/01 16:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) read(r0, &(0x7f0000455000)=""/52, 0x34) 2018/02/01 16:23:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00008cb000)=0x5, 0x4) sendto$inet6(r0, &(0x7f00009f1000-0x3d), 0x229, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x1, 0x0, @empty}, 0x1c) 2018/02/01 16:23:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000148000-0x10)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000702000-0x4a)={'system_u:object_r:framebuf_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x38, 0x35}, 0x48) 2018/02/01 16:23:24 executing program 3: r0 = syz_fuse_mount(&(0x7f0000007000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000009000-0x3)) 2018/02/01 16:23:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16}]}) chdir(&(0x7f00004f2000)='./file0\x00') 2018/02/01 16:23:24 executing program 5: mmap(&(0x7f0000064000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000065000-0x10)={0x4, 0x9}, &(0x7f000002b000-0x10)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() mmap(&(0x7f0000b37000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b37000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f0000013000-0x8d), 0x0, 0x0, &(0x7f0000013000-0x10)=@ax25={0x6, {"2d13d4162d9f33"}}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r4, &(0x7f000004c000-0x5e)=""/1, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) tkill(r0, 0x16) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/01 16:23:24 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000001000-0xbc)={0x800, 0x0, 'client0\x00', 0x0, "1e666836af653556", "9fbb9681ffdf10a24c85c62e8693f0c168b96962eefa1403b1e5c0877cb550f7"}) 2018/02/01 16:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000ac9000-0x38)={&(0x7f0000ac2000)={0x10}, 0x96, &(0x7f00004e6000-0x10)={&(0x7f000003b000-0x1c)={0x14, 0x4, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, []}, 0x14}, 0x1}, 0x0) 2018/02/01 16:23:24 executing program 4: mmap(&(0x7f0000000000/0xb03000)=nil, 0xb03000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000215000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001e000-0x4)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000b01000-0x34)={{0x100000001}}) readv(r0, &(0x7f000053d000)=[{&(0x7f0000b00000-0xdc)=""/220, 0xdc}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001d000-0x50)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000495000)) 2018/02/01 16:23:24 executing program 3: mmap(&(0x7f0000000000/0xb28000)=nil, 0xb28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000fb000-0xb)='/dev/loop#\x00', 0x0, 0x4000000006) mmap(&(0x7f0000b28000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b29000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000b2a000-0x16)='/selinux/checkreqprot\x00', 0x14101, 0x0) mmap(&(0x7f0000b29000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b29000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001a000/0x4000)=nil, 0x4000, 0x7, 0x51, r0, 0x0) getresuid(&(0x7f0000012000-0x4), &(0x7f000001a000), &(0x7f000002a000)) 2018/02/01 16:23:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1={0xff, 0x1, [], 0x1}]}, 0x18) sendto$inet6(r0, &(0x7f0000307000), 0x219, 0x0, &(0x7f0000fc8000)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 38.402769] SELinux: Invalid class 85 [ 38.409804] audit: type=1326 audit(1517502204.243:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=5311 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0xffff0000 [ 38.480144] audit: type=1400 audit(1517502204.287:17): avc: denied { create } for pid=5327 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 38.518429] audit: type=1400 audit(1517502204.291:18): avc: denied { write } for pid=5327 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 38.550555] audit: type=1400 audit(1517502204.305:19): avc: denied { map } for pid=5329 comm="syz-executor3" path="/dev/loop0" dev="devtmpfs" ino=14085 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 [ 38.583990] audit: type=1326 audit(1517502204.341:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=5311 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0xffff0000 2018/02/01 16:23:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000beb000-0x8)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000cb9000)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000023000), 0x26a950b) 2018/02/01 16:23:24 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x80045438, &(0x7f0000001000)) 2018/02/01 16:23:24 executing program 1: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@generic="6b0b9e043847f41ea9367a03cbadec54", @ifru_settings={0xfffffffffffffffe, 0x800, @fr=&(0x7f0000002000-0x18)}}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000004000-0x10)={0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000002000-0x4)) 2018/02/01 16:23:24 executing program 4: mmap(&(0x7f0000000000/0xb03000)=nil, 0xb03000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000215000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001e000-0x4)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000b01000-0x34)={{0x100000001}}) readv(r0, &(0x7f000053d000)=[{&(0x7f0000b00000-0xdc)=""/220, 0xdc}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001d000-0x50)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000495000)) 2018/02/01 16:23:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000bdb000)='status\x00') prctl$setname(0xf, &(0x7f0000cfa000)="73797374656d0a65071cdf5a256c6f29402d8d7973746539ff69636770797065766d6e657430e2fe") sendfile(r1, r1, &(0x7f000075c000), 0xf5d) 2018/02/01 16:23:24 executing program 6: clone(0x0, &(0x7f00005b1000), &(0x7f00000b9000), &(0x7f00004b2000), &(0x7f0000231000-0x1)) fgetxattr(0xffffffffffffffff, &(0x7f0000037000-0x10)=@random={'btrfs.\x00', '/dev/vcs\x00'}, &(0x7f00004b1000)=""/4096, 0x1000) 2018/02/01 16:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000006b000+0xbc5)='/dev/sequencer\x00', 0x48a02, 0x0) write$sndseq(r0, &(0x7f0000ea2000)=[{0xfffffffffffffffd, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f00003d7000)}}], 0x30) 2018/02/01 16:23:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00008ea000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000b2a000-0x8)='./file0\x00', &(0x7f00008f9000-0x8)='./file0\x00', &(0x7f000067f000)='mqueue\x00', 0x800, 0x0) r0 = open$dir(&(0x7f000001c000-0xc)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000386000), 0x0) 2018/02/01 16:23:24 executing program 6: mmap(&(0x7f0000000000/0xe7a000)=nil, 0xe7a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000380000-0x38)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6d000-0x10)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3, "", []}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) 2018/02/01 16:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008c3000-0x20)={@generic="6c6f3a33f57ba265c9c4fcc52956cea2", @ifru_addrs={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}) 2018/02/01 16:23:24 executing program 0: mmap(&(0x7f0000000000/0xefa000)=nil, 0xefa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000ef0000-0x4)=0x7fd, 0x4) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000eee000)=0x4, 0x4) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x0, @empty}, 0x10) recvmsg(r1, &(0x7f00005b7000)={0x0, 0x0, &(0x7f0000ef5000-0x40)=[], 0x0, &(0x7f0000ee0000-0x51)}, 0x2020) 2018/02/01 16:23:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000517000-0x10)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b9000-0x9)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000589000-0x1), 0xfffffffffffffe98, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e6000-0x10)={&(0x7f0000abe000-0x104)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/01 16:23:24 executing program 5: mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x3, &(0x7f0000000000)=[{0x2d, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0xffffffff}]}) keyctl$reject(0x13, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) 2018/02/01 16:23:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0x0, 0x0, &(0x7f0000d94000), 0x0) r1 = syz_open_dev$loop(&(0x7f00009f2000-0xb)='/dev/loop#\x00', 0x4000000000000, 0x0) r2 = memfd_create(&(0x7f0000d0c000-0x2)="7b10", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r1, 0x4c01) mq_timedreceive(r2, &(0x7f0000a85000-0xc5)=""/197, 0xc5, 0x3ff, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 2018/02/01 16:23:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000d17000-0x38)={&(0x7f0000882000-0x1c)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c, &(0x7f0000c88000)=[], 0x0, &(0x7f0000fbc000-0x88)=[{0x18, 0x29, 0xb, "5198"}], 0x18}, 0x0) 2018/02/01 16:23:24 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:24 executing program 1: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x3d, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f000000a000)=[@fda={0x77622a85}], &(0x7f000000b000)=[]}}}], 0x0, 0x0, &(0x7f000000b000)}) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0xc, 0x0, &(0x7f000000d000-0xbc)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000009000-0x8e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000f000-0x30)={0x0, 0x0, &(0x7f000000e000)=[], 0x1, 0xfdfd, &(0x7f000000d000-0x68)="ef"}) 2018/02/01 16:23:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000271000)={{0x100000001, 0x0, 0x0, 0x0, 0x2}}) 2018/02/01 16:23:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0xf, &(0x7f0000017000)={0x4000080000004}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000040f000)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00007da000-0x50)={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x800, 0x400, 0x6088, 0x400, 0x7, 0x30104}) r1 = syz_open_dev$tun(&(0x7f00002d2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000410000-0x4)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @fr=&(0x7f0000013000-0x18)}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000ed5000-0x10)=@buf={0x0, &(0x7f0000ed4000)}) add_key(&(0x7f0000acb000-0xc)='cifs.spnego\x00', &(0x7f0000763000)={0x73, 0x79, 0x7a}, &(0x7f00007af000-0x1000), 0x0, 0xfffffffffffffffb) dup2(r2, r1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000751000)={0x0, 0xfffffffffffffe01, 0x30}, &(0x7f00005b6000-0x4)=0x18) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000fa8000-0x4)) 2018/02/01 16:23:24 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:24 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000010000-0xc)='net/rt_acct\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000c000-0xc)={0x400000000005}) poll(&(0x7f0000010000)=[{r1}], 0x1, 0x0) 2018/02/01 16:23:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4e000-0xf)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f00006ec000+0xe6b)=[{0x0, 0x0, 0x0, 0x0, @tick=0xff, {}, {}, @note}], 0x30) 2018/02/01 16:23:24 executing program 5: clone(0x0, &(0x7f0000fc7000-0x1000), &(0x7f0000001000-0x4), &(0x7f0000d07000), &(0x7f0000fc7000-0x27)) getxattr(&(0x7f000060b000)='./file0\x00', &(0x7f0000e52000)=@known='system.advise\x00', &(0x7f0000304000)=""/247, 0xf7) 2018/02/01 16:23:24 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) [ 38.789683] binder: 5389:5392 ioctl c0306201 204edfd0 returned -14 [ 38.804535] binder: 5389:5392 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00007ef000)={0x400}) 2018/02/01 16:23:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000d11000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000593000-0x50)={@empty, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 38.847455] binder: 5389:5392 ioctl c0306201 2000efd0 returned -14 [ 38.867842] binder: 5389:5411 ioctl c0306201 204edfd0 returned -14 [ 38.877576] binder: 5389:5424 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f0000d51000-0x10)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000562000)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000b7b000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0xa77, 0x5}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/01 16:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00005a6000-0x9)='/dev/sg#\x00', 0x0, 0x121882) write$tun(r0, &(0x7f0000124000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x26) 2018/02/01 16:23:24 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:24 executing program 2: clock_getres(0xfffffffffffffff1, &(0x7f0000001000-0x10)) 2018/02/01 16:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00008f2000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001000), &(0x7f000058e000)=0xc) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x1c, 0x1, 0x2, []}], 0x1}, 0x0) 2018/02/01 16:23:24 executing program 0: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004000-0x2d)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@broadcast=0xffffffff}}, {{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) 2018/02/01 16:23:24 executing program 7: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000007000-0x58)="5500000018007fafb72d1cb2a4a2809302064b720ba8ff0b752623423200e08d9fb78749bd50ca8a9848a3080000006b7b31afdc1338d544c9f59b74136ef75afb88de440daa7227c4dfb8220527e6490300ab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/01 16:23:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000939000-0xc)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000061f000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}, @local={0xac, 0x14, 0x0, 0xaa}}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000dcd000-0xc)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}}, 0xc) [ 38.902496] binder: 5389:5392 ioctl c0306201 20004000 returned -14 [ 38.915163] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:24 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000363000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000a7f000)) read(r0, &(0x7f0000002000-0x1c)=""/8, 0x8) 2018/02/01 16:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00005a6000-0x9)='/dev/sg#\x00', 0x0, 0x121882) write$tun(r0, &(0x7f0000124000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @multicast1=0xe0000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x26) 2018/02/01 16:23:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000037b000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000017000-0x4)=0x406, 0x4) write(r1, &(0x7f0000436000-0x5)='\x00', 0x1) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00008ed000)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f000001d000-0x38)={0x0, 0x0, &(0x7f000001a000)=[], 0x0, &(0x7f000001c000)}, 0x2) 2018/02/01 16:23:24 executing program 5: getrusage(0xffffffeffffffffd, &(0x7f0000f0f000)) 2018/02/01 16:23:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000c000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000013000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/01 16:23:24 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0}, &(0x7f0000844000-0x4)=0xc) getpriority(0x1, r0) 2018/02/01 16:23:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f0000d51000-0x10)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000562000)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000b7b000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0xa77, 0x5}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/01 16:23:24 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001f3000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f000030c000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00005f6000/0x4000)=nil) 2018/02/01 16:23:24 executing program 1: clone(0x0, &(0x7f00008e9000), &(0x7f00006ed000-0x4), &(0x7f0000994000-0x4), &(0x7f0000f70000-0xc5)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 2018/02/01 16:23:24 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f00004a0000-0xd)='dns_resolver\x00', &(0x7f00008fe000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) 2018/02/01 16:23:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) recvfrom(r0, &(0x7f0000259000-0x54)=""/84, 0x54, 0x0, &(0x7f00007be000-0x32)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x32) 2018/02/01 16:23:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f000059f000-0x44)={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, {0x0, @random="f5f909e46381"}, 0x0, {0x2, 0x0, @broadcast=0xffffffff}, @common="006ff8000000006c00000000ffffff00"}) 2018/02/01 16:23:24 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4008700c, &(0x7f0000002000+0x498)) [ 39.038262] binder: 5468 RLIMIT_NICE not set 2018/02/01 16:23:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00001ee000)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f000044d000-0x8)) syz_open_dev$loop(&(0x7f000010b000-0xb)='/dev/loop#\x00', 0x0, 0x3) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00002fd000)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000525000), 0x4) 2018/02/01 16:23:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fce000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000071b000)={{&(0x7f00003a9000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 2018/02/01 16:23:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) dup2(r0, r1) socket(0x0, 0x0, 0x0) 2018/02/01 16:23:24 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0, 0x0, 0x8001}}, 0xe8) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) dup3(r0, r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000fc6000-0x40)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000ebd000-0x5b), 0xfe21, 0x0, &(0x7f00000dd000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x76) [ 39.073200] binder: 5462:5490 tried to acquire reference to desc 0, got 1 instead [ 39.098535] binder: 5462:5498 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/02/01 16:23:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000c000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000013000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/01 16:23:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16}]}) wait4(0x0, &(0x7f0000688000), 0x0, &(0x7f0000e75000)) 2018/02/01 16:23:25 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00000d4000-0xa)='1yzkller\x00', &(0x7f00000a9000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, r0) r1 = request_key(&(0x7f0000331000-0xa)='encrypted\x00', &(0x7f0000110000)={0x73, 0x79, 0x7a}, &(0x7f0000a88000)="02", 0x0) keyctl$search(0xa, r1, &(0x7f00000ea000)='dns_resolver\x00', &(0x7f0000dad000-0x5)={0x73, 0x79, 0x7a}, 0x0) [ 39.101665] binder: 5468 RLIMIT_NICE not set [ 39.103284] binder: 5462:5498 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 39.199514] binder: 5515 RLIMIT_NICE not set 2018/02/01 16:23:25 executing program 5: clock_nanosleep(0x4, 0x0, &(0x7f0000c10000), 0x0) 2018/02/01 16:23:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000649000-0x154)=@newsa={0x154, 0x10, 0x717, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x32}, @in=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@encap={0x1c, 0x4, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, @in6=@dev={0xfe, 0x80}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/02/01 16:23:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}}) socket$nl_crypto(0x10, 0x3, 0x15) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) close(r1) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f000047b000)) openat$rtc(0xffffffffffffff9c, &(0x7f0000002000)='/dev/rtc\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x45, &(0x7f0000002000)=""/30, &(0x7f0000000000)=0x1e) 2018/02/01 16:23:25 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 1: clone(0x0, &(0x7f0000b83000-0x3), &(0x7f0000768000), &(0x7f0000197000), &(0x7f00007e8000-0x6a)) restart_syscall() 2018/02/01 16:23:25 executing program 7: mmap(&(0x7f0000000000/0x2c000)=nil, 0x2c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000003000)={0x1, 0x1, [@random="12faa494eda3"]}) 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000478000-0x60)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000cf3000)}}) mq_timedsend(r0, &(0x7f000076d000-0x53), 0x0, 0x0, &(0x7f000003f000-0x10)) 2018/02/01 16:23:25 executing program 4: mmap(&(0x7f0000000000/0x21000)=nil, 0x21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000012000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000015000)={@common='lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000016000), 0x0, 0x0, &(0x7f0000020000-0x14)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) 2018/02/01 16:23:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffe, &(0x7f00007a0000)={0x0, 0x1f, 0x0, @thr={&(0x7f0000921000), &(0x7f0000569000-0x2c)}}, &(0x7f00001e7000-0x4)) clone(0x0, &(0x7f00007b5000-0x4), &(0x7f000081e000-0x4), &(0x7f0000585000-0x4), &(0x7f000019e000-0x11)) timer_delete(0x0) 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000c2f000-0x8)={0x4000019980330}, &(0x7f0000002000-0x18)={0x0, 0xfffffffffff7ffff}) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000596000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 2018/02/01 16:23:25 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f00008f0000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f000056b000-0x4)=0x14) 2018/02/01 16:23:25 executing program 4: clone(0x0, &(0x7f0000bd3000-0x92), &(0x7f000064b000), &(0x7f000021f000), &(0x7f0000df5000)) memfd_create(&(0x7f0000813000)="70726f6374727573746564657468305d26ab62656d3029656d3100", 0x0) 2018/02/01 16:23:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f00002eb000), 0x0) 2018/02/01 16:23:25 executing program 3: mmap(&(0x7f0000000000/0xfa5000)=nil, 0xfa5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000fa3000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x8, r2) 2018/02/01 16:23:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000649000-0x154)=@newsa={0x154, 0x10, 0x717, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x32}, @in=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@encap={0x1c, 0x4, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, @in6=@dev={0xfe, 0x80}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000023d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x3) dup2(r1, r0) 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000c0a000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_addrs=@l2={0x1f}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000971000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000589000-0x1), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/02/01 16:23:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdb000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r0, 0x8000000006) ioctl$TCSETS(r2, 0x5402, &(0x7f0000512000)={0x4000, 0x9}) dup2(r2, r1) writev(r1, &(0x7f0000115000)=[{&(0x7f0000cc8000-0x7f)="bd2b", 0x2}], 0x1) 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f000015c000-0x26)="26000000130047f10714c1f8590022ff001000e30100e0000000000000000900060010000675", 0x26) 2018/02/01 16:23:25 executing program 4: mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000a000)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/01 16:23:25 executing program 5: clone(0x0, &(0x7f0000623000), &(0x7f00002d0000-0x4), &(0x7f0000907000), &(0x7f0000553000)) fdatasync(0xffffffffffffffff) [ 39.414078] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) [ 39.433992] ptrace attach of "/root/syz-executor3"[4214] was attempted by "/root/syz-executor3"[5566] [ 39.443553] ptrace attach of "/root/syz-executor3"[4214] was attempted by "/root/syz-executor3"[5566] [ 39.465339] ptrace attach of "/root/syz-executor1"[4217] was attempted by "/root/syz-executor1"[5572] 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000023d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00001c3000)=0x3) dup2(r1, r0) 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001ee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000956000-0x10)={0x1, &(0x7f000059e000)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet(r0, &(0x7f00003d3000), 0x0, 0x8000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000122000-0x38)={&(0x7f0000621000-0xc)={0x10}, 0xc, &(0x7f0000eed000-0x10)={&(0x7f0000817000)={0x5b4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x544, 0x0, [@generic="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"]}, @nested={0x4, 0x80, []}, @generic="32826afc20d5d1afb222caf71297c1bc3655858b49c8375d4b23ddce9fb211c1a1639ca4a3f557ae241a3e25c6e3e2d6c238c580fb1255d42cf26c8e639f27456f920dc8cea96a6edf848c5701306a162c97ff165c8e9ea1"]}, 0x5b4}, 0x1}, 0x0) 2018/02/01 16:23:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000517000-0x10)={0x2, 0x1, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f000017a000-0x70), 0x58c0835d538b2212, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000647000-0x4), 0x4) 2018/02/01 16:23:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x8020408000000803, 0xfffffffffffffffc) bind(r0, &(0x7f0000ed7000-0x80)=@generic={0x11, "0000010000000000080044944eeba71a496ae252922cb18f722e2ada000000012e0b3836005404b0e00100000014f26effffffffffffff67b100800000000000000101013c5804459e15775027ecce66fd792bbf0e5bf5ff1b080000dad11c000100fff6000000004974000000030000000000000000076d3a09ffc2c654"}, 0x80) 2018/02/01 16:23:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f0000921000-0x12b0)={0x2c, 0x1, 0x2, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x18, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}]}, 0x2c}, 0x1}, 0x0) 2018/02/01 16:23:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004000-0xc)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000045000-0xc)={0x1}) ppoll(&(0x7f0000a10000-0x20)=[{r1}], 0x1, &(0x7f00001a6000-0x8), &(0x7f00001bd000-0x8), 0x8) 2018/02/01 16:23:25 executing program 3: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f0000003000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0xabd, 0x8, 0x0, 0x81}) [ 39.493615] ptrace attach of "/root/syz-executor1"[4217] was attempted by "/root/syz-executor1"[5588] [ 39.508363] device gre0 entered promiscuous mode [ 39.511097] netlink: 'syz-executor3': attribute type 16 has an invalid length. 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000a44000-0x14)={0xffffffffffffffff}) 2018/02/01 16:23:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000b6d000-0xa)='net/udp\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000f16000-0x10)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) preadv(r0, &(0x7f0000331000)=[{&(0x7f0000724000-0xe0)=""/127, 0xfd4a}], 0x1, 0x0) 2018/02/01 16:23:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00009b6000-0x6)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xfffffffffffffefc, 0x0, 0x0, 0x21c) [ 39.594509] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 39.621456] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f0000c55000-0x8)='./file0\x00', &(0x7f0000269000)='./file0\x00', &(0x7f0000da0000-0x6)='msdos\x00', 0x1000, 0x0) chdir(&(0x7f00003f7000)='./file0\x00') umount2(&(0x7f00003bb000-0x1)='.', 0x2) getcwd(&(0x7f0000cca000-0x49), 0x0) 2018/02/01 16:23:25 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rmdir(&(0x7f0000011000)='./file0\x00') r1 = dup(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000a55000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f000094e000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080003000149bd50ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/01 16:23:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000353000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000d6a000)='i', 0x1, 0x0, &(0x7f0000266000)=@hci={0x1f}, 0x6) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000355000-0x8)='\'', 0x1}], 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000d24000)=0x401, 0x4) 2018/02/01 16:23:25 executing program 3: mmap(&(0x7f0000000000/0x625000)=nil, 0x625000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000616000-0x10)={0x3, &(0x7f0000617000)=[{0xb1}, {0x400000000009c}, {0x6}]}, 0x10) write(r0, &(0x7f0000620000)="1f0000000401ffd60000010000000000000000000100000000000000000000", 0x1f) 2018/02/01 16:23:25 executing program 1: mmap(&(0x7f0000000000/0xfa3000)=nil, 0xfa3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000f64000)={{{{0xa, 0x0, @multicast2=0xe0000002}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x0, 0x0, 0x0, "7f56b22a2237ff2392e04121b7d9ec0185d84f9a5f2d63b223796e1374f1ef0154558d0317016c820c10e7d8ee5cf31170f5ce05edb807975b2a30270323ec391a87de9a6f0395cbdf270000000072b9"}, 0x160) 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x800000001, 0x0, &(0x7f0000020000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendto(r0, &(0x7f0000003000-0x1001)="e9", 0x1, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f000003c000)={0x0, 0x0, &(0x7f000005e000-0x20)=[{&(0x7f0000bcb000-0x99)='}', 0x1}], 0x1, &(0x7f000003b000-0x1d0)=[]}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000cea000)) 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x200000002e, &(0x7f0000001000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012c000-0xe)='net/mcfilter6\x00') preadv(r1, &(0x7f0000fc6000-0x40)=[{&(0x7f00003b0000)=""/4096, 0x1000}], 0x1, 0x0) 2018/02/01 16:23:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000b4000-0x44)="000550758c01ff7f6d27de7dde4ecdc10bcc501f0e14857f560afdabed2729c20eb63ddb764c11e3cb385ff6d3df6a2125b78f85dd8ee92815e746f6d44dd208002a3455") r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f00002c3000-0x8), 0x0) 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000a93000/0x93000)=nil, 0x93000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a95000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x80000002, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil}) mprotect(&(0x7f0000b1c000/0x3000)=nil, 0x3000, 0x1) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000006000-0xa4)}], 0x1, 0x0) 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000fa3000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setregset(0x4205, r2, 0x202, &(0x7f0000fa5000-0x10)={&(0x7f0000fa5000-0x8)='\x00\b', 0x2}) 2018/02/01 16:23:25 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f000065a000-0x2), &(0x7f0000504000), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) wait4(0x0, 0x0, 0x80000000, &(0x7f000005b000-0x90)) clone(0x4000100, &(0x7f0000001000), &(0x7f000094b000), &(0x7f0000a3d000-0x4), &(0x7f0000000000)) [ 39.724628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pig=5644 comm=syz-executor3 2018/02/01 16:23:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000610000-0x10)={0x1, &(0x7f0000615000)=[{0x6}]}, 0x10) write(r0, &(0x7f0000195000-0x27)="2600000026004701925ef1f70722000c07fff700010000000700ff36b807475105001a000000", 0x26) 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000014000-0x10)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:25 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000012000-0x118)=[{&(0x7f0000011000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000010000)=[{&(0x7f0000011000)}], 0x1, &(0x7f0000010000-0x14)=[]}], 0x1, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000010000-0x10)={&(0x7f0000008000/0x1000)=nil, 0x1000}) [ 39.790699] ptrace attach of "/root/syz-executor1"[4217] was attempted by "/root/syz-executor1"[5670] [ 39.808672] netlink: 2 bytes leftover after parsing attributes in process `syz-executor7'. [ 39.812145] netlink: 2 bytes leftover after parsing attributes in process `syz-executor7'. 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4008700c, &(0x7f0000002000+0x498)) 2018/02/01 16:23:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000b98000-0x8)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffdc}, {0x16}]}) ftruncate(0xffffffffffffffff, 0x0) 2018/02/01 16:23:25 executing program 5: clone(0x0, &(0x7f0000cbf000), &(0x7f000064b000), &(0x7f000021f000), &(0x7f0000f40000)) fremovexattr(0xffffffffffffffff, &(0x7f000063f000-0x16)=@random={'os2.\x00', '[usernodevvmnet1\x00'}) 2018/02/01 16:23:25 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"42bee8e7f5bbeae7072f02b1"}}], 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000c92000-0x8)='./file0\x00', &(0x7f0000ae6000)={{0x0, 0x2710}, {0x77359400}}) clone(0x0, &(0x7f0000edf000), &(0x7f00005c1000), &(0x7f00003e1000-0x4), &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000c21000)='./file0\x00', &(0x7f0000186000-0x8)='./file0\x00', &(0x7f00003f2000-0xe)="6100000000fbff00f50973666eb6", 0x0, &(0x7f0000270000)) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) ppoll(&(0x7f0000f9d000)=[], 0x0, &(0x7f0000749000)={0x0, 0x989680}, &(0x7f000058e000), 0x8) umount2(&(0x7f000017c000)='./file0\x00', 0xa) 2018/02/01 16:23:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000003a000-0x8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x7, &(0x7f0000044000)={0x9, 0x4000000000000a, 0x4, @tid=r0}, &(0x7f0000e12000-0x4)) timer_settime(0x0, 0x0, &(0x7f0000a54000)={{0x1, 0x989680}, {0x0, 0x989680}}, &(0x7f0000716000-0x20)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}}, &(0x7f0000327000)) 2018/02/01 16:23:25 executing program 0: clone(0x0, &(0x7f00000bb000), &(0x7f000090e000), &(0x7f0000b22000), &(0x7f00000b1000-0xb8)) setregid(0x0, 0x0) 2018/02/01 16:23:25 executing program 1: mmap(&(0x7f0000000000/0xaf2000)=nil, 0xaf2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000af1000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000202000)=@ethtool_dump={0x43}}) [ 39.843087] ptrace attach of "/root/syz-executor1"[4217] was attempted by "/root/syz-executor1"[5670] 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0xfa1000)=nil, 0xfa1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f00002db000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) waitid(0x0, 0x0, &(0x7f0000f9e000-0x10), 0x1000002, 0x0) 2018/02/01 16:23:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000b63000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) write$tun(r2, &(0x7f0000760000)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "6feb58", 0x10, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "24c826", 0x0, "06344d"}}}}}, 0x3c) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e70000-0x30)=[{0x100000001e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/01 16:23:25 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) utimensat(0xffffffffffffffff, &(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000012000-0x20), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000c92000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000000080002, 0x88) bind$inet6(r0, &(0x7f0000d86000-0x1c)={0xa, 0x3, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000558000-0x38)={&(0x7f0000e3b000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000b03000)=[{&(0x7f00007fd000)="5e9089917e12fcbb93cd6160fb19d989f547ed2a604f2d9f3fd855d81fda4f30b5ceca48c3d46ad973c8014ee6f9b3afdaa008defaa7791427bcddcea7524db1da4d08c688", 0x45}], 0x1}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00007bb000)) 2018/02/01 16:23:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, &(0x7f0000eeb000-0x8), 0xffffffffffffffff, &(0x7f00007fc000), 0x8, 0x0) 2018/02/01 16:23:25 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000-0xb4)="2baa5b776c616e3147504c70706c30706f7d69785f6163705f61636365737347504c76626f786e657430292573797374656d00c6a7f8c56ed749de875e343c342ed56ef2d7f2d401d682dbb0d26b99ff9dc9c6ab19d87444d5251e1902ea87256f6c44d89a88ca0b8095c0ed3b8105c237cf9c4203c11cd9d3fdd4b9743c7033d427ef2146b7a1d0600f181a7e0ad1ecf79a37c32473c3010048b453469437d6d64240eddb07749143a3190e7e2301202ee95073", 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000001000-0x1)='*', 0x1, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0x4011, r0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000002000-0x70)=[{&(0x7f0000004000-0x2c)}, {&(0x7f0000004000)="86", 0x1}], 0x2, 0x0) 2018/02/01 16:23:25 executing program 5: mmap(&(0x7f0000000000/0xe71000)=nil, 0xe71000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000002, 0x0, &(0x7f00004e9000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000029000-0x10)={0x2, &(0x7f000000e000)=[{0x28, 0x0, 0x0, 0xfffffffffffff018}, {0x6}]}, 0x10) 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000000080002, 0x88) bind$inet6(r0, &(0x7f0000d86000-0x1c)={0xa, 0x3, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000558000-0x38)={&(0x7f0000e3b000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000b03000)=[{&(0x7f00007fd000)="5e9089917e12fcbb93cd6160fb19d989f547ed2a604f2d9f3fd855d81fda4f30b5ceca48c3d46ad973c8014ee6f9b3afdaa008defaa7791427bcddcea7524db1da4d08c688", 0x45}], 0x1}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00007bb000)) [ 39.943124] ptrace attach of "/root/syz-executor6"[4216] was attempted by "/root/syz-executor6"[5711] [ 39.973620] ptrace attach of "/root/syz-executor6"[4216] was attempted by "/root/syz-executor6"[5711] 2018/02/01 16:23:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = epoll_create1(0x0) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x7, 0x2}) r2 = mq_open(&(0x7f0000a04000)='-$\x00', 0x0, 0x0, &(0x7f0000514000-0x40)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f96000)={0x2004}) poll(&(0x7f0000024000-0x50)=[{r1, 0x0, 0x4}, {r0, 0x0, 0x2}], 0x2, 0x0) 2018/02/01 16:23:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002eb000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x8000000000000007, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000004000-0x20)={0x0, 0x0, 0x0, 0x1}) close(r0) 2018/02/01 16:23:25 executing program 2: mmap(&(0x7f0000000000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000027000)={&(0x7f0000027000-0x48)=@ipv4_newroute={0x20, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@RTA_MULTIPATH={0x4, 0x9, []}]}, 0x20}, 0x1}, 0x0) 2018/02/01 16:23:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x31, &(0x7f0000a24000-0x1), 0x0) 2018/02/01 16:23:25 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe}], &(0x7f000000b000)=[0x0]}}}], 0x0, 0x0, &(0x7f000000b000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x10, 0x0, &(0x7f000000a000)=[@acquire={0x40046305}, @decrefs={0x40046307}], 0x0, 0x0, &(0x7f0000009000-0x82)}) 2018/02/01 16:23:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b2000-0x20)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000b4c000-0x8), 0x100000002) sendfile(r1, r0, &(0x7f0000ea5000-0x8), 0x9) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect(r0, &(0x7f0000eda000-0x1c)=@in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000072000-0x8)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0x8) sendto$inet6(r0, &(0x7f0000212000-0x44), 0x0, 0x0, &(0x7f0000fdb000-0x1c)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/01 16:23:25 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10}, 0x2) close(r0) 2018/02/01 16:23:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000a72000)={&(0x7f0000e2d000)={0x10}, 0xc, &(0x7f0000a67000-0x10)={&(0x7f00002e4000-0x2f8)=@polexpire={0xc0, 0x1b, 0xb01, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@loopback=0x7f000001, @in=@multicast1=0xe0000001}, {}, {}, 0x0, 0xffffffffffffffff, 0x3}}, [@tmpl={0x4, 0x5, []}]}, 0xc0}, 0x1}, 0x0) 2018/02/01 16:23:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000728000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d0b000-0x41f)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b31d90", 0x0, "b99878"}, "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"}}}, 0x41f) ppoll(&(0x7f000097e000-0x28)=[{r0}], 0x1, &(0x7f0000369000-0x10), &(0x7f00007b8000), 0x8) 2018/02/01 16:23:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000ad0000)=@abs={0x1, 0x0, 0x0}, 0x8) bind$unix(r0, &(0x7f000000e000-0x8)=@file={0x1}, 0x2) [ 40.107260] binder: 5758:5762 ERROR: BC_REGISTER_LOOPER called without request [ 40.114748] binder: 5762 RLIMIT_NICE not set 2018/02/01 16:23:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000933000-0x78)={0x0, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x118, 0x0, 0x0, 0x0, 0x0, &(0x7f000052e000)=@syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f000038e000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 2018/02/01 16:23:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f00006a6000-0x74)="dbef803e3d9f5de1e22055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) write$evdev(r0, &(0x7f0000a59000)=[{{0x0, 0x7530}}, {}], 0x30) write$sndseq(r0, &(0x7f0000df8000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x0, {0x7122}}}], 0x30) ioctl(r0, 0x2286, &(0x7f0000c96000-0x2)) 2018/02/01 16:23:26 executing program 6: mmap(&(0x7f0000000000/0xbad000)=nil, 0xbad000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000ba5000)={0x0, 0x0, @loopback}, &(0x7f0000416000-0x4)=0x10) getsockopt$inet_int(r0, 0x0, 0xc, &(0x7f000040f000), &(0x7f00006a0000)=0x4) [ 40.147519] binder: 5762 RLIMIT_NICE not set [ 40.158081] device gre0 entered promiscuous mode [ 40.168083] binder: 5758:5773 got reply transaction with bad transaction stack, transaction 10 has target 5758:0 [ 40.168099] binder: 5758:5773 transaction failed 29201/-71, size 32-8 line 2718 [ 40.189438] binder_alloc: 5758: binder_alloc_buf, no vma [ 40.189478] binder: 5758:5780 transaction failed 29189/-3, size 0-0 line 2903 [ 40.189528] binder: 5758:5773 ERROR: BC_REGISTER_LOOPER called without request [ 40.189536] binder: 5773 RLIMIT_NICE not set [ 40.202430] binder: 5758:5788 got reply transaction with no transaction stack [ 40.202441] binder: 5758:5788 transaction failed 29201/-71, size 32-8 line 2703 [ 40.302412] binder: release 5758:5762 transaction 10 in, still active [ 40.309103] binder: send failed reply for transaction 10 to 5758:5773 2018/02/01 16:23:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe2000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x80000000, 0x0, 0x20000000002, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe6000)={@empty, 0x8080000000, 0x2}, 0x20) 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:26 executing program 0: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000010000-0x4), &(0x7f000000f000)=0x4) 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000012000-0x3)='.!\x00', 0x0, 0x0, &(0x7f0000719000-0x40)) 2018/02/01 16:23:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000561000-0x10)='/selinux/create\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000dda000), 0x0, 0x0) 2018/02/01 16:23:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000a7000-0x38)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f0000921000-0x12b0)={0x14, 0x1, 0x3, 0x7ffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/01 16:23:26 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000002000)='user\x00', &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000000)='#', 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000003000-0x8)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r0, r1) 2018/02/01 16:23:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f000095f000-0x9)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x1267, &(0x7f00009be000)) [ 40.315748] binder: undelivered TRANSACTION_COMPLETE 2018/02/01 16:23:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000ba0000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000084e000)=@file={0x1, './file0\x00'}, 0xa) write(r0, &(0x7f00008db000)="d9", 0x1) recvfrom(r1, &(0x7f0000118000), 0x0, 0x0, 0x0, 0x0) 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5434, &(0x7f0000011000)) 2018/02/01 16:23:26 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) truncate(&(0x7f0000012000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f00007b9000-0x10)={0x1}) 2018/02/01 16:23:26 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000002000)='user\x00', &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000000)='#', 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000003000-0x8)='keyring\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r0, r1) 2018/02/01 16:23:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000ea9000), &(0x7f00004af000), &(0x7f00001a4000-0x40), &(0x7f0000f11000)={0x0, 0x989680}, &(0x7f0000d9b000-0x10)={&(0x7f000032b000-0x8), 0x8}) 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:26 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b6b000-0x30), &(0x7f00009c3000-0x4), &(0x7f0000b9f000-0x4), &(0x7f0000e2d000)) [ 40.346403] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.354766] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.380731] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000bc7000)) mkdir(&(0x7f000092a000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') unlink(&(0x7f0000feb000-0x16)='./file0/control/file0\x00') 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/01 16:23:26 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000001000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000001000-0xf)) 2018/02/01 16:23:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00009d5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000047000)={0x0, 0x0, 0x0, "71756575653100000000000000000004000000000000000000000000000000000000001400"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000d33000)={0x0, 0x0, {0x1, 0x0, 0x0, 0x103}}) 2018/02/01 16:23:26 executing program 6: mmap(&(0x7f0000000000/0x43000)=nil, 0x43000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mkdir(&(0x7f000003a000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) umount2(&(0x7f0000038000)='./file0\x00', 0x4) umount2(&(0x7f000001f000)='./file0\x00', 0xc) [ 40.394811] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/01 16:23:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000b04000-0xc)={0x0}, &(0x7f000067b000+0xa27)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000030f000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setopts(0x4209, r2, 0x40020a, 0x0) 2018/02/01 16:23:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303a"}) r1 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x58, 0x0, &(0x7f00004f5000-0x58)=[@free_buffer={0x40086303, r1}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000373000-0x40)=[], &(0x7f0000043000)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/01 16:23:26 executing program 0: clone(0x0, &(0x7f00001e4000), &(0x7f00006d3000-0x4), &(0x7f000045e000-0x4), &(0x7f0000117000-0xf9)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001000)={0x0, 0x7}) 2018/02/01 16:23:26 executing program 6: mmap(&(0x7f0000000000/0xfa6000)=nil, 0xfa6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000fa3000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000001000)={&(0x7f0000e07000-0x40)}) 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:26 executing program 3: clone(0x0, &(0x7f0000107000-0x37), &(0x7f0000477000-0x4), &(0x7f00004a3000), &(0x7f000065a000-0x2)) getrlimit(0x0, &(0x7f000015d000)) 2018/02/01 16:23:26 executing program 5: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d25000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000d26000-0x11)='/dev/vga_arbiter\x00', 0x20001, 0x0) write$eventfd(r0, &(0x7f00009c3000-0x8), 0x8) 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000614000)={0x3, &(0x7f0000d1f000-0x18)=[{0x35, 0x0, 0x0, 0xffffffff80000001}, {0x7}, {0x6}]}, 0x10) [ 40.473172] ptrace attach of "/root/syz-executor4"[4207] was attempted by "/root/syz-executor4"[5854] [ 40.493592] ptrace attach of "/root/syz-executor4"[4207] was attempted by "/root/syz-executor4"[5854] 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:26 executing program 5: clone(0x0, &(0x7f0000221000-0x2), &(0x7f00003c7000-0x4), &(0x7f00000c0000), &(0x7f00007c4000)) time(&(0x7f0000d1e000)) [ 40.525412] binder: 5870 RLIMIT_NICE not set [ 40.574956] binder: 5870 RLIMIT_NICE not set [ 40.586261] binder: BINDER_SET_CONTEXT_MGR already set [ 40.593442] binder_alloc: 5859: binder_alloc_buf, no vma [ 40.598859] binder: 5859:5870 ioctl 40046207 0 returned -16 [ 40.606077] binder: 5859:5888 transaction failed 29189/-3, size 0-0 line 2903 2018/02/01 16:23:26 executing program 3: clone(0x0, &(0x7f0000f95000), &(0x7f0000592000), &(0x7f00004ce000-0x4), &(0x7f0000221000)) getgid() 2018/02/01 16:23:26 executing program 5: mmap(&(0x7f0000000000/0xf63000)=nil, 0xf63000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000), &(0x7f00003c6000-0x4)) 2018/02/01 16:23:26 executing program 6: clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) timer_create(0x0, &(0x7f000001d000-0x60)={0x0, 0x0, 0x0, @thr={&(0x7f0000f2b000), &(0x7f0000b01000)}}, &(0x7f0000e1d000-0x4)) 2018/02/01 16:23:26 executing program 0: mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000001a000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x6440000000001264, &(0x7f0000014000)) 2018/02/01 16:23:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000097e000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x400, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f28000)={@loopback={0x0, 0x1}, 0x400, 0x0, 0x3, 0xa}, 0x20) 2018/02/01 16:23:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303a"}) r1 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x58, 0x0, &(0x7f00004f5000-0x58)=[@free_buffer={0x40086303, r1}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000373000-0x40)=[], &(0x7f0000043000)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:26 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000)={0xaa}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) time(&(0x7f0000012000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b6c000), &(0x7f00008a3000), &(0x7f000057c000), &(0x7f0000ac4000)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00009a2000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f0000868000), 0x0, 0x48084, &(0x7f00006b1000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000f0e000-0x4)=0x2, 0x4) 2018/02/01 16:23:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x4004510f, &(0x7f000061c000)) 2018/02/01 16:23:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000dd6000)='keyring\x00', &(0x7f0000a1b000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000fa2000-0x8)='keyring\x00', &(0x7f0000ad0000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f0000f7f000)=""/142, 0x8e) 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) [ 40.621898] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.635996] binder: release 5859:5870 transaction 17 out, still active [ 40.642807] binder: release 5859:5870 transaction 16 in, still active [ 40.649436] binder: undelivered TRANSACTION_COMPLETE 2018/02/01 16:23:26 executing program 4: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000007000-0x18)={0x1, &(0x7f0000b4c000-0x1000)=""/4096, &(0x7f0000001000)=[{0x0, 0x3a, 0x1, &(0x7f0000001000)=""/58}]}) ioctl(r0, 0x100000001, &(0x7f0000001000)) 2018/02/01 16:23:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012c000-0xe)='net/mcfilter6\x00') preadv(r1, &(0x7f0000c86000-0x40)=[{&(0x7f00003e6000-0x1000)=""/4096, 0x1000}], 0x10000000000001b7, 0x400000000) 2018/02/01 16:23:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a9000-0x1), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e6c000-0xee), 0x0, 0x4000, &(0x7f00000f9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 40.661197] binder: 5907 RLIMIT_NICE not set 2018/02/01 16:23:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f77000-0xc)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000d28000-0xc)={0x40000004}) 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) [ 40.693827] binder: 5907 RLIMIT_NICE not set [ 40.744662] binder: 5930:5939 transaction failed 29189/-22, size 0-0 line 2788 [ 40.760671] binder: 5930:5942 transaction failed 29189/-22, size 0-0 line 2788 [ 40.783548] binder: release 5859:5888 transaction 16 out, still active [ 40.790310] binder: undelivered TRANSACTION_COMPLETE 2018/02/01 16:23:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000d11000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000593000-0x50)={@empty, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r1}) 2018/02/01 16:23:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000c000-0x4), 0x0, 0x0, &(0x7f000000b000)={0x13000000000}, &(0x7f0000adb000-0x4), 0x0) futex(&(0x7f000000c000-0x4), 0x5, 0x0, &(0x7f000000b000)={0x0, 0x1c9c380}, &(0x7f00004ef000), 0x0) 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00008c2000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getresuid(&(0x7f0000ad9000), &(0x7f0000821000-0x4), &(0x7f0000386000-0x4)) 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000ec6000-0x10), &(0x7f000025d000)) 2018/02/01 16:23:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f77000-0xc)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000d28000-0xc)={0x40000004}) 2018/02/01 16:23:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) [ 40.812843] binder: send failed reply for transaction 17, target dead [ 40.820283] binder: send failed reply for transaction 16, target dead [ 40.827067] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.833397] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.849556] binder: 5956:5964 transaction failed 29189/-22, size 0-0 line 2788 [ 40.870873] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.879379] binder: release 5897:5907 transaction 21 out, still active [ 40.886104] binder: release 5897:5907 transaction 20 in, still active [ 40.892734] binder: undelivered TRANSACTION_COMPLETE [ 40.893959] binder: 5971:5973 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00008c2000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) clock_gettime(0x0, &(0x7f0000c2a000-0x10)) 2018/02/01 16:23:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000003000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000c92000)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/01 16:23:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000017000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f00008a1000)={0x6}) 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:26 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000013000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000561000-0x8)={0x19980330}, &(0x7f00003fd000)) prctl$intptr(0x1c, 0x0) [ 40.907381] binder: release 5897:5917 transaction 20 out, still active [ 40.914156] binder: undelivered TRANSACTION_COMPLETE [ 40.920960] binder: send failed reply for transaction 21, target dead [ 40.927981] binder: send failed reply for transaction 20, target dead [ 40.934925] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:26 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000013000-0x8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000909000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:26 executing program 5: seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x1, &(0x7f0000022000)=[{0x0, 0xffffffffffffffff}]}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000328000)) clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) pipe(&(0x7f0000514000)) execve(&(0x7f0000886000-0x8)='./file0\x00', &(0x7f000074e000)=[], &(0x7f0000ac0000-0x30)=[]) 2018/02/01 16:23:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) read(r0, &(0x7f0000f6c000)=""/4096, 0xffffffa0) sigaltstack(&(0x7f0000f15000/0x4000)=nil, &(0x7f0000fe6000)) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f000064d000-0x4)=0x1000, 0x4) sendfile(r1, r1, &(0x7f0000521000-0x8)=0x4, 0x100000000000003) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000561000)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000f5e000-0x4)=0xe02, 0x4) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f000011f000-0x8)={0x0, r2}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000f23000)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f000071c000-0xc)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000460000-0x4)=0x43) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00007ed000)={&(0x7f00009d1000/0x1000)=nil, 0x8001, 0x0, 0x35, &(0x7f00009a8000/0x4000)=nil, 0x5}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f000051e000-0x103)={0x0, 0xfb, "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"}, &(0x7f0000e5e000)=0x103) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00007ed000)={r4, 0x4}, &(0x7f0000b25000-0x4)=0x8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000eb3000-0x8)) fcntl$getown(0xffffffffffffffff, 0x9) openat(0xffffffffffffffff, &(0x7f000042e000)='./file0\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000cec000-0xa)='net/snmp6\x00') bind$inet6(r1, &(0x7f000008d000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000a9c000), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendfile(r1, r5, &(0x7f0000cd2000-0x8), 0x10001) 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) [ 40.961992] binder: 5985:5986 transaction failed 29189/-22, size 0-0 line 2788 [ 40.983844] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.997158] binder: 5998:6000 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000139000)='net/ip6_flowlabel\x00') sendfile(r0, r0, &(0x7f0000af6000-0x8), 0xffff) 2018/02/01 16:23:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16}]}) vmsplice(0xffffffffffffffff, &(0x7f000020b000)=[], 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000dd1000)=[], 0x0) 2018/02/01 16:23:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) [ 41.036223] binder: undelivered TRANSACTION_ERROR: 29189 [ 41.071633] binder: 6022:6023 transaction failed 29189/-22, size 0-0 line 2788 [ 41.097534] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000144000)='/dev/sequencer\x00', 0x1, 0x0) write$tun(r0, &(0x7f0000d30000-0x4af)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "dd36b3", 0xb6, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "6a09df", 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, [@dstopts={0x0, 0xc, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4}, @jumbo={0xc2, 0x4}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1}]}, @dstopts={0x0, 0x1, [], [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2}]}], 'w'}}}}}, 0xe8) write$sndseq(r0, &(0x7f00007a0000-0x1b0)=[{0x81, 0x1, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30) 2018/02/01 16:23:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000329000-0x5)={0x73, 0x79, 0x7a}) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 2018/02/01 16:23:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000b5d000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x4000000002}}) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000807000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 6: mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') write$fuse(r0, &(0x7f00009f1000)={0x28, 0x0, 0x0, @fuse_notify_store_out}, 0x28) 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_settings={0x2, 0x0, @raw_hdlc=&(0x7f00004a3000)}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000f88000-0x20)={@common='gre0\x00', @ifru_flags=0x100000000000301}) 2018/02/01 16:23:27 executing program 6: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x2}, 0x0) 2018/02/01 16:23:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f000030c000)={&(0x7f0000c4f000-0x10)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10, &(0x7f00002c0000-0x50)=[], 0x0, &(0x7f0000bfb000)=[{0x10, 0x0, 0x2}], 0x10}, 0x0) 2018/02/01 16:23:27 executing program 5: mmap(&(0x7f0000000000/0xf12000)=nil, 0xf12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x4, &(0x7f0000f01000-0x28)=[{0x3d, 0x1, 0x1}, {0x20}, {0x2000000000000005}, {0x6}]}, 0x10) 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0xfa4000)=nil, 0xfa4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000fa4000-0x4), 0x4) 2018/02/01 16:23:27 executing program 7: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000388000-0x4), 0xb, 0x0, &(0x7f0000b1c000-0x10), &(0x7f0000f8f000), 0x0) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) [ 41.178638] binder: 6038:6041 transaction failed 29189/-22, size 0-0 line 2788 [ 41.182628] device gre0 entered promiscuous mode 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000ff0000-0x20), &(0x7f0000fef000)) 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f000095a000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) timerfd_settime(r0, 0x0, &(0x7f0000017000-0x20)={{0x4004000000005}}, &(0x7f0000011000-0x20)) 2018/02/01 16:23:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x30, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9}, {}]}]}, 0x30}, 0x1}, 0x0) [ 41.244620] binder: undelivered TRANSACTION_ERROR: 29189 [ 41.270418] binder: 6070:6074 transaction failed 29189/-22, size 0-0 line 2788 [ 41.300305] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:27 executing program 5: clone(0x0, &(0x7f0000302000), &(0x7f0000048000-0x4), &(0x7f0000aa4000), &(0x7f0000ca2000-0xd0)) setns(0xffffffffffffffff, 0x0) 2018/02/01 16:23:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000e2000-0x8)='net/dev\x00') r1 = syz_open_procfs(0x0, &(0x7f0000013000-0x8f)='comm\x00') sendfile(r1, r0, &(0x7f0000b4b000), 0x400000ff) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 7: mmap(&(0x7f0000000000/0xc31000)=nil, 0xc31000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000acd000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000c30000-0x5), 0x9, &(0x7f0000023000-0x90)) 2018/02/01 16:23:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000a74000-0x20)={{}, {0x0, 0x0}}) rt_sigtimedwait(&(0x7f0000407000-0x6), &(0x7f000045c000-0x10), &(0x7f000090a000-0x10)={0x0, r0}, 0x8) 2018/02/01 16:23:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x400000000002, 0x9) sendmsg(r0, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000006000)="0f00000063a85cf3dd470ac37f62e157", 0x10}], 0x1, &(0x7f0000007000-0x218)=[]}, 0x0) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) [ 41.417386] binder: 6087:6101 transaction failed 29189/-22, size 0-0 line 2788 [ 41.420736] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43107 sclass=netlink_audit_socket pig=6098 comm=syz-executor0 [ 41.422714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43107 sclass=netlink_audit_socket pig=6103 comm=syz-executor0 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x4000000002283, &(0x7f0000139000)='4') clock_gettime(0x0, &(0x7f00003f9000)={0x0, 0x0}) ppoll(&(0x7f00006d4000+0xd07)=[{r0}], 0x1, &(0x7f0000ab7000-0x8)={0x0, r1+30000000}, &(0x7f000028a000), 0x8) write$evdev(r0, &(0x7f0000b5e000-0x78)=[{}, {}, {}, {{0x77359400}}], 0x60) 2018/02/01 16:23:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)="002670726f63eb657972696e6740", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000718000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022e000-0x8c)={0x0, 0x0, 0x0, "7175f97565310000000000000000000a000000000000000002000000fbfffffffe00"}) write$sndseq(r1, &(0x7f0000e70000-0x30)=[{0x22, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @note}], 0x30) 2018/02/01 16:23:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000359000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5e000-0x20)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000002000-0x4e)=""/1, 0x1}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f000090a000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000688000-0xc)={0x0, 0x0, 0xffffffffffffffff}) 2018/02/01 16:23:27 executing program 6: clone(0x0, &(0x7f0000015000), &(0x7f0000006000), &(0x7f0000016000-0x4), &(0x7f000000f000)) uname(&(0x7f0000132000-0xf)=""/15) 2018/02/01 16:23:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = socket$unix(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000177000)='net/ip6_tables_names\x00') sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f000067f000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000f5d000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000a76000-0xdb)='1', 0x1, 0x20000005, &(0x7f0000881000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom(r1, &(0x7f0000725000)=""/207, 0xcf, 0x3, &(0x7f0000a77000)=@ipx={0x4, 0x8, 0x6, "06f4cdc44101", 0x4}, 0x200) 2018/02/01 16:23:27 executing program 5: r0 = socket(0x2000000000000010, 0x802, 0x0) fcntl$setstatus(r0, 0x4, 0x400) write(r0, &(0x7f0000a0f000-0x25), 0x0) [ 41.470200] binder: undelivered TRANSACTION_ERROR: 29189 [ 41.489398] binder: 6114:6117 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000d23000)={&(0x7f0000c24000)={0x10}, 0xc, &(0x7f00006d7000)={&(0x7f0000c31000)=@allocspi={0xf8, 0x16, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001}, {@in6=@dev={0xfe, 0x80}, 0xffffffffffffffff, 0x33}, @in6=@empty, {}, {}, {}, 0x1}}, []}, 0xf8}, 0x1}, 0x0) 2018/02/01 16:23:27 executing program 6: mmap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000002f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000010000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002000-0xb4)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000001a000-0x4e)=""/78, 0x4e}], 0x1, &(0x7f000002f000)=""/7, 0x7}}, {{&(0x7f0000003000-0x58)=@alg, 0x58, &(0x7f000001c000)=[], 0x0, &(0x7f0000030000-0x57)=""/87, 0x57}}], 0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000018000)="f8", 0x1, 0x0, 0x0, 0x0) 2018/02/01 16:23:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a21000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000a45000-0x4)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000e70000-0x4)) [ 41.531672] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004000-0xc)={0x10000000005}) epoll_pwait(r1, &(0x7f0000e81000-0xc)=[{}], 0x1, 0x0, &(0x7f0000d54000-0x8), 0x8) 2018/02/01 16:23:27 executing program 7: mmap(&(0x7f0000000000/0xe7c000)=nil, 0xe7c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f000004e000), 0x8) poll(&(0x7f000004d000-0x20)=[{r0}], 0x1, 0x401) signalfd(r0, &(0x7f0000c82000), 0x8) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000a62000), 0x0) 2018/02/01 16:23:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:27 executing program 4: mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000), 0x420000000fee) ppoll(&(0x7f0000007000)=[{r0}], 0x1, &(0x7f0000001000-0x10)={0x0, 0x989680}, &(0x7f0000014000), 0x8) [ 41.587334] binder: 6139:6143 transaction failed 29189/-22, size 0-0 line 2788 [ 41.622922] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:27 executing program 6: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000053000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000054000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000013000-0xb0)={{}, 'port0\x00'}) 2018/02/01 16:23:27 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000285000)={0x0, 0x4}, 0x4) sendto$inet(r0, &(0x7f0000ff1000-0x1000), 0x0, 0x0, &(0x7f0000ff0000)={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0xf80000)=nil, 0xf80000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind$inet(r0, &(0x7f0000b9b000-0x10)={0x2, 0x0, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d85000)={0x1, &(0x7f0000802000-0x18)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000347000), 0x390, 0x8084, &(0x7f0000f7b000)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f00008b3000), 0x0, 0x0, &(0x7f000082e000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000164000-0x28)={@common="6c6f000000001000", &(0x7f0000ffe000-0xc)=@ethtool_gstrings={0x1b, 0x4, 0x1f2}}) 2018/02/01 16:23:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000007000-0xd)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) clock_gettime(0xffffffffffffffff, &(0x7f0000285000)={0x0}) write$sndseq(r0, &(0x7f0000040000)=[{0x0, 0x100000001, 0x0, 0x0, @time={r3}, {}, {}, @addr}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x2e, @time}) 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 2: mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00007fa000), 0x0, 0x20000004, &(0x7f0000b64000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r0) r2 = accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000307000-0x4)=0x5, 0x0) sendto$unix(r2, &(0x7f000060e000)=')', 0x1, 0x1, 0x0, 0x0) 2018/02/01 16:23:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000183000-0x5c)={{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, {0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000559000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}, 0x5c) 2018/02/01 16:23:27 executing program 2: mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000a1f000-0x44)={{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, {0x0, @empty}, 0x0, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000029000-0xc)={@rand_addr, @remote, 0x0}, &(0x7f0000028000)=0xc) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000027000)={&(0x7f0000027000-0x48)=@ipv4_newroute={0x38, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x1c, 0x9, [{0x9}, {0x0, 0x0, 0x0, r1}, {}]}]}, 0x38}, 0x1}, 0x0) 2018/02/01 16:23:27 executing program 6: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000006000-0x20)={{}, {0x0}}) ppoll(&(0x7f0000003000)=[], 0x0, &(0x7f0000006000-0x10)={r0}, &(0x7f0000004000), 0x8) 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 6: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000004000-0x8)={0x0, 0x0}) write$eventfd(r0, &(0x7f0000004000), 0xfffffea1) 2018/02/01 16:23:27 executing program 2: mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 7: mmap(&(0x7f0000000000/0xff9000)=nil, 0xff9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) read(r1, &(0x7f0000ff9000-0xc5)=""/197, 0x21f) 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 5: mmap(&(0x7f0000000000/0xff0000)=nil, 0xff0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000fba000-0x38)={&(0x7f0000398000-0xc)={0x10}, 0xc, &(0x7f0000fe8000)={&(0x7f0000fef000)=@updsa={0xf8, 0x1a, 0xa09, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@dev={0xac, 0x14}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {@in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xffffffffffffffff, 0x3c}, @in=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@tfcpad={0x8, 0x16}]}, 0xf8}, 0x1}, 0x0) 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0xa0}, 0x1}, 0x0) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) [ 41.832168] TCP: request_sock_TCPv6: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. 2018/02/01 16:23:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000270000)) mincore(&(0x7f0000251000/0x5000)=nil, 0x5000, &(0x7f00009e6000-0x81)=""/129) [ 41.886309] IPv4: Oversized IP packet from 127.0.0.1 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000000), 0x10) modify_ldt$read(0x0, &(0x7f0000000000)=""/214, 0xd6) 2018/02/01 16:23:27 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000002000-0x10)=@buf={0x0, &(0x7f0000001000-0xcb)}) 2018/02/01 16:23:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f00007a9000-0x1), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f00005dd000-0x20)=[{r0}], 0x1, &(0x7f0000f3e000)={0x0, 0x989680}, &(0x7f0000f62000-0x8), 0x8) 2018/02/01 16:23:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000b2f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000bef000-0x10)={&(0x7f0000ef2000-0x13c)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@broadcast=0xffffffff, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}, 0xffffffffffffffff, 0x32}, @in6=@ipv4={[], [0xff, 0xff], @empty}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1}, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00009a5000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000116000)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000dd2000), 0x1) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f000022c000-0x4)=[@register_looper={0x630b}], 0x30, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000d2a000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000510000-0x2)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000025000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000c23000-0x1)=""/1, 0x1) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f00000e7000)={0xffffffff9c19069f, 0x4}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f000002b000)={0x3, [0x6eee, 0x5, 0x0]}, 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x44, 0x0, &(0x7f0000dde000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000d07000)=[], &(0x7f00007a6000)=[]}}], 0x0, 0x0, &(0x7f000000b000)}) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000008000-0x10)={0x1, &(0x7f0000005000-0x18)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]}) r0 = memfd_create(&(0x7f0000985000)=',&\x00', 0x0) rt_sigaction(0x6, &(0x7f0000c4a000-0x20)={0xa}, &(0x7f0000278000), 0x8, &(0x7f0000406000+0x651)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20)={0x428425, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f00001a4000-0x8)) syz_open_dev$evdev(&(0x7f0000258000)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/01 16:23:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f000055e000-0x4)=0x5, 0x4) bind$netlink(r0, &(0x7f0000229000)={0x10, 0x0, 0x0}, 0xc) 2018/02/01 16:23:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f000014c000)={0x0, 0x0, &(0x7f00005b1000-0x60)=[{&(0x7f0000978000-0x1248)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, "", []}, 0x10}], 0x1, &(0x7f00004d3000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvfrom$ax25(r1, &(0x7f0000efe000)=""/19, 0x351, 0x0, &(0x7f0000eca000+0x971)={0x3, {"0021009100d205"}}, 0xffffffffffffffb3) 2018/02/01 16:23:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) [ 41.987459] binder: 6268:6272 ERROR: BC_REGISTER_LOOPER called without request [ 41.994979] binder: 6272 RLIMIT_NICE not set [ 42.068180] binder: BINDER_SET_CONTEXT_MGR already set [ 42.073575] binder: 6268:6299 ioctl 40046207 0 returned -16 [ 42.081930] binder: 6268:6272 ERROR: BC_REGISTER_LOOPER called without request [ 42.082592] binder_alloc: 6268: binder_alloc_buf, no vma [ 42.082614] binder: 6268:6299 transaction failed 29189/-3, size 0-0 line 2903 [ 42.102201] binder: 6272 RLIMIT_NICE not set 2018/02/01 16:23:28 executing program 5: r0 = socket$inet(0x2, 0x10000000000002, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000d52000-0xc)={@broadcast=0xffffffff, @loopback=0x7f000001}, 0xc) 2018/02/01 16:23:28 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000013000), 0x4) 2018/02/01 16:23:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:28 executing program 4: clone(0x0, &(0x7f0000598000-0xe4), &(0x7f00009fa000-0x4), &(0x7f0000e0d000-0x4), &(0x7f0000b1a000-0x2)) truncate(&(0x7f0000d9a000)='./file0\x00', 0x0) 2018/02/01 16:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(0xffffffffffffffff, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000542000)={&(0x7f0000181000)=@ipv6_newroute={0x30, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_GATEWAY={0x14, 0x5, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}]}, 0x30}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00001ff000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0x2c000)=nil, 0x2c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000029000-0x10)={&(0x7f000002c000-0x158)=@ipv4_newroute={0x2c, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_METRICS={0x8, 0x8, 'W'}, @RTA_FLOW={0x8, 0xb, 0xfffffffffffff800}]}, 0x2c}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x0, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) [ 42.113867] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.119415] binder: release 6268:6272 transaction 36 out, still active [ 42.126122] binder: undelivered TRANSACTION_COMPLETE [ 42.131267] binder: release 6268:6287 transaction 35 out, still active [ 42.137956] binder: undelivered TRANSACTION_COMPLETE [ 42.143224] binder: send failed reply for transaction 35, target dead [ 42.149823] binder: send failed reply for transaction 36, target dead 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(0xffffffffffffffff, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00005e7000-0x8), &(0x7f0000081000-0x4)=0x8) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000076f000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x80247009, 0x20000000) 2018/02/01 16:23:28 executing program 4: clone(0x0, &(0x7f0000000000), &(0x7f0000001000-0x4), &(0x7f0000cef000-0x4), &(0x7f0000bf3000-0xe)) msync(&(0x7f0000d2b000/0x4000)=nil, 0x4000, 0x0) 2018/02/01 16:23:28 executing program 5: mmap(&(0x7f0000000000/0x250000)=nil, 0x250000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000244000-0xd)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000244000)=[], 0x0) clock_gettime(0x0, &(0x7f00000b0000)={0x0, 0x0}) ppoll(&(0x7f0000104000-0x8)=[{r0}], 0x1, &(0x7f000005d000-0x10)={0x0, r1+30000000}, &(0x7f000024c000-0x8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023f000-0x58)={0x80, 0x7d}) 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000f95000)=[{r0}], 0x1, &(0x7f0000a43000)={0x77359400}, &(0x7f00009db000-0x8), 0x8) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000044d000)) shutdown(r0, 0x0) 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xee3000)=nil, 0xee3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f000001c000-0x4), 0x4) 2018/02/01 16:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(0xffffffffffffffff, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x0, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000333000-0x9)='net/arp\x00') sendmsg$unix(r0, &(0x7f000001b000)={&(0x7f000018b000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000fea000-0x20)=[], 0x0, &(0x7f0000fa3000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000f3c000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendto(r0, &(0x7f0000f1e000-0xdd), 0xffffffffffffff02, 0x0, &(0x7f0000ffb000-0x10)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/01 16:23:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000f10000-0x6)='./bus\x00', &(0x7f000002a000-0xe)='./file0\x00', &(0x7f0000937000)='ramfs\x00', 0x0, &(0x7f000003f000-0x9d)) link(&(0x7f0000ed1000-0x8)='./file0\x00', &(0x7f000021d000-0x8)='./file1\x00') 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = dup(r0) request_key(&(0x7f0000d68000+0xa80)='dns_resolver\x00', &(0x7f0000573000)={0x73, 0x79, 0x7a}, &(0x7f0000734000-0x1)='\x00', 0xffffffffffffffff) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000785000)) 2018/02/01 16:23:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000420000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 2018/02/01 16:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:28 executing program 7: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f00005fc000-0x8), 0x0, 0x8) 2018/02/01 16:23:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000685000)=0x7ff, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cf000-0x78)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f000077d000-0x7d0)="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", 0x7d0, 0x0, &(0x7f0000efc000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 42.364397] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/02/01 16:23:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x0, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000004000-0x10)={&(0x7f0000004000)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @in=@dev={0xac, 0x14}}}]}, 0x50}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d1f000-0x4), &(0x7f0000684000-0x4)=0x4) sendto$inet(r0, &(0x7f00004e6000-0x2), 0x0, 0x20008047, &(0x7f00005f0000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) accept4(r1, &(0x7f0000651000)=@alg, &(0x7f0000150000)=0x58, 0x0) 2018/02/01 16:23:28 executing program 5: clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f000027a000), &(0x7f0000000000)) getdents(0xffffffffffffffff, &(0x7f0000b2d000-0x50)=""/80, 0x50) 2018/02/01 16:23:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00005dd000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000883000)=[{r0}], 0x1, 0xffff) vmsplice(r1, &(0x7f00004e8000)=[{&(0x7f00005e0000-0xa9)=';', 0x1}], 0x1, 0x0) 2018/02/01 16:23:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000592000)='sessionid\x00') sendfile(r0, r1, &(0x7f00006b0000), 0x200000002000ff) 2018/02/01 16:23:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x0) read(r0, &(0x7f00001fa000-0x18)=""/24, 0x18) write$evdev(r0, &(0x7f0000058000-0x60)=[{}], 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$intptr(0x29, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2018/02/01 16:23:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x0, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) [ 42.439354] binder: 6393:6398 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 42.447715] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 42.511687] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) r2 = accept4$unix(r1, &(0x7f0000af3000)=@abs={0x0, 0x0, 0x0}, &(0x7f00007be000-0x4)=0x8, 0x0) getsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000053000), &(0x7f0000887000)=0x4) 2018/02/01 16:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000061000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000060c000)={{0x100000001}}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b72000-0xc)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) epoll_wait(0xffffffffffffffff, &(0x7f0000379000)=[{}], 0x1, 0x8d) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000052000-0xc)={0x13}) 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000c88000-0x38)={&(0x7f0000b0f000)=@nfc, 0x10, &(0x7f00009f6000)=[]}, 0x0) write(r0, &(0x7f0000b67000)="26000000420047f1938d0000000000670050f16b9cbdea120300c7284a6809e517f86e328a00", 0x26) 2018/02/01 16:23:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x31, &(0x7f00001b6000-0xc)={@multicast1, @multicast1, @broadcast}, &(0x7f0000545000-0x4)=0xc) 2018/02/01 16:23:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x0, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000c38000)={0x20000000, 0x0, 0x2, @thr={&(0x7f000096b000), &(0x7f00006d1000-0x13)}}) 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000002000-0xa)='encrypted\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000001000-0x16), 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r1) 2018/02/01 16:23:28 executing program 5: mmap(&(0x7f0000000000/0xe5b000)=nil, 0xe5b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x3, &(0x7f0000e58000)=[{0x15, 0x1}, {}, {0x6, 0x0, 0x0, 0xffffffff}]}) prctl$setmm(0x23, 0x0, &(0x7f0000ab5000/0x2000)=nil) 2018/02/01 16:23:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x0, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) [ 42.734014] binder: 6435:6444 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000522000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000777000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[]}, 0x0) r3 = dup2(r1, r2) dup3(r2, r0, 0x0) sendmmsg$unix(r3, &(0x7f0000502000-0x38)=[{&(0x7f00004b8000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000f17000)=[], 0x0, &(0x7f000089a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 4: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017000)="2f0000001c0003fd6d0000000000000002dd00d8020000001f5f01c9080001000000737e0beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) [ 42.783802] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.810239] binder: 6466:6471 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:28 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000007000-0x4)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000004000-0x27), 0x2a4, 0x0, &(0x7f0000002000-0x1c)={0xa, 0xffffffffffffffff, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xffa000)=nil, 0xffa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000009000-0x8)) 2018/02/01 16:23:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) write$tun(r0, &(0x7f0000cf2000-0x16f)=@hdr={0x3, 0x0, 0x7ff, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14}, @broadcast=0xffffffff, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x6, [0x0]}]}}}}}, 0x3a) 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x0, &(0x7f0000cfb000)) 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) [ 42.832800] netlink: 11 bytes leftover after parsing attributes in process `syz-executor4'. [ 42.844445] netlink: 11 bytes leftover after parsing attributes in process `syz-executor4'. 2018/02/01 16:23:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00003ab000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000dd0000-0x4)) fcntl$setpipe(r0, 0x407, 0x0) dup2(r0, r2) 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) [ 42.847140] kauditd_printk_skb: 21 callbacks suppressed 2018/02/01 16:23:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00004bf000-0x78)={0x0, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000082d000)=@generic="7c5dfe4663093c1fe4beecdc7e4b4a71"}) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 42.847148] audit: type=1326 audit(1517502208.679:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6461 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0xffff0000 [ 42.882381] audit: type=1326 audit(1517502208.715:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6488 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0xffff0000 [ 42.902091] audit: type=1326 audit(1517502208.735:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6461 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0xffff0000 2018/02/01 16:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x0, &(0x7f0000cfb000)) 2018/02/01 16:23:28 executing program 7: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000014000-0x30)={0x8, 0x0, &(0x7f0000014000-0x8)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000-0xc9)}) poll(&(0x7f0000006000-0x50)=[{r0}, {r1}], 0x2, 0x7ffe) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000-0x30)={0x10, 0x0, &(0x7f000000f000)=[@request_death={0x400c630e}], 0x0, 0x0, &(0x7f000000c000-0xe1)}) 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000fc2000-0x8)={0x4000019980330}, &(0x7f0000e26000-0x18)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000824000-0xe8)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {}, {}, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0x0}, 0x0}, 0x0, @in6=@local={0x0, 0x0, [], 0x0}, 0x0}}, &(0x7f0000b25000)=0xe8) setresuid(r0, 0x0, 0x0) 2018/02/01 16:23:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00004bf000-0x78)={0x0, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000082d000)=@generic="7c5dfe4663093c1fe4beecdc7e4b4a71"}) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00003ab000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000dd0000-0x4)) fcntl$setpipe(r0, 0x407, 0x0) dup2(r0, r2) [ 42.941765] audit: type=1326 audit(1517502208.775:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6488 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0xffff0000 [ 43.028402] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000238000-0x12)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f00001a2000)=[{{0x0, 0x2710}, 0x4}], 0x18) 2018/02/01 16:23:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x0, &(0x7f0000cfb000)) 2018/02/01 16:23:28 executing program 5: mmap(&(0x7f0000000000/0xdf2000)=nil, 0xdf2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f00003f0000-0x10)) rt_sigprocmask(0x2, &(0x7f0000df2000-0x8), &(0x7f0000df2000-0x8), 0x8) 2018/02/01 16:23:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000d4a000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00002b3000-0xc)) dup3(r1, r2, 0x0) 2018/02/01 16:23:28 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x33, &(0x7f0000934000), 0x0) 2018/02/01 16:23:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00006ee000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f00001d5000)=@ethtool_cmd={0x1f, 0x7080}}) 2018/02/01 16:23:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) [ 43.076665] binder: 6518:6532 tried to acquire reference to desc 0, got 1 instead [ 43.101437] binder: 6518:6532 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/02/01 16:23:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000bf1000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000d08000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r0, 0x6, 0x0) clone(0x0, &(0x7f0000039000-0x9e), &(0x7f000003b000), &(0x7f0000000000), &(0x7f0000000000)) vmsplice(r2, &(0x7f00000ab000-0x90)=[{&(0x7f000093b000)='8', 0x1}], 0x1, 0x0) 2018/02/01 16:23:29 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000394000-0x8)) bind$inet(r0, &(0x7f00005d6000-0xd)={0x2, 0x0, @rand_addr}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000675000-0x10), &(0x7f0000319000-0x4)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2000000000009, &(0x7f0000dee000-0x4)=0x2, 0xffffffffffffffc3) sendto$inet(r0, &(0x7f0000de2000-0x1), 0x0, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000b2d000)='./file0\x00', 0x0, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000fcb000)={0x0, @in6={{0xa, 0x0, 0xa5, @local={0xfe, 0x80, [], 0x0, 0xaa}}}, 0x87, 0x2, 0x8, 0x1}, &(0x7f000082a000-0x4)=0xa0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000bab000)={r2, 0x15}, &(0x7f00002c5000-0x4)=0x8) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f000023c000)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000df0000-0x20)={@generic="bd2b290a1d3352ea6446a826e4379b1b", @ifru_addrs={0x2, 0x1, @multicast2=0xe0000002}}) execve(&(0x7f0000ac1000)='./file0\x00', &(0x7f0000e4a000-0x10)=[&(0x7f00005e3000-0x1)='\x00', &(0x7f0000b4c000)="25766d6e6574301a766d6e65743100", &(0x7f0000db3000)='\x00', &(0x7f00005f4000-0xa)='mime_type\x00'], &(0x7f00003cc000)=[&(0x7f0000ac9000)='\x00', &(0x7f0000246000)='\x00', &(0x7f00000b0000)='self\x00', &(0x7f0000f97000)='\x00', &(0x7f00000a8000)='security\x00', &(0x7f0000652000-0xa)='!*ppp1]/}\x00', &(0x7f0000e41000-0x1)='\x00', &(0x7f0000c5c000)='\x00']) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00003cf000)={&(0x7f0000f4e000-0xc)={0x10}, 0xc, &(0x7f00005ad000)={&(0x7f0000f94000)=@migrate={0xd8, 0x21, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@user_kmaddress={0x2c, 0x13, {@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in=@rand_addr}}, @migrate={0x5c, 0x11, [{@in=@rand_addr, @in6=@empty}, {@in=@loopback=0x7f000001, @in=@rand_addr}]}]}, 0xd8}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000031f000-0xa)='net/icmp\x00') pread64(r0, &(0x7f00008fa000), 0x0, 0x800000000000) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000965000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000971000)) syz_open_procfs(0x0, &(0x7f0000fa9000)='loginuid\x00') clock_nanosleep(0x2, 0x0, &(0x7f0000052000-0x10)={0x0, 0x989680}, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000e24000)) recvmmsg(0xffffffffffffffff, &(0x7f0000f40000)=[{{&(0x7f0000ee4000)=@in6={0x0, 0xffffffffffffffff, 0x0, @loopback}, 0x1c, &(0x7f0000f41000-0x30)=[], 0x0, &(0x7f0000c04000)=""/184, 0xb8}}], 0x1, 0x0, &(0x7f0000f41000-0x10)={0x77359400}) seccomp(0x1, 0x0, &(0x7f0000045000-0x10)={0x1, &(0x7f0000000000)=[{0x6}]}) ptrace$setopts(0x0, 0x0, 0x0, 0x0) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffff6b) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f000031b000), 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00002ef000-0x38)={&(0x7f00001cf000)=@in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000b74000)=[], 0x0, &(0x7f0000055000-0x60)=[], 0xfffffffffffffd8d}, 0x0) sendmmsg(r0, &(0x7f0000111000-0x12c)=[{{&(0x7f000050d000)=@hci={0x1f}, 0x6, &(0x7f0000871000)=[], 0x0, &(0x7f0000a75000-0x118)=[], 0x0, 0x4000}}], 0x1, 0x0) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) sched_setaffinity(0x0, 0x8, &(0x7f00007c3000)) 2018/02/01 16:23:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000847000)={&(0x7f00001b2000-0x2b4)=@newsa={0x140, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x32}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@tfcpad={0x8, 0x16}, @algo_auth={0x48, 0x1, {{'rmd160\x00'}}}]}, 0x140}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x20001) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) write$tun(r0, &(0x7f0000e70000-0x89)=@hdr={0x0, 0x83, 0x0, 0xd89a, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast2=0xe0000002, {[]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @loopback=0x7f000001, {[]}}}}}, 0x3a) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) [ 43.301601] audit: type=1326 audit(1517502209.135:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6589 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0xffff0000 [ 43.337122] audit: type=1326 audit(1517502209.167:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6585 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0x0 [ 43.375964] audit: type=1326 audit(1517502209.209:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6589 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0xffff0000 2018/02/01 16:23:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000c83000)) prctl$intptr(0x2f, 0x2) 2018/02/01 16:23:29 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000002000-0xa)='syzkaller\x00', &(0x7f0000001000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000000)='\\eth0\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000002000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000aac000-0xa)='id_legacy\x00', &(0x7f0000847000-0x5)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r1) keyctl$search(0xa, r0, &(0x7f0000003000)='dns_resolver\x00', &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x0}, 0x0) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:29 executing program 7: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000010000)='net/tcp\x00') read(r0, &(0x7f0000020000-0xae)=""/174, 0xcf) read$eventfd(r0, &(0x7f0000009000-0x8), 0x5a6) 2018/02/01 16:23:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffff6b) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f000031b000), 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00002ef000-0x38)={&(0x7f00001cf000)=@in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000b74000)=[], 0x0, &(0x7f0000055000-0x60)=[], 0xfffffffffffffd8d}, 0x0) sendmmsg(r0, &(0x7f0000111000-0x12c)=[{{&(0x7f000050d000)=@hci={0x1f}, 0x6, &(0x7f0000871000)=[], 0x0, &(0x7f0000a75000-0x118)=[], 0x0, 0x4000}}], 0x1, 0x0) 2018/02/01 16:23:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000d5f000)={&(0x7f0000415000)=@in6={0x0, 0x0, 0x0, @remote={0x0, 0x0, [], 0x0}}, 0x1c, &(0x7f000021a000-0x90)=[], 0x0, &(0x7f0000ec9000)=""/188, 0xbc}, 0x2) sendmsg$unix(r0, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[]}, 0x0) recvmsg(r1, &(0x7f00003a3000)={&(0x7f0000cd2000)=@alg, 0x58, &(0x7f0000a10000-0xa)=[], 0x0, &(0x7f0000af7000)}, 0x2) sendto(r0, &(0x7f0000012000), 0x0, 0x0, 0x0, 0x0) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x0, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) [ 43.422888] audit: type=1326 audit(1517502209.256:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=6585 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0x0 2018/02/01 16:23:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000093c000-0x38)={&(0x7f0000113000)={0x10}, 0xc, &(0x7f00002e5000-0x10)={&(0x7f0000421000)=@ipv6_delroute={0x1c, 0x19, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, []}, 0x1c}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000349000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x2}}, 0x2e) 2018/02/01 16:23:29 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000022000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000017000-0x4), 0x4) 2018/02/01 16:23:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="087265000301000001000105fbff00", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f00003f0000-0xc4), 0x0) rt_sigaction(0x0, &(0x7f000070d000)={0x0, {}, 0x50000001}, &(0x7f00006b9000), 0x8, &(0x7f000025f000)) r2 = dup3(r1, r0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) [ 43.493240] binder: 6633:6634 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:29 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000820000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}}) socket$inet6(0xa, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000001f000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r4, 0x4c03, 0x0) syz_open_procfs(0x0, &(0x7f0000018000)='net/arp\x00') ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7f) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000001000-0x51)=""/81, 0x51, 0xfffffffffffffffd, 0x0) 2018/02/01 16:23:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00009f0000)={0x2, 0x1, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000589000-0x1), 0xfffffffffffffe98, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000c23000)=[{{&(0x7f00001ae000)=@nfc, 0x10, &(0x7f00007f1000)=[], 0x0, &(0x7f00005a9000)}}], 0x1, 0x0, 0x0) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x0, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 0: mmap(&(0x7f0000000000/0xfde000)=nil, 0xfde000, 0x2000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f000001e000-0x3)) 2018/02/01 16:23:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f00009ca000-0xf5)=""/245, 0xf5, 0x0, &(0x7f00001a6000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) recvfrom(r0, &(0x7f0000f9d000-0x65)=""/101, 0xffffffffffffffd3, 0x0, 0x0, 0xfffffc81) [ 43.536578] l2tp_core: tunl 2: fd 19 wrong protocol, got 1, expected 17 [ 43.554145] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.571208] binder: 6656:6659 transaction failed 29189/-22, size 0-0 line 2788 [ 43.572710] l2tp_core: tunl 2: fd 19 wrong protocol, got 1, expected 17 [ 43.578858] device gre0 left promiscuous mode [ 43.645287] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:29 executing program 5: mmap(&(0x7f0000000000/0xf68000)=nil, 0xf68000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f5a000-0x4)=0x5, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5e000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f5e000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) 2018/02/01 16:23:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:29 executing program 0: clone(0x0, &(0x7f0000780000), &(0x7f0000168000), &(0x7f0000511000-0x4), &(0x7f0000000000)) chroot(&(0x7f000031b000)='./file0\x00') 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000e63000)='/dev/sg#\x00', 0x0, 0x10000000000002) timer_settime(0x0, 0x0, &(0x7f0000ce8000-0x20)={{}, {0x0, 0x1c9c380}}, &(0x7f0000e89000-0x20)={{0x0}}) write$evdev(r0, &(0x7f0000001000)=[{{r1}}, {{0x77359400}, 0x400, 0x0, 0x7}, {}, {{0x0, 0x2710}}], 0x60) readv(r0, &(0x7f00008cb000)=[{&(0x7f00000d7000-0xba6)=""/4096, 0x1000}], 0x1) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x0, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000982000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x800948) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000250000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00003be000)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000aaf000)={0x20000004}) epoll_wait(r2, &(0x7f0000b92000)=[{}], 0x1, 0x0) 2018/02/01 16:23:29 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x1, 0x11, r0, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000062000)='./file0\x00', &(0x7f0000059000-0x20), 0x0) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000003000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000001000)) 2018/02/01 16:23:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000b46000-0xd)='/dev/net/tun\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000ed9000-0x20)={0x2}) [ 43.725576] binder: 6680:6686 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:29 executing program 2: clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) geteuid() [ 43.740754] audit: type=1400 audit(1517502209.574:50): avc: denied { map } for pid=6679 comm="syz-executor7" path="/dev/usbmon0" dev="devtmpfs" ino=9185 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usbmon_device_t:s0 tclass=chr_file permissive=1 2018/02/01 16:23:29 executing program 7: clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f000039b000), &(0x7f0000bda000)) flistxattr(0xffffffffffffffff, &(0x7f0000336000)=""/185, 0xb9) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x0, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f000000b000-0x4)="d8"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000071c000)={0x4, 0x0, &(0x7f0000309000-0xd0)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000073000)}) 2018/02/01 16:23:29 executing program 2: mmap(&(0x7f0000000000/0xfd1000)=nil, 0xfd1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000022000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000fca000)=""/208, 0xd0, 0x0, &(0x7f0000f62000)=@file={0x0, './file0\x00'}, 0xfffffe28) write(r1, &(0x7f0000d8b000), 0xfd34) 2018/02/01 16:23:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) socket$nl_crypto(0x10, 0x3, 0x15) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000763000-0x1), 0x0, 0x0, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)=""/30, &(0x7f000000f000-0x4)=0x1e) 2018/02/01 16:23:29 executing program 4: clone(0x0, &(0x7f000013b000-0xca), &(0x7f0000ba2000-0x4), &(0x7f0000459000), &(0x7f0000196000)) statfs(&(0x7f00008e4000-0x8)='./file0\x00', &(0x7f0000a48000-0x21)=""/33) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) [ 43.815987] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.853337] binder: 6721:6725 ERROR: BC_REGISTER_LOOPER called without request 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000005000-0xf0)=[{0x1ffffff81, 0xffffffffffffff08, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @result}], 0x30) 2018/02/01 16:23:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000a09000)='./file0\x00', 0x160) capset(&(0x7f0000000000)={0x19980330}, &(0x7f000034d000)) link(&(0x7f000045a000-0x8)='./file0\x00', &(0x7f0000720000-0xe)='./file0/file1\x00') [ 43.854195] binder: 6719:6723 transaction failed 29189/-22, size 0-0 line 2788 [ 43.862866] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.873745] binder: 6725 RLIMIT_NICE not set [ 43.888093] binder: 6721:6739 ERROR: BC_REGISTER_LOOPER called without request 2018/02/01 16:23:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x0, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f000065a000-0x2), &(0x7f0000cc9000), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) clone(0x0, &(0x7f0000bf8000), &(0x7f00000cc000-0x4), &(0x7f0000888000-0x4), &(0x7f00009d5000-0xaf)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000a95000-0x90)) 2018/02/01 16:23:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000070d000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d1000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) symlink(&(0x7f0000050000-0x8)='..', &(0x7f0000194000)='./file0/bus\x00') umount2(&(0x7f000088c000)='./file0/bus\x00', 0x0) 2018/02/01 16:23:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ddd000)="a151b88671cdf5a4809d6bb1db", 0xd) r0 = syz_open_dev$usbmon(&(0x7f0000fd1000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x0, &(0x7f000003a000), &(0x7f0000924000-0x4), &(0x7f0000ca4000), &(0x7f000025a000)) ioctl$sock_SIOCBRDELBR(r0, 0x5421, &(0x7f0000644000-0x10)=@generic="53e729004a31040260a942089e00005f") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000ddd000)) 2018/02/01 16:23:29 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000d73000)=[], 0x0, 0x0, &(0x7f0000869000), 0x8) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) [ 43.889587] binder: 6731:6736 transaction failed 29189/-22, size 0-0 line 2788 [ 43.915490] binder: 6721:6743 ERROR: BC_REGISTER_LOOPER called without request [ 43.915499] binder: 6743 RLIMIT_NICE not set [ 43.919379] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x0, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:29 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002000)={&(0x7f0000008000)={0x10}, 0xc, &(0x7f0000006000-0x10)={&(0x7f000000a000)=@polexpire={0xc4, 0x1b, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001}, {}, {}, 0x0, 0xf}}, [@etimer_thresh={0x8, 0xc}]}, 0xc4}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:29 executing program 4: clone(0x0, &(0x7f0000a2c000-0x8), &(0x7f0000135000-0x4), &(0x7f000048a000-0x4), &(0x7f0000185000)) inotify_init1(0x0) 2018/02/01 16:23:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000afa000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000d4d000)=@ethtool_rxfh_indir={0x38, 0x0, []}}) 2018/02/01 16:23:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x2c, &(0x7f0000008000-0xc)={@loopback=0x7f000001, @multicast1=0xe0000001, @empty}, 0x108) 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f00005a1000)={&(0x7f000037c000)=@ipv4_delroute={0xf0, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x3, 0xfe, 0x0, 0x200}, [@RTA_PREFSRC={0x8, 0x7, @loopback=0x7f000001}, @RTA_FLOW={0x8, 0xb, 0xbc}, @RTA_METRICS={0xbc, 0x8, "2b159f88a754afc35d963d1bdd076c58b9d4cb15abc68ecbae31390526fb181df38d3f4f313f1be30d118ba1782998dba199da6b7dd9629106e062e5f54c863507765ddcc393da07e927ccaaab3fb92f7ea28aefe98f358db14ce04ba7584ff4b80db1ce7b5661c8b580f5dea9fce4e6e423cecf70704bb4087b1ed18d0a70f096940117709e44351274f1a960ce7cd7ab0ae76d8be7acd5aacaa546960a615b0626d8e85b9c8dde1e0edf6dba314a24ca7ed9ab9d8b33f1"}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4007}, 0x4000000) [ 43.957412] binder: 6748:6753 transaction failed 29189/-22, size 0-0 line 2788 [ 43.969939] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.994576] binder: 6764:6769 transaction failed 29189/-22, size 0-0 line 2788 [ 44.014694] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:29 executing program 7: mmap(&(0x7f0000000000/0xc30000)=nil, 0xc30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000c2d000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c2d000)={0x0}, &(0x7f0000c2e000-0x4)=0xfec0) r2 = getpgid(r1) fcntl$setown(r0, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000c24000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace(0x11, r3) 2018/02/01 16:23:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0xfffffffffffffffd, 0x808000000000002, 0x42, 0x3, 0xfb, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) 2018/02/01 16:23:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000e17000-0x8)) socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) 2018/02/01 16:23:29 executing program 5: mmap(&(0x7f0000000000/0xf9f000)=nil, 0xf9f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f00002db000-0x4)=0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f00001dd000)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000004000-0x8), 0x3, 0x0) 2018/02/01 16:23:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) [ 44.069734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 44.074095] binder: 6779:6787 transaction failed 29189/-22, size 0-0 line 2788 2018/02/01 16:23:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000710000)=0x3, 0x4) sendto$inet6(r0, &(0x7f00009f1000-0x3d), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) 2018/02/01 16:23:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f000000e000-0x8)=@file={0x1}, 0x2) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000026000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r2, r0]}], 0x1}, 0x0) listen(r2, 0x0) dup2(r1, r2) r4 = dup3(r1, r0, 0x0) connect$unix(r4, &(0x7f000002d000)=@abs={0x1, 0x0, 0x0}, 0x8) 2018/02/01 16:23:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect(r0, &(0x7f0000e16000)=@in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f00007a9000-0x1), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000b2000)) 2018/02/01 16:23:30 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() mmap(&(0x7f0000b37000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b37000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r5, &(0x7f000004c000-0x5e)=""/1, 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) dup2(r4, r5) tkill(0x0, 0x0) ppoll(&(0x7f0000b34000)=[{r2}], 0x1, &(0x7f000083a000)={0x77359400}, &(0x7f00004cf000), 0x8) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x4, 0x32, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(r0, 0x16) 2018/02/01 16:23:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f000030c000)={&(0x7f0000c4f000-0x10)=@in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10, &(0x7f00002c0000-0x50)=[], 0x0, &(0x7f0000bfb000)=[{0x10}], 0x10}, 0x0) 2018/02/01 16:23:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000061a000-0xd)='/dev/snd/seq\x00', 0x0, 0x80001) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003bc000-0xc)={0x80000004}) ppoll(&(0x7f000021b000-0x30)=[{r1}], 0x1, &(0x7f0000c59000), &(0x7f0000898000), 0x8) [ 44.103219] binder: undelivered TRANSACTION_ERROR: 29189 [ 44.127984] binder: 6797:6802 transaction failed 29189/-22, size 0-0 line 2788 [ 44.154812] binder: undelivered TRANSACTION_ERROR: 29189 [ 44.171198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 2018/02/01 16:23:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x3, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00009cf000)='/dev/loop#\x00', 0x65, 0x0) ioctl(r0, 0x440000000000127a, &(0x7f00009ba000-0x27)) 2018/02/01 16:23:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000062c000-0x38)={&(0x7f0000316000-0xb)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f00005ad000-0xcc)=@getpolicy={0x5c, 0x15, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8}}]}, 0x5c}, 0x1}, 0x0) 2018/02/01 16:23:30 executing program 3: mmap(&(0x7f0000000000/0xfd7000)=nil, 0xfd7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000023b000)="1f00000052007d07000094fef4fffb000200450000000000b4a500ffffb92b", 0x1f) recvfrom$ax25(r0, &(0x7f0000fd7000)=""/4096, 0x1000, 0x120, &(0x7f0000059000)={0x3, {"04552dc2c50e63"}}, 0x10) 2018/02/01 16:23:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:30 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) add_key(&(0x7f0000005000-0xd)='dns_resolver\x00', &(0x7f0000008000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000006000)="d91f20c2f8b643bc7a8052c49e76865167a1c55840c95d992a7da7b102db1fcd", 0x20, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/01 16:23:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000713000)={&(0x7f000059d000-0xc)={0x10}, 0xc, &(0x7f0000f9c000-0x10)={&(0x7f0000e45000)=@updpolicy={0xfc, 0x19, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@broadcast=0xffffffff, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x2, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x1}]}]}, 0xfc}, 0x1}, 0x0) 2018/02/01 16:23:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x106, 0x0) writev(r0, &(0x7f000036c000-0x30)=[{&(0x7f0000b51000)="ebb29c2aa804af648d63b2908439b40213", 0x11}], 0x1) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000557000)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) writev(r0, &(0x7f0000503000-0x28)=[{&(0x7f0000447000-0x5a)="272161030c79845c300109815c75a7611c6681eb4fb789878b5ceade1df0770b80f4a986c12c5d2c638d94f3fe187de9256f6ffbe83f44dd996478966beb49384d75950a1108", 0x46}], 0x1) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x0, 0x0, 0x7}) 2018/02/01 16:23:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001c8000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r1]}], 0x1}, 0x0) socket$unix(0x1, 0x5, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f000005a000-0xd)='/selinux/mls\x00', 0x0, 0x0) recvmsg(r3, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) sendmsg$nl_generic(r0, &(0x7f000000a000-0x38)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f000000c000)={0x20, 0x10, 0x109, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@typed={0xc, 0x1, @fd=0xffffffffffffffff}]}, 0x20}, 0x1}, 0x0) [ 44.311863] binder: 6851:6853 transaction failed 29201/-22, size 0--4880856391614455847 line 2903 [ 44.326444] binder_alloc: binder_alloc_mmap_handler: 6851 20000000-20002000 already mapped failed -16 [ 44.348089] audit: type=1400 audit(1517502210.181:51): avc: denied { create } for pid=6861 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 44.348205] binder: BINDER_SET_CONTEXT_MGR already set [ 44.348214] binder: 6851:6853 ioctl 40046207 0 returned -16 [ 44.355372] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 44.403378] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 44.419864] binder_alloc: 6851: binder_alloc_buf, no vma [ 44.425672] binder: 6851:6869 transaction failed 29189/-3, size 0--4880856391614455847 line 2903 [ 44.446842] binder: undelivered TRANSACTION_ERROR: 29189 [ 44.452831] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/01 16:23:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x200000000000001, 0x0, &(0x7f000002b000)={0x1, &(0x7f0000003000-0x8)=[{0x6, 0x0, 0x0, 0x1ffffffff}]}) setitimer(0x0, &(0x7f0000167000-0x20)={{}, {0x0, 0x2710}}, &(0x7f000070e000-0x20)) 2018/02/01 16:23:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x0, &(0x7f00005e4000-0x8)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f000028b000)='veno\x00', 0x5) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00002b2000-0x10)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/01 16:23:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000b76000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000e88000)=@newlink={0x38, 0x10, 0x11, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VF_PORTS={0x4, 0x18, []}]}, 0x38}, 0x1}, 0x0) 2018/02/01 16:23:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00001df000)={@common="6c6f000000000ff7ffffff0000e0f0ff", &(0x7f0000ef3000-0x14)=@ethtool_sset_info={0x37, 0x0, 0x7ff, []}}) 2018/02/01 16:23:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) write$tun(r1, &(0x7f00003f1000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, @multicast1=0xe0000001, {[]}}, @udp={0x0, 0x0, 0x8}}}, 0x102d5) 2018/02/01 16:23:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000416000-0x38)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000db000-0x10)={&(0x7f000030e000)=@newsa={0x1b4, 0x10, 0xb01, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@broadcast=0xffffffff, @in=@multicast1=0xe0000001}, {@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x33}, @in=@multicast1=0xe0000001, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@algo_auth_trunc={0xc4, 0x14, {{'md5\x00'}, 0x3c0, 0x0, "0318f87c7fc623432e3bde7e92d1ac8ed298ad6633ec8237fe91ade91bb115a203ebe00d9ac93ffefba4cc40bb4f0b0d3ae87b1a065dd7cf88b734e1ef7b8840b49e0826a4c17c088ec643e9d72a614ed0e64e67690fa909003241e6f171c2a2693b802cbd5eccd0983b6fb5f81257cc15b97d224eac9883"}}]}, 0x1b4}, 0x1}, 0x0) 2018/02/01 16:23:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:30 executing program 3: clone(0x0, &(0x7f000016c000), &(0x7f00003c2000), &(0x7f00000df000), &(0x7f0000001000-0x48)) prctl$intptr(0x24, 0x0) 2018/02/01 16:23:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000a53000)='/proc/self/net/pfkey\x00', 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000052000-0x10)={0x0, 0x989680}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000e24000)={0x0, r0}) recvmmsg(r2, &(0x7f0000f40000)=[{{&(0x7f0000ee4000)=@in6={0x0, 0xffffffffffffffff, 0x0, @loopback}, 0x1c, &(0x7f0000f41000-0x30)=[], 0x0, &(0x7f0000c04000)=""/184, 0xb8}}], 0x1, 0x0, &(0x7f0000f41000-0x10)={0x77359400}) recvmsg(r2, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) clone(0x0, &(0x7f0000b83000-0x3), &(0x7f0000768000), &(0x7f0000197000), &(0x7f00007e8000-0x6a)) tkill(r0, 0x15) seccomp(0x1, 0x0, &(0x7f0000045000-0x10)={0x1, &(0x7f0000000000)=[{0x6}]}) write(0xffffffffffffffff, &(0x7f000067c000), 0x0) 2018/02/01 16:23:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008f4000-0xa)='net/raw\x00') pread64(r0, &(0x7f0000a31000), 0x0, 0x3fffe) 2018/02/01 16:23:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000003000-0x38)={&(0x7f0000006000-0xc)=@nl=@proc={0x10, 0x0, 0x2, 0x2000000}, 0xc, &(0x7f0000002000)=[{&(0x7f000000e000-0x56)="5500000018007fafb72d1cb2a4a280930a06000000a8430891052369390009002f000000000000001900", 0x2a}], 0x1, &(0x7f0000006000)=[]}, 0x0) 2018/02/01 16:23:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000001000)) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f000004e000-0x8), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0x3, @rand_addr=0x8}}) dup3(r1, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000001a000)={0xa, 0xffffffffffffffff, 0x3, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x80000001}, 0x1c) 2018/02/01 16:23:31 executing program 5: clone(0x20800, &(0x7f0000001000-0x3), &(0x7f0000a26000-0x4), &(0x7f0000000000), &(0x7f0000548000-0x1)) 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0xf0, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, []}, 0xf0}, 0x1}, 0x0) 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000053c000-0x4), 0x400000085, 0x0, &(0x7f00008b5000)={0x0, 0x989680}, &(0x7f0000000000), 0xa0000001) 2018/02/01 16:23:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x3, &(0x7f0000fae000), 0x0) 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000000000/0xcc5000)=nil, 0xcc5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = dup(r0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000cc0000-0x8), &(0x7f00005ae000-0x4)=0x8) uname(&(0x7f0000cbf000)=""/28) 2018/02/01 16:23:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r0, &(0x7f0000bae000)={&(0x7f0000d44000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f00002c3000)=[], 0x0, &(0x7f0000c8e000-0x90)=[{0x18, 0x29, 0x3b, "0e"}], 0x18}, 0x0) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000001000/0xd39000)=nil, 0xd39000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect(r0, &(0x7f0000ac8000-0x10)=@in={0x2, 0x0, @empty}, 0x10) 2018/02/01 16:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000237000-0x4), 0x4) 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000000000/0x2e000)=nil, 0x2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000002d000-0x10)={&(0x7f000002c000-0x158)=@ipv4_newroute={0x1c, 0x18, 0x10000021, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1}, []}, 0x1c}, 0x1}, 0x0) 2018/02/01 16:23:31 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@empty, @multicast2, 0x0}, &(0x7f000070e000)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @remote={0xac, 0x14, 0x0, 0xbb}, r1}, 0xc) 2018/02/01 16:23:31 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) lsetxattr(&(0x7f0000013000-0x8)='./file0\x00', &(0x7f0000011000)=@random={'user.\x00', 'GPL\x00'}, &(0x7f0000001000)=':}trusted:{\x00', 0xc, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000d81000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0xf0, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, []}, 0xf0}, 0x1}, 0x0) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000950000-0x9)='/dev/sg#\x00', 0x0, 0x200010002083) syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000e36000-0x8)) close(r0) 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000366000)={0x0, 0x21, 0x0, @thr={&(0x7f00007e4000-0x8), &(0x7f0000c21000)}}, &(0x7f0000aef000)) seccomp(0x1, 0x0, &(0x7f0000e8c000)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f000009b000)) timer_delete(0x0) 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0xf0, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, []}, 0xf0}, 0x1}, 0x0) 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001d5000-0x8)='./file0\x00', 0x0) symlink(&(0x7f0000192000)='./file0\x00', &(0x7f0000045000-0xe)='./control\x00') chroot(&(0x7f0000f03000-0xa)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000020000-0x9)='./file0/file0\x00', r0, &(0x7f0000020000-0x8)='./file0\x00') mount(&(0x7f00009fa000)='./file0/file0\x00', &(0x7f0000137000-0x10)='./control/file0\x00', &(0x7f0000bac000+0xf36)='ext2\x00', 0x0, &(0x7f0000727000)) open(&(0x7f0000243000-0xe)='./file0/file0\x00', 0x0, 0x0) 2018/02/01 16:23:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fe9000-0xc)={0x0}, &(0x7f0000139000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) capset(&(0x7f0000440000-0x8)={0x19980330}, &(0x7f000023c000-0x18)) get_robust_list(r2, &(0x7f000012b000)=&(0x7f0000fa0000-0x18), &(0x7f00005dd000)=0x18) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getresuid(&(0x7f0000013000-0x4), &(0x7f0000012000), &(0x7f0000001000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f00008a3000), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00009a2000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000e8000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000aa0000-0x8)='./file0\x00', &(0x7f000039c000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000045000)='.', &(0x7f0000e99000-0x5)='cifs\x00', 0x2000, &(0x7f0000421000)) umount2(&(0x7f0000f45000)='.', 0x0) socket$inet_sctp(0x2, 0x0, 0x84) 2018/02/01 16:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000), 0x0, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xb39000)=nil, 0xb39000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0xffffffffffffffff, &(0x7f0000052000-0x10)={0x2000000000003}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmsg(r2, &(0x7f0000173000-0x38)={&(0x7f0000b3b000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b36000)}, 0x0) dup2(r1, r2) r3 = gettid() mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r3, 0x16) 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000ae9000-0x8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000fb2000-0x12)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000000)={0x1, &(0x7f0000de2000)=[{}]}) write$evdev(r0, &(0x7f0000038000-0x18)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r0, r0, 0x0, 0x72439a6b) sendfile(r1, r0, &(0x7f0000fc2000-0x8), 0x80000001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00001b3000-0x16)) 2018/02/01 16:23:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f0000001000)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x3, 0x4, &(0x7f0000853000-0x8), &(0x7f0000327000-0x4), 0x0) 2018/02/01 16:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000), 0x0, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000030f000)={0x0, 0x0}) rt_sigqueueinfo(r2, 0x21, &(0x7f0000a39000)={0x0, 0x0, 0xffffffffffffff19}) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000950000-0x9)='/dev/sg#\x00', 0x0, 0x200010002083) syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000e36000-0x8)) close(r0) 2018/02/01 16:23:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000)=0x1, 0x8, 0x0, &(0x7f0000001000), &(0x7f00001a1000), 0x0) 2018/02/01 16:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000), 0x0, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_settings={0x2, 0x0, @raw_hdlc=&(0x7f00004a3000)}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000f88000-0x20)={@common='gre0\x00', @ifru_flags=0x100000000000301}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000b90000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}) 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b92000-0x7)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000db7000-0x4)=0x200ff, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, &(0x7f000038d000-0x69), 0x0, 0x0, &(0x7f0000822000-0x10)={0x2, 0x0, @empty}, 0x10) sendfile(r0, r1, &(0x7f0000af5000)=0x62, 0x10001) sendmsg$nl_route(r0, &(0x7f0000207000)={&(0x7f0000d70000-0xc)={0x10}, 0xc, &(0x7f0000eb8000)={&(0x7f000019a000-0x20)=@newlink={0x20, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x20}, 0x1}, 0x0) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000266000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x227c, &(0x7f00008e3000)) 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000ffc000)='lp\x00', 0x3) shutdown(r0, 0x1) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006ce000-0x5)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000f71000), 0xffe6, 0x0, &(0x7f00002ce000)={0x2, 0x2, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x37) 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) get_thread_area(&(0x7f00002e7000-0x10)) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="1b00000018007fafb72d1cb2a4a2809302064b720ba8432c752623", 0x1b}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept$inet6(r0, &(0x7f0000531000)={0x0, 0xffffffffffffffff, 0x0, @dev}, &(0x7f0000531000-0x4)=0x1c) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f000075a000-0x4)) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00009b6000-0x6)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xfffffffffffffefc, 0x0, 0x0, 0x21c) 2018/02/01 16:23:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000985000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f000041a000-0x4)) 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00004db000-0x4), &(0x7f0000858000)=0x4) 2018/02/01 16:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x0, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000ed4000-0x4)=0x8000, 0x4) sendto$inet6(r0, &(0x7f00009f1000-0x3d), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000f61000)=[{{&(0x7f0000f63000-0x10)=@ipx, 0x10, &(0x7f0000f5d000)=[], 0x0, &(0x7f00006f5000)}}], 0x1, 0x2041, 0x0) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000000000/0xfa6000)=nil, 0xfa6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000040e000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) ptrace(0x4207, r2) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000827000)) 2018/02/01 16:23:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000046f000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) [ 45.621496] device gre0 entered promiscuous mode 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000000b000)={0x2, &(0x7f0000002000)=[{0x80}, {0x10000006}]}, 0x10) sendto$unix(r1, &(0x7f0000010000-0xa9), 0x0, 0x0, &(0x7f0000010000-0x21)=@file, 0x2) 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000ce7000-0x38)={&(0x7f0000f5b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000471000)=[], 0x0, &(0x7f0000001000-0x10)=[], 0xfffffffffffffeb7}, 0x0) 2018/02/01 16:23:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000041000)="01800d05", 0x0) r1 = syz_open_dev$sndseq(&(0x7f000092e000)='/dev/snd/seq\x00', 0x0, 0x2000a) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000279000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001000-0x1b0)=[{0x9, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000b5f000-0x50)={0x1a, @time={0x77359400}}) 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00008fa000)={0x0}, 0x80800) read$eventfd(r0, &(0x7f0000e4f000-0x8), 0x8) [ 45.662582] __report_access: 7 callbacks suppressed [ 45.662592] ptrace attach of "/root/syz-executor5"[4208] was attempted by "/root/syz-executor5"[7062] 2018/02/01 16:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x0, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000be000), 0x4) 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000b49000)={0x0, 0x0, 0x2, @thr={&(0x7f0000dfc000-0x28), &(0x7f0000e09000-0x44)}}) 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000000000)) times(&(0x7f0000000000)) 2018/02/01 16:23:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f000044d000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000c9e000-0x14)={0x3, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/01 16:23:31 executing program 4: mmap(&(0x7f0000000000/0x4a000)=nil, 0x4a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000001b000-0x1b)="7d7d9574686f5e707230630100000400001e0070ff6f630ff8", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000028000-0xd)='/dev/snd/seq\x00', 0x0, 0x20001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000042000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000036000)=[{0x0, 0x3, 0x0, 0x0, @tick=0x2, {}, {}, @connect}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000028000-0x50)={0x203, @time={0x77359400}}) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20000200) mkdir(&(0x7f0000395000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000079c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f0000891000)) unshare(0x24020000) sync() 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000003000)={0x73, 0x79, 0x7a}, &(0x7f0000003000)='eth1\\vmnet1.\x00', 0x0) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00006ba000)={0x2, &(0x7f0000193000-0x10)=[{0x20, 0x0, 0x0, 0xfffffffffffff034}, {0x6}]}, 0x10) write(r0, &(0x7f000053a000)="260000001000277c9301c1ff00000000000000000800f4fffa6effff2007f9510500030000ed", 0x26) [ 45.732328] ptrace attach of "/root/syz-executor5"[4208] was attempted by "/root/syz-executor5"[7062] 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16}]}) epoll_create1(0x0) 2018/02/01 16:23:31 executing program 7: mmap(&(0x7f0000000000/0x5b000)=nil, 0x5b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000056000)={{0x0, 0x7530}, {0x0, 0x2710}}, &(0x7f000002b000-0x20)) alarm(0x0) 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00008c2000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000a68000), 0x0, 0x0, &(0x7f0000b42000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000002000/0xb72000)=nil, 0xb72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000007000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000001}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006000)=""/155, &(0x7f0000007000-0x4)=0x9b) 2018/02/01 16:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x0, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000000000/0x26000)=nil, 0x26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000026000-0x20)={@syzn={0x73, 0x79, 0x7a}, @ifru_flags}) 2018/02/01 16:23:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000f39000-0x4)=0x3, 0x4) sendto$inet6(r0, &(0x7f00009f1000-0x3d), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000f61000)=[{{&(0x7f0000f63000-0x10)=@ipx, 0x10, &(0x7f0000f5d000)=[], 0x0, &(0x7f0000f62000)}}], 0x1, 0x2041, 0x0) 2018/02/01 16:23:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f000065d000)='user\x00', &(0x7f00004d9000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f000088e000-0x1c)="14", 0x1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) keyctl$set_timeout(0xf, r0, 0x0) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='ns\x00') getdents64(r0, &(0x7f000015e000)=""/192, 0xc0) getdents64(r0, &(0x7f00007de000), 0x0) 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fchmodat(0xffffffffffffffff, &(0x7f0000012000)='./file0/file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000ef2000-0xc0)={{{{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}}}, 0x0, 0x0, 0x0, "0411d43a10b84ae75332cf8dfac22053c0828fd2f1dfd591c1eff54491bfb580cce283a2931a186bec4dfd704d73728b33816aacabfea63afee296a8a169445f7e58ea2792c43e08f9ee1df261437e6a"}, 0x160) 2018/02/01 16:23:31 executing program 2: socketpair(0x0, 0x40000007, 0x0, &(0x7f0000655000)) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000000000/0xfde000)=nil, 0xfde000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fd8000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create(0x401) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000e35000)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000000000/0xc30000)=nil, 0xc30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000acd000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) waitid(0x0, 0x0, &(0x7f0000c30000-0x5), 0x9, &(0x7f0000023000-0x90)) 2018/02/01 16:23:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffffffffffff}]}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000dc3000)) 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xdeb000)=nil, 0xdeb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000017000-0x4), 0x4) write(r1, &(0x7f000034d000)='j', 0x1) recvfrom(r0, &(0x7f0000812000-0x72)=""/114, 0x72, 0x0, &(0x7f0000deb000-0x10)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb], 0x0}}, 0x10) 2018/02/01 16:23:31 executing program 7: fstat(0xffffffffffffffff, &(0x7f00002c8000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000697000), &(0x7f0000ffe000)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000312000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000cd6000), 0x4) sendto$inet(r1, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) tkill(r0, 0x1000000000013) 2018/02/01 16:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00006b3000-0x16)='net/ip_tables_matches\x00') sendfile(r0, r0, &(0x7f00005a6000), 0x27) 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00008ae000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000-0x4)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000009000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f00008c5000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f000069b000)={@common='gre0\x00', @ifru_mtu}) 2018/02/01 16:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000007000-0xd)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) clock_gettime(0x0, &(0x7f0000049000-0x10)={0x0}) write$sndseq(r0, &(0x7f0000040000)=[{0x9, 0x100000001, 0x0, 0x0, @time={r3}, {}, {}, @addr}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x2e, @time}) 2018/02/01 16:23:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16}]}) pwrite64(0xffffffffffffffff, &(0x7f00000a9000), 0x0, 0x0) [ 46.007800] ptrace attach of "/root/syz-executor5"[4208] was attempted by "/root/syz-executor5"[7150] 2018/02/01 16:23:31 executing program 7: unshare(0x40600) r0 = syz_open_procfs(0x0, &(0x7f0000001000-0x3)='ns\x00') vmsplice(r0, &(0x7f000098f000)=[{&(0x7f000010c000-0x1)}], 0x1, 0x0) 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000e0e000-0x44)={{0x2, 0xffffffffffffffff, @loopback=0x7f000001}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x2, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, @common='lo\x00'}) 2018/02/01 16:23:31 executing program 4: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) mmap(&(0x7f0000053000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000054000-0xd)='/dev/snd/seq\x00', 0x0, 0x101802) dup2(r1, r0) write$sndseq(r0, &(0x7f0000045000-0x30)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000051000)}}], 0x30) 2018/02/01 16:23:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:31 executing program 0: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup2(r0, r0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f000061c000-0x4), 0x4) 2018/02/01 16:23:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) sendto$inet6(r1, &(0x7f00003ad000)="e1", 0x1, 0x0, &(0x7f0000f98000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x0, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/01 16:23:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000772000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000071000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = creat(&(0x7f0000563000)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) poll(&(0x7f0000240000-0x40)=[{r2, 0x308}, {r0}], 0x2, 0x0) 2018/02/01 16:23:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000bf8000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0xfffffffffffffff7}) 2018/02/01 16:23:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x43, &(0x7f0000d19000-0xe0), 0x0) 2018/02/01 16:23:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x6, 0x0, 0x0, @time={0x77359400}, {}, {}, @time=@tick}], 0x30) 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000646000)={&(0x7f000059d000-0xc)={0x10}, 0xff30, &(0x7f0000f9c000-0x10)={&(0x7f0000efe000)=@updpolicy={0xc4, 0x19, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, [@sec_ctx={0xc, 0x8, {0xfffffeab, 0x8, 0x0, 0x0, 0x1dc}}]}, 0xc4}, 0x1}, 0x0) 2018/02/01 16:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[], 0x0, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="d1a3af2aaf26272c6422040363d9cc0d42e5b31dd2cf99e0a8afe43dfea94f75650883cfff6b37abf18200eb56238819603ef3232413f2bf400ce595d7bd3798339f2cc03c6f6733b274bc5f5a853434d309f0e4d4593d71ebed9e085b6b7084464bfe802200d44a973b33ac691a8b050000546f0d9bdc434a48f07d7b704c5a9aa98c41781c0a9881a5eeb7999515789acf3ad284b926bb5ecabe21b11384c890860ced4525c7f052dc569f73d63d47b3a997accab765915a070e3d70d466731ebfe4d221ea2ba49aa3566752d1fb3c88a0e91915bffc05046f08efa69d7d751a95736c945f8274447b96cc0fec5324af4eab27012c2ea7eb8a67f1fa9c80064d2834d75125c283870578d80792b452a49d046a316c1865064beba775faa90e5a58d542e7d6cc5ff0e0b6aac5304d58dea44d1c8a76e7562853b5048f2767f37e5fe45b3b897c1917b5cc1465479a470db6753ac87ea1345ae637e413fe226f5fc9845bbe5f3b9ee7d72d88281478cbb123551626b022b0cd6ce0feb7612cd2d72cbb46a33a4fa34c140807c6071aa34297cdf9638c0502ad5c03c07ed0807857460c126898aba07352e18af90f9c5074373382237063de180500000000000000b5628ff781ab73d0f5046835f54ff289900029cff58b70c6cfdfd9d344462500000003ef959735de5da15d8b514692bf72cd1cf6fe8342035fb803cc51c98a2beef3fa6c8fecb3dfeb1de630401fd62d30a4cbd1838312f14c1da3d3b5d9092f63b086fcc6e23928230db73ea54b3fc1236dc4df8051e44e1ce1d280654203bf606a475e31609b94edfa1f2693b98c4eba6f7aeca5b79638f24f5da9f0366cebbde12460efaa05575eea9bbde00c645513e6572a5803004dcc142b327789ddd434f255815e5b1432ce5837223f7a8d10cb50e05996f98fb031a9e0c4fea04d436f570a69cbc0b7776ebc5d45b2055482472be16ba609978e125b3df66994e29c72b75582f7bbfb194bd58c477481a9c621256f2bd3c4f5bcc0737fd98150e99c16d27845da8e0d16b486796ee9bde1f57360e8f11650f5009c7f5371101ad719cc601341beeed61f5afe2cda0a987d34c29bbdb1d22147baed298dba96b43e951102c5b5fd281db647b47075cef261aa187dc645f8cbe7a93012b455bc1b65d4358f012362f4965fe4e8f1bfd38af1526a876c748dd94c25fbdef4bba79a07b48290c19fae3f9bb0cb56ef5d42da0aef2712917955b15142e95f9667ef67bd2b55ce2d11b730c40376da5c7fd0678221507ccb69b48468e8d2e85e8932f9edf4268b6ad6af10457c450f275f45ad04b8a91f880aff1a9eaf52d05b6722651d06a3e940a744f16fbb9a83516e354506f289de05a5a88867fa4a8cee734659d68167c8a97a771109c4c83987f3259281690f35054bdd3b6a19750449ee6114270185c9819db7c348e12778620d618f0f4c4e8483a59c07fe41875ced21b765329752923f5d45f23cbf555e830a893dce953bd2bb416eeeec952087b5bcf42bef0f4f6d5bdd2ea9454a8e9e069c4edad8a2518600a7a5f8f518e8b542885db5e04565f4fc6040b83842e10f35da7dc837584e634522c01a8cb8549e0cc967713eba7523d874b37dd466f92804e1a6b18a2aef354e7ff6064ca5d6f63f9f828fc8ed69afae2c0448716207f97c171580b45c6f1331226ce80395daefff5dcb306ae5dd0a0f33105678884a10b067cc7878045ecd42818b92bd84e7ccfbdb4c0979f9470b3c61bac656c0316ccb690157252662c15ea30a2742b3a48d3727406902d8747901c50254a92676bab74f43e35c52e2f16f8a3445d5a41e1de2f6effd02c7a2d17b3fa0b652d4ceced16fcb7d8758067d65045201b2af3e2ee0d3f42553a10e80ac494e84a3730e8f70729de99e4ff84183abd32e46c49effaf217368a738b59344ef7dc453f444c3bfda0692777b0317c61da7fba561cf9ca5e91812da391e03616d3f76624028c96dff2b1189bb80bb1ca45b5caee6144fe420467be61a2c1297431656eb349695c9c991d5fa5059dd3c877929445056c2a0161fc903", 0x5c0}], 0x1) 2018/02/01 16:23:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) futex(&(0x7f0000005000-0x4), 0x85, 0x0, &(0x7f0000002000-0x10), &(0x7f0000003000-0x4), 0x40000001) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) socket$unix(0x1, 0x0, 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f000000b000)={0x0, 0x989680}, &(0x7f000020f000), 0x0) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f000063c000)={&(0x7f00009f9000-0x168)=@newsa={0x13c, 0x10, 0x721, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in6=@dev={0xfe, 0x80}}, {@in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x833}, @in6=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000002}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0xc0}}]}, 0x13c}, 0x1}, 0x0) 2018/02/01 16:23:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000820000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000443000-0xd)='/selinux/mls\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x30) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) socket$inet6(0xa, 0x0, 0x0) 2018/02/01 16:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[], 0x0, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) [ 46.178453] syz7: Invalid MTU -9 requested, hw min 68 [ 46.194303] binder: BINDER_SET_CONTEXT_MGR already set [ 46.205967] binder_alloc: 7199: binder_alloc_buf, no vma [ 46.207526] syz7: Invalid MTU -9 requested, hw min 68 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x88000, &(0x7f000002f000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000d94000-0x10)='/selinux/policy\x00', 0x0, 0x0) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d11000-0x4)=0xfffffffffffffffb, 0x4) bind$inet6(r0, &(0x7f0000876000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000315000-0x74)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") open(&(0x7f0000000000)='./file0\x00', 0xc0, 0x0) mount(&(0x7f00001a5000-0xe)='./file0\x00', &(0x7f0000f8a000-0x8)='./file0\x00', &(0x7f000067b000)='\x00v\t', 0x1004, &(0x7f00000b2000)) readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f000014e000)='./file0\x00', &(0x7f0000263000)='nsfs\x00', 0x24, &(0x7f0000d1d000-0x1)="d6") [ 46.219134] binder: 7199:7204 ioctl 40046207 0 returned -16 [ 46.247768] binder: 7199:7217 transaction failed 29189/-3, size 0-0 line 2903 [ 46.276958] SELinux: unknown mount option [ 46.293376] binder: undelivered TRANSACTION_ERROR: 29189 [ 46.299640] binder: release 7199:7204 transaction 58 out, still active [ 46.306994] binder: undelivered TRANSACTION_COMPLETE [ 46.320121] binder: send failed reply for transaction 58, target dead 2018/02/01 16:23:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) open(&(0x7f0000700000)='./file0\x00', 0x4c40, 0x0) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f000039c000), 0x4) 2018/02/01 16:23:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0x0, 0x800, @loopback={0x0, 0x1}}, 0x1c) 2018/02/01 16:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[], 0x0, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt6_stats\x00') timerfd_settime(r0, 0x0, &(0x7f0000001000-0x20)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000001000)) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000df2000-0x10)) pipe2(&(0x7f0000294000), 0x0) 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000dfc000-0x8)='./file0\x00', &(0x7f00007c7000-0x44)) seccomp(0x1, 0x0, &(0x7f00008c2000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000009000-0xc)={0x0, @rand_addr, @loopback}, &(0x7f0000000000)=0xc) writev(0xffffffffffffffff, &(0x7f0000e02000)=[], 0x0) 2018/02/01 16:23:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f00003d4000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 46.384829] binder: 7258 RLIMIT_NICE not set [ 46.411286] binder: undelivered transaction 61, process died. [ 46.422214] binder: undelivered TRANSACTION_COMPLETE [ 46.429268] binder: 7267 RLIMIT_NICE not set [ 46.435315] binder_alloc: 7248: binder_alloc_buf, no vma [ 46.440867] binder: 7248:7258 transaction failed 29189/-3, size 0-0 line 2903 [ 46.451159] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/01 16:23:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000000a000-0x38)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000e8d000-0x11a0)={0x28, 0x10, 0x109, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@nested={0x14, 0x2, [@generic="b2a86d98eb7f0c2df8fa36def50ab0", @generic="8c"]}]}, 0x28}, 0x1}, 0x0) 2018/02/01 16:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(0xffffffffffffffff, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000014000-0x30)={0x8, 0x0, &(0x7f0000014000-0x8)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012000)}) close(r0) poll(&(0x7f0000002000-0x48)=[{r1}], 0x1, 0x7ffe) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000-0x30)={0x10, 0x0, &(0x7f000000f000)=[@request_death={0x400c630e}], 0x0, 0x0, &(0x7f000000c000-0xe1)}) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000024000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001267, &(0x7f0000004000)) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f000000a000-0x8)={0xffffffffffff880a}, &(0x7f0000002000), &(0x7f0000011000-0x10)={0x1}, 0x8) rt_sigqueueinfo(r0, 0x4, &(0x7f000000f000)={0x0, 0x0, 0x80000001}) 2018/02/01 16:23:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) dup3(r1, r0, 0x0) socket$inet6(0xa, 0x0, 0x0) 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0xff4000)=nil, 0xff4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fec000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x30000000002, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000012000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000ff3000)={@local={0xfe, 0x80, [], 0x0, 0xaa}, 0x80000000, 0x0, 0xff}, 0x20) 2018/02/01 16:23:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000c34000)={0x0, 0x5}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000589000-0x1), 0xfffffffffffffe98, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000b2c000-0x4)=0xc) r2 = getpgid(r1) fcntl$setown(r0, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000b2a000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) waitid(0x0, 0x0, 0x0, 0x1000002, &(0x7f000004b000)) 2018/02/01 16:23:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000043f000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x40, &(0x7f000000a000)) r0 = creat(&(0x7f00000be000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f00007ec000)) 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0xd1f000)=nil, 0xd1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000909000-0x10), &(0x7f00006ed000-0x10)) 2018/02/01 16:23:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getrusage(0x0, &(0x7f00005d5000-0x90)) 2018/02/01 16:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(0xffffffffffffffff, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) [ 46.546110] ptrace attach of "/root/syz-executor6"[4216] was attempted by "/root/syz-executor6"[7301] [ 46.564581] binder: 7274:7303 tried to acquire reference to desc 0, got 1 instead 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0x23000)=nil, 0x23000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001c000-0xd0)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000d72000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f000030d000)={{}, {0xe}}) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28060400) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000002000), 0x0) 2018/02/01 16:23:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_wait(r0, &(0x7f0000317000)=[{}], 0x1, 0x7fd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000f91000-0xc)) epoll_pwait(r0, &(0x7f0000276000)=[{}], 0x1, 0x10000, &(0x7f0000604000-0x8), 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000915000)={0x7}) 2018/02/01 16:23:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x8, &(0x7f0000fca000-0x60)={0x0, 0x36, 0x0, @thr={&(0x7f000082b000), &(0x7f0000a89000)}}, &(0x7f0000a3d000-0x4)) 2018/02/01 16:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(0xffffffffffffffff, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)="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", 0x5c0}], 0x1) 2018/02/01 16:23:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f000083d000-0xf5), 0x0, 0x20000000, 0x0, 0x0) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000fc2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000053f000)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000006000-0x18)=[], &(0x7f0000fc3000-0x10)=[0x0, 0x38]}}], 0x0, 0x0, &(0x7f000000d000-0xa5)}) [ 46.615353] ptrace attach of "/root/syz-executor6"[4216] was attempted by "/root/syz-executor6"[7308] 2018/02/01 16:23:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ppoll(&(0x7f00004de000-0x20)=[{r0}], 0x1, &(0x7f00003ae000)={0x77359400}, &(0x7f0000960000-0x8), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f00006b7000)=@newlink={0x30, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_MASTER={0x8, 0xa, 0x3}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001000-0x4), 0x5, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000c0b000), 0x0) 2018/02/01 16:23:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f00004ff000)={0x10, 0x0, 0x0, 0x5}, 0xc) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00006d9000-0x8)) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000012000-0x10)=[{0x28, 0x0, 0x0, 0xfffffffffffff024}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_settings={0x0, 0x64, @sync=&(0x7f0000542000)}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='ns/pid\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000000e000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000002000-0x4)) [ 46.676398] binder: 7328:7333 got transaction with invalid offset (0, min 0 max 0) or object. [ 46.685842] binder: 7328:7333 transaction failed 29201/-22, size 0-16 line 2966 [ 46.704644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 2018/02/01 16:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[], 0x0) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000012000-0x10)=[{0x28, 0x0, 0x0, 0xfffffffffffff024}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000801000-0x8)='./file0\x00', 0x0) mount(&(0x7f000087a000-0x8)='./file0\x00', &(0x7f0000107000-0x8)='./file0\x00', &(0x7f00008d3000-0x6)='ramfs\x00', 0x0, &(0x7f000063c000-0x2)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f0000443000-0x8)='./file0\x00', &(0x7f000039d000-0x8)='./file0\x00', &(0x7f0000ff6000)='9p\x00', 0x1001, 0x0) pivot_root(&(0x7f000094f000)='./file0\x00', &(0x7f0000d2a000-0x1)='.') [ 46.732573] binder_alloc: binder_alloc_mmap_handler: 7328 20000000-20002000 already mapped failed -16 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000012000-0x10)=[{0x28, 0x0, 0x0, 0xfffffffffffff024}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) [ 46.747242] binder: BINDER_SET_CONTEXT_MGR already set [ 46.747254] binder: 7328:7333 ioctl 40046207 0 returned -16 [ 46.753337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.778681] binder: BINDER_SET_CONTEXT_MGR already set [ 46.778692] binder: 7338:7363 ioctl 40046207 0 returned -16 [ 46.790869] binder_alloc: 7338: binder_alloc_buf, no vma [ 46.790891] binder: 7338:7367 transaction failed 29189/-3, size 0-0 line 2903 [ 46.818508] binder: undelivered TRANSACTION_ERROR: 29189 [ 46.818621] binder: release 7338:7350 transaction 71 out, still active [ 46.818625] binder: undelivered TRANSACTION_COMPLETE [ 46.818650] binder: send failed reply for transaction 71, target dead 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_settings={0x0, 0x64, @sync=&(0x7f0000542000)}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='ns/pid\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000000e000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000002000-0x4)) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f000030f000)={0x14, 0x7, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, []}, 0x14}, 0x1}, 0x0) 2018/02/01 16:23:32 executing program 2: mmap(&(0x7f0000000000/0xfbf000)=nil, 0xfbf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000007f000-0x9)='/dev/sg#\x00', 0xffffffffffffffff, 0x80) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00005b2000-0x8)=0x6) remap_file_pages(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00003bc000-0xe8)={{{@in=@empty, @in=@loopback}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000fbe000)=0xe8) clone(0x0, &(0x7f0000004000-0x1000), &(0x7f0000006000), &(0x7f0000008000), &(0x7f0000002000-0x63)) 2018/02/01 16:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[], 0x0) 2018/02/01 16:23:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x5, 0x2}) mq_timedsend(r0, &(0x7f0000a5c000), 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f000066c000), 0x0, 0x0, &(0x7f000058f000-0x10)={0x77359400}) mq_timedreceive(r0, &(0x7f0000659000)=""/131, 0x83, 0x0, 0x0) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000012000-0x10)=[{0x28, 0x0, 0x0, 0xfffffffffffff024}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x26, 0x1) clone(0x0, &(0x7f00009ee000), &(0x7f0000b50000), &(0x7f000039f000), &(0x7f0000489000-0x1)) 2018/02/01 16:23:32 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000014000-0xc)={@dev={0xac, 0x14}, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) listen(r1, 0x0) dup2(r0, r1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_settings={0x0, 0x64, @sync=&(0x7f0000542000)}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='ns/pid\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000000e000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000002000-0x4)) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000012000-0x10)=[{0x28, 0x0, 0x0, 0xfffffffffffff024}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000cb4000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000625000)='./file0\x00', 0x0, 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005ba000-0x8)='./file0\x00', &(0x7f0000edb000-0x8)='./file0\x00', &(0x7f0000da0000-0x6)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f0000cd3000-0x8)='./file0\x00') umount2(&(0x7f0000e28000)='..', 0x2) mkdirat(r0, &(0x7f0000644000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000f8a000)='..', &(0x7f000008e000-0x8)='./file0\x00', &(0x7f000088d000-0x7)='autofs\x00', 0x2000, &(0x7f000065e000)) 2018/02/01 16:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[], 0x0) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000d30000)={&(0x7f0000b79000-0xc)={0x10}, 0xc, &(0x7f0000d00000-0x10)={&(0x7f000013f000-0x12d4)=@newsa={0x144, 0x10, 0x29, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@empty, @in6=@loopback={0x0, 0x1}}, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x33}, @in=@multicast1=0xe0000001, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@mark={0xc, 0x15, {0xffffffffffffffff, 0x401}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x144}, 0x1}, 0x0) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000dbb000)="440d05a18e00000000000000ec", 0xd) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000d10000), &(0x7f000011d000)) [ 46.881299] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.898406] mmap: syz-executor2 (7379) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/02/01 16:23:32 executing program 2: clone(0x0, &(0x7f0000e6d000), &(0x7f0000cbf000-0x4), &(0x7f0000aaa000-0x4), &(0x7f0000d04000)) mknodat(0xffffffffffffffff, &(0x7f00001b7000)='./file0\x00', 0x0, 0x0) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_settings={0x0, 0x64, @sync=&(0x7f0000542000)}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='ns/pid\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000000e000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000002000-0x4)) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000e000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x80004524, &(0x7f0000402000-0xd9)) 2018/02/01 16:23:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f0000b92000-0x7)='./file0\x00', 0x68042, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009c1000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, &(0x7f00004e9000), 0x0, 0x0, &(0x7f0000822000-0x10)={0x2, 0x0, @empty}, 0x10) sendfile(r0, r1, &(0x7f0000af5000), 0x10001) recvfrom$inet(r0, &(0x7f0000201000)=""/186, 0xba, 0x40002021, &(0x7f00002f4000-0x10)={0x2, 0x0, @empty}, 0x10) 2018/02/01 16:23:32 executing program 5: mmap(&(0x7f0000000000/0xf7d000)=nil, 0xf7d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind$inet(r0, &(0x7f0000b9b000-0x10)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000e7c000), 0x0, 0x8084, &(0x7f000031a000-0x10)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00002a6000-0x4)=0x2, 0x4) sendto$inet(r0, &(0x7f0000f7a000-0x1), 0x321, 0x0, &(0x7f000082e000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:32 executing program 4: clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f000039b000), &(0x7f0000bda000)) pipe2(&(0x7f0000515000), 0x0) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f000000d000-0x4), &(0x7f0000000000)=0x4) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0xf22000)=nil, 0xf22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f22000-0x1c)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000001000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) 2018/02/01 16:23:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)}], 0x1) 2018/02/01 16:23:32 executing program 0: clone(0x0, &(0x7f0000000000), &(0x7f0000001000-0x4), &(0x7f0000004000-0x4), &(0x7f0000003000)) signalfd(0xffffffffffffffff, &(0x7f0000001000-0x8), 0x8) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004000-0x28)={@common="6c6f00e3fe0000d1010000000600", &(0x7f000075a000)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x0, "fd5004", 0x0, []}}) 2018/02/01 16:23:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000090e000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000f96000-0x6)="62646576008e", 0x20000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0xff8c, 0x0) 2018/02/01 16:23:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002000-0x12)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000a03000)='/dev/hwrng\x00', 0x207fe, 0x0) getpeername$packet(r1, &(0x7f00009a4000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000812000-0x4)=0x14) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f000052c000-0x4)=0x7fff, 0x4) ioctl$sock_ipx_SIOCAIPXITFCRT(0xffffffffffffffff, 0x89e0, &(0x7f0000586000-0x4)) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000003000-0x30)=[], 0x0, &(0x7f0000008000-0x2a0)=[]}}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000018000)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0c2f8a669ebdedd102c4f7a79e606456dfdf09e2edbed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1) setsockopt(r0, 0x111, 0x3, &(0x7f000000c000-0x5)="0ed4550f", 0x4) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) sendto$inet(r0, &(0x7f0000a92000), 0x0, 0x800000020000000, &(0x7f0000303000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000e7a000-0x48)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2175) 2018/02/01 16:23:32 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000012000-0x10)=[{0x28, 0x0, 0x0, 0xfffffffffffff024}, {0x6}]}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000f9b000-0x8)='./file0\x00', 0x141046, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000fb2000-0x12)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000e12000-0x90)=[{{0x0, 0x2710}, 0x4, 0x4}, {{0x0, 0x2710}, 0x0, 0xfff}], 0x30) sendfile(r1, r0, 0x0, 0x72439a6b) 2018/02/01 16:23:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002000-0x12)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000bd5000)='/selinux/checkreqprot\x00', 0x20042, 0x0) setsockopt$inet_int(r1, 0x0, 0x100000001f, &(0x7f0000017000)=0x7, 0x4) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000006000-0x8)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000004000)={0x0, @in={{0x2, 0x0, @rand_addr=0x100}}}, 0x8c) 2018/02/01 16:23:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000a0000-0x90)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000031f000-0x2c)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/01 16:23:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000109000+0x282)='./file0\x00', 0x0) r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) ftruncate(r0, 0x0) 2018/02/01 16:23:33 executing program 5 (fault-call:5 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) epoll_create(0x2001) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000dee000-0x8)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/01 16:23:33 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000012000-0x10)=[{0x28, 0x0, 0x0, 0xfffffffffffff024}, {0x6}]}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$netrom(0xffffffffffffff9c, 0x0, &(0x7f00005e3000-0x4)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000f78000)='/dev/vga_arbiter\x00', 0x600000, 0x0) r3 = accept4$ax25(r2, &(0x7f0000e1d000), &(0x7f0000cd4000-0x4)=0x10, 0x80800) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000159000)={0x0}, &(0x7f0000745000)=0xc) ptrace$poke(0xffffffffffffffff, r4, &(0x7f000010a000), 0x1ff) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000f21000-0x14c)=@newsa={0x14c, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@coaddr={0x14, 0xe, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x14c}, 0x1}, 0x0) sendfile(r1, r2, 0x0, 0xff) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000c96000)) fcntl$getownex(r1, 0x10, &(0x7f0000dbd000)) 2018/02/01 16:23:33 executing program 7: clone(0x0, &(0x7f0000780000), &(0x7f0000002000-0x4), &(0x7f0000511000-0x4), &(0x7f0000000000)) umount2(&(0x7f0000354000-0x8)='./file0\x00', 0x4) 2018/02/01 16:23:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000760000-0x78)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00001cd000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00008c0000)) sched_getparam(0x0, &(0x7f0000506000)) process_vm_writev(0x0, &(0x7f0000c22000)=[], 0x0, &(0x7f0000c23000-0x60)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000d53000), &(0x7f0000d15000+0x61d), &(0x7f0000594000-0x4), &(0x7f00008de000-0x57)) openat(0xffffffffffffffff, &(0x7f0000f78000-0x8)='./file0\x00', 0x208000, 0x0) close(r0) 2018/02/01 16:23:33 executing program 6 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000abd000)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000095f000+0xaae)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/01 16:23:33 executing program 0: mmap(&(0x7f0000000000/0x939000)=nil, 0x939000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000103000)={@common="6c6f000000000000000000000000d612", &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x29, 0x0, 0x0, "355cf8ffc87d"}}) 2018/02/01 16:23:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20008000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000478000-0x1000)="91", 0x1, 0x8000, &(0x7f000003f000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000d1d000-0x140)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b52000-0x38)=[], 0x0, &(0x7f00009d9000-0x7d)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f8000-0x8)=[{&(0x7f00008b0000-0x5c3)}], 0x1) 2018/02/01 16:23:33 executing program 0 (fault-call:6 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) creat(&(0x7f000016d000-0x8)='./file0/file0\x00', 0x0) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000467000)='xfs\x00', 0x1000, 0x0) mount(&(0x7f0000f28000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f0000239000)='\x00v\t', 0x1004, &(0x7f0000a06000)) mount(&(0x7f0000fb9000)='./file0\x00', &(0x7f0000346000-0x8)='./file0\x00', &(0x7f0000bb4000)='nfs\x00', 0x104000, &(0x7f0000cfb000)) 2018/02/01 16:23:33 executing program 3: mmap(&(0x7f0000000000/0xf0c000)=nil, 0xf0c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000012000-0x10)=[{0x28, 0x0, 0x0, 0xfffffffffffff024}, {0x6}]}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000018000-0x38)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/01 16:23:33 executing program 7 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4008700c, &(0x7f0000002000+0x498)) [ 47.214889] binder: 7491:7500 transaction failed 29189/-22, size 0-0 line 2788 [ 47.233370] FAULT_INJECTION: forcing a failure. [ 47.233370] name failslab, interval 1, probability 0, space 0, times 1 [ 47.233382] CPU: 1 PID: 7502 Comm: syz-executor6 Not tainted 4.15.0+ #290 [ 47.233388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.233391] Call Trace: [ 47.233407] dump_stack+0x194/0x257 [ 47.233424] ? arch_local_irq_restore+0x53/0x53 [ 47.233436] ? lock_downgrade+0x980/0x980 [ 47.233463] should_fail+0x8c0/0xa40 [ 47.233479] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 47.233497] ? __local_bh_enable_ip+0x121/0x230 [ 47.233512] ? _raw_spin_unlock_bh+0x30/0x40 [ 47.233527] ? release_sock+0x1d4/0x2a0 [ 47.233537] ? refcount_add+0x60/0x60 [ 47.233548] ? __release_sock+0x360/0x360 [ 47.233565] ? find_held_lock+0x35/0x1d0 [ 47.233613] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 47.233631] ? rcu_note_context_switch+0x710/0x710 [ 47.233661] should_failslab+0xec/0x120 [ 47.233674] kmem_cache_alloc_node+0x56/0x760 [ 47.233691] ? netlink_insert+0x500/0x500 [ 47.233710] __alloc_skb+0xf1/0x780 [ 47.233726] ? skb_copy_and_csum_dev+0x370/0x370 [ 47.233735] ? kasan_check_write+0x14/0x20 [ 47.233743] ? _copy_from_user+0x99/0x110 [ 47.233763] ? selinux_socket_getpeersec_dgram+0x22f/0x330 [ 47.233775] ? selinux_inet_conn_established+0xf0/0xf0 [ 47.233791] ? sock_has_perm+0x2a4/0x420 [ 47.233811] ? security_socket_getpeersec_dgram+0x91/0xc0 [ 47.233828] netlink_sendmsg+0xa86/0xe60 [ 47.233851] ? netlink_unicast+0x6b0/0x6b0 [ 47.233868] ? security_socket_sendmsg+0x89/0xb0 [ 47.233879] ? netlink_unicast+0x6b0/0x6b0 [ 47.233892] sock_sendmsg+0xca/0x110 [ 47.233903] ___sys_sendmsg+0x767/0x8b0 [ 47.233919] ? copy_msghdr_from_user+0x590/0x590 [ 47.233950] ? __f_unlock_pos+0x19/0x20 [ 47.233962] ? lock_downgrade+0x980/0x980 [ 47.233976] ? map_files_get_link+0x3a0/0x3a0 [ 47.233990] ? __fget_light+0x297/0x380 [ 47.234002] ? fget_raw+0x20/0x20 [ 47.234019] ? find_held_lock+0x35/0x1d0 [ 47.234036] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 47.234046] ? vfs_write+0x374/0x510 [ 47.234057] ? wait_for_completion+0x770/0x770 [ 47.234073] ? __fdget+0x18/0x20 [ 47.234089] __sys_sendmsg+0xe5/0x210 [ 47.234095] ? __sys_sendmsg+0xe5/0x210 [ 47.234106] ? SyS_shutdown+0x290/0x290 [ 47.234123] ? __sb_end_write+0xa0/0xd0 [ 47.234155] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 47.234173] SyS_sendmsg+0x2d/0x50 [ 47.234187] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 47.234194] RIP: 0033:0x453299 [ 47.234198] RSP: 002b:00007fa7110ccc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 47.234208] RAX: ffffffffffffffda RBX: 00007fa7110ccaa0 RCX: 0000000000453299 [ 47.234214] RDX: 0000000000000000 RSI: 000000002014f000 RDI: 0000000000000013 [ 47.234218] RBP: 00007fa7110cca90 R08: 0000000000000000 R09: 0000000000000000 [ 47.234223] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b8096 [ 47.234229] R13: 00007fa7110ccbc8 R14: 00000000004b8096 R15: 0000000000000000 [ 47.256901] FAULT_INJECTION: forcing a failure. [ 47.256901] name failslab, interval 1, probability 0, space 0, times 0 [ 47.256913] CPU: 1 PID: 7509 Comm: syz-executor5 Not tainted 4.15.0+ #290 [ 47.256917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.256920] Call Trace: [ 47.256942] dump_stack+0x194/0x257 [ 47.256959] ? arch_local_irq_restore+0x53/0x53 [ 47.256987] should_fail+0x8c0/0xa40 [ 47.257006] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 47.257021] ? check_noncircular+0x20/0x20 [ 47.257036] ? print_irqtrace_events+0x270/0x270 [ 47.257048] ? check_noncircular+0x20/0x20 [ 47.257067] ? find_held_lock+0x35/0x1d0 [ 47.257112] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 47.257120] ? lock_downgrade+0x980/0x980 [ 47.257134] ? rcu_note_context_switch+0x710/0x710 [ 47.257142] ? lock_release+0xa40/0xa40 [ 47.257163] should_failslab+0xec/0x120 [ 47.257175] kmem_cache_alloc_trace+0x4b/0x750 [ 47.257205] binder_get_thread+0x1cf/0x870 [ 47.257221] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 47.257234] ? _raw_spin_unlock+0x22/0x30 [ 47.257245] ? tun_chr_poll+0x666/0x960 [ 47.257262] ? __fget_light+0x297/0x380 [ 47.257274] ? fget_raw+0x20/0x20 [ 47.257281] ? set_normalized_timespec64+0x5a/0xb0 [ 47.257301] binder_poll+0x8c/0x390 [ 47.257317] ? binder_get_thread+0x870/0x870 [ 47.257336] ? binder_get_thread+0x870/0x870 [ 47.257351] do_select+0xbb5/0x1700 [ 47.257406] ? select_estimate_accuracy+0x450/0x450 [ 47.257419] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 47.257426] ? __lock_acquire+0x664/0x3e00 [ 47.257445] ? print_irqtrace_events+0x270/0x270 [ 47.257461] ? __lock_acquire+0x664/0x3e00 [ 47.257478] ? check_noncircular+0x20/0x20 [ 47.257485] ? __fdget_pos+0x12b/0x190 [ 47.257505] ? check_noncircular+0x20/0x20 [ 47.257514] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 47.257523] ? find_held_lock+0x35/0x1d0 [ 47.257537] ? find_held_lock+0x35/0x1d0 [ 47.257560] ? __might_fault+0x110/0x1d0 [ 47.257571] ? lock_downgrade+0x980/0x980 [ 47.257586] ? lock_release+0xa40/0xa40 [ 47.257595] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 47.257606] ? __check_object_size+0x25d/0x4f0 [ 47.257627] ? __might_sleep+0x95/0x190 [ 47.257647] ? kasan_check_write+0x14/0x20 [ 47.257664] core_sys_select+0x480/0x960 [ 47.257671] ? core_sys_select+0x480/0x960 [ 47.257693] ? poll_select_set_timeout+0x210/0x210 [ 47.257704] ? find_held_lock+0x35/0x1d0 [ 47.257726] ? __might_fault+0x110/0x1d0 [ 47.257737] ? lock_downgrade+0x980/0x980 [ 47.257756] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 47.257771] ? kasan_check_write+0x14/0x20 [ 47.257782] ? __set_current_blocked+0xd4/0x110 [ 47.257796] ? sigprocmask+0xe7/0x300 [ 47.257811] ? sigsuspend+0x240/0x240 [ 47.257826] ? kasan_check_write+0x14/0x20 [ 47.257834] ? _copy_from_user+0x99/0x110 [ 47.257848] SyS_pselect6+0x2bb/0x650 [ 47.257869] ? SyS_select+0x230/0x230 [ 47.257880] ? __sb_end_write+0xa0/0xd0 [ 47.257897] ? fput+0xd2/0x140 [ 47.257907] ? SyS_write+0x184/0x220 [ 47.257917] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 47.257935] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 47.257947] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 47.257968] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 47.257975] RIP: 0033:0x453299 [ 47.257979] RSP: 002b:00007f78c0c90c58 EFLAGS: 00000212 ORIG_RAX: 000000000000010e [ 47.257988] RAX: ffffffffffffffda RBX: 00007f78c0c90aa0 RCX: 0000000000453299 [ 47.257992] RDX: 0000000020768000 RSI: 00000000200abfc0 RDI: 0000000000000040 [ 47.257997] RBP: 00007f78c0c90a90 R08: 0000000020dedff8 R09: 0000000020f14000 [ 47.258001] R10: 0000000020086000 R11: 0000000000000212 R12: 00000000004b8096 [ 47.258005] R13: 00007f78c0c90bc8 R14: 00000000004b8096 R15: 0000000000000000 [ 47.258111] kasan: CONFIG_KASAN_INLINE enabled [ 47.258115] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 47.258122] general protection fault: 0000 [#1] SMP KASAN [ 47.258127] Dumping ftrace buffer: [ 47.258130] (ftrace buffer empty) [ 47.258132] Modules linked in: [ 47.258140] CPU: 1 PID: 7509 Comm: syz-executor5 Not tainted 4.15.0+ #290 [ 47.258144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.258151] RIP: 0010:binder_poll+0xa0/0x390 [ 47.258154] RSP: 0018:ffff8801abf475c8 EFLAGS: 00010246 [ 47.258159] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff841a1b80 [ 47.258163] RDX: 0000000000000000 RSI: ffffc9000302f000 RDI: 0000000000000282 [ 47.258167] RBP: ffff8801abf47670 R08: 0000000000000000 R09: 0000000000000000 [ 47.258170] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff100357e8ebd [ 47.258174] R13: ffff8801abf47880 R14: ffff8801acb8d7c0 R15: ffff8801abf47648 [ 47.258179] FS: 00007f78c0c91700(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 [ 47.258183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.258186] CR2: 00000000004d57e4 CR3: 00000001abf48005 CR4: 00000000001606e0 [ 47.258194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.258198] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.258200] Call Trace: [ 47.258212] ? binder_get_thread+0x870/0x870 [ 47.258225] ? binder_get_thread+0x870/0x870 [ 47.258234] do_select+0xbb5/0x1700 [ 47.258264] ? select_estimate_accuracy+0x450/0x450 [ 47.258273] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 47.258279] ? __lock_acquire+0x664/0x3e00 [ 47.258290] ? print_irqtrace_events+0x270/0x270 [ 47.258300] ? __lock_acquire+0x664/0x3e00 [ 47.258311] ? check_noncircular+0x20/0x20 [ 47.258317] ? __fdget_pos+0x12b/0x190 [ 47.258329] ? check_noncircular+0x20/0x20 [ 47.258336] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 47.258342] ? find_held_lock+0x35/0x1d0 [ 47.258352] ? find_held_lock+0x35/0x1d0 [ 47.258364] ? __might_fault+0x110/0x1d0 [ 47.258371] ? lock_downgrade+0x980/0x980 [ 47.258380] ? lock_release+0xa40/0xa40 [ 47.258387] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 47.258395] ? __check_object_size+0x25d/0x4f0 [ 47.258406] ? __might_sleep+0x95/0x190 [ 47.258418] ? kasan_check_write+0x14/0x20 [ 47.258429] core_sys_select+0x480/0x960 [ 47.258435] ? core_sys_select+0x480/0x960 [ 47.258449] ? poll_select_set_timeout+0x210/0x210 [ 47.258459] ? find_held_lock+0x35/0x1d0 [ 47.258473] ? __might_fault+0x110/0x1d0 [ 47.258480] ? lock_downgrade+0x980/0x980 [ 47.258491] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 47.258501] ? kasan_check_write+0x14/0x20 [ 47.258508] ? __set_current_blocked+0xd4/0x110 [ 47.258516] ? sigprocmask+0xe7/0x300 [ 47.258523] ? sigsuspend+0x240/0x240 [ 47.258533] ? kasan_check_write+0x14/0x20 [ 47.258539] ? _copy_from_user+0x99/0x110 [ 47.258549] SyS_pselect6+0x2bb/0x650 [ 47.258560] ? SyS_select+0x230/0x230 [ 47.258567] ? __sb_end_write+0xa0/0xd0 [ 47.258577] ? fput+0xd2/0x140 [ 47.258584] ? SyS_write+0x184/0x220 [ 47.258591] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 47.258600] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 47.258609] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 47.258621] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 47.258625] RIP: 0033:0x453299 [ 47.258629] RSP: 002b:00007f78c0c90c58 EFLAGS: 00000212 ORIG_RAX: 000000000000010e [ 47.258635] RAX: ffffffffffffffda RBX: 00007f78c0c90aa0 RCX: 0000000000453299 [ 47.258638] RDX: 0000000020768000 RSI: 00000000200abfc0 RDI: 0000000000000040 [ 47.258642] RBP: 00007f78c0c90a90 R08: 0000000020dedff8 R09: 0000000020f14000 [ 47.258645] R10: 0000000020086000 R11: 0000000000000212 R12: 00000000004b8096 [ 47.258649] R13: 00007f78c0c90bc8 R14: 00000000004b8096 R15: 0000000000000000 [ 47.258663] Code: 03 80 3c 18 00 0f 85 3c 02 00 00 49 8b be 90 01 00 00 e8 04 f7 ff ff 48 89 c2 48 89 c3 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ca 02 00 00 48 8b 3b be e3 10 00 00 e8 f9 88 [ 47.258774] RIP: binder_poll+0xa0/0x390 RSP: ffff8801abf475c8 [ 47.258782] ---[ end trace da7b62cdeed3dd72 ]--- [ 47.258786] Kernel panic - not syncing: Fatal exception [ 47.259174] Dumping ftrace buffer: [ 47.259176] (ftrace buffer empty) [ 47.259179] Kernel Offset: disabled [ 48.306301] Rebooting in 86400 seconds..