&(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000b71000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @empty}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffb]}, &(0x7f0000407000)=0x108) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000168000), &(0x7f0000b70000)=0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x8, 0x0, &(0x7f000000b000-0x108)=[@increfs={0x40046304, 0x1}]}) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0xb6f000)=nil, 0xb6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000096f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000b71000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @empty}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffb]}, &(0x7f0000407000)=0x108) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000168000), &(0x7f0000b70000)=0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x8, 0x0, &(0x7f000000b000-0x108)=[@increfs={0x40046304, 0x1}]}) 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0xfd7000)=nil, 0xfd7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000fd7000-0x9)='/dev/sg#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000dcd000)={0x1, &(0x7f0000427000), &(0x7f0000001000)=[{0x0, 0xac, 0x2, &(0x7f00002aa000)=""/172}]}) ioctl(r0, 0x100000001, &(0x7f0000001000)) [ 44.040690] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.040706] binder: send failed reply for transaction 117, target dead [ 44.040715] binder: send failed reply for transaction 116 to 9099:9106 [ 44.042148] binder: 9099:9106 got reply transaction with no transaction stack [ 44.042157] binder: 9099:9106 transaction failed 29201/-71, size 24-8 line 2920 [ 44.057749] binder: undelivered TRANSACTION_COMPLETE [ 44.057757] binder: undelivered TRANSACTION_ERROR: 29189 [ 44.057759] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0xfd7000)=nil, 0xfd7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000fd7000-0x9)='/dev/sg#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000dcd000)={0x1, &(0x7f0000427000), &(0x7f0000001000)=[{0x0, 0xac, 0x2, &(0x7f00002aa000)=""/172}]}) ioctl(r0, 0x100000001, &(0x7f0000001000)) 2018/02/06 13:57:19 executing program 6: clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000ef6000-0x4), &(0x7f00000a3000-0x65)) ptrace$cont(0x0, 0x0, 0x0, 0x0) 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0xfd7000)=nil, 0xfd7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000fd7000-0x9)='/dev/sg#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000dcd000)={0x1, &(0x7f0000427000), &(0x7f0000001000)=[{0x0, 0xac, 0x2, &(0x7f00002aa000)=""/172}]}) ioctl(r0, 0x100000001, &(0x7f0000001000)) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000798000-0x78)={0x0, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @rand_addr}, 0x0, 0x0, 0x0, 0x1bdf, 0x0, &(0x7f0000d8a000-0x10)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000042b000)={0x2, &(0x7f0000193000-0x10)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00007f7000)=""/1, &(0x7f0000da0000)=0x1) [ 44.397971] binder: BINDER_SET_CONTEXT_MGR already set [ 44.398095] binder: 9114:9121 ERROR: BC_REGISTER_LOOPER called without request [ 44.411197] binder: 9111:9117 ioctl 40046207 0 returned -16 [ 44.411206] binder: BINDER_SET_CONTEXT_MGR already set [ 44.411221] binder: 9113:9118 ioctl 40046207 0 returned -16 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0xfd7000)=nil, 0xfd7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000fd7000-0x9)='/dev/sg#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000dcd000)={0x1, &(0x7f0000427000), &(0x7f0000001000)=[{0x0, 0xac, 0x2, &(0x7f00002aa000)=""/172}]}) ioctl(r0, 0x100000001, &(0x7f0000001000)) 2018/02/06 13:57:19 executing program 2: mmap(&(0x7f0000000000/0xb6f000)=nil, 0xb6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000096f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1d016de371f1d99e3b4d488546c2bbb067efde7b55e9d1008602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000b71000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @empty}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffb]}, &(0x7f0000407000)=0x108) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000168000), &(0x7f0000b70000)=0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000005000-0x68)=[@fd={0x73622a85, 0x0, 0xffffffffffffffff}], &(0x7f000000a000)=[0x0]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006000-0x30)={0x8, 0x0, &(0x7f000000b000-0x108)=[@increfs={0x40046304, 0x1}]}) 2018/02/06 13:57:19 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) modify_ldt$read_default(0x2, &(0x7f0000012000)=""/216, 0xd8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f00008a3000), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00009a2000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 44.411450] binder: BINDER_SET_CONTEXT_MGR already set [ 44.411457] binder: 9112:9120 ioctl 40046207 0 returned -16 [ 44.413689] binder: 9112:9120 ERROR: BC_REGISTER_LOOPER called without request [ 44.413719] binder: 9113:9118 ERROR: BC_REGISTER_LOOPER called without request [ 44.427653] binder: 9111:9131 ERROR: BC_REGISTER_LOOPER called without request [ 44.436134] binder: unexpected work type, 4, not freed [ 44.436137] binder: undelivered TRANSACTION_COMPLETE [ 44.436150] binder: undelivered TRANSACTION_COMPLETE [ 44.436157] binder: undelivered transaction 122, process died. [ 44.436193] binder: send failed reply for transaction 125 to 9111:9131 [ 44.436502] binder: 9113:9138 transaction failed 29189/-22, size 0-0 line 3004 [ 44.439933] binder: 9112:9137 transaction failed 29189/-22, size 0-0 line 3004 [ 44.444668] binder: 9111:9131 got reply transaction with no transaction stack [ 44.444677] binder: 9111:9131 transaction failed 29201/-71, size 24-8 line 2920 [ 44.462681] binder: undelivered TRANSACTION_ERROR: 29189 [ 44.469545] binder: undelivered TRANSACTION_ERROR: 29189 [ 44.484236] binder: 9148:9149 ERROR: BC_REGISTER_LOOPER called without request [ 44.513156] binder: unexpected work type, 4, not freed [ 44.513159] binder: undelivered TRANSACTION_COMPLETE [ 44.513170] binder: undelivered TRANSACTION_COMPLETE 2018/02/06 13:57:19 executing program 3: remap_file_pages(&(0x7f00002b5000/0x3000)=nil, 0x3000, 0xc, 0x0, 0x0) 2018/02/06 13:57:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000243000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000f92000)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f00004a9000)) 2018/02/06 13:57:19 executing program 2: r0 = gettid() exit(0x0) tkill(r0, 0x0) 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0x37000)=nil, 0x37000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000037000-0x38)={&(0x7f0000007000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000021000)=@ipv4_newroute={0x24, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0x4f6000)=nil, 0x4f6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f00004f5000)=[], 0xfffffffffffffd2d, 0x0, &(0x7f00001b0000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f00004f5000-0x58)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000373000-0x40)=[], &(0x7f0000043000)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/06 13:57:19 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) modify_ldt$read_default(0x2, &(0x7f0000012000)=""/216, 0xd8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f00008a3000), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00009a2000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000042b000)={0x2, &(0x7f0000193000-0x10)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00007f7000)=""/1, &(0x7f0000da0000)=0x1) 2018/02/06 13:57:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x9) write(r0, &(0x7f0000c40000-0x10)="1f000000e8030200000006c507141a23", 0x10) [ 44.513176] binder: undelivered transaction 131, process died. [ 44.605938] binder: undelivered TRANSACTION_COMPLETE [ 44.611072] binder: undelivered TRANSACTION_ERROR: 29189 [ 44.617802] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.623822] mmap: syz-executor3 (9164) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 44.676110] binder: 9160:9177 got new transaction with bad transaction stack, transaction 135 has target 9160:9170 [ 44.686852] binder: 9160:9177 transaction failed 29201/-71, size 0-0 line 3031 [ 44.708327] binder: BINDER_SET_CONTEXT_MGR already set [ 44.713719] binder: 9160:9177 ioctl 40046207 0 returned -16 [ 44.714901] binder_alloc: 9160: binder_alloc_buf, no vma 2018/02/06 13:57:19 executing program 3: remap_file_pages(&(0x7f00002b5000/0x3000)=nil, 0x3000, 0xc, 0x0, 0x0) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000042b000)={0x2, &(0x7f0000193000-0x10)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00007f7000)=""/1, &(0x7f0000da0000)=0x1) 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0x37000)=nil, 0x37000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000037000-0x38)={&(0x7f0000007000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000021000)=@ipv4_newroute={0x24, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x9) write(r0, &(0x7f0000c40000-0x10)="1f000000e8030200000006c507141a23", 0x10) 2018/02/06 13:57:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000243000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000f92000)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f00004a9000)) 2018/02/06 13:57:19 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) modify_ldt$read_default(0x2, &(0x7f0000012000)=""/216, 0xd8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f00008a3000), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00009a2000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0x4f6000)=nil, 0x4f6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f00004f5000)=[], 0xfffffffffffffd2d, 0x0, &(0x7f00001b0000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f00004f5000-0x58)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000373000-0x40)=[], &(0x7f0000043000)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/06 13:57:19 executing program 2: r0 = gettid() exit(0x0) tkill(r0, 0x0) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000042b000)={0x2, &(0x7f0000193000-0x10)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00007f7000)=""/1, &(0x7f0000da0000)=0x1) 2018/02/06 13:57:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x9) write(r0, &(0x7f0000c40000-0x10)="1f000000e8030200000006c507141a23", 0x10) 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0x37000)=nil, 0x37000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000037000-0x38)={&(0x7f0000007000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000021000)=@ipv4_newroute={0x24, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:19 executing program 3: remap_file_pages(&(0x7f00002b5000/0x3000)=nil, 0x3000, 0xc, 0x0, 0x0) 2018/02/06 13:57:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000243000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000f92000)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f00004a9000)) 2018/02/06 13:57:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x9) write(r0, &(0x7f0000c40000-0x10)="1f000000e8030200000006c507141a23", 0x10) [ 44.714918] binder: 9160:9179 transaction failed 29189/-3, size 0-0 line 3127 [ 44.733538] binder: undelivered TRANSACTION_ERROR: 29189 [ 44.739120] binder: release 9160:9170 transaction 135 in, still active [ 44.752260] binder: send failed reply for transaction 135 to 9160:9177 [ 44.768489] binder: undelivered TRANSACTION_COMPLETE [ 44.780173] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.792435] binder: undelivered TRANSACTION_ERROR: 29189 [ 44.809161] binder: 9183:9205 got new transaction with bad transaction stack, transaction 139 has target 9183:9185 [ 44.819699] binder: 9183:9205 transaction failed 29201/-71, size 0-0 line 3031 2018/02/06 13:57:19 executing program 3: remap_file_pages(&(0x7f00002b5000/0x3000)=nil, 0x3000, 0xc, 0x0, 0x0) 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0x37000)=nil, 0x37000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000037000-0x38)={&(0x7f0000007000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000021000)=@ipv4_newroute={0x24, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000243000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000f92000)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f00004a9000)) 2018/02/06 13:57:19 executing program 2: r0 = gettid() exit(0x0) tkill(r0, 0x0) 2018/02/06 13:57:19 executing program 4: mmap(&(0x7f0000000000/0x4f6000)=nil, 0x4f6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f00004f5000)=[], 0xfffffffffffffd2d, 0x0, &(0x7f00001b0000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f00004f5000-0x58)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000373000-0x40)=[], &(0x7f0000043000)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/06 13:57:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000e5b000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000aaf000-0xc)={0x3}) epoll_pwait(r1, &(0x7f0000eda000)=[{}], 0x1, 0x0, &(0x7f00001a8000), 0x8) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xff32, &(0x7f00007f0000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @multicast1=0xe0000001, @multicast1=0xe0000001, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x2a, 0x9, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}}}}}}, &(0x7f0000adb000-0xc)={0x0, 0x1, [0x0]}) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0x4f6000)=nil, 0x4f6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f00004f5000)=[], 0xfffffffffffffd2d, 0x0, &(0x7f00001b0000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f00004f5000-0x58)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000373000-0x40)=[], &(0x7f0000043000)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000d44000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c35000)={{0x100000008000080}, 'port0\x00', 0xb1, 0x80000000080003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x80}, "0a4ceaa05dad126e00000002a5569b3fd4cec307e8ef3d13eb790ec9000400000d229db692542e5b78f8b29e0a27800f0000000000000009fb420009587f01a4", 0x800000000073, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000309000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/06 13:57:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000003c000-0x51)='net/sockstat\x00') preadv(r0, &(0x7f0000638000-0x10)=[{&(0x7f0000859000-0x18)=""/1, 0x1}], 0x1, 0x2000) 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000022000-0x15)='/dev/pktcdvd/control\x00', 0x100fd, 0x0) [ 44.841063] binder: release 9183:9185 transaction 139 in, still active [ 44.847722] binder: send failed reply for transaction 139 to 9183:9205 [ 44.854550] binder: undelivered TRANSACTION_COMPLETE [ 44.866500] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.873563] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xff32, &(0x7f00007f0000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @multicast1=0xe0000001, @multicast1=0xe0000001, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x2a, 0x9, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}}}}}}, &(0x7f0000adb000-0xc)={0x0, 0x1, [0x0]}) 2018/02/06 13:57:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000e5b000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000aaf000-0xc)={0x3}) epoll_pwait(r1, &(0x7f0000eda000)=[{}], 0x1, 0x0, &(0x7f00001a8000), 0x8) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xff32, &(0x7f00007f0000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @multicast1=0xe0000001, @multicast1=0xe0000001, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x2a, 0x9, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}}}}}}, &(0x7f0000adb000-0xc)={0x0, 0x1, [0x0]}) 2018/02/06 13:57:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000e5b000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000aaf000-0xc)={0x3}) epoll_pwait(r1, &(0x7f0000eda000)=[{}], 0x1, 0x0, &(0x7f00001a8000), 0x8) 2018/02/06 13:57:19 executing program 2: r0 = gettid() exit(0x0) tkill(r0, 0x0) [ 44.875084] binder: BINDER_SET_CONTEXT_MGR already set [ 44.875091] binder: 9223:9226 ioctl 40046207 0 returned -16 [ 44.927220] binder: 9220:9237 got new transaction with bad transaction stack, transaction 142 has target 9220:9225 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000022000-0x15)='/dev/pktcdvd/control\x00', 0x100fd, 0x0) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xff32, &(0x7f00007f0000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @multicast1=0xe0000001, @multicast1=0xe0000001, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x2a, 0x9, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}}}}}}, &(0x7f0000adb000-0xc)={0x0, 0x1, [0x0]}) 2018/02/06 13:57:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000e5b000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000aaf000-0xc)={0x3}) epoll_pwait(r1, &(0x7f0000eda000)=[{}], 0x1, 0x0, &(0x7f00001a8000), 0x8) 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000d44000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c35000)={{0x100000008000080}, 'port0\x00', 0xb1, 0x80000000080003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x80}, "0a4ceaa05dad126e00000002a5569b3fd4cec307e8ef3d13eb790ec9000400000d229db692542e5b78f8b29e0a27800f0000000000000009fb420009587f01a4", 0x800000000073, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000309000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/06 13:57:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000003c000-0x51)='net/sockstat\x00') preadv(r0, &(0x7f0000638000-0x10)=[{&(0x7f0000859000-0x18)=""/1, 0x1}], 0x1, 0x2000) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0x4f6000)=nil, 0x4f6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f00004f5000)=[], 0xfffffffffffffd2d, 0x0, &(0x7f00001b0000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f00004f5000-0x58)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000373000-0x40)=[], &(0x7f0000043000)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/06 13:57:19 executing program 4: mmap(&(0x7f0000000000/0x4f6000)=nil, 0x4f6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f00004f5000)=[], 0xfffffffffffffd2d, 0x0, &(0x7f00001b0000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f00004f5000-0x58)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000373000-0x40)=[], &(0x7f0000043000)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/06 13:57:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000003c000-0x51)='net/sockstat\x00') preadv(r0, &(0x7f0000638000-0x10)=[{&(0x7f0000859000-0x18)=""/1, 0x1}], 0x1, 0x2000) 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000022000-0x15)='/dev/pktcdvd/control\x00', 0x100fd, 0x0) 2018/02/06 13:57:19 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) lchown(&(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 44.938607] binder: 9220:9237 transaction failed 29201/-71, size 0-0 line 3031 [ 44.949752] binder: release 9223:9240 transaction 143 out, still active [ 44.956913] binder: undelivered TRANSACTION_COMPLETE [ 44.962090] binder: release 9223:9250 transaction 145 out, still active [ 44.972525] binder: undelivered TRANSACTION_COMPLETE 2018/02/06 13:57:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000003c000-0x51)='net/sockstat\x00') preadv(r0, &(0x7f0000638000-0x10)=[{&(0x7f0000859000-0x18)=""/1, 0x1}], 0x1, 0x2000) 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000d44000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c35000)={{0x100000008000080}, 'port0\x00', 0xb1, 0x80000000080003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x80}, "0a4ceaa05dad126e00000002a5569b3fd4cec307e8ef3d13eb790ec9000400000d229db692542e5b78f8b29e0a27800f0000000000000009fb420009587f01a4", 0x800000000073, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000309000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000de9000)={&(0x7f0000893000)=@proc={0x10, 0x0, 0x0}, 0xc, &(0x7f0000655000-0x10)=[], 0x0, &(0x7f00006fb000-0x28)=[@rights={0x10, 0x1, 0x1, []}], 0x10}, 0x0) [ 44.977921] binder: BINDER_SET_CONTEXT_MGR already set [ 44.977929] binder: 9254:9263 ioctl 40046207 0 returned -16 [ 44.977955] binder: BINDER_SET_CONTEXT_MGR already set [ 44.977961] binder: 9258:9265 ioctl 40046207 0 returned -16 [ 45.013714] binder_alloc: 9220: binder_alloc_buf, no vma [ 45.013732] binder: 9258:9277 transaction failed 29189/-3, size 0-0 line 3127 2018/02/06 13:57:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000003c000-0x51)='net/sockstat\x00') preadv(r0, &(0x7f0000638000-0x10)=[{&(0x7f0000859000-0x18)=""/1, 0x1}], 0x1, 0x2000) 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000022000-0x15)='/dev/pktcdvd/control\x00', 0x100fd, 0x0) 2018/02/06 13:57:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000003c000-0x51)='net/sockstat\x00') preadv(r0, &(0x7f0000638000-0x10)=[{&(0x7f0000859000-0x18)=""/1, 0x1}], 0x1, 0x2000) 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000d44000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c35000)={{0x100000008000080}, 'port0\x00', 0xb1, 0x80000000080003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x80}, "0a4ceaa05dad126e00000002a5569b3fd4cec307e8ef3d13eb790ec9000400000d229db692542e5b78f8b29e0a27800f0000000000000009fb420009587f01a4", 0x800000000073, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000309000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/06 13:57:19 executing program 4: mmap(&(0x7f0000000000/0x4f6000)=nil, 0x4f6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f00004f5000)=[], 0xfffffffffffffd2d, 0x0, &(0x7f00001b0000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x4c, 0x0, &(0x7f00004f5000-0x58)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000373000-0x40)=[], &(0x7f0000043000)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000de9000)={&(0x7f0000893000)=@proc={0x10, 0x0, 0x0}, 0xc, &(0x7f0000655000-0x10)=[], 0x0, &(0x7f00006fb000-0x28)=[@rights={0x10, 0x1, 0x1, []}], 0x10}, 0x0) 2018/02/06 13:57:19 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) lchown(&(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000de9000)={&(0x7f0000893000)=@proc={0x10, 0x0, 0x0}, 0xc, &(0x7f0000655000-0x10)=[], 0x0, &(0x7f00006fb000-0x28)=[@rights={0x10, 0x1, 0x1, []}], 0x10}, 0x0) [ 45.014471] binder_alloc: 9220: binder_alloc_buf, no vma [ 45.014486] binder: 9254:9278 transaction failed 29189/-3, size 0-0 line 3127 [ 45.016158] binder_alloc: 9220: binder_alloc_buf, no vma [ 45.016172] binder: 9258:9277 transaction failed 29189/-3, size 0-0 line 3127 [ 45.016926] binder_alloc: 9220: binder_alloc_buf, no vma [ 45.016940] binder: 9254:9278 transaction failed 29189/-3, size 0-0 line 3127 [ 45.077169] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.083574] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d19000)=0x45b, 0x4) 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0x93f000)=nil, 0x93f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000024d000)={@common='lo\x00', &(0x7f000093e000)=@ethtool_eeprom={0x8}}) 2018/02/06 13:57:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00008c0000)=[{&(0x7f0000501000)="2900000018003109642022010020e7060200000000ffff06800000000c000800040005000000f4ff01", 0x29}], 0x1) 2018/02/06 13:57:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000003c000-0x51)='net/sockstat\x00') preadv(r0, &(0x7f0000638000-0x10)=[{&(0x7f0000859000-0x18)=""/1, 0x1}], 0x1, 0x2000) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000de9000)={&(0x7f0000893000)=@proc={0x10, 0x0, 0x0}, 0xc, &(0x7f0000655000-0x10)=[], 0x0, &(0x7f00006fb000-0x28)=[@rights={0x10, 0x1, 0x1, []}], 0x10}, 0x0) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000de9000)={&(0x7f0000893000)=@proc={0x10, 0x0, 0x0}, 0xc, &(0x7f0000655000-0x10)=[], 0x0, &(0x7f00006fb000-0x28)=[@rights={0x10, 0x1, 0x1, []}], 0x10}, 0x0) [ 45.091167] binder: release 9220:9225 transaction 142 in, still active [ 45.120345] binder: send failed reply for transaction 142 to 9220:9237 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d19000)=0x45b, 0x4) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000de9000)={&(0x7f0000893000)=@proc={0x10, 0x0, 0x0}, 0xc, &(0x7f0000655000-0x10)=[], 0x0, &(0x7f00006fb000-0x28)=[@rights={0x10, 0x1, 0x1, []}], 0x10}, 0x0) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000de9000)={&(0x7f0000893000)=@proc={0x10, 0x0, 0x0}, 0xc, &(0x7f0000655000-0x10)=[], 0x0, &(0x7f00006fb000-0x28)=[@rights={0x10, 0x1, 0x1, []}], 0x10}, 0x0) 2018/02/06 13:57:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000034000-0xc)='./file0/bus\x00', &(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000033000-0x5)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) statfs(&(0x7f00000ca000)='./file0\x00', &(0x7f0000cf5000-0xa6)=""/166) 2018/02/06 13:57:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00008c0000)=[{&(0x7f0000501000)="2900000018003109642022010020e7060200000000ffff06800000000c000800040005000000f4ff01", 0x29}], 0x1) 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d19000)=0x45b, 0x4) 2018/02/06 13:57:19 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) lchown(&(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0x93f000)=nil, 0x93f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000024d000)={@common='lo\x00', &(0x7f000093e000)=@ethtool_eeprom={0x8}}) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000003000)={0x0, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @empty}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004000-0xe)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/06 13:57:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000273000-0x24)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b85000-0x13a)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) 2018/02/06 13:57:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00008c0000)=[{&(0x7f0000501000)="2900000018003109642022010020e7060200000000ffff06800000000c000800040005000000f4ff01", 0x29}], 0x1) 2018/02/06 13:57:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000918000-0xce)="6e65742f6970365f6d725f6361636865002c0fa7ce3d511a22f8b55de1794634dd24e6c610bafc2d9b6ab772c6a531cdf247465c0e6113884d7c362e76b8118a5eca29c3e2d88bcb5bbd8d2cc544896a703311b754069698de5df52afb0b43d585630dca94f76d293bb408adc4acad07323c98dd27100116728843dc327685539b7aced4751023d7370f5fb82c88aec91ecd1c60f3c62d5a9ce05d579c635db5e144584eb2adc1bff27e52d8d954cf086c6ec4ebffb7b6d79c0c1189eb19d851b03538a6149462419d7da28f9e26") preadv(r0, &(0x7f00001ee000-0x50)=[{&(0x7f0000af1000)=""/171, 0xab}], 0x1, 0x0) 2018/02/06 13:57:19 executing program 3: mmap(&(0x7f0000000000/0x93f000)=nil, 0x93f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000024d000)={@common='lo\x00', &(0x7f000093e000)=@ethtool_eeprom={0x8}}) [ 45.138486] binder: undelivered TRANSACTION_COMPLETE [ 45.145171] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.150687] binder: 9285:9306 got new transaction with bad transaction stack, transaction 151 has target 9285:9292 [ 45.150700] binder: 9285:9306 transaction failed 29201/-71, size 0-0 line 3031 [ 45.173925] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.180735] binder: send failed reply for transaction 143, target dead 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d19000)=0x45b, 0x4) 2018/02/06 13:57:19 executing program 5: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000003000)={0x0, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @empty}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004000-0xe)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/06 13:57:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00008c0000)=[{&(0x7f0000501000)="2900000018003109642022010020e7060200000000ffff06800000000c000800040005000000f4ff01", 0x29}], 0x1) 2018/02/06 13:57:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001000-0x10), &(0x7f0000000000)=0x10) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r1, &(0x7f0000b19000)="e5", 0x1, 0x0, &(0x7f0000df4000-0x6)=@hci={0x1f}, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007fb000-0x10)={&(0x7f0000687000)=@acquire={0x250, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, [@algo_comp={0x128, 0x3, {{'deflate\x00'}, 0x6e8, "fbc5e522384e6e94806d5a5643a61f7bc8579383b0a505665436a2cebe22e758122f0a60502f791738d2c89bb753856dcc8dab6f955451218ebd4b3d18f46760323f03e1bbc5d8e5b619ab821b5e6d1e7b3baede9201fd16b965db4f73e98817475bb9fb8a1d28e7d5075cf70803e9cc46a40494cf4ac6536d72eb538ca8e02a94ad150f3a5206a927f70a670445b749d5e53ff09590815afbb4ccf95d7db419f63eb70ddd8c5b62edf7bd0aa82f2bf30eed23a71871fbd59e62826268b25768f08bb6dd229951fc11dc950cb5e32a1b187e446f9c7494c98ef80d5af7"}}]}, 0x250}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a32000-0x38)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c0a000-0x10)={&(0x7f0000644000-0x1a0)=@updsa={0xa6, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@loopback={0x0, 0x1}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f0000086000-0x1e)=@pppoe={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @common='sit0\x00'}}, 0x1e, &(0x7f0000a58000-0x20)=[{&(0x7f0000787000-0x1000)="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", 0x318}], 0x1, &(0x7f0000f89000-0x80)=[]}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00001ea000-0xc), &(0x7f0000a0c000-0x4)=0xc) sendmsg$netlink(r1, &(0x7f0000791000)={&(0x7f0000757000-0xc)=@kern={0x10}, 0xc, &(0x7f0000713000)=[{&(0x7f00000d4000)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, "", []}, 0x10}], 0x1, 0x0, 0x0, 0x800}, 0x0) 2018/02/06 13:57:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000034000-0xc)='./file0/bus\x00', &(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000033000-0x5)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) statfs(&(0x7f00000ca000)='./file0\x00', &(0x7f0000cf5000-0xa6)=""/166) 2018/02/06 13:57:20 executing program 3: mmap(&(0x7f0000000000/0x93f000)=nil, 0x93f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000024d000)={@common='lo\x00', &(0x7f000093e000)=@ethtool_eeprom={0x8}}) 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000003000)={0x0, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @empty}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004000-0xe)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/06 13:57:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000918000-0xce)="6e65742f6970365f6d725f6361636865002c0fa7ce3d511a22f8b55de1794634dd24e6c610bafc2d9b6ab772c6a531cdf247465c0e6113884d7c362e76b8118a5eca29c3e2d88bcb5bbd8d2cc544896a703311b754069698de5df52afb0b43d585630dca94f76d293bb408adc4acad07323c98dd27100116728843dc327685539b7aced4751023d7370f5fb82c88aec91ecd1c60f3c62d5a9ce05d579c635db5e144584eb2adc1bff27e52d8d954cf086c6ec4ebffb7b6d79c0c1189eb19d851b03538a6149462419d7da28f9e26") preadv(r0, &(0x7f00001ee000-0x50)=[{&(0x7f0000af1000)=""/171, 0xab}], 0x1, 0x0) [ 45.203737] binder: send failed reply for transaction 145, target dead [ 45.217810] binder: release 9285:9292 transaction 151 in, still active [ 45.229383] binder: send failed reply for transaction 151 to 9285:9306 [ 45.245173] binder: undelivered TRANSACTION_COMPLETE 2018/02/06 13:57:20 executing program 3: mmap(&(0x7f0000000000/0x36000)=nil, 0x36000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000002f000)={0x0, 0x0, &(0x7f0000003000-0x10)={&(0x7f000002e000)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) [ 45.250310] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.259670] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/06 13:57:20 executing program 3: mmap(&(0x7f0000000000/0x36000)=nil, 0x36000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000002f000)={0x0, 0x0, &(0x7f0000003000-0x10)={&(0x7f000002e000)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000003000)={0x0, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @empty}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004000-0xe)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/06 13:57:20 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) lchown(&(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000273000-0x24)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b85000-0x13a)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) 2018/02/06 13:57:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000918000-0xce)="6e65742f6970365f6d725f6361636865002c0fa7ce3d511a22f8b55de1794634dd24e6c610bafc2d9b6ab772c6a531cdf247465c0e6113884d7c362e76b8118a5eca29c3e2d88bcb5bbd8d2cc544896a703311b754069698de5df52afb0b43d585630dca94f76d293bb408adc4acad07323c98dd27100116728843dc327685539b7aced4751023d7370f5fb82c88aec91ecd1c60f3c62d5a9ce05d579c635db5e144584eb2adc1bff27e52d8d954cf086c6ec4ebffb7b6d79c0c1189eb19d851b03538a6149462419d7da28f9e26") preadv(r0, &(0x7f00001ee000-0x50)=[{&(0x7f0000af1000)=""/171, 0xab}], 0x1, 0x0) 2018/02/06 13:57:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000034000-0xc)='./file0/bus\x00', &(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000033000-0x5)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) statfs(&(0x7f00000ca000)='./file0\x00', &(0x7f0000cf5000-0xa6)=""/166) 2018/02/06 13:57:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000273000-0x24)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b85000-0x13a)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) 2018/02/06 13:57:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000273000-0x24)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b85000-0x13a)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) 2018/02/06 13:57:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000034000-0xc)='./file0/bus\x00', &(0x7f0000010000-0x8)='./file0\x00', &(0x7f0000033000-0x5)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) statfs(&(0x7f00000ca000)='./file0\x00', &(0x7f0000cf5000-0xa6)=""/166) 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) futex(&(0x7f0000000000), 0x1, 0x0, &(0x7f0000006000-0x10)={0x77359400}, &(0x7f0000000000), 0x0) 2018/02/06 13:57:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000918000-0xce)="6e65742f6970365f6d725f6361636865002c0fa7ce3d511a22f8b55de1794634dd24e6c610bafc2d9b6ab772c6a531cdf247465c0e6113884d7c362e76b8118a5eca29c3e2d88bcb5bbd8d2cc544896a703311b754069698de5df52afb0b43d585630dca94f76d293bb408adc4acad07323c98dd27100116728843dc327685539b7aced4751023d7370f5fb82c88aec91ecd1c60f3c62d5a9ce05d579c635db5e144584eb2adc1bff27e52d8d954cf086c6ec4ebffb7b6d79c0c1189eb19d851b03538a6149462419d7da28f9e26") preadv(r0, &(0x7f00001ee000-0x50)=[{&(0x7f0000af1000)=""/171, 0xab}], 0x1, 0x0) 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) futex(&(0x7f0000000000), 0x1, 0x0, &(0x7f0000006000-0x10)={0x77359400}, &(0x7f0000000000), 0x0) 2018/02/06 13:57:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000273000-0x24)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b85000-0x13a)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) 2018/02/06 13:57:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000273000-0x24)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b85000-0x13a)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) 2018/02/06 13:57:20 executing program 3: mmap(&(0x7f0000000000/0x36000)=nil, 0x36000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000002f000)={0x0, 0x0, &(0x7f0000003000-0x10)={&(0x7f000002e000)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/06 13:57:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000db5000-0x58)=@newlink={0x58, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0x24, 0x16, [{0x20, 0x1, [@nested={0x1c, 0x4, [@typed={0x18, 0x0, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}]}]}, 0x58}, 0x1}, 0x0) 2018/02/06 13:57:20 executing program 6: r0 = syz_open_pts(0xffffffffffffffff, 0x1) r1 = dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_pts(0xffffffffffffff9c, 0x101000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00001ae000-0x28)=[{r0, 0x2000}, {0xffffffffffffffff}], 0x2, &(0x7f000041f000-0x10), &(0x7f0000001000-0x8)={0x8}, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000008000-0x16)='/selinux/checkreqprot\x00', 0x18000, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000009000-0x8), &(0x7f0000001000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@increfs_done={0x40106308, 0x0, 0x3}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000273000-0x24)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b85000-0x13a)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) 2018/02/06 13:57:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000003000), &(0x7f0000013000), &(0x7f0000003000)={0x0, 0x2}, &(0x7f0000003000-0x10), &(0x7f0000014000-0x10)={&(0x7f0000002000-0x8), 0x8}) nanosleep(&(0x7f0000002000), &(0x7f0000003000)={0x0, 0x0}) ppoll(&(0x7f0000003000)=[], 0x0, &(0x7f0000011000)={0x0, r0}, &(0x7f0000012000), 0x8) 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) futex(&(0x7f0000000000), 0x1, 0x0, &(0x7f0000006000-0x10)={0x77359400}, &(0x7f0000000000), 0x0) 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) futex(&(0x7f0000000000), 0x1, 0x0, &(0x7f0000006000-0x10)={0x77359400}, &(0x7f0000000000), 0x0) 2018/02/06 13:57:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000003000), &(0x7f0000013000), &(0x7f0000003000)={0x0, 0x2}, &(0x7f0000003000-0x10), &(0x7f0000014000-0x10)={&(0x7f0000002000-0x8), 0x8}) nanosleep(&(0x7f0000002000), &(0x7f0000003000)={0x0, 0x0}) ppoll(&(0x7f0000003000)=[], 0x0, &(0x7f0000011000)={0x0, r0}, &(0x7f0000012000), 0x8) 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000939000-0x1a)="440d98030600000000000000ec4408d41c972bbacd", 0x15) 2018/02/06 13:57:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000003000), &(0x7f0000013000), &(0x7f0000003000)={0x0, 0x2}, &(0x7f0000003000-0x10), &(0x7f0000014000-0x10)={&(0x7f0000002000-0x8), 0x8}) nanosleep(&(0x7f0000002000), &(0x7f0000003000)={0x0, 0x0}) ppoll(&(0x7f0000003000)=[], 0x0, &(0x7f0000011000)={0x0, r0}, &(0x7f0000012000), 0x8) 2018/02/06 13:57:20 executing program 3: mmap(&(0x7f0000000000/0x36000)=nil, 0x36000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000002f000)={0x0, 0x0, &(0x7f0000003000-0x10)={&(0x7f000002e000)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/06 13:57:20 executing program 6: r0 = syz_open_pts(0xffffffffffffffff, 0x1) r1 = dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_pts(0xffffffffffffff9c, 0x101000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00001ae000-0x28)=[{r0, 0x2000}, {0xffffffffffffffff}], 0x2, &(0x7f000041f000-0x10), &(0x7f0000001000-0x8)={0x8}, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000008000-0x16)='/selinux/checkreqprot\x00', 0x18000, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000009000-0x8), &(0x7f0000001000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@increfs_done={0x40106308, 0x0, 0x3}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000003000), &(0x7f0000013000), &(0x7f0000003000)={0x0, 0x2}, &(0x7f0000003000-0x10), &(0x7f0000014000-0x10)={&(0x7f0000002000-0x8), 0x8}) nanosleep(&(0x7f0000002000), &(0x7f0000003000)={0x0, 0x0}) ppoll(&(0x7f0000003000)=[], 0x0, &(0x7f0000011000)={0x0, r0}, &(0x7f0000012000), 0x8) 2018/02/06 13:57:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000273000-0x24)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b85000-0x13a)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) 2018/02/06 13:57:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000273000-0x24)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b85000-0x13a)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) 2018/02/06 13:57:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6f000-0xa)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000273000-0x24)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b85000-0x13a)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) [ 45.480380] binder: 9404:9407 BC_INCREFS_DONE u0000000000000000 node 153 cookie mismatch 0000000000000003 != 0000000000000000 2018/02/06 13:57:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000db5000-0x58)=@newlink={0x58, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0x24, 0x16, [{0x20, 0x1, [@nested={0x1c, 0x4, [@typed={0x18, 0x0, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}]}]}, 0x58}, 0x1}, 0x0) 2018/02/06 13:57:20 executing program 7: r0 = syz_open_pts(0xffffffffffffffff, 0x1) r1 = dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_pts(0xffffffffffffff9c, 0x101000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00001ae000-0x28)=[{r0, 0x2000}, {0xffffffffffffffff}], 0x2, &(0x7f000041f000-0x10), &(0x7f0000001000-0x8)={0x8}, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000008000-0x16)='/selinux/checkreqprot\x00', 0x18000, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000009000-0x8), &(0x7f0000001000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@increfs_done={0x40106308, 0x0, 0x3}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000939000-0x1a)="440d98030600000000000000ec4408d41c972bbacd", 0x15) 2018/02/06 13:57:20 executing program 6: r0 = syz_open_pts(0xffffffffffffffff, 0x1) r1 = dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_pts(0xffffffffffffff9c, 0x101000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00001ae000-0x28)=[{r0, 0x2000}, {0xffffffffffffffff}], 0x2, &(0x7f000041f000-0x10), &(0x7f0000001000-0x8)={0x8}, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000008000-0x16)='/selinux/checkreqprot\x00', 0x18000, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000009000-0x8), &(0x7f0000001000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@increfs_done={0x40106308, 0x0, 0x3}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000db5000-0x58)=@newlink={0x58, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0x24, 0x16, [{0x20, 0x1, [@nested={0x1c, 0x4, [@typed={0x18, 0x0, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}]}]}, 0x58}, 0x1}, 0x0) 2018/02/06 13:57:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000d6d000-0x1c)='net/raw\x00', 0x0) setrlimit(0x7, &(0x7f0000bed000-0x10)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20)={0x4284a1, {0x400003ffffffb}}, &(0x7f000093d000-0x20), 0x8, &(0x7f0000b89000-0x8)) syz_open_procfs(0x0, &(0x7f000032d000-0x9)='net/tcp6\x00') 2018/02/06 13:57:20 executing program 7: r0 = syz_open_pts(0xffffffffffffffff, 0x1) r1 = dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_pts(0xffffffffffffff9c, 0x101000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00001ae000-0x28)=[{r0, 0x2000}, {0xffffffffffffffff}], 0x2, &(0x7f000041f000-0x10), &(0x7f0000001000-0x8)={0x8}, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000008000-0x16)='/selinux/checkreqprot\x00', 0x18000, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000009000-0x8), &(0x7f0000001000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@increfs_done={0x40106308, 0x0, 0x3}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000939000-0x1a)="440d98030600000000000000ec4408d41c972bbacd", 0x15) 2018/02/06 13:57:20 executing program 3: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000676000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000fe3000-0x4)=0x8bafe) read(r0, &(0x7f0000fe3000-0x1)=""/1, 0x1) read(r0, &(0x7f0000fd8000), 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000fde000)) 2018/02/06 13:57:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e6000-0x10)={&(0x7f0000abe000-0x104)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) [ 45.527604] binder: 9433:9435 BC_INCREFS_DONE u0000000000000000 node 154 cookie mismatch 0000000000000003 != 0000000000000000 [ 45.560626] binder: 9447:9449 BC_INCREFS_DONE u0000000000000000 node 155 cookie mismatch 0000000000000003 != 0000000000000000 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000939000-0x1a)="440d98030600000000000000ec4408d41c972bbacd", 0x15) 2018/02/06 13:57:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000db5000-0x58)=@newlink={0x58, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0x24, 0x16, [{0x20, 0x1, [@nested={0x1c, 0x4, [@typed={0x18, 0x0, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}]}]}, 0x58}, 0x1}, 0x0) [ 45.616441] binder: 9455:9461 BC_INCREFS_DONE u0000000000000000 node 156 cookie mismatch 0000000000000003 != 0000000000000000 [ 45.630950] binder: 9454:9468 BC_INCREFS_DONE u0000000000000000 node 157 cookie mismatch 0000000000000003 != 0000000000000000 2018/02/06 13:57:20 executing program 3: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000676000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000fe3000-0x4)=0x8bafe) read(r0, &(0x7f0000fe3000-0x1)=""/1, 0x1) read(r0, &(0x7f0000fd8000), 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000fde000)) 2018/02/06 13:57:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rt_sigaction(0x7, &(0x7f0000ff1000-0x20)={0x42e1d9, {0xffffffbffffff270}}, &(0x7f00005ee000-0x20), 0x8, &(0x7f000017a000-0x8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00006e0000-0xa)='attr/prev\x00') 2018/02/06 13:57:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e6000-0x10)={&(0x7f0000abe000-0x104)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/06 13:57:20 executing program 7: r0 = syz_open_pts(0xffffffffffffffff, 0x1) r1 = dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_pts(0xffffffffffffff9c, 0x101000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00001ae000-0x28)=[{r0, 0x2000}, {0xffffffffffffffff}], 0x2, &(0x7f000041f000-0x10), &(0x7f0000001000-0x8)={0x8}, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000008000-0x16)='/selinux/checkreqprot\x00', 0x18000, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000009000-0x8), &(0x7f0000001000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@increfs_done={0x40106308, 0x0, 0x3}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000b28000-0xa)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000dac000-0x8)='./file0\x00', r0, &(0x7f000088c000)='./file0\x00') lremovexattr(&(0x7f0000b30000-0x10)='./control/file0\x00', &(0x7f000072c000-0x18)=@known='system.posix_acl_access\x00') 2018/02/06 13:57:20 executing program 6: r0 = syz_open_pts(0xffffffffffffffff, 0x1) r1 = dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_pts(0xffffffffffffff9c, 0x101000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00001ae000-0x28)=[{r0, 0x2000}, {0xffffffffffffffff}], 0x2, &(0x7f000041f000-0x10), &(0x7f0000001000-0x8)={0x8}, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000008000-0x16)='/selinux/checkreqprot\x00', 0x18000, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000009000-0x8), &(0x7f0000001000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@increfs_done={0x40106308, 0x0, 0x3}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rt_sigaction(0x7, &(0x7f0000ff1000-0x20)={0x42e1d9, {0xffffffbffffff270}}, &(0x7f00005ee000-0x20), 0x8, &(0x7f000017a000-0x8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00006e0000-0xa)='attr/prev\x00') 2018/02/06 13:57:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e6000-0x10)={&(0x7f0000abe000-0x104)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rt_sigaction(0x7, &(0x7f0000ff1000-0x20)={0x42e1d9, {0xffffffbffffff270}}, &(0x7f00005ee000-0x20), 0x8, &(0x7f000017a000-0x8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00006e0000-0xa)='attr/prev\x00') 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000b28000-0xa)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000dac000-0x8)='./file0\x00', r0, &(0x7f000088c000)='./file0\x00') lremovexattr(&(0x7f0000b30000-0x10)='./control/file0\x00', &(0x7f000072c000-0x18)=@known='system.posix_acl_access\x00') 2018/02/06 13:57:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e6000-0x10)={&(0x7f0000abe000-0x104)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/06 13:57:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000676000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000fe3000-0x4)=0x8bafe) read(r0, &(0x7f0000fe3000-0x1)=""/1, 0x1) read(r0, &(0x7f0000fd8000), 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000fde000)) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rt_sigaction(0x7, &(0x7f0000ff1000-0x20)={0x42e1d9, {0xffffffbffffff270}}, &(0x7f00005ee000-0x20), 0x8, &(0x7f000017a000-0x8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00006e0000-0xa)='attr/prev\x00') 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rt_sigaction(0x7, &(0x7f0000ff1000-0x20)={0x42e1d9, {0xffffffbffffff270}}, &(0x7f00005ee000-0x20), 0x8, &(0x7f000017a000-0x8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00006e0000-0xa)='attr/prev\x00') 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000b28000-0xa)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000dac000-0x8)='./file0\x00', r0, &(0x7f000088c000)='./file0\x00') lremovexattr(&(0x7f0000b30000-0x10)='./control/file0\x00', &(0x7f000072c000-0x18)=@known='system.posix_acl_access\x00') [ 46.228120] binder: 9487:9490 BC_INCREFS_DONE u0000000000000000 node 158 cookie mismatch 0000000000000003 != 0000000000000000 [ 46.233325] binder: 9481:9492 BC_INCREFS_DONE u0000000000000000 node 159 cookie mismatch 0000000000000003 != 0000000000000000 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rt_sigaction(0x7, &(0x7f0000ff1000-0x20)={0x42e1d9, {0xffffffbffffff270}}, &(0x7f00005ee000-0x20), 0x8, &(0x7f000017a000-0x8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00006e0000-0xa)='attr/prev\x00') 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rt_sigaction(0x7, &(0x7f0000ff1000-0x20)={0x42e1d9, {0xffffffbffffff270}}, &(0x7f00005ee000-0x20), 0x8, &(0x7f000017a000-0x8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00006e0000-0xa)='attr/prev\x00') 2018/02/06 13:57:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000e2c000)={0x0, 0x78, 0xfffffffffffffffd, 0x5, 0x8, 0x9f0, 0x0, 0x7fff, 0x8420, 0x1, 0x4, 0x9, 0x5, 0x6, 0x6, 0x0, 0xff, 0x8000, 0x0, 0xa0e, 0x1, 0x9, 0x2000200, 0x80000001, 0x1, 0x6, 0xe2, 0x0, 0x9, 0x2, 0xc01, 0x7, 0x1, 0x6, 0x8, 0x20, 0x5, 0x4e3, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f00000b8000-0x1), 0x3}, 0x20040, 0x1, 0x0, 0x4, 0x6, 0x1, 0x1}, 0xffffffffffffffff, 0xb5, 0xffffffffffffff9c, 0xa) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000f24000)='/selinux/context\x00', 0x2, 0x0) r1 = dup(r0) lseek(r1, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00008f7000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000e8f000)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000001000)={{0x3, 0x2, 0x80000001, 0x3, 0x7}, 0x8, 0x4}) write$sndseq(r2, &(0x7f0000e96000)=[{0xe075, 0x3, 0xd1c, 0xdd0e, @tick=0x8, {0x800, 0x100}, {0x7, 0xd30}, @time=@time}, {0x101, 0xfffffffffffffffc, 0x3, 0x892b, @tick=0x7e79, {0x3, 0x10001}, {0x6, 0x80000001}, @connect={{0x21, 0x8000}, {0x5, 0x7ff}}}, {0xd1, 0x5, 0x80000001, 0xff, @time={r3, r4+30000000}, {0xff, 0x5570}, {0x3, 0x401}, @raw32={[0xa8fa, 0x4, 0x8]}}, {0x8, 0x5, 0x0, 0x100, @tick, {0x8, 0x9}, {0x1, 0x3ff}, @quote={{0x25c7, 0x6}, 0x100000000, &(0x7f00005bf000)={0x1, 0x0, 0xffff, 0xf6, @time, {0x3ff, 0xcf9}, {0x10000}, @note={0x0, 0x2, 0x6, 0x200, 0x84}}}}, {0x7, 0xea8, 0x7, 0x3, @time={0x0, 0x1c9c380}, {0x2, 0x7}, {0xdf20, 0x80}, @raw8={"e0f6f6bd5695ae51cbd83208"}}], 0xf0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030f000-0x12)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000362000)=0xfffffffffffffffb, 0x3c7) write(r5, &(0x7f0000f0d000), 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f000099d000-0xc)={0xfffffffffffffff9, 0xfffffffffffffffc, 0x9, 0x8, 0x40, 0x1000}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000eff000)=0x3) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f000092e000-0x30)) ioctl$LOOP_CTL_ADD(r5, 0x4c81, 0x0) 2018/02/06 13:57:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000b28000-0xa)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000dac000-0x8)='./file0\x00', r0, &(0x7f000088c000)='./file0\x00') lremovexattr(&(0x7f0000b30000-0x10)='./control/file0\x00', &(0x7f000072c000-0x18)=@known='system.posix_acl_access\x00') 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000676000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000fe3000-0x4)=0x8bafe) read(r0, &(0x7f0000fe3000-0x1)=""/1, 0x1) read(r0, &(0x7f0000fd8000), 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000fde000)) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f000076a000-0xf1)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000498000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000008, &(0x7f0000aca000), 0x4) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000b07000)={&(0x7f0000eca000)=@vsock={0x0, 0x0, 0x0, @any}, 0x10, &(0x7f0000dce000)=[{&(0x7f0000306000-0x25)=""/37, 0x25}], 0x1}, 0x0) 2018/02/06 13:57:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x13, &(0x7f000078b000), 0x0) 2018/02/06 13:57:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x13, &(0x7f000078b000), 0x0) 2018/02/06 13:57:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x13, &(0x7f000078b000), 0x0) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f000076a000-0xf1)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000498000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000008, &(0x7f0000aca000), 0x4) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000b07000)={&(0x7f0000eca000)=@vsock={0x0, 0x0, 0x0, @any}, 0x10, &(0x7f0000dce000)=[{&(0x7f0000306000-0x25)=""/37, 0x25}], 0x1}, 0x0) 2018/02/06 13:57:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000e2c000)={0x0, 0x78, 0xfffffffffffffffd, 0x5, 0x8, 0x9f0, 0x0, 0x7fff, 0x8420, 0x1, 0x4, 0x9, 0x5, 0x6, 0x6, 0x0, 0xff, 0x8000, 0x0, 0xa0e, 0x1, 0x9, 0x2000200, 0x80000001, 0x1, 0x6, 0xe2, 0x0, 0x9, 0x2, 0xc01, 0x7, 0x1, 0x6, 0x8, 0x20, 0x5, 0x4e3, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f00000b8000-0x1), 0x3}, 0x20040, 0x1, 0x0, 0x4, 0x6, 0x1, 0x1}, 0xffffffffffffffff, 0xb5, 0xffffffffffffff9c, 0xa) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000f24000)='/selinux/context\x00', 0x2, 0x0) r1 = dup(r0) lseek(r1, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00008f7000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000e8f000)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000001000)={{0x3, 0x2, 0x80000001, 0x3, 0x7}, 0x8, 0x4}) write$sndseq(r2, &(0x7f0000e96000)=[{0xe075, 0x3, 0xd1c, 0xdd0e, @tick=0x8, {0x800, 0x100}, {0x7, 0xd30}, @time=@time}, {0x101, 0xfffffffffffffffc, 0x3, 0x892b, @tick=0x7e79, {0x3, 0x10001}, {0x6, 0x80000001}, @connect={{0x21, 0x8000}, {0x5, 0x7ff}}}, {0xd1, 0x5, 0x80000001, 0xff, @time={r3, r4+30000000}, {0xff, 0x5570}, {0x3, 0x401}, @raw32={[0xa8fa, 0x4, 0x8]}}, {0x8, 0x5, 0x0, 0x100, @tick, {0x8, 0x9}, {0x1, 0x3ff}, @quote={{0x25c7, 0x6}, 0x100000000, &(0x7f00005bf000)={0x1, 0x0, 0xffff, 0xf6, @time, {0x3ff, 0xcf9}, {0x10000}, @note={0x0, 0x2, 0x6, 0x200, 0x84}}}}, {0x7, 0xea8, 0x7, 0x3, @time={0x0, 0x1c9c380}, {0x2, 0x7}, {0xdf20, 0x80}, @raw8={"e0f6f6bd5695ae51cbd83208"}}], 0xf0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030f000-0x12)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000362000)=0xfffffffffffffffb, 0x3c7) write(r5, &(0x7f0000f0d000), 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f000099d000-0xc)={0xfffffffffffffff9, 0xfffffffffffffffc, 0x9, 0x8, 0x40, 0x1000}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000eff000)=0x3) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f000092e000-0x30)) ioctl$LOOP_CTL_ADD(r5, 0x4c81, 0x0) 2018/02/06 13:57:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f000076a000-0xf1)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000498000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000008, &(0x7f0000aca000), 0x4) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000b07000)={&(0x7f0000eca000)=@vsock={0x0, 0x0, 0x0, @any}, 0x10, &(0x7f0000dce000)=[{&(0x7f0000306000-0x25)=""/37, 0x25}], 0x1}, 0x0) 2018/02/06 13:57:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x13, &(0x7f000078b000), 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f000076a000-0xf1)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000498000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000008, &(0x7f0000aca000), 0x4) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000b07000)={&(0x7f0000eca000)=@vsock={0x0, 0x0, 0x0, @any}, 0x10, &(0x7f0000dce000)=[{&(0x7f0000306000-0x25)=""/37, 0x25}], 0x1}, 0x0) 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002000)='/selinux/policy\x00', 0x0, 0x0) read(r0, &(0x7f0000003000-0x52)=""/82, 0x52) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f000076a000-0xf1)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000498000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000008, &(0x7f0000aca000), 0x4) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000b07000)={&(0x7f0000eca000)=@vsock={0x0, 0x0, 0x0, @any}, 0x10, &(0x7f0000dce000)=[{&(0x7f0000306000-0x25)=""/37, 0x25}], 0x1}, 0x0) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000e2c000)={0x0, 0x78, 0xfffffffffffffffd, 0x5, 0x8, 0x9f0, 0x0, 0x7fff, 0x8420, 0x1, 0x4, 0x9, 0x5, 0x6, 0x6, 0x0, 0xff, 0x8000, 0x0, 0xa0e, 0x1, 0x9, 0x2000200, 0x80000001, 0x1, 0x6, 0xe2, 0x0, 0x9, 0x2, 0xc01, 0x7, 0x1, 0x6, 0x8, 0x20, 0x5, 0x4e3, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f00000b8000-0x1), 0x3}, 0x20040, 0x1, 0x0, 0x4, 0x6, 0x1, 0x1}, 0xffffffffffffffff, 0xb5, 0xffffffffffffff9c, 0xa) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000f24000)='/selinux/context\x00', 0x2, 0x0) r1 = dup(r0) lseek(r1, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00008f7000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000e8f000)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000001000)={{0x3, 0x2, 0x80000001, 0x3, 0x7}, 0x8, 0x4}) write$sndseq(r2, &(0x7f0000e96000)=[{0xe075, 0x3, 0xd1c, 0xdd0e, @tick=0x8, {0x800, 0x100}, {0x7, 0xd30}, @time=@time}, {0x101, 0xfffffffffffffffc, 0x3, 0x892b, @tick=0x7e79, {0x3, 0x10001}, {0x6, 0x80000001}, @connect={{0x21, 0x8000}, {0x5, 0x7ff}}}, {0xd1, 0x5, 0x80000001, 0xff, @time={r3, r4+30000000}, {0xff, 0x5570}, {0x3, 0x401}, @raw32={[0xa8fa, 0x4, 0x8]}}, {0x8, 0x5, 0x0, 0x100, @tick, {0x8, 0x9}, {0x1, 0x3ff}, @quote={{0x25c7, 0x6}, 0x100000000, &(0x7f00005bf000)={0x1, 0x0, 0xffff, 0xf6, @time, {0x3ff, 0xcf9}, {0x10000}, @note={0x0, 0x2, 0x6, 0x200, 0x84}}}}, {0x7, 0xea8, 0x7, 0x3, @time={0x0, 0x1c9c380}, {0x2, 0x7}, {0xdf20, 0x80}, @raw8={"e0f6f6bd5695ae51cbd83208"}}], 0xf0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030f000-0x12)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000362000)=0xfffffffffffffffb, 0x3c7) write(r5, &(0x7f0000f0d000), 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f000099d000-0xc)={0xfffffffffffffff9, 0xfffffffffffffffc, 0x9, 0x8, 0x40, 0x1000}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000eff000)=0x3) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f000092e000-0x30)) ioctl$LOOP_CTL_ADD(r5, 0x4c81, 0x0) 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002000)='/selinux/policy\x00', 0x0, 0x0) read(r0, &(0x7f0000003000-0x52)=""/82, 0x52) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f000076a000-0xf1)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000498000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000008, &(0x7f0000aca000), 0x4) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000b07000)={&(0x7f0000eca000)=@vsock={0x0, 0x0, 0x0, @any}, 0x10, &(0x7f0000dce000)=[{&(0x7f0000306000-0x25)=""/37, 0x25}], 0x1}, 0x0) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f000076a000-0xf1)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000498000-0x10)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000008, &(0x7f0000aca000), 0x4) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000b07000)={&(0x7f0000eca000)=@vsock={0x0, 0x0, 0x0, @any}, 0x10, &(0x7f0000dce000)=[{&(0x7f0000306000-0x25)=""/37, 0x25}], 0x1}, 0x0) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000e2c000)={0x0, 0x78, 0xfffffffffffffffd, 0x5, 0x8, 0x9f0, 0x0, 0x7fff, 0x8420, 0x1, 0x4, 0x9, 0x5, 0x6, 0x6, 0x0, 0xff, 0x8000, 0x0, 0xa0e, 0x1, 0x9, 0x2000200, 0x80000001, 0x1, 0x6, 0xe2, 0x0, 0x9, 0x2, 0xc01, 0x7, 0x1, 0x6, 0x8, 0x20, 0x5, 0x4e3, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f00000b8000-0x1), 0x3}, 0x20040, 0x1, 0x0, 0x4, 0x6, 0x1, 0x1}, 0xffffffffffffffff, 0xb5, 0xffffffffffffff9c, 0xa) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000f24000)='/selinux/context\x00', 0x2, 0x0) r1 = dup(r0) lseek(r1, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00008f7000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000e8f000)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000001000)={{0x3, 0x2, 0x80000001, 0x3, 0x7}, 0x8, 0x4}) write$sndseq(r2, &(0x7f0000e96000)=[{0xe075, 0x3, 0xd1c, 0xdd0e, @tick=0x8, {0x800, 0x100}, {0x7, 0xd30}, @time=@time}, {0x101, 0xfffffffffffffffc, 0x3, 0x892b, @tick=0x7e79, {0x3, 0x10001}, {0x6, 0x80000001}, @connect={{0x21, 0x8000}, {0x5, 0x7ff}}}, {0xd1, 0x5, 0x80000001, 0xff, @time={r3, r4+30000000}, {0xff, 0x5570}, {0x3, 0x401}, @raw32={[0xa8fa, 0x4, 0x8]}}, {0x8, 0x5, 0x0, 0x100, @tick, {0x8, 0x9}, {0x1, 0x3ff}, @quote={{0x25c7, 0x6}, 0x100000000, &(0x7f00005bf000)={0x1, 0x0, 0xffff, 0xf6, @time, {0x3ff, 0xcf9}, {0x10000}, @note={0x0, 0x2, 0x6, 0x200, 0x84}}}}, {0x7, 0xea8, 0x7, 0x3, @time={0x0, 0x1c9c380}, {0x2, 0x7}, {0xdf20, 0x80}, @raw8={"e0f6f6bd5695ae51cbd83208"}}], 0xf0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030f000-0x12)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000362000)=0xfffffffffffffffb, 0x3c7) write(r5, &(0x7f0000f0d000), 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f000099d000-0xc)={0xfffffffffffffff9, 0xfffffffffffffffc, 0x9, 0x8, 0x40, 0x1000}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000eff000)=0x3) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f000092e000-0x30)) ioctl$LOOP_CTL_ADD(r5, 0x4c81, 0x0) 2018/02/06 13:57:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000a8d000)={&(0x7f0000e4e000)={0x10}, 0xc, &(0x7f0000011000)={&(0x7f00005d5000)=@updsa={0x104, 0x1a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, {@in6=@empty, 0x1, 0x2b}, @in=@multicast2=0xe0000002, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@coaddr={0x14, 0xe, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}]}, 0x104}, 0x1}, 0x0) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000f91000/0xa000)=nil, 0xa000, 0x0, 0x0, r0, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000010, 0x2, 0x0) write(r0, &(0x7f0000252000+0xb54)="240000001a0009ffeecd0300e9ff000001fff5006c03050000401d0000ab2af9161790cf", 0x24) 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002000)='/selinux/policy\x00', 0x0, 0x0) read(r0, &(0x7f0000003000-0x52)=""/82, 0x52) 2018/02/06 13:57:21 executing program 7: mmap(&(0x7f0000000000/0x21000)=nil, 0x21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007f00082d1cb2a4a280930206620100a84309000000000000000503000149dc50ca8a9848a3c728f1c46b7b31afdc0938d54400009b84136f075afb83de448daa7f000000b8220000bf0cec6b1391d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/06 13:57:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000ad4000-0x4), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) open$dir(&(0x7f0000e13000-0x8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0x2b000)=nil, 0x2b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f000001a000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f0000001000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x401054d5, &(0x7f000002a000)) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000010, 0x2, 0x0) write(r0, &(0x7f0000252000+0xb54)="240000001a0009ffeecd0300e9ff000001fff5006c03050000401d0000ab2af9161790cf", 0x24) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0x2b000)=nil, 0x2b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f000001a000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f0000001000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x401054d5, &(0x7f000002a000)) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000f91000/0xa000)=nil, 0xa000, 0x0, 0x0, r0, 0x0) [ 46.676874] mip6: mip6_rthdr_init_state: spi is not 0: 3540254720 [ 46.694278] mip6: mip6_rthdr_init_state: spi is not 0: 3540254720 2018/02/06 13:57:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000a8d000)={&(0x7f0000e4e000)={0x10}, 0xc, &(0x7f0000011000)={&(0x7f00005d5000)=@updsa={0x104, 0x1a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, {@in6=@empty, 0x1, 0x2b}, @in=@multicast2=0xe0000002, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@coaddr={0x14, 0xe, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}]}, 0x104}, 0x1}, 0x0) 2018/02/06 13:57:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000010, 0x2, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000202000)) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000f91000/0xa000)=nil, 0xa000, 0x0, 0x0, r0, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000010, 0x2, 0x0) write(r0, &(0x7f0000252000+0xb54)="240000001a0009ffeecd0300e9ff000001fff5006c03050000401d0000ab2af9161790cf", 0x24) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0x2b000)=nil, 0x2b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f000001a000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f0000001000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x401054d5, &(0x7f000002a000)) 2018/02/06 13:57:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a91000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) close(r0) sendmsg$unix(r1, &(0x7f00008eb000)={&(0x7f0000072000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000c9e000-0x50)=[]}, 0x0) 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002000)='/selinux/policy\x00', 0x0, 0x0) read(r0, &(0x7f0000003000-0x52)=""/82, 0x52) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f000046f000-0x10)=[{&(0x7f00000e9000)='4', 0x1}], 0x1) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000010, 0x2, 0x0) write(r0, &(0x7f0000252000+0xb54)="240000001a0009ffeecd0300e9ff000001fff5006c03050000401d0000ab2af9161790cf", 0x24) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0x2b000)=nil, 0x2b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f000001a000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f0000001000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x401054d5, &(0x7f000002a000)) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000a000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000f91000/0xa000)=nil, 0xa000, 0x0, 0x0, r0, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd28000)=nil, 0xd28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000d28000-0x4), 0x14) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f000046f000-0x10)=[{&(0x7f00000e9000)='4', 0x1}], 0x1) 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f000046f000-0x10)=[{&(0x7f00000e9000)='4', 0x1}], 0x1) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000ae4000-0x16)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x2fc) 2018/02/06 13:57:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x1, 0x800000000006, 0x0, &(0x7f00003b7000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0xffffffffffffffff, 0x400000006, 0x0, &(0x7f0000e6e000), &(0x7f0000061000-0x4), 0x0) 2018/02/06 13:57:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000a8d000)={&(0x7f0000e4e000)={0x10}, 0xc, &(0x7f0000011000)={&(0x7f00005d5000)=@updsa={0x104, 0x1a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, {@in6=@empty, 0x1, 0x2b}, @in=@multicast2=0xe0000002, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@coaddr={0x14, 0xe, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}]}, 0x104}, 0x1}, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd28000)=nil, 0xd28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000d28000-0x4), 0x14) [ 46.776655] mip6: mip6_rthdr_init_state: spi is not 0: 3540254720 2018/02/06 13:57:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a91000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) close(r0) sendmsg$unix(r1, &(0x7f00008eb000)={&(0x7f0000072000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000c9e000-0x50)=[]}, 0x0) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f000046f000-0x10)=[{&(0x7f00000e9000)='4', 0x1}], 0x1) 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f000046f000-0x10)=[{&(0x7f00000e9000)='4', 0x1}], 0x1) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x44000)=nil, 0x44000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0x2d}, {0x6, 0x0, 0x0, 0xffffffff}]}) times(&(0x7f0000043000-0x20)) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd28000)=nil, 0xd28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000d28000-0x4), 0x14) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000ae4000-0x16)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x2fc) 2018/02/06 13:57:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x1, 0x800000000006, 0x0, &(0x7f00003b7000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0xffffffffffffffff, 0x400000006, 0x0, &(0x7f0000e6e000), &(0x7f0000061000-0x4), 0x0) 2018/02/06 13:57:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000a8d000)={&(0x7f0000e4e000)={0x10}, 0xc, &(0x7f0000011000)={&(0x7f00005d5000)=@updsa={0x104, 0x1a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, {@in6=@empty, 0x1, 0x2b}, @in=@multicast2=0xe0000002, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@coaddr={0x14, 0xe, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}]}, 0x104}, 0x1}, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd28000)=nil, 0xd28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000d28000-0x4), 0x14) [ 46.838524] mip6: mip6_rthdr_init_state: spi is not 0: 3540254720 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x44000)=nil, 0x44000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0x2d}, {0x6, 0x0, 0x0, 0xffffffff}]}) times(&(0x7f0000043000-0x20)) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000ae4000-0x16)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x2fc) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f000046f000-0x10)=[{&(0x7f00000e9000)='4', 0x1}], 0x1) 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f000046f000-0x10)=[{&(0x7f00000e9000)='4', 0x1}], 0x1) 2018/02/06 13:57:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a91000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) close(r0) sendmsg$unix(r1, &(0x7f00008eb000)={&(0x7f0000072000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000c9e000-0x50)=[]}, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000ae4000-0x16)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x2fc) 2018/02/06 13:57:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x1, 0x800000000006, 0x0, &(0x7f00003b7000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0xffffffffffffffff, 0x400000006, 0x0, &(0x7f0000e6e000), &(0x7f0000061000-0x4), 0x0) 2018/02/06 13:57:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a91000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) close(r0) sendmsg$unix(r1, &(0x7f00008eb000)={&(0x7f0000072000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000c9e000-0x50)=[]}, 0x0) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x44000)=nil, 0x44000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0x2d}, {0x6, 0x0, 0x0, 0xffffffff}]}) times(&(0x7f0000043000-0x20)) [ 46.893820] mip6: mip6_rthdr_init_state: spi is not 0: 3540254720 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d5d000-0xf)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_open_dev$tun(&(0x7f0000b64000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00007c8000-0x6)={0x0, 0x52f}, &(0x7f0000848000-0x4)=0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00004ce000-0x8)={r5, 0x47e9a96e}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @empty}}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00001c4000)=@generic="f62695af9f75ad2f3c09653636d6e843") r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000f5b000), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) accept$inet6(0xffffffffffffffff, &(0x7f0000a7d000)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f000067e000)=0x1c) prctl$intptr(0x0, 0x5) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000ae4000-0x16)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x2fc) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x0) pwritev(r0, &(0x7f000001a000-0x60)=[{&(0x7f0000006000-0xc)="b3", 0x1}], 0x1, 0x0) lseek(r0, 0x0, 0x3) 2018/02/06 13:57:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a91000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) close(r0) sendmsg$unix(r1, &(0x7f00008eb000)={&(0x7f0000072000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000c9e000-0x50)=[]}, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000ae4000-0x16)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x2fc) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x44000)=nil, 0x44000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0x2d}, {0x6, 0x0, 0x0, 0xffffffff}]}) times(&(0x7f0000043000-0x20)) 2018/02/06 13:57:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a91000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) close(r0) sendmsg$unix(r1, &(0x7f00008eb000)={&(0x7f0000072000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000c9e000-0x50)=[]}, 0x0) 2018/02/06 13:57:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000ae4000-0x16)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x2fc) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x418403, 0x0) 2018/02/06 13:57:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x1, 0x800000000006, 0x0, &(0x7f00003b7000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0xffffffffffffffff, 0x400000006, 0x0, &(0x7f0000e6e000), &(0x7f0000061000-0x4), 0x0) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x0) pwritev(r0, &(0x7f000001a000-0x60)=[{&(0x7f0000006000-0xc)="b3", 0x1}], 0x1, 0x0) lseek(r0, 0x0, 0x3) 2018/02/06 13:57:21 executing program 7: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ff7000)=0x1, 0x4) recvfrom(r0, &(0x7f0000d32000), 0x0, 0x0, &(0x7f0000bfd000-0x8)=@sco={0x1f}, 0x8) 2018/02/06 13:57:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d5d000-0xf)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_open_dev$tun(&(0x7f0000b64000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00007c8000-0x6)={0x0, 0x52f}, &(0x7f0000848000-0x4)=0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00004ce000-0x8)={r5, 0x47e9a96e}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @empty}}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00001c4000)=@generic="f62695af9f75ad2f3c09653636d6e843") r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000f5b000), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) accept$inet6(0xffffffffffffffff, &(0x7f0000a7d000)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f000067e000)=0x1c) prctl$intptr(0x0, 0x5) 2018/02/06 13:57:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a91000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) close(r0) sendmsg$unix(r1, &(0x7f00008eb000)={&(0x7f0000072000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000c9e000-0x50)=[]}, 0x0) 2018/02/06 13:57:21 executing program 7: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ff7000)=0x1, 0x4) recvfrom(r0, &(0x7f0000d32000), 0x0, 0x0, &(0x7f0000bfd000-0x8)=@sco={0x1f}, 0x8) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x418403, 0x0) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x0) pwritev(r0, &(0x7f000001a000-0x60)=[{&(0x7f0000006000-0xc)="b3", 0x1}], 0x1, 0x0) lseek(r0, 0x0, 0x3) 2018/02/06 13:57:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d5d000-0xf)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_open_dev$tun(&(0x7f0000b64000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00007c8000-0x6)={0x0, 0x52f}, &(0x7f0000848000-0x4)=0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00004ce000-0x8)={r5, 0x47e9a96e}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @empty}}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00001c4000)=@generic="f62695af9f75ad2f3c09653636d6e843") r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000f5b000), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) accept$inet6(0xffffffffffffffff, &(0x7f0000a7d000)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f000067e000)=0x1c) prctl$intptr(0x0, 0x5) 2018/02/06 13:57:21 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x418403, 0x0) 2018/02/06 13:57:21 executing program 4: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x0) pwritev(r0, &(0x7f000001a000-0x60)=[{&(0x7f0000006000-0xc)="b3", 0x1}], 0x1, 0x0) lseek(r0, 0x0, 0x3) 2018/02/06 13:57:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d5d000-0xf)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_open_dev$tun(&(0x7f0000b64000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00007c8000-0x6)={0x0, 0x52f}, &(0x7f0000848000-0x4)=0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00004ce000-0x8)={r5, 0x47e9a96e}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @empty}}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00001c4000)=@generic="f62695af9f75ad2f3c09653636d6e843") r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000f5b000), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) accept$inet6(0xffffffffffffffff, &(0x7f0000a7d000)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f000067e000)=0x1c) prctl$intptr(0x0, 0x5) 2018/02/06 13:57:22 executing program 0: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0xffffffffb0c9423a, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x418403, 0x0) 2018/02/06 13:57:22 executing program 7: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ff7000)=0x1, 0x4) recvfrom(r0, &(0x7f0000d32000), 0x0, 0x0, &(0x7f0000bfd000-0x8)=@sco={0x1f}, 0x8) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00003f1000)='/dev/loop#\x00', 0x0, 0x4000000000102) ioctl(r0, 0x440000000000127f, &(0x7f0000ebe000-0x92)="8b") 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000c35000-0x24)) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000c53000-0x4), &(0x7f00007ef000)=0x4) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000)="6a7270cea37b3dea80c9a269e02a303312cce349a944d450af41072cda6ab522f2fd4593d3352b2fcdebc8a7d718a7031372c41eb9d5929e8f7bc9dc9101b9bbbddb1f048938b501ca4ee03d2cccfb240827e9b8e5fe0851", 0x58) 2018/02/06 13:57:22 executing program 0: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0xffffffffb0c9423a, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/06 13:57:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d5d000-0xf)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_open_dev$tun(&(0x7f0000b64000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00007c8000-0x6)={0x0, 0x52f}, &(0x7f0000848000-0x4)=0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00004ce000-0x8)={r5, 0x47e9a96e}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @empty}}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00001c4000)=@generic="f62695af9f75ad2f3c09653636d6e843") r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000f5b000), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) accept$inet6(0xffffffffffffffff, &(0x7f0000a7d000)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f000067e000)=0x1c) prctl$intptr(0x0, 0x5) 2018/02/06 13:57:22 executing program 7: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ff7000)=0x1, 0x4) recvfrom(r0, &(0x7f0000d32000), 0x0, 0x0, &(0x7f0000bfd000-0x8)=@sco={0x1f}, 0x8) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000c35000-0x24)) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000c53000-0x4), &(0x7f00007ef000)=0x4) 2018/02/06 13:57:22 executing program 0: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0xffffffffb0c9423a, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000)="6a7270cea37b3dea80c9a269e02a303312cce349a944d450af41072cda6ab522f2fd4593d3352b2fcdebc8a7d718a7031372c41eb9d5929e8f7bc9dc9101b9bbbddb1f048938b501ca4ee03d2cccfb240827e9b8e5fe0851", 0x58) 2018/02/06 13:57:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d5d000-0xf)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_open_dev$tun(&(0x7f0000b64000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00007c8000-0x6)={0x0, 0x52f}, &(0x7f0000848000-0x4)=0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00004ce000-0x8)={r5, 0x47e9a96e}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @empty}}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00001c4000)=@generic="f62695af9f75ad2f3c09653636d6e843") r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000f5b000), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) accept$inet6(0xffffffffffffffff, &(0x7f0000a7d000)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f000067e000)=0x1c) prctl$intptr(0x0, 0x5) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0xffffffffb0c9423a, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000c35000-0x24)) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000c53000-0x4), &(0x7f00007ef000)=0x4) 2018/02/06 13:57:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000301000-0x40)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000)="6a7270cea37b3dea80c9a269e02a303312cce349a944d450af41072cda6ab522f2fd4593d3352b2fcdebc8a7d718a7031372c41eb9d5929e8f7bc9dc9101b9bbbddb1f048938b501ca4ee03d2cccfb240827e9b8e5fe0851", 0x58) 2018/02/06 13:57:22 executing program 0: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0xffffffffb0c9423a, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/06 13:57:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d5d000-0xf)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_open_dev$tun(&(0x7f0000b64000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00007c8000-0x6)={0x0, 0x52f}, &(0x7f0000848000-0x4)=0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00004ce000-0x8)={r5, 0x47e9a96e}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @empty}}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00001c4000)=@generic="f62695af9f75ad2f3c09653636d6e843") r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000f5b000), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) accept$inet6(0xffffffffffffffff, &(0x7f0000a7d000)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f000067e000)=0x1c) prctl$intptr(0x0, 0x5) 2018/02/06 13:57:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d5d000-0xf)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_open_dev$tun(&(0x7f0000b64000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00007c8000-0x6)={0x0, 0x52f}, &(0x7f0000848000-0x4)=0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00004ce000-0x8)={r5, 0x47e9a96e}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @empty}}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00001c4000)=@generic="f62695af9f75ad2f3c09653636d6e843") r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000f5b000), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) accept$inet6(0xffffffffffffffff, &(0x7f0000a7d000)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f000067e000)=0x1c) prctl$intptr(0x0, 0x5) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0xffffffffb0c9423a, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/06 13:57:22 executing program 0: mmap(&(0x7f0000000000/0xef7000)=nil, 0xef7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000ef5000)={0x0, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x2, 0xffffffffffffffff, @loopback=0x7f000001}, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x104, 0x0, 0x0, 0x0, 0x0, &(0x7f0000985000)=@syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000c35000-0x24)) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000c53000-0x4), &(0x7f00007ef000)=0x4) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000)="6a7270cea37b3dea80c9a269e02a303312cce349a944d450af41072cda6ab522f2fd4593d3352b2fcdebc8a7d718a7031372c41eb9d5929e8f7bc9dc9101b9bbbddb1f048938b501ca4ee03d2cccfb240827e9b8e5fe0851", 0x58) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0xffffffffb0c9423a, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000a7b000-0xf)='/dev/sequencer\x00', 0x801, 0x0) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x3, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x30) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000ca000-0xf)='/dev/sequencer\x00', 0x40000a02, 0x0) write$sndseq(r0, &(0x7f000005b000-0x1b0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x5, 0xffffffff7fffffff}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue={0x0, {0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {}, @result}], 0x90) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000e02000-0x8)='./file0\x00', &(0x7f00003a2000-0x1000)=""/4096, 0x1000) epoll_create(0x0) ppoll(&(0x7f0000a18000)=[], 0x0, &(0x7f000071d000), &(0x7f0000e33000), 0x8) mount(&(0x7f0000a39000-0x8)='./file0\x00', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/06 13:57:22 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) exit(0x0) syz_open_procfs(r0, &(0x7f0000012000)='ns/cgroup\x00') 2018/02/06 13:57:22 executing program 1: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000009000-0x7)='task\x00') execveat(r0, &(0x7f0000019000-0x8)='./file0\x00', &(0x7f0000018000-0x10)=[&(0x7f0000019000-0x13)='&&GPL!vmnet1*{{[+(\x00'], &(0x7f0000015000-0x18)=[], 0x0) 2018/02/06 13:57:22 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000081d000-0xa)='attr/prev\x00') lseek(r0, 0x0, 0x3) 2018/02/06 13:57:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d5d000-0xf)='/dev/sequencer\x00', 0x200, 0x0) r2 = syz_open_dev$tun(&(0x7f0000b64000)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000db4000-0x28)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00007c8000-0x6)={0x0, 0x52f}, &(0x7f0000848000-0x4)=0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00004ce000-0x8)={r5, 0x47e9a96e}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0x0, @empty}}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00001c4000)=@generic="f62695af9f75ad2f3c09653636d6e843") r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000f5b000), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) accept$inet6(0xffffffffffffffff, &(0x7f0000a7d000)={0x0, 0xffffffffffffffff, 0x0, @mcast2}, &(0x7f000067e000)=0x1c) prctl$intptr(0x0, 0x5) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000a7b000-0xf)='/dev/sequencer\x00', 0x801, 0x0) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x3, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x30) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000ca000-0xf)='/dev/sequencer\x00', 0x40000a02, 0x0) write$sndseq(r0, &(0x7f000005b000-0x1b0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x5, 0xffffffff7fffffff}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue={0x0, {0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {}, @result}], 0x90) 2018/02/06 13:57:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000301000-0x40)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d81000-0x6d)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f0000318000-0x8)=0xf, 0x400000ff) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000a7b000-0xf)='/dev/sequencer\x00', 0x801, 0x0) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x3, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x30) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000ca000-0xf)='/dev/sequencer\x00', 0x40000a02, 0x0) write$sndseq(r0, &(0x7f000005b000-0x1b0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x5, 0xffffffff7fffffff}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue={0x0, {0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {}, @result}], 0x90) 2018/02/06 13:57:22 executing program 1: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000009000-0x7)='task\x00') execveat(r0, &(0x7f0000019000-0x8)='./file0\x00', &(0x7f0000018000-0x10)=[&(0x7f0000019000-0x13)='&&GPL!vmnet1*{{[+(\x00'], &(0x7f0000015000-0x18)=[], 0x0) 2018/02/06 13:57:22 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000081d000-0xa)='attr/prev\x00') lseek(r0, 0x0, 0x3) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000a7b000-0xf)='/dev/sequencer\x00', 0x801, 0x0) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x3, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x30) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d81000-0x6d)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f0000318000-0x8)=0xf, 0x400000ff) 2018/02/06 13:57:22 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000081d000-0xa)='attr/prev\x00') lseek(r0, 0x0, 0x3) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d81000-0x6d)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f0000318000-0x8)=0xf, 0x400000ff) 2018/02/06 13:57:22 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) exit(0x0) syz_open_procfs(r0, &(0x7f0000012000)='ns/cgroup\x00') 2018/02/06 13:57:22 executing program 6: prctl$intptr(0x1e, 0x0) 2018/02/06 13:57:22 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000081d000-0xa)='attr/prev\x00') lseek(r0, 0x0, 0x3) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000ca000-0xf)='/dev/sequencer\x00', 0x40000a02, 0x0) write$sndseq(r0, &(0x7f000005b000-0x1b0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x5, 0xffffffff7fffffff}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue={0x0, {0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {}, @result}], 0x90) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d81000-0x6d)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f0000318000-0x8)=0xf, 0x400000ff) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d81000-0x6d)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f0000318000-0x8)=0xf, 0x400000ff) 2018/02/06 13:57:22 executing program 1: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000009000-0x7)='task\x00') execveat(r0, &(0x7f0000019000-0x8)='./file0\x00', &(0x7f0000018000-0x10)=[&(0x7f0000019000-0x13)='&&GPL!vmnet1*{{[+(\x00'], &(0x7f0000015000-0x18)=[], 0x0) 2018/02/06 13:57:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000301000-0x40)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/02/06 13:57:22 executing program 6: prctl$intptr(0x1e, 0x0) 2018/02/06 13:57:22 executing program 1: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000009000-0x7)='task\x00') execveat(r0, &(0x7f0000019000-0x8)='./file0\x00', &(0x7f0000018000-0x10)=[&(0x7f0000019000-0x13)='&&GPL!vmnet1*{{[+(\x00'], &(0x7f0000015000-0x18)=[], 0x0) 2018/02/06 13:57:22 executing program 0: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) exit(0x0) syz_open_procfs(r0, &(0x7f0000012000)='ns/cgroup\x00') 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d81000-0x6d)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f0000318000-0x8)=0xf, 0x400000ff) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d81000-0x6d)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f0000318000-0x8)=0xf, 0x400000ff) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000fd1000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000ddd000)) 2018/02/06 13:57:22 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095c000-0x4), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000ff5000-0x10)={0x0, &(0x7f0000623000)=[]}, 0x10) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x1e4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00001b1000-0x290)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x1, 0x0, []}, 0x90) 2018/02/06 13:57:22 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) exit(0x0) syz_open_procfs(r0, &(0x7f0000012000)='ns/cgroup\x00') 2018/02/06 13:57:22 executing program 0: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) exit(0x0) syz_open_procfs(r0, &(0x7f0000012000)='ns/cgroup\x00') 2018/02/06 13:57:22 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095c000-0x4), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000ff5000-0x10)={0x0, &(0x7f0000623000)=[]}, 0x10) 2018/02/06 13:57:22 executing program 6: prctl$intptr(0x1e, 0x0) 2018/02/06 13:57:22 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigtimedwait(&(0x7f0000012000-0x8), &(0x7f0000001000), &(0x7f0000001000)={0x0, 0x989680}, 0x8) mq_open(&(0x7f0000002000-0x1d)='eth1vmnet0selinux:GPLselinux\x00', 0x0, 0x0, &(0x7f0000013000-0x40)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x1e4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00001b1000-0x290)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x1, 0x0, []}, 0x90) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000fd1000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000ddd000)) 2018/02/06 13:57:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000301000-0x40)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000fd1000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000ddd000)) 2018/02/06 13:57:22 executing program 6: prctl$intptr(0x1e, 0x0) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x1e4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00001b1000-0x290)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x1, 0x0, []}, 0x90) 2018/02/06 13:57:22 executing program 6: mmap(&(0x7f0000000000/0xef2000)=nil, 0xef2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f000023e000), 0x0, 0x0, &(0x7f0000515000-0x10)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7527, 0x4) r1 = dup2(r0, r0) recvfrom$llc(r1, &(0x7f0000626000-0x79), 0x0, 0x2000, &(0x7f0000b98000-0x10)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb], 0x0}}, 0x10) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000fd1000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000ddd000)) 2018/02/06 13:57:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x3}, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x3}, 0x4) sendto$inet(r2, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/06 13:57:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x1e4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00001b1000-0x290)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x1, 0x0, []}, 0x90) 2018/02/06 13:57:22 executing program 6: mmap(&(0x7f0000000000/0xef2000)=nil, 0xef2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f000023e000), 0x0, 0x0, &(0x7f0000515000-0x10)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7527, 0x4) r1 = dup2(r0, r0) recvfrom$llc(r1, &(0x7f0000626000-0x79), 0x0, 0x2000, &(0x7f0000b98000-0x10)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb], 0x0}}, 0x10) [ 47.982325] net_ratelimit: 10 callbacks suppressed [ 47.982330] IPv4: Oversized IP packet from 127.0.0.1 [ 48.004199] FAULT_FLAG_ALLOW_RETRY missing 30 [ 48.008846] CPU: 0 PID: 9971 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 48.016366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.025698] ffff8801d4b578d0 ffffffff81d94b69 ffff8801d4b57bb0 0000000000000000 [ 48.033699] ffff8801ce729010 ffff8801d4b57aa0 ffff8801ce728f00 ffff8801d4b57ac8 [ 48.041689] ffffffff816624ba 0000000000001244 ffff8801c410e8f0 ffff8801c410e8a0 [ 48.049653] Call Trace: [ 48.052216] [] dump_stack+0xc1/0x128 [ 48.057559] [] handle_userfault+0xa3a/0x1310 [ 48.063605] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 48.070602] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 48.076994] [] ? handle_mm_fault+0x117b/0x2530 [ 48.083196] [] ? handle_mm_fault+0x1fc3/0x2530 [ 48.089397] [] handle_mm_fault+0x1fd1/0x2530 [ 48.095425] [] ? __pmd_alloc+0x410/0x410 [ 48.101105] [] __do_page_fault+0x5c2/0xd40 [ 48.106964] [] ? mm_fault_error+0x2c0/0x2c0 [ 48.112993] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.119638] [] do_page_fault+0x27/0x30 [ 48.125155] [] page_fault+0x28/0x30 [ 48.130403] [] ? copy_user_enhanced_fast_string+0xe/0x20 [ 48.137648] [] ? SyS_mq_open+0x18c/0x940 [ 48.143343] [] ? __fget+0x201/0x3a0 [ 48.148599] [] ? mqueue_evict_inode+0x670/0x670 [ 48.154899] [] ? __fget+0x228/0x3a0 [ 48.160146] [] ? __fget+0x47/0x3a0 [ 48.165312] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 48.171963] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 48.178780] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 48.185329] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 48.229254] FAULT_FLAG_ALLOW_RETRY missing 30 [ 48.229257] FAULT_FLAG_ALLOW_RETRY missing 30 [ 48.229270] CPU: 0 PID: 9971 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 48.229275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.229285] ffff8801d4b578d0 ffffffff81d94b69 ffff8801d4b57bb0 0000000000000000 [ 48.229292] ffff8801ce729190 ffff8801d4b57aa0 ffff8801ce729080 ffff8801d4b57ac8 [ 48.229299] ffffffff816624ba 0000000000001244 ffff8801c410e8f0 ffff8801c410e8a0 [ 48.229301] Call Trace: [ 48.229315] [] dump_stack+0xc1/0x128 [ 48.229326] [] handle_userfault+0xa3a/0x1310 [ 48.229339] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 48.229350] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 48.229360] [] ? refill_pi_state_cache.part.7+0x200/0x200 [ 48.229370] [] ? handle_mm_fault+0x117b/0x2530 [ 48.229377] [] ? handle_mm_fault+0x1fc3/0x2530 [ 48.229386] [] handle_mm_fault+0x1fd1/0x2530 [ 48.229392] [] ? __pmd_alloc+0x410/0x410 [ 48.229403] [] __do_page_fault+0x5c2/0xd40 [ 48.229411] [] ? mm_fault_error+0x2c0/0x2c0 [ 48.229419] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.229427] [] do_page_fault+0x27/0x30 [ 48.229435] [] page_fault+0x28/0x30 [ 48.229443] [] ? copy_user_enhanced_fast_string+0xe/0x20 [ 48.229452] [] ? SyS_mq_open+0x18c/0x940 [ 48.229460] [] ? vma_is_stack_for_current+0xa0/0xa0 [ 48.229469] [] ? mqueue_evict_inode+0x670/0x670 [ 48.229476] [] ? do_futex+0x15c0/0x15c0 [ 48.229483] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 48.229491] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 48.229498] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 48.229505] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 48.424183] CPU: 1 PID: 9957 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 48.432202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.441529] ffff8801c42af860 ffffffff81d94b69 ffff8801c42afb40 0000000000000000 [ 48.449495] ffff8801ce729190 ffff8801c42afa30 ffff8801ce729080 ffff8801c42afa58 [ 48.458160] ffffffff816624ba 0000000000001244 ffff8801d77108f0 ffff8801d77108a0 [ 48.466127] Call Trace: [ 48.468689] [] dump_stack+0xc1/0x128 [ 48.474026] [] handle_userfault+0xa3a/0x1310 [ 48.480056] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 48.487048] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 48.493423] [] ? get_user_pages_fast+0x2cb/0x320 [ 48.499796] [] ? handle_mm_fault+0x117b/0x2530 [ 48.505997] [] ? handle_mm_fault+0x1fc3/0x2530 [ 48.512205] [] handle_mm_fault+0x1fd1/0x2530 [ 48.518229] [] ? __pmd_alloc+0x410/0x410 [ 48.523914] [] __do_page_fault+0x5c2/0xd40 [ 48.529766] [] ? mm_fault_error+0x2c0/0x2c0 [ 48.535710] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.542345] [] do_page_fault+0x27/0x30 [ 48.547851] [] page_fault+0x28/0x30 [ 48.553105] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 48.559916] [] ? SYSC_rt_sigtimedwait+0xed/0x230 [ 48.566292] [] ? do_sigtimedwait+0x7a0/0x7a0 [ 48.572319] [] ? ioctl_preallocate+0x220/0x220 2018/02/06 13:57:23 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) exit(0x0) syz_open_procfs(r0, &(0x7f0000012000)='ns/cgroup\x00') 2018/02/06 13:57:23 executing program 0: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) exit(0x0) syz_open_procfs(r0, &(0x7f0000012000)='ns/cgroup\x00') 2018/02/06 13:57:23 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigtimedwait(&(0x7f0000012000-0x8), &(0x7f0000001000), &(0x7f0000001000)={0x0, 0x989680}, 0x8) mq_open(&(0x7f0000002000-0x1d)='eth1vmnet0selinux:GPLselinux\x00', 0x0, 0x0, &(0x7f0000013000-0x40)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x3}, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x3}, 0x4) sendto$inet(r2, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/06 13:57:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00005a4000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000f74000-0x10)={0x0, 0x0}) ppoll(&(0x7f000004f000-0x40)=[{r0, 0x1301}, {r1}], 0x2, &(0x7f000005b000+0xd56)={0x0, r3+10000000}, &(0x7f000005b000), 0x8) timer_settime(0x0, 0x0, &(0x7f000020b000-0x20)={{}, {0x0, 0x9}}, &(0x7f0000002000-0x20)) 2018/02/06 13:57:23 executing program 6: mmap(&(0x7f0000000000/0xef2000)=nil, 0xef2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f000023e000), 0x0, 0x0, &(0x7f0000515000-0x10)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7527, 0x4) r1 = dup2(r0, r0) recvfrom$llc(r1, &(0x7f0000626000-0x79), 0x0, 0x2000, &(0x7f0000b98000-0x10)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb], 0x0}}, 0x10) 2018/02/06 13:57:23 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095c000-0x4), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000ff5000-0x10)={0x0, &(0x7f0000623000)=[]}, 0x10) 2018/02/06 13:57:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00009d1000)={@random="d76c380c000e", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @empty, {[], @udp={0x3, 0xffffffffffffffff, 0x8}}}}}}, 0x0) 2018/02/06 13:57:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00009d1000)={@random="d76c380c000e", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @empty, {[], @udp={0x3, 0xffffffffffffffff, 0x8}}}}}}, 0x0) [ 48.578521] [] ? selinux_file_ioctl+0x355/0x530 [ 48.584808] [] ? selinux_capable+0x40/0x40 [ 48.590662] [] ? SyS_futex+0x22e/0x2d0 [ 48.596165] [] ? do_futex+0x15c0/0x15c0 [ 48.601760] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 48.608396] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 48.615203] [] SyS_rt_sigtimedwait+0x2d/0x40 [ 48.621233] [] entry_SYSCALL_64_fastpath+0x29/0xe8 2018/02/06 13:57:23 executing program 6: mmap(&(0x7f0000000000/0xef2000)=nil, 0xef2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f000023e000), 0x0, 0x0, &(0x7f0000515000-0x10)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7527, 0x4) r1 = dup2(r0, r0) recvfrom$llc(r1, &(0x7f0000626000-0x79), 0x0, 0x2000, &(0x7f0000b98000-0x10)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb], 0x0}}, 0x10) 2018/02/06 13:57:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00009d1000)={@random="d76c380c000e", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @empty, {[], @udp={0x3, 0xffffffffffffffff, 0x8}}}}}}, 0x0) 2018/02/06 13:57:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00009d1000)={@random="d76c380c000e", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @empty, {[], @udp={0x3, 0xffffffffffffffff, 0x8}}}}}}, 0x0) 2018/02/06 13:57:23 executing program 6: mmap(&(0x7f0000000000/0x1e000)=nil, 0x1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f000001c000)="cf2a48c3f4e3e88efc4a3926fe01c76a09ee51fbbb21b7027be323ff9befc36908983be667a68f1ec5e4", 0x2a, 0x0, &(0x7f0000008000-0x10)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000009000)={@common='sit0\x00', @ifru_data=&(0x7f000001c000)="6b6be7000000007000b400a472ca66f3000000ef0002000000000000cb9d3cb0"}) 2018/02/06 13:57:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000e000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) poll(&(0x7f00000ea000-0x30)=[{r1}], 0x1, 0x0) 2018/02/06 13:57:23 executing program 6: mmap(&(0x7f0000000000/0x1e000)=nil, 0x1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f000001c000)="cf2a48c3f4e3e88efc4a3926fe01c76a09ee51fbbb21b7027be323ff9befc36908983be667a68f1ec5e4", 0x2a, 0x0, &(0x7f0000008000-0x10)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000009000)={@common='sit0\x00', @ifru_data=&(0x7f000001c000)="6b6be7000000007000b400a472ca66f3000000ef0002000000000000cb9d3cb0"}) 2018/02/06 13:57:23 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095c000-0x4), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000ff5000-0x10)={0x0, &(0x7f0000623000)=[]}, 0x10) [ 48.657555] IPv4: Oversized IP packet from 127.0.0.1 [ 48.699253] FAULT_FLAG_ALLOW_RETRY missing 30 [ 48.700301] FAULT_FLAG_ALLOW_RETRY missing 30 [ 48.700311] CPU: 0 PID: 10005 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 48.700316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.700330] ffff8801bd5a78d0 ffffffff81d94b69 ffff8801bd5a7bb0 0000000000000000 [ 48.700341] ffff8801ba99b010 ffff8801bd5a7aa0 ffff8801ba99af00 ffff8801bd5a7ac8 [ 48.700351] ffffffff816624ba 0000000000001244 ffff8801d48ea0f0 ffff8801d48ea0a0 [ 48.700353] Call Trace: [ 48.700366] [] dump_stack+0xc1/0x128 [ 48.700376] [] handle_userfault+0xa3a/0x1310 [ 48.700389] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 48.700398] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 48.700409] [] ? handle_mm_fault+0x117b/0x2530 [ 48.700416] [] ? handle_mm_fault+0x1fc3/0x2530 [ 48.700423] [] handle_mm_fault+0x1fd1/0x2530 [ 48.700430] [] ? __pmd_alloc+0x410/0x410 [ 48.700440] [] __do_page_fault+0x5c2/0xd40 [ 48.700448] [] ? mm_fault_error+0x2c0/0x2c0 [ 48.700455] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.700463] [] do_page_fault+0x27/0x30 [ 48.700472] [] page_fault+0x28/0x30 [ 48.700480] [] ? copy_user_enhanced_fast_string+0xe/0x20 [ 48.700489] [] ? SyS_mq_open+0x18c/0x940 [ 48.700496] [] ? __fget+0x201/0x3a0 [ 48.700504] [] ? mqueue_evict_inode+0x670/0x670 [ 48.700510] [] ? __fget+0x228/0x3a0 [ 48.700516] [] ? __fget+0x47/0x3a0 [ 48.700524] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 48.700532] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 48.700539] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 48.700546] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 48.892673] CPU: 1 PID: 9994 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 48.900188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.909514] ffff8801d4f6f860 ffffffff81d94b69 ffff8801d4f6fb40 0000000000000000 [ 48.918189] ffff8801ba99b010 ffff8801d4f6fa30 ffff8801ba99af00 ffff8801d4f6fa58 [ 48.926168] ffffffff816624ba 0000000000001244 ffff8801d91908f0 ffff8801d91908a0 [ 48.934138] Call Trace: [ 48.936708] [] dump_stack+0xc1/0x128 [ 48.942044] [] handle_userfault+0xa3a/0x1310 [ 48.948082] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 48.955065] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 48.961440] [] ? handle_mm_fault+0x117b/0x2530 [ 48.967640] [] ? handle_mm_fault+0x1fc3/0x2530 [ 48.973839] [] handle_mm_fault+0x1fd1/0x2530 [ 48.979866] [] ? plist_check_head+0x4a/0x60 [ 48.985805] [] ? __pmd_alloc+0x410/0x410 [ 48.991487] [] __do_page_fault+0x5c2/0xd40 [ 48.997340] [] ? mm_fault_error+0x2c0/0x2c0 [ 49.003280] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.009913] [] do_page_fault+0x27/0x30 [ 49.015433] [] page_fault+0x28/0x30 [ 49.020679] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 49.027487] [] ? SYSC_rt_sigtimedwait+0xed/0x230 [ 49.033861] [] ? do_sigtimedwait+0x7a0/0x7a0 [ 49.039888] [] ? ioctl_preallocate+0x220/0x220 2018/02/06 13:57:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00005a4000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000f74000-0x10)={0x0, 0x0}) ppoll(&(0x7f000004f000-0x40)=[{r0, 0x1301}, {r1}], 0x2, &(0x7f000005b000+0xd56)={0x0, r3+10000000}, &(0x7f000005b000), 0x8) timer_settime(0x0, 0x0, &(0x7f000020b000-0x20)={{}, {0x0, 0x9}}, &(0x7f0000002000-0x20)) 2018/02/06 13:57:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000e65000-0xe)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000086c000)='/selinux/policy\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00005b3000), 0x10001b4) 2018/02/06 13:57:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fef000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x80000000, 0x0, 0x20000000002, 0x100001}, 0x20) pivot_root(&(0x7f0000067000+0x9e5)='./file0\x00', &(0x7f0000562000-0x8)='./file0\x00') clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a4a000), &(0x7f00007c4000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe8000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000000, 0x0, 0x2}, 0x20) 2018/02/06 13:57:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x3}, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x3}, 0x4) sendto$inet(r2, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/06 13:57:23 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigtimedwait(&(0x7f0000012000-0x8), &(0x7f0000001000), &(0x7f0000001000)={0x0, 0x989680}, 0x8) mq_open(&(0x7f0000002000-0x1d)='eth1vmnet0selinux:GPLselinux\x00', 0x0, 0x0, &(0x7f0000013000-0x40)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000e000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) poll(&(0x7f00000ea000-0x30)=[{r1}], 0x1, 0x0) 2018/02/06 13:57:23 executing program 6: mmap(&(0x7f0000000000/0x1e000)=nil, 0x1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f000001c000)="cf2a48c3f4e3e88efc4a3926fe01c76a09ee51fbbb21b7027be323ff9befc36908983be667a68f1ec5e4", 0x2a, 0x0, &(0x7f0000008000-0x10)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000009000)={@common='sit0\x00', @ifru_data=&(0x7f000001c000)="6b6be7000000007000b400a472ca66f3000000ef0002000000000000cb9d3cb0"}) 2018/02/06 13:57:23 executing program 3: unshare(0x40600) r0 = syz_open_procfs(0x0, &(0x7f0000a49000)='net/rt6_stats\x00') splice(r0, &(0x7f00008df000-0x8), r0, &(0x7f00009de000-0x3), 0x1, 0x0) [ 49.046092] [] ? selinux_file_ioctl+0x355/0x530 [ 49.052475] [] ? selinux_capable+0x40/0x40 [ 49.058332] [] ? SyS_futex+0x22e/0x2d0 [ 49.063839] [] ? do_futex+0x15c0/0x15c0 [ 49.069433] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 49.076068] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.082880] [] SyS_rt_sigtimedwait+0x2d/0x40 [ 49.088911] [] entry_SYSCALL_64_fastpath+0x29/0xe8 2018/02/06 13:57:23 executing program 6: mmap(&(0x7f0000000000/0x1e000)=nil, 0x1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f000001c000)="cf2a48c3f4e3e88efc4a3926fe01c76a09ee51fbbb21b7027be323ff9befc36908983be667a68f1ec5e4", 0x2a, 0x0, &(0x7f0000008000-0x10)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000009000)={@common='sit0\x00', @ifru_data=&(0x7f000001c000)="6b6be7000000007000b400a472ca66f3000000ef0002000000000000cb9d3cb0"}) 2018/02/06 13:57:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fef000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x80000000, 0x0, 0x20000000002, 0x100001}, 0x20) pivot_root(&(0x7f0000067000+0x9e5)='./file0\x00', &(0x7f0000562000-0x8)='./file0\x00') clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a4a000), &(0x7f00007c4000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe8000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000000, 0x0, 0x2}, 0x20) 2018/02/06 13:57:23 executing program 3: unshare(0x40600) r0 = syz_open_procfs(0x0, &(0x7f0000a49000)='net/rt6_stats\x00') splice(r0, &(0x7f00008df000-0x8), r0, &(0x7f00009de000-0x3), 0x1, 0x0) 2018/02/06 13:57:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) [ 49.118732] IPv4: Oversized IP packet from 127.0.0.1 2018/02/06 13:57:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000007000)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7a78a04a646", 0x1b}], 0x1, &(0x7f0000335000-0xd8)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f00006f5000-0x9)='/dev/sg#\x00', 0x0, 0x6) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') [ 49.187213] FAULT_FLAG_ALLOW_RETRY missing 30 [ 49.187216] FAULT_FLAG_ALLOW_RETRY missing 30 [ 49.187229] CPU: 0 PID: 10033 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 49.187234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.187247] ffff8801d437f860 ffffffff81d94b69 ffff8801d437fb40 0000000000000000 [ 49.187256] ffff8801ce729310 ffff8801d437fa30 ffff8801ce729200 ffff8801d437fa58 [ 49.187263] ffffffff816624ba 0000000000001244 ffff8801d77150f0 ffff8801d77150a0 [ 49.187265] Call Trace: [ 49.187279] [] dump_stack+0xc1/0x128 [ 49.187291] [] handle_userfault+0xa3a/0x1310 [ 49.187304] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 49.187313] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 49.187322] [] ? handle_mm_fault+0x117b/0x2530 [ 49.187328] [] ? handle_mm_fault+0x1fc3/0x2530 [ 49.187335] [] handle_mm_fault+0x1fd1/0x2530 [ 49.187341] [] ? __pmd_alloc+0x410/0x410 [ 49.187351] [] __do_page_fault+0x5c2/0xd40 [ 49.187359] [] ? mm_fault_error+0x2c0/0x2c0 [ 49.187366] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.187374] [] do_page_fault+0x27/0x30 [ 49.187381] [] page_fault+0x28/0x30 [ 49.187389] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 49.187397] [] ? SYSC_rt_sigtimedwait+0xed/0x230 [ 49.187403] [] ? do_sigtimedwait+0x7a0/0x7a0 [ 49.187411] [] ? ioctl_preallocate+0x220/0x220 [ 49.187419] [] ? selinux_file_ioctl+0x355/0x530 [ 49.187425] [] ? selinux_capable+0x40/0x40 [ 49.187433] [] ? SyS_futex+0x22e/0x2d0 [ 49.187439] [] ? do_futex+0x15c0/0x15c0 [ 49.187446] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 49.187455] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.187462] [] SyS_rt_sigtimedwait+0x2d/0x40 [ 49.187469] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 49.393163] CPU: 1 PID: 10048 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 49.400751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.410075] ffff8801d42f78d0 ffffffff81d94b69 ffff8801d42f7bb0 0000000000000000 [ 49.418051] ffff8801ce729310 ffff8801d42f7aa0 ffff8801ce729200 ffff8801d42f7ac8 [ 49.426020] ffffffff816624ba 0000000000001244 ffff8801d457d0f0 ffff8801d457d0a0 [ 49.434005] Call Trace: [ 49.436565] [] dump_stack+0xc1/0x128 [ 49.441898] [] handle_userfault+0xa3a/0x1310 [ 49.447928] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 49.454909] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 49.461283] [] ? handle_mm_fault+0x117b/0x2530 [ 49.467484] [] ? handle_mm_fault+0x1fc3/0x2530 [ 49.473692] [] handle_mm_fault+0x1fd1/0x2530 [ 49.479717] [] ? __pmd_alloc+0x410/0x410 [ 49.485398] [] __do_page_fault+0x5c2/0xd40 [ 49.491268] [] ? mm_fault_error+0x2c0/0x2c0 [ 49.497214] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.503847] [] do_page_fault+0x27/0x30 [ 49.509354] [] page_fault+0x28/0x30 [ 49.514599] [] ? copy_user_enhanced_fast_string+0xe/0x20 [ 49.521672] [] ? SyS_mq_open+0x18c/0x940 [ 49.527351] [] ? __fget+0x201/0x3a0 [ 49.532604] [] ? mqueue_evict_inode+0x670/0x670 2018/02/06 13:57:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00005a4000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000f74000-0x10)={0x0, 0x0}) ppoll(&(0x7f000004f000-0x40)=[{r0, 0x1301}, {r1}], 0x2, &(0x7f000005b000+0xd56)={0x0, r3+10000000}, &(0x7f000005b000), 0x8) timer_settime(0x0, 0x0, &(0x7f000020b000-0x20)={{}, {0x0, 0x9}}, &(0x7f0000002000-0x20)) 2018/02/06 13:57:24 executing program 3: unshare(0x40600) r0 = syz_open_procfs(0x0, &(0x7f0000a49000)='net/rt6_stats\x00') splice(r0, &(0x7f00008df000-0x8), r0, &(0x7f00009de000-0x3), 0x1, 0x0) 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fef000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x80000000, 0x0, 0x20000000002, 0x100001}, 0x20) pivot_root(&(0x7f0000067000+0x9e5)='./file0\x00', &(0x7f0000562000-0x8)='./file0\x00') clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a4a000), &(0x7f00007c4000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe8000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000000, 0x0, 0x2}, 0x20) 2018/02/06 13:57:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x3}, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x3}, 0x4) sendto$inet(r2, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/06 13:57:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000e000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) poll(&(0x7f00000ea000-0x30)=[{r1}], 0x1, 0x0) 2018/02/06 13:57:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000dd0000-0x44)={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0xffffffffffffffff, @rand_addr}, @syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/06 13:57:24 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigtimedwait(&(0x7f0000012000-0x8), &(0x7f0000001000), &(0x7f0000001000)={0x0, 0x989680}, 0x8) mq_open(&(0x7f0000002000-0x1d)='eth1vmnet0selinux:GPLselinux\x00', 0x0, 0x0, &(0x7f0000013000-0x40)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fef000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x80000000, 0x0, 0x20000000002, 0x100001}, 0x20) pivot_root(&(0x7f0000067000+0x9e5)='./file0\x00', &(0x7f0000562000-0x8)='./file0\x00') clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a4a000), &(0x7f00007c4000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe8000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000000, 0x0, 0x2}, 0x20) [ 49.538899] [] ? __fget+0x228/0x3a0 [ 49.544141] [] ? __fget+0x47/0x3a0 [ 49.549299] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 49.555937] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.562747] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.569296] [] entry_SYSCALL_64_fastpath+0x29/0xe8 2018/02/06 13:57:24 executing program 3: unshare(0x40600) r0 = syz_open_procfs(0x0, &(0x7f0000a49000)='net/rt6_stats\x00') splice(r0, &(0x7f00008df000-0x8), r0, &(0x7f00009de000-0x3), 0x1, 0x0) 2018/02/06 13:57:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) 2018/02/06 13:57:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000dd0000-0x44)={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0xffffffffffffffff, @rand_addr}, @syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/06 13:57:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000dd0000-0x44)={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0xffffffffffffffff, @rand_addr}, @syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/06 13:57:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00005a4000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000f74000-0x10)={0x0, 0x0}) ppoll(&(0x7f000004f000-0x40)=[{r0, 0x1301}, {r1}], 0x2, &(0x7f000005b000+0xd56)={0x0, r3+10000000}, &(0x7f000005b000), 0x8) timer_settime(0x0, 0x0, &(0x7f000020b000-0x20)={{}, {0x0, 0x9}}, &(0x7f0000002000-0x20)) 2018/02/06 13:57:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000dd0000-0x44)={{0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0xffffffffffffffff, @rand_addr}, @syzn={0x73, 0x79, 0x7a, 0x0}}) [ 49.609587] IPv4: Oversized IP packet from 127.0.0.1 2018/02/06 13:57:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) 2018/02/06 13:57:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) [ 49.663319] FAULT_FLAG_ALLOW_RETRY missing 30 [ 49.667859] CPU: 1 PID: 10090 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 49.675471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.684807] ffff8801d45978d0 ffffffff81d94b69 ffff8801d4597bb0 0000000000000000 [ 49.692820] ffff8801ce729490 ffff8801d4597aa0 ffff8801ce729380 ffff8801d4597ac8 [ 49.700866] ffffffff816624ba 0000000000001244 ffff8801d40aa0f0 ffff8801d40aa0a0 [ 49.708877] Call Trace: 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) [ 49.711452] [] dump_stack+0xc1/0x128 [ 49.716807] [] handle_userfault+0xa3a/0x1310 [ 49.722861] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 49.729866] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 49.736264] [] ? handle_mm_fault+0x117b/0x2530 [ 49.742483] [] ? handle_mm_fault+0x1fc3/0x2530 [ 49.748687] [] handle_mm_fault+0x1fd1/0x2530 [ 49.754722] [] ? __pmd_alloc+0x410/0x410 [ 49.760417] [] __do_page_fault+0x5c2/0xd40 [ 49.766293] [] ? mm_fault_error+0x2c0/0x2c0 [ 49.772242] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.778890] [] do_page_fault+0x27/0x30 [ 49.784409] [] page_fault+0x28/0x30 [ 49.789667] [] ? copy_user_enhanced_fast_string+0xe/0x20 [ 49.796752] [] ? SyS_mq_open+0x18c/0x940 [ 49.802456] [] ? __fget+0x201/0x3a0 [ 49.807706] [] ? mqueue_evict_inode+0x670/0x670 [ 49.814002] [] ? __fget+0x228/0x3a0 [ 49.819256] [] ? __fget+0x47/0x3a0 [ 49.824439] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 49.831095] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.837907] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.844458] [] entry_SYSCALL_64_fastpath+0x29/0xe8 2018/02/06 13:57:24 executing program 2: prctl$intptr(0x1d, 0x0) 2018/02/06 13:57:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000e000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) poll(&(0x7f00000ea000-0x30)=[{r1}], 0x1, 0x0) 2018/02/06 13:57:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) 2018/02/06 13:57:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000918000-0xce)="6e65742f6970365f6d725f6361636865002c0fa7ce3d511a22f8b55de1794634dd24e6c610bafc2d9b6ab772c6a531cdf247465c0e6113884d7c362e76b8118a5eca29c3e2d88bcb5bbd8d2cc544896a703311b754069698de5df52afb0b43d585630dca94f76d293bb408adc4acad07323c98dd27100116728843dc327685539b7aced4751023d7370f5fb82c88aec91ecd1c60f3c62d5a9ce05d579c635db5e144584eb2adc1bff27e52d8d954cf086c6ec4ebffb7b6d79c0c1189eb19d851b03538a6149462419d7da28f9e26") preadv(r0, &(0x7f00001ee000-0x50)=[{&(0x7f0000af1000)=""/171, 0xab}, {&(0x7f00008cc000)=""/67, 0x43}], 0x2, 0x0) 2018/02/06 13:57:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) 2018/02/06 13:57:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) 2018/02/06 13:57:24 executing program 4: mmap(&(0x7f0000000000/0x5f3000)=nil, 0x5f3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b40000-0x54)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/06 13:57:24 executing program 2: prctl$intptr(0x1d, 0x0) 2018/02/06 13:57:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000e57000-0x16)={@syzn={0x73, 0x79, 0x7a}, @ifru_mtu=0x1}) 2018/02/06 13:57:24 executing program 4: mmap(&(0x7f0000000000/0x5f3000)=nil, 0x5f3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b40000-0x54)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/06 13:57:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) 2018/02/06 13:57:24 executing program 7: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000e68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000e69000-0x4)=0xa7, 0x4) bind$inet(r0, &(0x7f00007b3000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/02/06 13:57:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030f000-0x12)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) prctl$void(0x27) 2018/02/06 13:57:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000c60000-0xa)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r2, 0x8, r6) fcntl$setsig(r5, 0xa, 0x12) r7 = gettid() tkill(r7, 0x100000000000016) close(r0) 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000be1000)='/dev/snd/seq\x00', 0x0, 0x808a002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000047000)={0x0, 0x0, 0x0, "e06594d23224d148b0c30905cebdbd09c0a763e2bfc2a32152615d0e5e0520000012ddd25bad4d127eb802407bc093842621790b637ae5ed23d8b2adf92fc9dd"}) write$sndseq(r0, &(0x7f000004f000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x20000c}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note}], 0x60) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000e4000-0x50)={0x303, @tick}) 2018/02/06 13:57:24 executing program 4: mmap(&(0x7f0000000000/0x5f3000)=nil, 0x5f3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b40000-0x54)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/06 13:57:24 executing program 2: prctl$intptr(0x1d, 0x0) 2018/02/06 13:57:24 executing program 2: prctl$intptr(0x1d, 0x0) 2018/02/06 13:57:24 executing program 4: mmap(&(0x7f0000000000/0x5f3000)=nil, 0x5f3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b40000-0x54)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/06 13:57:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b6000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000b5b000)={&(0x7f00006c2000)={0x10}, 0xc, &(0x7f0000fd3000-0x10)={&(0x7f0000e5e000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-twofish-3way\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/06 13:57:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000e57000-0x16)={@syzn={0x73, 0x79, 0x7a}, @ifru_mtu=0x1}) 2018/02/06 13:57:24 executing program 7: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000e68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000e69000-0x4)=0xa7, 0x4) bind$inet(r0, &(0x7f00007b3000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/02/06 13:57:24 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000d000-0x5)='./control\x00', &(0x7f0000004000)='./control\x00') mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000002e000)='./control\x00', 0x4000036) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) 2018/02/06 13:57:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030f000-0x12)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) prctl$void(0x27) 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000be1000)='/dev/snd/seq\x00', 0x0, 0x808a002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000047000)={0x0, 0x0, 0x0, "e06594d23224d148b0c30905cebdbd09c0a763e2bfc2a32152615d0e5e0520000012ddd25bad4d127eb802407bc093842621790b637ae5ed23d8b2adf92fc9dd"}) write$sndseq(r0, &(0x7f000004f000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x20000c}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note}], 0x60) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000e4000-0x50)={0x303, @tick}) 2018/02/06 13:57:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003000-0x1000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0xfffffffffffffffd, 0x0, 0x1}, 0x48b) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001000+0xfde), 0x4) 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000be1000)='/dev/snd/seq\x00', 0x0, 0x808a002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000047000)={0x0, 0x0, 0x0, "e06594d23224d148b0c30905cebdbd09c0a763e2bfc2a32152615d0e5e0520000012ddd25bad4d127eb802407bc093842621790b637ae5ed23d8b2adf92fc9dd"}) write$sndseq(r0, &(0x7f000004f000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x20000c}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note}], 0x60) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000e4000-0x50)={0x303, @tick}) 2018/02/06 13:57:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000e57000-0x16)={@syzn={0x73, 0x79, 0x7a}, @ifru_mtu=0x1}) 2018/02/06 13:57:24 executing program 7: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000e68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000e69000-0x4)=0xa7, 0x4) bind$inet(r0, &(0x7f00007b3000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/02/06 13:57:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_addrs=@rc={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='syscall\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000002000-0x4)) 2018/02/06 13:57:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003000-0x1000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0xfffffffffffffffd, 0x0, 0x1}, 0x48b) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001000+0xfde), 0x4) 2018/02/06 13:57:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000e57000-0x16)={@syzn={0x73, 0x79, 0x7a}, @ifru_mtu=0x1}) 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000be1000)='/dev/snd/seq\x00', 0x0, 0x808a002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000047000)={0x0, 0x0, 0x0, "e06594d23224d148b0c30905cebdbd09c0a763e2bfc2a32152615d0e5e0520000012ddd25bad4d127eb802407bc093842621790b637ae5ed23d8b2adf92fc9dd"}) write$sndseq(r0, &(0x7f000004f000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x20000c}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note}], 0x60) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000e4000-0x50)={0x303, @tick}) 2018/02/06 13:57:24 executing program 7: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000e68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000e69000-0x4)=0xa7, 0x4) bind$inet(r0, &(0x7f00007b3000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/02/06 13:57:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030f000-0x12)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) prctl$void(0x27) 2018/02/06 13:57:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030f000-0x12)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) prctl$void(0x27) 2018/02/06 13:57:24 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000d000-0x5)='./control\x00', &(0x7f0000004000)='./control\x00') mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000002e000)='./control\x00', 0x4000036) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) 2018/02/06 13:57:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000985000)=',&\x00', 0x0) rt_sigaction(0x6, &(0x7f0000c4a000-0x20)={0xa}, &(0x7f0000278000), 0x8, &(0x7f0000406000+0x651)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20)={0x428465, {0x400003ffdfffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e82000-0x8)) syz_open_dev$evdev(&(0x7f0000868000-0x12)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/06 13:57:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003000-0x1000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0xfffffffffffffffd, 0x0, 0x1}, 0x48b) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001000+0xfde), 0x4) 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000d000-0x5)='./control\x00', &(0x7f0000004000)='./control\x00') mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000002e000)='./control\x00', 0x4000036) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) 2018/02/06 13:57:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_addrs=@rc={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='syscall\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000002000-0x4)) 2018/02/06 13:57:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b6000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000b5b000)={&(0x7f00006c2000)={0x10}, 0xc, &(0x7f0000fd3000-0x10)={&(0x7f0000e5e000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-twofish-3way\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/06 13:57:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b6000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000b5b000)={&(0x7f00006c2000)={0x10}, 0xc, &(0x7f0000fd3000-0x10)={&(0x7f0000e5e000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-twofish-3way\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/06 13:57:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b6000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000b5b000)={&(0x7f00006c2000)={0x10}, 0xc, &(0x7f0000fd3000-0x10)={&(0x7f0000e5e000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-twofish-3way\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/06 13:57:24 executing program 0: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000d000-0x5)='./control\x00', &(0x7f0000004000)='./control\x00') mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000002e000)='./control\x00', 0x4000036) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) 2018/02/06 13:57:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_addrs=@rc={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='syscall\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000002000-0x4)) 2018/02/06 13:57:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003000-0x1000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0xfffffffffffffffd, 0x0, 0x1}, 0x48b) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001000+0xfde), 0x4) 2018/02/06 13:57:24 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000d000-0x5)='./control\x00', &(0x7f0000004000)='./control\x00') mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000002e000)='./control\x00', 0x4000036) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) 2018/02/06 13:57:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b6000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000b5b000)={&(0x7f00006c2000)={0x10}, 0xc, &(0x7f0000fd3000-0x10)={&(0x7f0000e5e000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-twofish-3way\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/06 13:57:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000985000)=',&\x00', 0x0) rt_sigaction(0x6, &(0x7f0000c4a000-0x20)={0xa}, &(0x7f0000278000), 0x8, &(0x7f0000406000+0x651)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20)={0x428465, {0x400003ffdfffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e82000-0x8)) syz_open_dev$evdev(&(0x7f0000868000-0x12)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/06 13:57:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b6000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000b5b000)={&(0x7f00006c2000)={0x10}, 0xc, &(0x7f0000fd3000-0x10)={&(0x7f0000e5e000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-twofish-3way\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/06 13:57:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b6000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000b5b000)={&(0x7f00006c2000)={0x10}, 0xc, &(0x7f0000fd3000-0x10)={&(0x7f0000e5e000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-twofish-3way\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/06 13:57:25 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@syzn={0x73, 0x79, 0x7a}, @ifru_addrs=@rc={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}) syz_open_procfs(0x0, &(0x7f0000002000-0x8)='syscall\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x6}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000002000-0x4)) 2018/02/06 13:57:25 executing program 0: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000d000-0x5)='./control\x00', &(0x7f0000004000)='./control\x00') mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000002e000)='./control\x00', 0x4000036) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) 2018/02/06 13:57:25 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000d000-0x5)='./control\x00', &(0x7f0000004000)='./control\x00') mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000002e000)='./control\x00', 0x4000036) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) 2018/02/06 13:57:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000985000)=',&\x00', 0x0) rt_sigaction(0x6, &(0x7f0000c4a000-0x20)={0xa}, &(0x7f0000278000), 0x8, &(0x7f0000406000+0x651)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20)={0x428465, {0x400003ffdfffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e82000-0x8)) syz_open_dev$evdev(&(0x7f0000868000-0x12)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/06 13:57:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b6000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000b5b000)={&(0x7f00006c2000)={0x10}, 0xc, &(0x7f0000fd3000-0x10)={&(0x7f0000e5e000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-twofish-3way\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/06 13:57:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b6000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000b5b000)={&(0x7f00006c2000)={0x10}, 0xc, &(0x7f0000fd3000-0x10)={&(0x7f0000e5e000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-twofish-3way\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/06 13:57:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b6000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000b5b000)={&(0x7f00006c2000)={0x10}, 0xc, &(0x7f0000fd3000-0x10)={&(0x7f0000e5e000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-twofish-3way\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/06 13:57:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000985000)=',&\x00', 0x0) rt_sigaction(0x6, &(0x7f0000c4a000-0x20)={0xa}, &(0x7f0000278000), 0x8, &(0x7f0000406000+0x651)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20)={0x428465, {0x400003ffdfffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e82000-0x8)) syz_open_dev$evdev(&(0x7f0000868000-0x12)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000985000)=',&\x00', 0x0) rt_sigaction(0x6, &(0x7f0000c4a000-0x20)={0xa}, &(0x7f0000278000), 0x8, &(0x7f0000406000+0x651)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20)={0x428465, {0x400003ffdfffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e82000-0x8)) syz_open_dev$evdev(&(0x7f0000868000-0x12)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/06 13:57:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000835000)='/dev/sequencer\x00', 0xa02, 0x0) write$sndseq(r0, &(0x7f00007a0000-0x1b0)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5b10f405}, {}, @time=@tick}], 0x30) close(r0) 2018/02/06 13:57:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00007a2000-0xb)='clear_refs\x00') unshare(0x28060400) exit(0x0) writev(r1, &(0x7f0000b97000)=[{&(0x7f0000962000)='5', 0x1}], 0x1) 2018/02/06 13:57:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x80a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000e71000-0xb)='net/packet\x00') sendfile(r0, r1, &(0x7f000084f000)=0x5b, 0xfff) 2018/02/06 13:57:25 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 2018/02/06 13:57:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000f53000)='net/snmp\x00') pread64(r0, &(0x7f0000238000)=""/129, 0x4192c7de80be6adf, 0x0) 2018/02/06 13:57:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000058d000-0x38)={&(0x7f000078d000)={0x10}, 0xc, &(0x7f00004e8000-0x10)={&(0x7f00008b1000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x2}]}, 0x20}, 0x1}, 0x0) 2018/02/06 13:57:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000335000)='./file0\x00', 0x0) mount(&(0x7f0000ed9000)='./file0\x00', &(0x7f00009aa000)='./file0\x00', &(0x7f00000b4000-0xa)='selinuxfs\x00', 0x0, &(0x7f0000c78000)) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000985000)=',&\x00', 0x0) rt_sigaction(0x6, &(0x7f0000c4a000-0x20)={0xa}, &(0x7f0000278000), 0x8, &(0x7f0000406000+0x651)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20)={0x428465, {0x400003ffdfffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e82000-0x8)) syz_open_dev$evdev(&(0x7f0000868000-0x12)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/06 13:57:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000f53000)='net/snmp\x00') pread64(r0, &(0x7f0000238000)=""/129, 0x4192c7de80be6adf, 0x0) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000985000)=',&\x00', 0x0) rt_sigaction(0x6, &(0x7f0000c4a000-0x20)={0xa}, &(0x7f0000278000), 0x8, &(0x7f0000406000+0x651)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20)={0x428465, {0x400003ffdfffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e82000-0x8)) syz_open_dev$evdev(&(0x7f0000868000-0x12)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/06 13:57:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000835000)='/dev/sequencer\x00', 0xa02, 0x0) write$sndseq(r0, &(0x7f00007a0000-0x1b0)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5b10f405}, {}, @time=@tick}], 0x30) close(r0) 2018/02/06 13:57:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000f53000)='net/snmp\x00') pread64(r0, &(0x7f0000238000)=""/129, 0x4192c7de80be6adf, 0x0) 2018/02/06 13:57:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000335000)='./file0\x00', 0x0) mount(&(0x7f0000ed9000)='./file0\x00', &(0x7f00009aa000)='./file0\x00', &(0x7f00000b4000-0xa)='selinuxfs\x00', 0x0, &(0x7f0000c78000)) 2018/02/06 13:57:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000f53000)='net/snmp\x00') pread64(r0, &(0x7f0000238000)=""/129, 0x4192c7de80be6adf, 0x0) 2018/02/06 13:57:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000058d000-0x38)={&(0x7f000078d000)={0x10}, 0xc, &(0x7f00004e8000-0x10)={&(0x7f00008b1000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x2}]}, 0x20}, 0x1}, 0x0) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000ffc000)={&(0x7f0000cb9000-0x40)=""/64, 0x40}) 2018/02/06 13:57:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000835000)='/dev/sequencer\x00', 0xa02, 0x0) write$sndseq(r0, &(0x7f00007a0000-0x1b0)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5b10f405}, {}, @time=@tick}], 0x30) close(r0) 2018/02/06 13:57:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00007a2000-0xb)='clear_refs\x00') unshare(0x28060400) exit(0x0) writev(r1, &(0x7f0000b97000)=[{&(0x7f0000962000)='5', 0x1}], 0x1) 2018/02/06 13:57:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x80a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000e71000-0xb)='net/packet\x00') sendfile(r0, r1, &(0x7f000084f000)=0x5b, 0xfff) 2018/02/06 13:57:25 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 2018/02/06 13:57:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00007a2000-0xb)='clear_refs\x00') unshare(0x28060400) exit(0x0) writev(r1, &(0x7f0000b97000)=[{&(0x7f0000962000)='5', 0x1}], 0x1) 2018/02/06 13:57:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000335000)='./file0\x00', 0x0) mount(&(0x7f0000ed9000)='./file0\x00', &(0x7f00009aa000)='./file0\x00', &(0x7f00000b4000-0xa)='selinuxfs\x00', 0x0, &(0x7f0000c78000)) 2018/02/06 13:57:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000058d000-0x38)={&(0x7f000078d000)={0x10}, 0xc, &(0x7f00004e8000-0x10)={&(0x7f00008b1000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x2}]}, 0x20}, 0x1}, 0x0) 2018/02/06 13:57:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000f0c000-0x1c)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000aa5000-0x10)={&(0x7f0000921000-0x12b0)={0x14, 0x80000000000002, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/06 13:57:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000835000)='/dev/sequencer\x00', 0xa02, 0x0) write$sndseq(r0, &(0x7f00007a0000-0x1b0)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5b10f405}, {}, @time=@tick}], 0x30) close(r0) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000ffc000)={&(0x7f0000cb9000-0x40)=""/64, 0x40}) 2018/02/06 13:57:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000335000)='./file0\x00', 0x0) mount(&(0x7f0000ed9000)='./file0\x00', &(0x7f00009aa000)='./file0\x00', &(0x7f00000b4000-0xa)='selinuxfs\x00', 0x0, &(0x7f0000c78000)) 2018/02/06 13:57:25 executing program 4: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000ffc000)={&(0x7f0000cb9000-0x40)=""/64, 0x40}) 2018/02/06 13:57:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000058d000-0x38)={&(0x7f000078d000)={0x10}, 0xc, &(0x7f00004e8000-0x10)={&(0x7f00008b1000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x2}]}, 0x20}, 0x1}, 0x0) 2018/02/06 13:57:25 executing program 7: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000ffc000)={&(0x7f0000cb9000-0x40)=""/64, 0x40}) 2018/02/06 13:57:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) dup3(r1, r0, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000067000)={{{@in6=@ipv4={[], [], @remote}, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000641000)=0xe8) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000904000-0x8)=@hopopts={0x0, 0x0, [], []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x100040, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a9000-0x1), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/06 13:57:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x80a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000e71000-0xb)='net/packet\x00') sendfile(r0, r1, &(0x7f000084f000)=0x5b, 0xfff) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000904000-0x8)=@hopopts={0x0, 0x0, [], []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x100040, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a9000-0x1), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/06 13:57:25 executing program 1: mmap(&(0x7f0000000000/0x952000)=nil, 0x952000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000948000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000950000-0x3c)=[{{&(0x7f000094f000)=@can={0x1d}, 0x10, &(0x7f000049d000)=[{&(0x7f00000b7000-0x5)="9d", 0x1}], 0x1, &(0x7f000061b000)=[]}}], 0x1, 0x8000) sendto$inet(r0, &(0x7f0000952000-0x83)="d3523b23a3a4901f3644faac98a41fe6093934adc1f264cfe9f2ffbea1649bd3d6fd89db8b960bf0cfc609a35312663f3f76257cfa83157cac4b043042e1458673a8fafe2545e6ebe619cc5f3131d10703026b630ed5a527cf27d3902c71ecde9fc15e66aedaab58cc448194eb7344bbdb6c96f5d21ee51d71e32093bbc1b7c4729d545c", 0x84, 0x0, &(0x7f0000951000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/06 13:57:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) dup3(r1, r0, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000067000)={{{@in6=@ipv4={[], [], @remote}, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000641000)=0xe8) 2018/02/06 13:57:25 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 2018/02/06 13:57:25 executing program 4: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 2018/02/06 13:57:25 executing program 7: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 2018/02/06 13:57:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00007a2000-0xb)='clear_refs\x00') unshare(0x28060400) exit(0x0) writev(r1, &(0x7f0000b97000)=[{&(0x7f0000962000)='5', 0x1}], 0x1) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000904000-0x8)=@hopopts={0x0, 0x0, [], []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x100040, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a9000-0x1), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000904000-0x8)=@hopopts={0x0, 0x0, [], []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x100040, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a9000-0x1), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/06 13:57:25 executing program 3: clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f000039b000), &(0x7f0000bda000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000880000), 0x0, 0x0, &(0x7f0000263000-0x10)={0x77359400}) 2018/02/06 13:57:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x80a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000e71000-0xb)='net/packet\x00') sendfile(r0, r1, &(0x7f000084f000)=0x5b, 0xfff) 2018/02/06 13:57:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000825000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) 2018/02/06 13:57:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) dup3(r1, r0, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000067000)={{{@in6=@ipv4={[], [], @remote}, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000641000)=0xe8) 2018/02/06 13:57:25 executing program 3: clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f000039b000), &(0x7f0000bda000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000880000), 0x0, 0x0, &(0x7f0000263000-0x10)={0x77359400}) 2018/02/06 13:57:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00002b4000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}}) 2018/02/06 13:57:25 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 2018/02/06 13:57:25 executing program 7: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 2018/02/06 13:57:25 executing program 4: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000012000-0x10)=[], 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) 2018/02/06 13:57:25 executing program 3: clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f000039b000), &(0x7f0000bda000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000880000), 0x0, 0x0, &(0x7f0000263000-0x10)={0x77359400}) 2018/02/06 13:57:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000f7000-0x4)=0x3, 0x139) write(r0, &(0x7f00007cd000)="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", 0x1000) 2018/02/06 13:57:25 executing program 3: clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f000039b000), &(0x7f0000bda000)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000880000), 0x0, 0x0, &(0x7f0000263000-0x10)={0x77359400}) 2018/02/06 13:57:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00002b4000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}}) 2018/02/06 13:57:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00002b4000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}}) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffff9c, &(0x7f0000001000-0x20)={{}, {0x0}}) ppoll(&(0x7f0000000000)=[], 0x0, &(0x7f0000001000)={r0}, &(0x7f0000af1000-0x8), 0x8) 2018/02/06 13:57:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00002b4000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}}) 2018/02/06 13:57:25 executing program 1: mmap(&(0x7f0000000000/0xadd000)=nil, 0xadd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000adb000)='./file0\x00', 0x10000, 0x1a0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000994000)={0x0, 0x8}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acc000-0x8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = memfd_create(&(0x7f0000644000-0xf)='\\/+GPL$\\+user\\\x00', 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000ad9000-0x4), 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098e000-0x4)=0x6, 0x4) getpeername$inet6(r2, &(0x7f0000adb000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00002bc000)=0x1c) bind$inet6(r0, &(0x7f0000808000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) fstat(r2, &(0x7f0000add000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000139000-0xe8)={{{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x0, 0x6, 0x1, 0x0, 0xa, 0x20, 0x80, 0x2f, 0x0, r3}, {0x8, 0x8, 0x8001, 0x2, 0x0, 0xd, 0x7fff, 0x3}, {0x234867c2, 0xffffffffffffffff, 0x10001, 0x5}, 0xdf4, 0xf, 0x3, 0x0, 0x0, 0x3}, {{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x3, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x0, 0xf}, 0x3, 0x3, 0x0, 0x8001, 0x8000, 0x4, 0x2}}, 0xe8) sendto$inet6(r0, &(0x7f00002a1000-0x4ec), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad7000-0x53)="1d53d4af", 0x4, 0x811, &(0x7f00000e5000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/02/06 13:57:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffff9c, &(0x7f0000001000-0x20)={{}, {0x0}}) ppoll(&(0x7f0000000000)=[], 0x0, &(0x7f0000001000)={r0}, &(0x7f0000af1000-0x8), 0x8) [ 51.179441] TCP: request_sock_TCP: Possible SYN flooding on port 20026. Sending cookies. Check SNMP counters. 2018/02/06 13:57:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000395000)='./file0\x00', 0x0) mount(&(0x7f0000a80000-0x8)='./file0\x00', &(0x7f0000f64000-0x8)='./file0\x00', &(0x7f0000734000)='ext2\x00', 0x0, &(0x7f0000bb4000-0xbb)) 2018/02/06 13:57:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) dup3(r1, r0, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000067000)={{{@in6=@ipv4={[], [], @remote}, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000641000)=0xe8) 2018/02/06 13:57:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffff9c, &(0x7f0000001000-0x20)={{}, {0x0}}) ppoll(&(0x7f0000000000)=[], 0x0, &(0x7f0000001000)={r0}, &(0x7f0000af1000-0x8), 0x8) 2018/02/06 13:57:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000f7000-0x4)=0x3, 0x139) write(r0, &(0x7f00007cd000)="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", 0x1000) [ 51.322507] TCP: request_sock_TCP: Possible SYN flooding on port 20026. Sending cookies. Check SNMP counters. 2018/02/06 13:57:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000443000)='/selinux/enforce\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00006c8000), 0x6da3) write$selinux_context(r0, &(0x7f0000972000-0x2a)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a) 2018/02/06 13:57:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffff9c, &(0x7f0000001000-0x20)={{}, {0x0}}) ppoll(&(0x7f0000000000)=[], 0x0, &(0x7f0000001000)={r0}, &(0x7f0000af1000-0x8), 0x8) 2018/02/06 13:57:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000d37000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x50, &(0x7f0000c50000)=""/185, &(0x7f0000200000)=0xb9) 2018/02/06 13:57:26 executing program 1: mmap(&(0x7f0000000000/0xadd000)=nil, 0xadd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000adb000)='./file0\x00', 0x10000, 0x1a0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000994000)={0x0, 0x8}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acc000-0x8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = memfd_create(&(0x7f0000644000-0xf)='\\/+GPL$\\+user\\\x00', 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000ad9000-0x4), 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098e000-0x4)=0x6, 0x4) getpeername$inet6(r2, &(0x7f0000adb000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00002bc000)=0x1c) bind$inet6(r0, &(0x7f0000808000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) fstat(r2, &(0x7f0000add000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000139000-0xe8)={{{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x0, 0x6, 0x1, 0x0, 0xa, 0x20, 0x80, 0x2f, 0x0, r3}, {0x8, 0x8, 0x8001, 0x2, 0x0, 0xd, 0x7fff, 0x3}, {0x234867c2, 0xffffffffffffffff, 0x10001, 0x5}, 0xdf4, 0xf, 0x3, 0x0, 0x0, 0x3}, {{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x3, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x0, 0xf}, 0x3, 0x3, 0x0, 0x8001, 0x8000, 0x4, 0x2}}, 0xe8) sendto$inet6(r0, &(0x7f00002a1000-0x4ec), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad7000-0x53)="1d53d4af", 0x4, 0x811, &(0x7f00000e5000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/02/06 13:57:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000f7000-0x4)=0x3, 0x139) write(r0, &(0x7f00007cd000)="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", 0x1000) 2018/02/06 13:57:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000395000)='./file0\x00', 0x0) mount(&(0x7f0000a80000-0x8)='./file0\x00', &(0x7f0000f64000-0x8)='./file0\x00', &(0x7f0000734000)='ext2\x00', 0x0, &(0x7f0000bb4000-0xbb)) 2018/02/06 13:57:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000003000)={0x0, 0x0, 0x1, @thr={&(0x7f0000001000), &(0x7f0000011000)}}, &(0x7f0000000000)) timer_gettime(0x0, &(0x7f0000013000-0x20)) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000004000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00009a2000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000547000-0x64)={0x14, 0x0, 0x4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/06 13:57:26 executing program 5: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000549000-0x82)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031f000-0xc)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000395000)='./file0\x00', 0x0) mount(&(0x7f0000a80000-0x8)='./file0\x00', &(0x7f0000f64000-0x8)='./file0\x00', &(0x7f0000734000)='ext2\x00', 0x0, &(0x7f0000bb4000-0xbb)) [ 51.470731] TCP: request_sock_TCP: Possible SYN flooding on port 20026. Sending cookies. Check SNMP counters. [ 51.498344] FAULT_FLAG_ALLOW_RETRY missing 31 [ 51.503440] CPU: 0 PID: 10481 Comm: syz-executor2 Not tainted 4.9.80-g550c01d #29 [ 51.511055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2018/02/06 13:57:26 executing program 1: mmap(&(0x7f0000000000/0xadd000)=nil, 0xadd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000adb000)='./file0\x00', 0x10000, 0x1a0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000994000)={0x0, 0x8}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acc000-0x8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = memfd_create(&(0x7f0000644000-0xf)='\\/+GPL$\\+user\\\x00', 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000ad9000-0x4), 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098e000-0x4)=0x6, 0x4) getpeername$inet6(r2, &(0x7f0000adb000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00002bc000)=0x1c) bind$inet6(r0, &(0x7f0000808000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) fstat(r2, &(0x7f0000add000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000139000-0xe8)={{{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x0, 0x6, 0x1, 0x0, 0xa, 0x20, 0x80, 0x2f, 0x0, r3}, {0x8, 0x8, 0x8001, 0x2, 0x0, 0xd, 0x7fff, 0x3}, {0x234867c2, 0xffffffffffffffff, 0x10001, 0x5}, 0xdf4, 0xf, 0x3, 0x0, 0x0, 0x3}, {{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x3, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x0, 0xf}, 0x3, 0x3, 0x0, 0x8001, 0x8000, 0x4, 0x2}}, 0xe8) sendto$inet6(r0, &(0x7f00002a1000-0x4ec), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad7000-0x53)="1d53d4af", 0x4, 0x811, &(0x7f00000e5000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/02/06 13:57:26 executing program 5: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000395000)='./file0\x00', 0x0) mount(&(0x7f0000a80000-0x8)='./file0\x00', &(0x7f0000f64000-0x8)='./file0\x00', &(0x7f0000734000)='ext2\x00', 0x0, &(0x7f0000bb4000-0xbb)) [ 51.520399] ffff8801d4357920 ffffffff81d94b69 ffff8801d4357c00 0000000000000000 [ 51.528443] ffff8801ce729610 ffff8801d4357af0 ffff8801ce729500 ffff8801d4357b18 [ 51.536483] ffffffff816624ba dffffc0000000000 ffff8801d4357958 ffffffff8123b64b [ 51.544539] Call Trace: [ 51.547119] [] dump_stack+0xc1/0x128 [ 51.552492] [] handle_userfault+0xa3a/0x1310 [ 51.558551] [] ? trace_hardirqs_on_caller+0x38b/0x590 2018/02/06 13:57:26 executing program 0: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 1: mmap(&(0x7f0000000000/0xadd000)=nil, 0xadd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000adb000)='./file0\x00', 0x10000, 0x1a0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000994000)={0x0, 0x8}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acc000-0x8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = memfd_create(&(0x7f0000644000-0xf)='\\/+GPL$\\+user\\\x00', 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000ad9000-0x4), 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098e000-0x4)=0x6, 0x4) getpeername$inet6(r2, &(0x7f0000adb000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00002bc000)=0x1c) bind$inet6(r0, &(0x7f0000808000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) fstat(r2, &(0x7f0000add000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000139000-0xe8)={{{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x0, 0x6, 0x1, 0x0, 0xa, 0x20, 0x80, 0x2f, 0x0, r3}, {0x8, 0x8, 0x8001, 0x2, 0x0, 0xd, 0x7fff, 0x3}, {0x234867c2, 0xffffffffffffffff, 0x10001, 0x5}, 0xdf4, 0xf, 0x3, 0x0, 0x0, 0x3}, {{@in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x3, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x0, 0xf}, 0x3, 0x3, 0x0, 0x8001, 0x8000, 0x4, 0x2}}, 0xe8) sendto$inet6(r0, &(0x7f00002a1000-0x4ec), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad7000-0x53)="1d53d4af", 0x4, 0x811, &(0x7f00000e5000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) [ 51.565382] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 51.572307] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 51.578714] [] ? mark_held_locks+0xaf/0x100 [ 51.584685] [] ? mark_held_locks+0xaf/0x100 [ 51.590650] [] ? free_hot_cold_page+0x419/0x850 [ 51.596965] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 51.603805] [] ? trace_hardirqs_on+0xd/0x10 [ 51.609774] [] handle_mm_fault+0x1f82/0x2530 [ 51.615825] [] ? __pmd_alloc+0x410/0x410 [ 51.621526] [] __do_page_fault+0x5c2/0xd40 [ 51.627397] [] ? mm_fault_error+0x2c0/0x2c0 [ 51.633343] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.639991] [] ? posix_ktime_get_ts+0x20/0x20 [ 51.646122] [] do_page_fault+0x27/0x30 [ 51.651629] [] page_fault+0x28/0x30 [ 51.656876] [] ? posix_ktime_get_ts+0x20/0x20 [ 51.662992] [] ? copy_user_generic_unrolled+0x89/0xc0 [ 51.669802] [] ? SyS_timer_gettime+0x172/0x280 [ 51.676001] [] ? do_schedule_next_timer+0x4d0/0x4d0 [ 51.682638] [] ? SyS_timer_create+0x1030/0x1030 [ 51.688924] [] ? do_futex+0x15c0/0x15c0 [ 51.694519] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 51.701156] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 51.707704] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 51.736332] FAULT_FLAG_ALLOW_RETRY missing 31 [ 51.740871] CPU: 1 PID: 10481 Comm: syz-executor2 Not tainted 4.9.80-g550c01d #29 [ 51.748472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.757808] ffff8801d4357920 ffffffff81d94b69 ffff8801d4357c00 0000000000000000 [ 51.765779] ffff8801ce729790 ffff8801d4357af0 ffff8801ce729680 ffff8801d4357b18 [ 51.773758] ffffffff816624ba dffffc0000000000 ffff8801d4357958 ffffffff8123b64b [ 51.781730] Call Trace: [ 51.784290] [] dump_stack+0xc1/0x128 [ 51.789625] [] handle_userfault+0xa3a/0x1310 [ 51.795655] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 51.802465] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 51.809364] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 51.815756] [] ? mark_held_locks+0xaf/0x100 [ 51.821713] [] ? mark_held_locks+0xaf/0x100 [ 51.827653] [] ? free_hot_cold_page+0x419/0x850 [ 51.833942] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 51.840748] [] ? trace_hardirqs_on+0xd/0x10 [ 51.846689] [] handle_mm_fault+0x1f82/0x2530 [ 51.852713] [] ? __pmd_alloc+0x410/0x410 [ 51.858394] [] ? memset+0x31/0x40 [ 51.863467] [] __do_page_fault+0x5c2/0xd40 [ 51.869326] [] ? mm_fault_error+0x2c0/0x2c0 [ 51.875267] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.881922] [] ? posix_ktime_get_ts+0x20/0x20 [ 51.888038] [] do_page_fault+0x27/0x30 [ 51.893548] [] page_fault+0x28/0x30 [ 51.898797] [] ? posix_ktime_get_ts+0x20/0x20 [ 51.904919] [] ? copy_user_generic_unrolled+0x89/0xc0 [ 51.911730] [] ? SyS_timer_gettime+0x172/0x280 [ 51.917940] [] ? SyS_timer_create+0x1030/0x1030 [ 51.924229] [] ? do_futex+0x15c0/0x15c0 [ 51.929826] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 2018/02/06 13:57:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000443000)='/selinux/enforce\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00006c8000), 0x6da3) write$selinux_context(r0, &(0x7f0000972000-0x2a)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a) 2018/02/06 13:57:26 executing program 1: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000f7000-0x4)=0x3, 0x139) write(r0, &(0x7f00007cd000)="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", 0x1000) 2018/02/06 13:57:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000547000-0x64)={0x14, 0x0, 0x4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/06 13:57:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000549000-0x82)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031f000-0xc)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000549000-0x82)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031f000-0xc)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:26 executing program 5: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 0: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) [ 51.936471] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 51.943020] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 51.969638] TCP: request_sock_TCP: Possible SYN flooding on port 20026. Sending cookies. Check SNMP counters. 2018/02/06 13:57:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000443000)='/selinux/enforce\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00006c8000), 0x6da3) write$selinux_context(r0, &(0x7f0000972000-0x2a)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a) 2018/02/06 13:57:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000547000-0x64)={0x14, 0x0, 0x4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/06 13:57:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000549000-0x82)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031f000-0xc)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:26 executing program 0: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000443000)='/selinux/enforce\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00006c8000), 0x6da3) write$selinux_context(r0, &(0x7f0000972000-0x2a)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a) 2018/02/06 13:57:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000549000-0x82)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031f000-0xc)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:26 executing program 5: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 1: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000547000-0x64)={0x14, 0x0, 0x4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/06 13:57:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000443000)='/selinux/enforce\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00006c8000), 0x6da3) write$selinux_context(r0, &(0x7f0000972000-0x2a)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a) 2018/02/06 13:57:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000443000)='/selinux/enforce\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00006c8000), 0x6da3) write$selinux_context(r0, &(0x7f0000972000-0x2a)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a) 2018/02/06 13:57:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000549000-0x82)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031f000-0xc)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000549000-0x82)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031f000-0xc)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:26 executing program 5: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 7: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 1: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000549000-0x82)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031f000-0xc)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000549000-0x82)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031f000-0xc)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000443000)='/selinux/enforce\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00006c8000), 0x6da3) write$selinux_context(r0, &(0x7f0000972000-0x2a)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a) 2018/02/06 13:57:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fcb000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000464000)='./file0\x00', 0x0) readlinkat(r0, &(0x7f000003c000-0x8)='./file0\x00', &(0x7f0000fd1000-0x99)=""/153, 0x99) 2018/02/06 13:57:26 executing program 7: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000569000)="1f0000001a001bf200001321fdf3167600041d0100008d3d93391a0001454a", 0x1f) recvmmsg(r0, &(0x7f0000659000)=[{{&(0x7f0000989000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x14, &(0x7f0000632000-0x10)=[], 0x0, &(0x7f0000eec000)=""/167, 0xa7}}], 0x1, 0x0, 0x0) 2018/02/06 13:57:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x5d) listen(r1, 0x1) sendto$inet6(r0, &(0x7f0000eba000-0x1), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r1) 2018/02/06 13:57:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fcb000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000464000)='./file0\x00', 0x0) readlinkat(r0, &(0x7f000003c000-0x8)='./file0\x00', &(0x7f0000fd1000-0x99)=""/153, 0x99) 2018/02/06 13:57:26 executing program 5: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 7: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000569000)="1f0000001a001bf200001321fdf3167600041d0100008d3d93391a0001454a", 0x1f) recvmmsg(r0, &(0x7f0000659000)=[{{&(0x7f0000989000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x14, &(0x7f0000632000-0x10)=[], 0x0, &(0x7f0000eec000)=""/167, 0xa7}}], 0x1, 0x0, 0x0) 2018/02/06 13:57:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fcb000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000464000)='./file0\x00', 0x0) readlinkat(r0, &(0x7f000003c000-0x8)='./file0\x00', &(0x7f0000fd1000-0x99)=""/153, 0x99) 2018/02/06 13:57:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000f1e000+0xc07), &(0x7f00001f7000-0x4)=0x8) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeb000-0xa)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d1000-0x8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) 2018/02/06 13:57:27 executing program 5: mmap(&(0x7f0000000000/0xf74000)=nil, 0xf74000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x1d, 0x3c45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f000066b000-0x4)=0xfffffffe, 0x4) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000c82000-0xc)={0x0, 0x0}, &(0x7f000005e000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00002b7000)={0x0, 0x0, 0x0}, &(0x7f0000828000-0x4)=0xc) sendmmsg$unix(r2, &(0x7f00000be000-0x70)=[{&(0x7f0000279000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000034f000-0x60)=[{&(0x7f0000641000)="00040812", 0x4}, {&(0x7f0000287000-0x83)="5147dea06d45dee743b3cf757d8f42d1b8101a115220c4c9cceb113202d10048ebeb8a60717fd9cfc737ffa893e5174e38c318639e8f3dff9f9f026f7907427b065eb227398c6fd208c7361f3b692a55f12cb8eeb717bc16d5cf760161246b3d1ca0deb073a836f4ba1f16cf19da6c35140506abbd59bb175bf60db12e8efc5b349dab", 0x83}, {&(0x7f000021a000)="1bddd18a69d017f2148466c69f328059d76fe3f3c5120b406c641ae8222c23850d2ac8", 0x23}], 0x3, &(0x7f000034c000)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r1, r1, r1, r2, r2]}], 0x60, 0x20000000}, {&(0x7f0000a59000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000cd6000)=[{&(0x7f0000756000-0xcf)="ee0cfabbd6a95c1817832379e8161f2052263ea18d89f8ff0d4c276a8d10db44835228f6f045991695e46e0ae0b75b006099e95592c2051c05d3ec30c71f1752f43e260cd9e0362277195b3c702877935370c40cb13e863c9286c8daeb145718a045755bb860cd501294863195b6d6a9a155d734884e92466bddaf679d1d93bcc2f74e7fdaf46b030355df104de8975fd8e91b911f220507d10231d881683f0a02cdf414dd1d99c065d754d03a02f97e27c488037f0e52", 0xb7}, {&(0x7f0000a70000-0xc)="0d5e5e248bc1248e4a7de8ded1c05f12a2f6b83e5af8f2ec60d2565e4b94374390e9f6b5268e", 0x26}, {&(0x7f0000f3b000)="b06bfda89c132b5c16e8a361b4b3f37c5678a3b57a1c772a261a32277018123f8710f8ebd58d3651dc116042", 0x2c}, {&(0x7f00007de000)="efa4ffd64b", 0x5}], 0x4, &(0x7f0000be8000-0x18)=[], 0x0, 0x4840}], 0x2, 0x840) connect$unix(r1, &(0x7f00009d7000)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) 2018/02/06 13:57:27 executing program 2: mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000fc0000)=@abs, 0x8, &(0x7f0000001000)=[{&(0x7f0000fc1000)="e335518c4d7ae319288b0640c3", 0xd}], 0x1, &(0x7f0000000000)=[]}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000fc3000-0x50)={@common='tunl0\x00', @ifru_data=&(0x7f0000fc1000-0x20)="5b6dad1e4bab4601dbff00000020000000000000dd7affffff00030a0b8436c8"}) 2018/02/06 13:57:27 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$void(r0, 0x5451) 2018/02/06 13:57:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000569000)="1f0000001a001bf200001321fdf3167600041d0100008d3d93391a0001454a", 0x1f) recvmmsg(r0, &(0x7f0000659000)=[{{&(0x7f0000989000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x14, &(0x7f0000632000-0x10)=[], 0x0, &(0x7f0000eec000)=""/167, 0xa7}}], 0x1, 0x0, 0x0) 2018/02/06 13:57:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000f1e000+0xc07), &(0x7f00001f7000-0x4)=0x8) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeb000-0xa)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d1000-0x8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) 2018/02/06 13:57:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fcb000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000033000-0x8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000464000)='./file0\x00', 0x0) readlinkat(r0, &(0x7f000003c000-0x8)='./file0\x00', &(0x7f0000fd1000-0x99)=""/153, 0x99) 2018/02/06 13:57:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x5d) listen(r1, 0x1) sendto$inet6(r0, &(0x7f0000eba000-0x1), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r1) 2018/02/06 13:57:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000549000-0x82)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031f000-0xc)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e80000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r2]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000569000)="1f0000001a001bf200001321fdf3167600041d0100008d3d93391a0001454a", 0x1f) recvmmsg(r0, &(0x7f0000659000)=[{{&(0x7f0000989000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x14, &(0x7f0000632000-0x10)=[], 0x0, &(0x7f0000eec000)=""/167, 0xa7}}], 0x1, 0x0, 0x0) 2018/02/06 13:57:27 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r1, &(0x7f0000001000-0x64), 0x0) getdents64(r1, &(0x7f0000002000+0x35d)=""/69, 0x45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 2: mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000fc0000)=@abs, 0x8, &(0x7f0000001000)=[{&(0x7f0000fc1000)="e335518c4d7ae319288b0640c3", 0xd}], 0x1, &(0x7f0000000000)=[]}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000fc3000-0x50)={@common='tunl0\x00', @ifru_data=&(0x7f0000fc1000-0x20)="5b6dad1e4bab4601dbff00000020000000000000dd7affffff00030a0b8436c8"}) 2018/02/06 13:57:27 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$void(r0, 0x5451) 2018/02/06 13:57:27 executing program 0: mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000fc0000)=@abs, 0x8, &(0x7f0000001000)=[{&(0x7f0000fc1000)="e335518c4d7ae319288b0640c3", 0xd}], 0x1, &(0x7f0000000000)=[]}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000fc3000-0x50)={@common='tunl0\x00', @ifru_data=&(0x7f0000fc1000-0x20)="5b6dad1e4bab4601dbff00000020000000000000dd7affffff00030a0b8436c8"}) 2018/02/06 13:57:27 executing program 2: mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000fc0000)=@abs, 0x8, &(0x7f0000001000)=[{&(0x7f0000fc1000)="e335518c4d7ae319288b0640c3", 0xd}], 0x1, &(0x7f0000000000)=[]}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000fc3000-0x50)={@common='tunl0\x00', @ifru_data=&(0x7f0000fc1000-0x20)="5b6dad1e4bab4601dbff00000020000000000000dd7affffff00030a0b8436c8"}) 2018/02/06 13:57:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x5d) listen(r1, 0x1) sendto$inet6(r0, &(0x7f0000eba000-0x1), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r1) 2018/02/06 13:57:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000f1e000+0xc07), &(0x7f00001f7000-0x4)=0x8) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeb000-0xa)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d1000-0x8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) 2018/02/06 13:57:27 executing program 6: clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) getpeername$netlink(0xffffffffffffffff, &(0x7f000099b000), &(0x7f0000e8f000)=0xc) 2018/02/06 13:57:27 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$void(r0, 0x5451) 2018/02/06 13:57:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) readv(r0, &(0x7f0000da8000)=[{&(0x7f0000acb000-0x1000)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 2: mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000fc0000)=@abs, 0x8, &(0x7f0000001000)=[{&(0x7f0000fc1000)="e335518c4d7ae319288b0640c3", 0xd}], 0x1, &(0x7f0000000000)=[]}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000fc3000-0x50)={@common='tunl0\x00', @ifru_data=&(0x7f0000fc1000-0x20)="5b6dad1e4bab4601dbff00000020000000000000dd7affffff00030a0b8436c8"}) 2018/02/06 13:57:27 executing program 6: clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) getpeername$netlink(0xffffffffffffffff, &(0x7f000099b000), &(0x7f0000e8f000)=0xc) 2018/02/06 13:57:27 executing program 0: mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000fc0000)=@abs, 0x8, &(0x7f0000001000)=[{&(0x7f0000fc1000)="e335518c4d7ae319288b0640c3", 0xd}], 0x1, &(0x7f0000000000)=[]}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000fc3000-0x50)={@common='tunl0\x00', @ifru_data=&(0x7f0000fc1000-0x20)="5b6dad1e4bab4601dbff00000020000000000000dd7affffff00030a0b8436c8"}) 2018/02/06 13:57:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000f1e000+0xc07), &(0x7f00001f7000-0x4)=0x8) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeb000-0xa)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d1000-0x8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) 2018/02/06 13:57:27 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r1, &(0x7f0000001000-0x64), 0x0) getdents64(r1, &(0x7f0000002000+0x35d)=""/69, 0x45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x5d) listen(r1, 0x1) sendto$inet6(r0, &(0x7f0000eba000-0x1), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r1) 2018/02/06 13:57:27 executing program 6: clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) getpeername$netlink(0xffffffffffffffff, &(0x7f000099b000), &(0x7f0000e8f000)=0xc) 2018/02/06 13:57:27 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$void(r0, 0x5451) 2018/02/06 13:57:27 executing program 6: clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) getpeername$netlink(0xffffffffffffffff, &(0x7f000099b000), &(0x7f0000e8f000)=0xc) 2018/02/06 13:57:27 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r1, &(0x7f0000001000-0x64), 0x0) getdents64(r1, &(0x7f0000002000+0x35d)=""/69, 0x45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 7: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r1, &(0x7f0000001000-0x64), 0x0) getdents64(r1, &(0x7f0000002000+0x35d)=""/69, 0x45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 52.447437] FAULT_FLAG_ALLOW_RETRY missing 30 [ 52.452520] CPU: 1 PID: 10651 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 52.460132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.469474] ffff8801d7a074e0 ffffffff81d94b69 ffff8801d7a077c0 0000000000000000 [ 52.477503] ffff8801ba99b490 ffff8801d7a076b0 ffff8801ba99b380 ffff8801d7a076d8 [ 52.485525] ffffffff816624ba 000000000000159d ffff8801bf8a0968 ffff8801bf8a08a0 [ 52.493577] Call Trace: [ 52.496139] [] dump_stack+0xc1/0x128 [ 52.501480] [] handle_userfault+0xa3a/0x1310 [ 52.507528] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.514523] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 52.520918] [] ? handle_mm_fault+0x117b/0x2530 [ 52.527134] [] ? handle_mm_fault+0x1fc3/0x2530 [ 52.533336] [] handle_mm_fault+0x1fd1/0x2530 [ 52.539362] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.546347] [] ? __pmd_alloc+0x410/0x410 [ 52.552026] [] ? __lock_is_held+0xa1/0xf0 [ 52.557794] [] __do_page_fault+0x5c2/0xd40 [ 52.563649] [] ? mm_fault_error+0x2c0/0x2c0 [ 52.569598] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.576231] [] do_page_fault+0x27/0x30 [ 52.581735] [] page_fault+0x28/0x30 [ 52.586983] [] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 52.593963] [] ? iov_iter_fault_in_readable+0x1a7/0x410 [ 52.600946] [] ? iov_iter_advance+0xd70/0xd70 [ 52.607063] [] ? __mark_inode_dirty+0x226/0x1080 [ 52.613437] [] ? __mark_inode_dirty+0x19b/0x1080 [ 52.619808] [] generic_perform_write+0x1dc/0x500 [ 52.626183] [] ? __mark_inode_dirty+0x1a0/0x1080 [ 52.632558] [] ? page_endio+0x180/0x180 [ 52.638149] [] ? file_update_time+0xbc/0x3b0 [ 52.644173] [] ? current_time+0xd0/0xd0 [ 52.649765] [] __generic_file_write_iter+0x348/0x570 [ 52.656484] [] generic_file_write_iter+0x2d5/0x600 [ 52.663032] [] __vfs_write+0x4bf/0x680 [ 52.668539] [] ? do_iter_readv_writev+0x400/0x400 [ 52.675007] [] ? __lock_is_held+0xa1/0xf0 [ 52.680782] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 52.687334] [] ? __sb_start_write+0x14a/0x310 2018/02/06 13:57:27 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockname(r0, &(0x7f0000867000-0x9)=@rc, &(0x7f0000a07000-0x4)=0x9) 2018/02/06 13:57:27 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r1, &(0x7f0000001000-0x64), 0x0) getdents64(r1, &(0x7f0000002000+0x35d)=""/69, 0x45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 7: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r1, &(0x7f0000001000-0x64), 0x0) getdents64(r1, &(0x7f0000002000+0x35d)=""/69, 0x45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 0: mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000fc0000)=@abs, 0x8, &(0x7f0000001000)=[{&(0x7f0000fc1000)="e335518c4d7ae319288b0640c3", 0xd}], 0x1, &(0x7f0000000000)=[]}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000fc3000-0x50)={@common='tunl0\x00', @ifru_data=&(0x7f0000fc1000-0x20)="5b6dad1e4bab4601dbff00000020000000000000dd7affffff00030a0b8436c8"}) 2018/02/06 13:57:27 executing program 1: clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) getpeername$netlink(0xffffffffffffffff, &(0x7f000099b000), &(0x7f0000e8f000)=0xc) 2018/02/06 13:57:27 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r1, &(0x7f0000001000-0x64), 0x0) getdents64(r1, &(0x7f0000002000+0x35d)=""/69, 0x45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) readv(r0, &(0x7f0000da8000)=[{&(0x7f0000acb000-0x1000)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) readv(r0, &(0x7f0000da8000)=[{&(0x7f0000acb000-0x1000)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 1: clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) getpeername$netlink(0xffffffffffffffff, &(0x7f000099b000), &(0x7f0000e8f000)=0xc) 2018/02/06 13:57:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) readv(r0, &(0x7f0000da8000)=[{&(0x7f0000acb000-0x1000)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 1: clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) getpeername$netlink(0xffffffffffffffff, &(0x7f000099b000), &(0x7f0000e8f000)=0xc) [ 52.693446] [] vfs_write+0x189/0x530 [ 52.698778] [] SyS_write+0xd9/0x1b0 [ 52.704027] [] ? SyS_read+0x1b0/0x1b0 [ 52.709455] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.716299] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 52.716308] [] entry_SYSCALL_64_fastpath+0x29/0xe8 2018/02/06 13:57:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000005000-0x10)={0x2, 0xe, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/06 13:57:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) readv(r0, &(0x7f0000da8000)=[{&(0x7f0000acb000-0x1000)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) readv(r0, &(0x7f0000da8000)=[{&(0x7f0000acb000-0x1000)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockname(r0, &(0x7f0000867000-0x9)=@rc, &(0x7f0000a07000-0x4)=0x9) [ 52.786561] FAULT_FLAG_ALLOW_RETRY missing 30 [ 52.790048] FAULT_FLAG_ALLOW_RETRY missing 30 [ 52.790059] CPU: 0 PID: 10696 Comm: syz-executor6 Not tainted 4.9.80-g550c01d #29 [ 52.790065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.790079] ffff8801d00f74e0 ffffffff81d94b69 ffff8801d00f77c0 0000000000000000 [ 52.790090] ffff8801ce729d90 ffff8801d00f76b0 ffff8801ce729c80 ffff8801d00f76d8 2018/02/06 13:57:27 executing program 7: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r1, &(0x7f0000001000-0x64), 0x0) getdents64(r1, &(0x7f0000002000+0x35d)=""/69, 0x45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r1, &(0x7f0000001000-0x64), 0x0) getdents64(r1, &(0x7f0000002000+0x35d)=""/69, 0x45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000005000-0x10)={0x2, 0xe, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/06 13:57:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) readv(r0, &(0x7f0000da8000)=[{&(0x7f0000acb000-0x1000)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockname(r0, &(0x7f0000867000-0x9)=@rc, &(0x7f0000a07000-0x4)=0x9) 2018/02/06 13:57:27 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000004000-0x8)='./file0\x00', 0x0) writev(r1, &(0x7f0000004000-0x28)=[{&(0x7f0000013000-0x49)='5', 0x1}], 0x1) getdents(r1, &(0x7f0000001000-0x64), 0x0) getdents64(r1, &(0x7f0000002000+0x35d)=""/69, 0x45) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00004db000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 52.790101] ffffffff816624ba 000000000000159d ffff8801cfc55168 ffff8801cfc550a0 [ 52.790103] Call Trace: [ 52.790118] [] dump_stack+0xc1/0x128 [ 52.790127] [] handle_userfault+0xa3a/0x1310 [ 52.790139] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.790148] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 52.790158] [] ? __lock_is_held+0xa1/0xf0 [ 52.790166] [] ? handle_mm_fault+0x117b/0x2530 [ 52.790198] [] ? handle_mm_fault+0x1fc3/0x2530 [ 52.790207] [] handle_mm_fault+0x1fd1/0x2530 [ 52.790217] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.790225] [] ? __pmd_alloc+0x410/0x410 [ 52.790234] [] ? __lock_is_held+0xa1/0xf0 [ 52.790247] [] __do_page_fault+0x5c2/0xd40 [ 52.790257] [] ? mm_fault_error+0x2c0/0x2c0 [ 52.790267] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.790276] [] do_page_fault+0x27/0x30 [ 52.790286] [] page_fault+0x28/0x30 [ 52.790294] [] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 52.790301] [] ? iov_iter_fault_in_readable+0x1a7/0x410 [ 52.790308] [] ? iov_iter_advance+0xd70/0xd70 [ 52.790316] [] ? mark_held_locks+0xaf/0x100 [ 52.790324] [] generic_perform_write+0x1dc/0x500 [ 52.790330] [] ? page_endio+0x180/0x180 [ 52.790339] [] ? file_update_time+0xbc/0x3b0 [ 52.790346] [] ? current_time+0xd0/0xd0 [ 52.790354] [] __generic_file_write_iter+0x348/0x570 [ 52.790361] [] generic_file_write_iter+0x2d5/0x600 [ 52.790370] [] __vfs_write+0x4bf/0x680 [ 52.790378] [] ? do_iter_readv_writev+0x400/0x400 [ 52.790385] [] ? __lock_is_held+0xa1/0xf0 [ 52.790394] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 2018/02/06 13:57:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) readv(r0, &(0x7f0000da8000)=[{&(0x7f0000acb000-0x1000)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000005000-0x10)={0x2, 0xe, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/06 13:57:27 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockname(r0, &(0x7f0000867000-0x9)=@rc, &(0x7f0000a07000-0x4)=0x9) 2018/02/06 13:57:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000e5e000)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000e76000)={0x0, 0x1, [0x0]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000450000-0x4)=0x340, 0x4) recvmsg(r0, &(0x7f0000ec7000)={&(0x7f0000d3f000-0x10)=@nfc, 0x10, &(0x7f0000546000-0x30)=[], 0x0, &(0x7f0000ccf000)=""/4096, 0x1000}, 0x0) 2018/02/06 13:57:27 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000a000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)="00674226eefa") exit(0x0) getdents64(r1, &(0x7f0000419000-0x44), 0x0) 2018/02/06 13:57:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000007a000-0x12)='/dev/input/event#\x00', 0x0, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000070d000-0xc)) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/02/06 13:57:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) readv(r0, &(0x7f0000da8000)=[{&(0x7f0000acb000-0x1000)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000c66000)={0x0}, &(0x7f0000c6c000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000a36000-0xdf)={r1, 0xc6, 0xd7, "4f84edb104a92b8a2095b8df326fffc8aada65811299e9be9245278ced66141bd6db137fc11d57f65589ecf504cd5592779d856349f85edacda91fbb2d2c69359cdec3ef4ce20cdc423b1097c9ae2f13cfb1e16de29a41d30044844ba4a6390f15666f0e80ccbde0f1a9aa044197f9a272b0c71d3117cc9a9f70e7d771913b02f57961a66f37b3c38f66a8fd14b2538c323b56034c8072f237b66a43d43a864c2e276b9119b17cd33cd3842b68c5045f60662bd43d8346098a5e5ea9e757d41d6d112edddaace94b95d1241687b3e393e25a7d1d2e1f51"}, 0xdf) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f000002c000-0x40)={0x0, 0x1, 0x2}) mq_timedreceive(r2, &(0x7f000009d000)=""/224, 0xe0, 0x20d4671c, &(0x7f0000e6f000-0x8)={0x77359400}) mq_timedsend(r2, &(0x7f000066c000), 0x0, 0x0, &(0x7f000066d000-0x10)) [ 52.790400] [] ? __sb_start_write+0x14a/0x310 [ 52.790407] [] vfs_write+0x189/0x530 [ 52.790415] [] SyS_write+0xd9/0x1b0 [ 52.790422] [] ? SyS_read+0x1b0/0x1b0 [ 52.790431] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.790437] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 52.790445] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 53.078785] CPU: 1 PID: 10701 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 2018/02/06 13:57:27 executing program 3: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ffc000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00005e4000-0x4)=0x2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000ffd000-0x4), 0x4) 2018/02/06 13:57:27 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000005000-0x10)={0x2, 0xe, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) [ 53.078789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.078805] ffff8801cf46f4e0 ffffffff81d94b69 ffff8801cf46f7c0 0000000000000000 [ 53.078812] ffff8801ba99bc10 ffff8801cf46f6b0 ffff8801ba99bb00 ffff8801cf46f6d8 [ 53.078820] ffffffff816624ba 000000000000159d ffff8801d058d168 ffff8801d058d0a0 [ 53.078821] Call Trace: [ 53.078834] [] dump_stack+0xc1/0x128 2018/02/06 13:57:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00002cc000-0xe8)={{{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x3}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@rand_addr}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) connect$inet6(r0, &(0x7f00001c5000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/06 13:57:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078e000-0x8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) readv(r0, &(0x7f0000da8000)=[{&(0x7f0000acb000-0x1000)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000045000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) chown(&(0x7f0000033000)='./file0\x00', 0x0, 0x0) 2018/02/06 13:57:27 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000a000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)="00674226eefa") exit(0x0) getdents64(r1, &(0x7f0000419000-0x44), 0x0) 2018/02/06 13:57:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00002cc000-0xe8)={{{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x3}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@rand_addr}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) connect$inet6(r0, &(0x7f00001c5000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 53.078845] [] handle_userfault+0xa3a/0x1310 [ 53.078856] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 53.078864] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 53.078871] [] ? __lock_is_held+0xa1/0xf0 [ 53.078879] [] ? handle_mm_fault+0x117b/0x2530 [ 53.078886] [] ? handle_mm_fault+0x1fc3/0x2530 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ffc000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00005e4000-0x4)=0x2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000ffd000-0x4), 0x4) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000045000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) chown(&(0x7f0000033000)='./file0\x00', 0x0, 0x0) 2018/02/06 13:57:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00002cc000-0xe8)={{{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x3}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@rand_addr}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) connect$inet6(r0, &(0x7f00001c5000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/06 13:57:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000e5e000)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000e76000)={0x0, 0x1, [0x0]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000450000-0x4)=0x340, 0x4) recvmsg(r0, &(0x7f0000ec7000)={&(0x7f0000d3f000-0x10)=@nfc, 0x10, &(0x7f0000546000-0x30)=[], 0x0, &(0x7f0000ccf000)=""/4096, 0x1000}, 0x0) 2018/02/06 13:57:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000007a000-0x12)='/dev/input/event#\x00', 0x0, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000070d000-0xc)) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/02/06 13:57:28 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000a000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)="00674226eefa") exit(0x0) getdents64(r1, &(0x7f0000419000-0x44), 0x0) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xffffff0d, 0x0, 0x0, 0x7ec0564612021139) close(r0) [ 53.078892] [] handle_mm_fault+0x1fd1/0x2530 [ 53.078900] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 53.078907] [] ? __pmd_alloc+0x410/0x410 [ 53.078914] [] ? __lock_is_held+0xa1/0xf0 [ 53.078924] [] __do_page_fault+0x5c2/0xd40 [ 53.078931] [] ? mm_fault_error+0x2c0/0x2c0 [ 53.078939] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.078946] [] do_page_fault+0x27/0x30 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ffc000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00005e4000-0x4)=0x2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000ffd000-0x4), 0x4) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000045000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) chown(&(0x7f0000033000)='./file0\x00', 0x0, 0x0) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00002cc000-0xe8)={{{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x3}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@rand_addr}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) connect$inet6(r0, &(0x7f00001c5000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 53.078955] [] page_fault+0x28/0x30 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ffc000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00005e4000-0x4)=0x2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000ffd000-0x4), 0x4) [ 53.078963] [] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 53.078970] [] ? iov_iter_fault_in_readable+0x1a7/0x410 [ 53.078976] [] ? iov_iter_advance+0xd70/0xd70 [ 53.078985] [] ? mark_held_locks+0xaf/0x100 [ 53.078992] [] generic_perform_write+0x1dc/0x500 [ 53.078998] [] ? page_endio+0x180/0x180 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000045000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) chown(&(0x7f0000033000)='./file0\x00', 0x0, 0x0) 2018/02/06 13:57:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="00e2660000", 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f00009b1000)='./file0\x00', &(0x7f0000ae7000-0x8)='./file0\x00', &(0x7f0000226000)='an\x00\x00\x00\x00\x00\x00\x00\afs\x00', 0x100000, &(0x7f0000b64000-0x1000)) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f00001a5000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f00002ba000)='\x00v\t', 0x1004, &(0x7f000073b000-0x1)) mount(&(0x7f00005e1000-0x8)='./file0\x00', &(0x7f0000df5000-0x8)='.', &(0x7f0000df4000)='%&t3\x00', 0x2000, &(0x7f00003db000-0x23)) mount(&(0x7f0000fdd000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f000000e000-0x4)) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f000074e000)={0x18, 0x1, 0x2, 0x900000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x1, []}]}, 0x18}, 0x1}, 0x0) 2018/02/06 13:57:28 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000a000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)="00674226eefa") exit(0x0) getdents64(r1, &(0x7f0000419000-0x44), 0x0) 2018/02/06 13:57:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000e5e000)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000e76000)={0x0, 0x1, [0x0]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000450000-0x4)=0x340, 0x4) recvmsg(r0, &(0x7f0000ec7000)={&(0x7f0000d3f000-0x10)=@nfc, 0x10, &(0x7f0000546000-0x30)=[], 0x0, &(0x7f0000ccf000)=""/4096, 0x1000}, 0x0) 2018/02/06 13:57:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000007a000-0x12)='/dev/input/event#\x00', 0x0, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000070d000-0xc)) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xffffff0d, 0x0, 0x0, 0x7ec0564612021139) close(r0) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf03f}]}) r1 = socket(0x18, 0x0, 0x1) dup2(r1, r0) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f000000c000)) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f000074e000)={0x18, 0x1, 0x2, 0x900000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x1, []}]}, 0x18}, 0x1}, 0x0) [ 53.079007] [] ? file_update_time+0xbc/0x3b0 [ 53.079014] [] ? current_time+0xd0/0xd0 [ 53.079021] [] __generic_file_write_iter+0x348/0x570 [ 53.079029] [] generic_file_write_iter+0x2d5/0x600 [ 53.079037] [] __vfs_write+0x4bf/0x680 [ 53.079044] [] ? do_iter_readv_writev+0x400/0x400 [ 53.079052] [] ? __lock_is_held+0xa1/0xf0 2018/02/06 13:57:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f000060d000-0x4)) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f000000e000-0x4)) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf03f}]}) r1 = socket(0x18, 0x0, 0x1) dup2(r1, r0) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f000000c000)) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f000074e000)={0x18, 0x1, 0x2, 0x900000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x1, []}]}, 0x18}, 0x1}, 0x0) 2018/02/06 13:57:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="00e2660000", 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f00009b1000)='./file0\x00', &(0x7f0000ae7000-0x8)='./file0\x00', &(0x7f0000226000)='an\x00\x00\x00\x00\x00\x00\x00\afs\x00', 0x100000, &(0x7f0000b64000-0x1000)) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f00001a5000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f00002ba000)='\x00v\t', 0x1004, &(0x7f000073b000-0x1)) mount(&(0x7f00005e1000-0x8)='./file0\x00', &(0x7f0000df5000-0x8)='.', &(0x7f0000df4000)='%&t3\x00', 0x2000, &(0x7f00003db000-0x23)) mount(&(0x7f0000fdd000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xffffff0d, 0x0, 0x0, 0x7ec0564612021139) close(r0) [ 53.079060] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 53.079067] [] ? __sb_start_write+0x14a/0x310 [ 53.079074] [] vfs_write+0x189/0x530 [ 53.079081] [] SyS_write+0xd9/0x1b0 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f000000e000-0x4)) 2018/02/06 13:57:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000e5e000)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000e76000)={0x0, 0x1, [0x0]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000450000-0x4)=0x340, 0x4) recvmsg(r0, &(0x7f0000ec7000)={&(0x7f0000d3f000-0x10)=@nfc, 0x10, &(0x7f0000546000-0x30)=[], 0x0, &(0x7f0000ccf000)=""/4096, 0x1000}, 0x0) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf03f}]}) r1 = socket(0x18, 0x0, 0x1) dup2(r1, r0) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f000000c000)) [ 53.079088] [] ? SyS_read+0x1b0/0x1b0 [ 53.079096] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 53.079103] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 53.079110] [] entry_SYSCALL_64_fastpath+0x29/0xe8 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f000074e000)={0x18, 0x1, 0x2, 0x900000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x1, []}]}, 0x18}, 0x1}, 0x0) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf03f}]}) r1 = socket(0x18, 0x0, 0x1) dup2(r1, r0) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f000000c000)) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f000000e000-0x4)) 2018/02/06 13:57:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f000060d000-0x4)) 2018/02/06 13:57:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000007a000-0x12)='/dev/input/event#\x00', 0x0, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000070d000-0xc)) write$evdev(r0, &(0x7f0000058000-0x60)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xffffff0d, 0x0, 0x0, 0x7ec0564612021139) close(r0) 2018/02/06 13:57:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="00e2660000", 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f00009b1000)='./file0\x00', &(0x7f0000ae7000-0x8)='./file0\x00', &(0x7f0000226000)='an\x00\x00\x00\x00\x00\x00\x00\afs\x00', 0x100000, &(0x7f0000b64000-0x1000)) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f00001a5000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f00002ba000)='\x00v\t', 0x1004, &(0x7f000073b000-0x1)) mount(&(0x7f00005e1000-0x8)='./file0\x00', &(0x7f0000df5000-0x8)='.', &(0x7f0000df4000)='%&t3\x00', 0x2000, &(0x7f00003db000-0x23)) mount(&(0x7f0000fdd000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) 2018/02/06 13:57:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="00e2660000", 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f00009b1000)='./file0\x00', &(0x7f0000ae7000-0x8)='./file0\x00', &(0x7f0000226000)='an\x00\x00\x00\x00\x00\x00\x00\afs\x00', 0x100000, &(0x7f0000b64000-0x1000)) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f00001a5000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f00002ba000)='\x00v\t', 0x1004, &(0x7f000073b000-0x1)) mount(&(0x7f00005e1000-0x8)='./file0\x00', &(0x7f0000df5000-0x8)='.', &(0x7f0000df4000)='%&t3\x00', 0x2000, &(0x7f00003db000-0x23)) mount(&(0x7f0000fdd000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0xfdb000)=nil, 0xfdb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000e80000-0x4)=0x81) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000e40000+0x56c)=0x3) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x1}}) write$sndseq(r1, &(0x7f0000e70000-0x30)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000715000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000052f000)=@ethtool_gstrings={0x1b, 0x80000000000004}}) 2018/02/06 13:57:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f000060d000-0x4)) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007d1000-0x8), 0x8) unshare(0x400) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/06 13:57:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="00e2660000", 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f00009b1000)='./file0\x00', &(0x7f0000ae7000-0x8)='./file0\x00', &(0x7f0000226000)='an\x00\x00\x00\x00\x00\x00\x00\afs\x00', 0x100000, &(0x7f0000b64000-0x1000)) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f00001a5000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f00002ba000)='\x00v\t', 0x1004, &(0x7f000073b000-0x1)) mount(&(0x7f00005e1000-0x8)='./file0\x00', &(0x7f0000df5000-0x8)='.', &(0x7f0000df4000)='%&t3\x00', 0x2000, &(0x7f00003db000-0x23)) mount(&(0x7f0000fdd000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0xfdb000)=nil, 0xfdb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000e80000-0x4)=0x81) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000e40000+0x56c)=0x3) 2018/02/06 13:57:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f000060d000-0x4)) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x1}}) write$sndseq(r1, &(0x7f0000e70000-0x30)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007d1000-0x8), 0x8) unshare(0x400) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/06 13:57:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f29000-0x8), 0x100000002) write(r1, &(0x7f0000782000-0x14), 0x0) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000715000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000052f000)=@ethtool_gstrings={0x1b, 0x80000000000004}}) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0xfdb000)=nil, 0xfdb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000e80000-0x4)=0x81) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000e40000+0x56c)=0x3) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x1}}) write$sndseq(r1, &(0x7f0000e70000-0x30)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007d1000-0x8), 0x8) unshare(0x400) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/06 13:57:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007fb000-0x10)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a32000-0x38)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c0a000-0x10)={&(0x7f0000644000-0x1a0)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendto$inet(r0, &(0x7f0000b7f000), 0x0, 0x0, 0x0, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f00005c5000-0x188)=[{&(0x7f0000477000-0x60)={0x27, 0x1f, 0x0, 0x3, 0x1000, 0x40, "032dc87e9534b245f71672c376749deb3c9f4354e421c7ef8cf89d4b78a33f34e4ecf5c3997e848e66b8be561d39226487be64d535790786ed85e734bfcbf9", 0x5}, 0x60, &(0x7f00006b8000-0x70)=[{&(0x7f0000823000)="d4", 0x1}], 0x1, &(0x7f0000fd5000)={0x20, 0x198, 0x9, "6ff3563b524e4adf4397f89c16a8"}, 0x20, 0x8000}, {&(0x7f0000952000)={0x27, 0x8, 0x7, 0x7, 0x4, 0x8000, "e7a6af25a01a2d5276a8804b2fbcf8a9c4ed7632814c5fc607dd67478b9c5152aa5a4f0c22b7b8a521dfbf5afe84771676dafbd3898a96e8cb2f99596863c1", 0x9}, 0x60, &(0x7f0000a95000-0x60)=[{&(0x7f0000ed4000)="eedb6ffaf4589f288a715107a970adfe9d945f1a943cc3b783685fce5503b828f7fe5e1fb0d71491b879af25d62f2409fc582c69abdccb05c9f9ce47294526f603d33373b8d637020dede5831005b69fca78d2acc6e312c4b366b2524d7fa51dc13bbad835536016ac799ef56bccc6e227935ed3dd70bde6336fd4f08a2ad42909875d16692758f90d80f9001d0c8c1371010315bd488c6f204ac5f613c2c5e694c32948c252952e17c7f1958a5cd3e428a3dd4825f2454904035de9fe034628", 0xc0}], 0x1, &(0x7f0000a93000)={0x20, 0x117, 0x7, "a40206814e2f035f6e7c000fea2773d7"}, 0x20, 0x20000000}], 0x2, 0x1) 2018/02/06 13:57:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="00e2660000", 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f00009b1000)='./file0\x00', &(0x7f0000ae7000-0x8)='./file0\x00', &(0x7f0000226000)='an\x00\x00\x00\x00\x00\x00\x00\afs\x00', 0x100000, &(0x7f0000b64000-0x1000)) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f00001a5000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f00002ba000)='\x00v\t', 0x1004, &(0x7f000073b000-0x1)) mount(&(0x7f00005e1000-0x8)='./file0\x00', &(0x7f0000df5000-0x8)='.', &(0x7f0000df4000)='%&t3\x00', 0x2000, &(0x7f00003db000-0x23)) mount(&(0x7f0000fdd000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) 2018/02/06 13:57:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="00e2660000", 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f00009b1000)='./file0\x00', &(0x7f0000ae7000-0x8)='./file0\x00', &(0x7f0000226000)='an\x00\x00\x00\x00\x00\x00\x00\afs\x00', 0x100000, &(0x7f0000b64000-0x1000)) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)='./file0\x00', 0x0) mount(&(0x7f00001a5000-0xe)='./file0/file0\x00', &(0x7f00002fb000-0x8)='./file0/file0\x00', &(0x7f00002ba000)='\x00v\t', 0x1004, &(0x7f000073b000-0x1)) mount(&(0x7f00005e1000-0x8)='./file0\x00', &(0x7f0000df5000-0x8)='.', &(0x7f0000df4000)='%&t3\x00', 0x2000, &(0x7f00003db000-0x23)) mount(&(0x7f0000fdd000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) 2018/02/06 13:57:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f29000-0x8), 0x100000002) write(r1, &(0x7f0000782000-0x14), 0x0) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007d1000-0x8), 0x8) unshare(0x400) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0xfdb000)=nil, 0xfdb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000e80000-0x4)=0x81) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000e40000+0x56c)=0x3) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000715000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000052f000)=@ethtool_gstrings={0x1b, 0x80000000000004}}) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f29000-0x8), 0x100000002) write(r1, &(0x7f0000782000-0x14), 0x0) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000715000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000052f000)=@ethtool_gstrings={0x1b, 0x80000000000004}}) 2018/02/06 13:57:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007fb000-0x10)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a32000-0x38)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c0a000-0x10)={&(0x7f0000644000-0x1a0)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendto$inet(r0, &(0x7f0000b7f000), 0x0, 0x0, 0x0, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f00005c5000-0x188)=[{&(0x7f0000477000-0x60)={0x27, 0x1f, 0x0, 0x3, 0x1000, 0x40, "032dc87e9534b245f71672c376749deb3c9f4354e421c7ef8cf89d4b78a33f34e4ecf5c3997e848e66b8be561d39226487be64d535790786ed85e734bfcbf9", 0x5}, 0x60, &(0x7f00006b8000-0x70)=[{&(0x7f0000823000)="d4", 0x1}], 0x1, &(0x7f0000fd5000)={0x20, 0x198, 0x9, "6ff3563b524e4adf4397f89c16a8"}, 0x20, 0x8000}, {&(0x7f0000952000)={0x27, 0x8, 0x7, 0x7, 0x4, 0x8000, "e7a6af25a01a2d5276a8804b2fbcf8a9c4ed7632814c5fc607dd67478b9c5152aa5a4f0c22b7b8a521dfbf5afe84771676dafbd3898a96e8cb2f99596863c1", 0x9}, 0x60, &(0x7f0000a95000-0x60)=[{&(0x7f0000ed4000)="eedb6ffaf4589f288a715107a970adfe9d945f1a943cc3b783685fce5503b828f7fe5e1fb0d71491b879af25d62f2409fc582c69abdccb05c9f9ce47294526f603d33373b8d637020dede5831005b69fca78d2acc6e312c4b366b2524d7fa51dc13bbad835536016ac799ef56bccc6e227935ed3dd70bde6336fd4f08a2ad42909875d16692758f90d80f9001d0c8c1371010315bd488c6f204ac5f613c2c5e694c32948c252952e17c7f1958a5cd3e428a3dd4825f2454904035de9fe034628", 0xc0}], 0x1, &(0x7f0000a93000)={0x20, 0x117, 0x7, "a40206814e2f035f6e7c000fea2773d7"}, 0x20, 0x20000000}], 0x2, 0x1) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x1}}) write$sndseq(r1, &(0x7f0000e70000-0x30)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x808000000000002, 0x0, 0x3, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = memfd_create(&(0x7f000003a000)='bdevkeyring\a-GPLvboxnet0\'{wlan1&em1vmnet0\x00', 0x0) ftruncate(r0, 0x0) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00008f1000)='./control\x00', 0x0) getdents64(r0, &(0x7f000059a000)=""/87, 0x57) renameat2(r0, &(0x7f00007ab000)='./control\x00', r0, &(0x7f00001c9000)='./file0/file0\x00', 0x1) 2018/02/06 13:57:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007fb000-0x10)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a32000-0x38)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c0a000-0x10)={&(0x7f0000644000-0x1a0)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendto$inet(r0, &(0x7f0000b7f000), 0x0, 0x0, 0x0, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f00005c5000-0x188)=[{&(0x7f0000477000-0x60)={0x27, 0x1f, 0x0, 0x3, 0x1000, 0x40, "032dc87e9534b245f71672c376749deb3c9f4354e421c7ef8cf89d4b78a33f34e4ecf5c3997e848e66b8be561d39226487be64d535790786ed85e734bfcbf9", 0x5}, 0x60, &(0x7f00006b8000-0x70)=[{&(0x7f0000823000)="d4", 0x1}], 0x1, &(0x7f0000fd5000)={0x20, 0x198, 0x9, "6ff3563b524e4adf4397f89c16a8"}, 0x20, 0x8000}, {&(0x7f0000952000)={0x27, 0x8, 0x7, 0x7, 0x4, 0x8000, "e7a6af25a01a2d5276a8804b2fbcf8a9c4ed7632814c5fc607dd67478b9c5152aa5a4f0c22b7b8a521dfbf5afe84771676dafbd3898a96e8cb2f99596863c1", 0x9}, 0x60, &(0x7f0000a95000-0x60)=[{&(0x7f0000ed4000)="eedb6ffaf4589f288a715107a970adfe9d945f1a943cc3b783685fce5503b828f7fe5e1fb0d71491b879af25d62f2409fc582c69abdccb05c9f9ce47294526f603d33373b8d637020dede5831005b69fca78d2acc6e312c4b366b2524d7fa51dc13bbad835536016ac799ef56bccc6e227935ed3dd70bde6336fd4f08a2ad42909875d16692758f90d80f9001d0c8c1371010315bd488c6f204ac5f613c2c5e694c32948c252952e17c7f1958a5cd3e428a3dd4825f2454904035de9fe034628", 0xc0}], 0x1, &(0x7f0000a93000)={0x20, 0x117, 0x7, "a40206814e2f035f6e7c000fea2773d7"}, 0x20, 0x20000000}], 0x2, 0x1) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000009000-0x10)={0x0, 0x1, 0x6, @random="117aff0d71b9"}, 0x10) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = memfd_create(&(0x7f000003a000)='bdevkeyring\a-GPLvboxnet0\'{wlan1&em1vmnet0\x00', 0x0) ftruncate(r0, 0x0) [ 53.978565] device syz3 entered promiscuous mode 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00008f1000)='./control\x00', 0x0) getdents64(r0, &(0x7f000059a000)=""/87, 0x57) renameat2(r0, &(0x7f00007ab000)='./control\x00', r0, &(0x7f00001c9000)='./file0/file0\x00', 0x1) 2018/02/06 13:57:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f29000-0x8), 0x100000002) write(r1, &(0x7f0000782000-0x14), 0x0) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) 2018/02/06 13:57:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f29000-0x8), 0x100000002) write(r1, &(0x7f0000782000-0x14), 0x0) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00008f1000)='./control\x00', 0x0) getdents64(r0, &(0x7f000059a000)=""/87, 0x57) renameat2(r0, &(0x7f00007ab000)='./control\x00', r0, &(0x7f00001c9000)='./file0/file0\x00', 0x1) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000009000-0x10)={0x0, 0x1, 0x6, @random="117aff0d71b9"}, 0x10) 2018/02/06 13:57:28 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getrlimit(0x0, &(0x7f0000003000-0xe)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) pkey_mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000003000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = memfd_create(&(0x7f000003a000)='bdevkeyring\a-GPLvboxnet0\'{wlan1&em1vmnet0\x00', 0x0) ftruncate(r0, 0x0) 2018/02/06 13:57:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007fb000-0x10)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a32000-0x38)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c0a000-0x10)={&(0x7f0000644000-0x1a0)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendto$inet(r0, &(0x7f0000b7f000), 0x0, 0x0, 0x0, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f00005c5000-0x188)=[{&(0x7f0000477000-0x60)={0x27, 0x1f, 0x0, 0x3, 0x1000, 0x40, "032dc87e9534b245f71672c376749deb3c9f4354e421c7ef8cf89d4b78a33f34e4ecf5c3997e848e66b8be561d39226487be64d535790786ed85e734bfcbf9", 0x5}, 0x60, &(0x7f00006b8000-0x70)=[{&(0x7f0000823000)="d4", 0x1}], 0x1, &(0x7f0000fd5000)={0x20, 0x198, 0x9, "6ff3563b524e4adf4397f89c16a8"}, 0x20, 0x8000}, {&(0x7f0000952000)={0x27, 0x8, 0x7, 0x7, 0x4, 0x8000, "e7a6af25a01a2d5276a8804b2fbcf8a9c4ed7632814c5fc607dd67478b9c5152aa5a4f0c22b7b8a521dfbf5afe84771676dafbd3898a96e8cb2f99596863c1", 0x9}, 0x60, &(0x7f0000a95000-0x60)=[{&(0x7f0000ed4000)="eedb6ffaf4589f288a715107a970adfe9d945f1a943cc3b783685fce5503b828f7fe5e1fb0d71491b879af25d62f2409fc582c69abdccb05c9f9ce47294526f603d33373b8d637020dede5831005b69fca78d2acc6e312c4b366b2524d7fa51dc13bbad835536016ac799ef56bccc6e227935ed3dd70bde6336fd4f08a2ad42909875d16692758f90d80f9001d0c8c1371010315bd488c6f204ac5f613c2c5e694c32948c252952e17c7f1958a5cd3e428a3dd4825f2454904035de9fe034628", 0xc0}], 0x1, &(0x7f0000a93000)={0x20, 0x117, 0x7, "a40206814e2f035f6e7c000fea2773d7"}, 0x20, 0x20000000}], 0x2, 0x1) 2018/02/06 13:57:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00008f1000)='./control\x00', 0x0) getdents64(r0, &(0x7f000059a000)=""/87, 0x57) renameat2(r0, &(0x7f00007ab000)='./control\x00', r0, &(0x7f00001c9000)='./file0/file0\x00', 0x1) [ 54.041201] device syz3 left promiscuous mode 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = memfd_create(&(0x7f000003a000)='bdevkeyring\a-GPLvboxnet0\'{wlan1&em1vmnet0\x00', 0x0) ftruncate(r0, 0x0) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00008f1000)='./control\x00', 0x0) getdents64(r0, &(0x7f000059a000)=""/87, 0x57) renameat2(r0, &(0x7f00007ab000)='./control\x00', r0, &(0x7f00001c9000)='./file0/file0\x00', 0x1) 2018/02/06 13:57:28 executing program 6: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000009000-0x10)={0x0, 0x1, 0x6, @random="117aff0d71b9"}, 0x10) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00005ee000-0x8), 0x8) unshare(0x40600) fadvise64(r0, 0x0, 0xfffffffffffffffc, 0x0) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00005ee000-0x8), 0x8) unshare(0x40600) fadvise64(r0, 0x0, 0xfffffffffffffffc, 0x0) 2018/02/06 13:57:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f0000a9f000)={&(0x7f00006a4000-0x105c)=@newspdinfo={0x5c, 0x24, 0xc01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x5c}, 0x1}, 0x0) 2018/02/06 13:57:28 executing program 3: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000009000-0x10)={0x0, 0x1, 0x6, @random="117aff0d71b9"}, 0x10) 2018/02/06 13:57:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00005ee000-0x8), 0x8) unshare(0x40600) fadvise64(r0, 0x0, 0xfffffffffffffffc, 0x0) [ 54.073804] device syz3 entered promiscuous mode [ 54.088552] device syz3 left promiscuous mode [ 54.106715] device syz6 entered promiscuous mode [ 54.115390] device syz6 left promiscuous mode [ 54.163617] device syz3 entered promiscuous mode 2018/02/06 13:57:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f29000-0x8), 0x100000002) write(r1, &(0x7f0000782000-0x14), 0x0) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) [ 54.195192] device syz3 left promiscuous mode 2018/02/06 13:57:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f29000-0x8), 0x100000002) write(r1, &(0x7f0000782000-0x14), 0x0) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000009000-0x10)={0x0, 0x1, 0x6, @random="117aff0d71b9"}, 0x10) 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000009000-0x10)={0x0, 0x1, 0x6, @random="117aff0d71b9"}, 0x10) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00005ee000-0x8), 0x8) unshare(0x40600) fadvise64(r0, 0x0, 0xfffffffffffffffc, 0x0) 2018/02/06 13:57:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f0000a9f000)={&(0x7f00006a4000-0x105c)=@newspdinfo={0x5c, 0x24, 0xc01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x5c}, 0x1}, 0x0) 2018/02/06 13:57:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00008f1000)='./control\x00', 0x0) getdents64(r0, &(0x7f000059a000)=""/87, 0x57) renameat2(r0, &(0x7f00007ab000)='./control\x00', r0, &(0x7f00001c9000)='./file0/file0\x00', 0x1) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getrlimit(0x0, &(0x7f0000003000-0xe)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) pkey_mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000003000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000ed3000)=0x3e, 0x4) bind$inet6(r0, &(0x7f0000afe000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000ca7000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_map}) 2018/02/06 13:57:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f0000a9f000)={&(0x7f00006a4000-0x105c)=@newspdinfo={0x5c, 0x24, 0xc01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x5c}, 0x1}, 0x0) 2018/02/06 13:57:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00008f1000)='./control\x00', 0x0) getdents64(r0, &(0x7f000059a000)=""/87, 0x57) renameat2(r0, &(0x7f00007ab000)='./control\x00', r0, &(0x7f00001c9000)='./file0/file0\x00', 0x1) [ 54.278026] device syz6 entered promiscuous mode 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getrlimit(0x0, &(0x7f0000003000-0xe)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) pkey_mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000003000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000ed3000)=0x3e, 0x4) bind$inet6(r0, &(0x7f0000afe000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 2018/02/06 13:57:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f0000a9f000)={&(0x7f00006a4000-0x105c)=@newspdinfo={0x5c, 0x24, 0xc01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x5c}, 0x1}, 0x0) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000ca7000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_map}) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getrlimit(0x0, &(0x7f0000003000-0xe)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) pkey_mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000003000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) [ 54.310811] device syz3 entered promiscuous mode [ 54.327923] device syz3 left promiscuous mode [ 54.347712] device syz6 left promiscuous mode 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000009000-0x10)={0x0, 0x1, 0x6, @random="117aff0d71b9"}, 0x10) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000ed3000)=0x3e, 0x4) bind$inet6(r0, &(0x7f0000afe000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 2018/02/06 13:57:29 executing program 4: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f000001a000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f000001e000-0x10)={0x0, 0x0, &(0x7f000001d000-0x54)}) close(r0) 2018/02/06 13:57:29 executing program 1: socketpair(0x18, 0x0, 0x3, &(0x7f00009a0000)) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x31, &(0x7f0000970000-0xd9)='x', 0x1) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000ca7000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_map}) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000007000-0x30)='/dev/urandom\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fchown(r1, 0x0, 0x0) pwritev(r1, &(0x7f0000eb4000-0x48)=[{&(0x7f0000d43000)="90", 0x1}], 0x1, 0x0) close(r0) 2018/02/06 13:57:29 executing program 2: pipe(&(0x7f0000eec000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000e05000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0xffffffffffffffe6, &(0x7f000000d000)=[@fda={0x66646185, 0x0, 0x0, 0x80000}, @flat={0x77682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000e62000)}) 2018/02/06 13:57:29 executing program 1: socketpair(0x18, 0x0, 0x3, &(0x7f00009a0000)) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000ca7000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_map}) 2018/02/06 13:57:29 executing program 1: socketpair(0x18, 0x0, 0x3, &(0x7f00009a0000)) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x31, &(0x7f0000970000-0xd9)='x', 0x1) [ 54.416578] device syz6 entered promiscuous mode [ 54.419646] binder: 11059:11064 transaction failed 29201/-22, size -160--26 line 3127 [ 54.426621] binder_alloc: binder_alloc_mmap_handler: 11059 20000000-20002000 already mapped failed -16 [ 54.427805] binder: BINDER_SET_CONTEXT_MGR already set [ 54.427812] binder: 11059:11064 ioctl 40046207 0 returned -16 [ 54.427852] binder_alloc: 11059: binder_alloc_buf, no vma [ 54.427868] binder: 11059:11069 transaction failed 29189/-3, size -160--26 line 3127 [ 54.440710] binder: undelivered TRANSACTION_ERROR: 29189 [ 54.440729] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.494708] device syz6 left promiscuous mode 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000ed3000)=0x3e, 0x4) bind$inet6(r0, &(0x7f0000afe000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 2018/02/06 13:57:29 executing program 1: socketpair(0x18, 0x0, 0x3, &(0x7f00009a0000)) 2018/02/06 13:57:29 executing program 2: pipe(&(0x7f0000eec000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000e05000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0xffffffffffffffe6, &(0x7f000000d000)=[@fda={0x66646185, 0x0, 0x0, 0x80000}, @flat={0x77682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000e62000)}) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x31, &(0x7f0000970000-0xd9)='x', 0x1) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f000075a000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000031a000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000dcb000)={{}, 'port1\x00'}) 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000fcf000-0xe8)={{{@in6=@ipv4={[], [0xff, 0xff], @empty}, @in=@multicast1=0xe0000001}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, @in=@broadcast=0xffffffff}}, 0x2) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000007000-0x30)='/dev/urandom\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fchown(r1, 0x0, 0x0) pwritev(r1, &(0x7f0000eb4000-0x48)=[{&(0x7f0000d43000)="90", 0x1}], 0x1, 0x0) close(r0) 2018/02/06 13:57:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000484000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000b0c000-0x38)={&(0x7f0000df6000+0xa59)=@ax25, 0x10, &(0x7f0000534000-0x50)=[], 0x0, &(0x7f000092f000)=""/180, 0xb4}, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) unshare(0x400) clone(0x0, &(0x7f0000002000-0x1), &(0x7f0000b02000), &(0x7f00000ab000-0x4), &(0x7f0000002000+0x886)) 2018/02/06 13:57:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f000050a000-0x6e), 0xff77, 0x8000, &(0x7f0000560000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00007c0000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) sendmsg$inet_sctp(r0, &(0x7f000009b000-0x38)={&(0x7f0000ef6000-0x10)=@in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10, &(0x7f00008e2000-0x90)=[], 0x0, &(0x7f0000438000-0x90)=[]}, 0x0) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x31, &(0x7f0000970000-0xd9)='x', 0x1) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000fd6000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00007be000-0x4)=0x8, 0x0) 2018/02/06 13:57:29 executing program 2: pipe(&(0x7f0000eec000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000e05000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0xffffffffffffffe6, &(0x7f000000d000)=[@fda={0x66646185, 0x0, 0x0, 0x80000}, @flat={0x77682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000e62000)}) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000452000-0x10)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001fa000-0x20)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000afa000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x8, 0x7ffffffe}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/06 13:57:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f000050a000-0x6e), 0xff77, 0x8000, &(0x7f0000560000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00007c0000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) sendmsg$inet_sctp(r0, &(0x7f000009b000-0x38)={&(0x7f0000ef6000-0x10)=@in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10, &(0x7f00008e2000-0x90)=[], 0x0, &(0x7f0000438000-0x90)=[]}, 0x0) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000fd6000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00007be000-0x4)=0x8, 0x0) [ 54.602508] binder: 11089:11091 transaction failed 29201/-22, size -160--26 line 3127 [ 54.620075] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.636240] syz-executor1 (11098) used greatest stack depth: 23296 bytes left 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000fcf000-0xe8)={{{@in6=@ipv4={[], [0xff, 0xff], @empty}, @in=@multicast1=0xe0000001}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, @in=@broadcast=0xffffffff}}, 0x2) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000fd6000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00007be000-0x4)=0x8, 0x0) 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000fcf000-0xe8)={{{@in6=@ipv4={[], [0xff, 0xff], @empty}, @in=@multicast1=0xe0000001}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, @in=@broadcast=0xffffffff}}, 0x2) 2018/02/06 13:57:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f000050a000-0x6e), 0xff77, 0x8000, &(0x7f0000560000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00007c0000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) sendmsg$inet_sctp(r0, &(0x7f000009b000-0x38)={&(0x7f0000ef6000-0x10)=@in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10, &(0x7f00008e2000-0x90)=[], 0x0, &(0x7f0000438000-0x90)=[]}, 0x0) 2018/02/06 13:57:29 executing program 2: pipe(&(0x7f0000eec000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000e05000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f000000e000-0xb8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0xffffffffffffffe6, &(0x7f000000d000)=[@fda={0x66646185, 0x0, 0x0, 0x80000}, @flat={0x77682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f0000e62000)}) [ 54.648972] binder: 11113:11115 transaction failed 29201/-22, size -160--26 line 3127 [ 54.669363] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000fcf000-0xe8)={{{@in6=@ipv4={[], [0xff, 0xff], @empty}, @in=@multicast1=0xe0000001}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, @in=@broadcast=0xffffffff}}, 0x2) 2018/02/06 13:57:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000484000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000b0c000-0x38)={&(0x7f0000df6000+0xa59)=@ax25, 0x10, &(0x7f0000534000-0x50)=[], 0x0, &(0x7f000092f000)=""/180, 0xb4}, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) unshare(0x400) clone(0x0, &(0x7f0000002000-0x1), &(0x7f0000b02000), &(0x7f00000ab000-0x4), &(0x7f0000002000+0x886)) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000452000-0x10)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001fa000-0x20)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000afa000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x8, 0x7ffffffe}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000fd6000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00007be000-0x4)=0x8, 0x0) 2018/02/06 13:57:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f000050a000-0x6e), 0xff77, 0x8000, &(0x7f0000560000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00007c0000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) sendmsg$inet_sctp(r0, &(0x7f000009b000-0x38)={&(0x7f0000ef6000-0x10)=@in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10, &(0x7f00008e2000-0x90)=[], 0x0, &(0x7f0000438000-0x90)=[]}, 0x0) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000007000-0x30)='/dev/urandom\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fchown(r1, 0x0, 0x0) pwritev(r1, &(0x7f0000eb4000-0x48)=[{&(0x7f0000d43000)="90", 0x1}], 0x1, 0x0) close(r0) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f000075a000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000031a000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000dcb000)={{}, 'port1\x00'}) 2018/02/06 13:57:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000484000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000b0c000-0x38)={&(0x7f0000df6000+0xa59)=@ax25, 0x10, &(0x7f0000534000-0x50)=[], 0x0, &(0x7f000092f000)=""/180, 0xb4}, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) unshare(0x400) clone(0x0, &(0x7f0000002000-0x1), &(0x7f0000b02000), &(0x7f00000ab000-0x4), &(0x7f0000002000+0x886)) [ 54.698615] binder: 11132:11134 transaction failed 29201/-22, size -160--26 line 3127 [ 54.712626] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f000075a000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000031a000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000dcb000)={{}, 'port1\x00'}) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f000075a000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000031a000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000dcb000)={{}, 'port1\x00'}) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000452000-0x10)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001fa000-0x20)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000afa000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x8, 0x7ffffffe}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/06 13:57:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f000075a000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000031a000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000dcb000)={{}, 'port1\x00'}) 2018/02/06 13:57:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000484000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000b0c000-0x38)={&(0x7f0000df6000+0xa59)=@ax25, 0x10, &(0x7f0000534000-0x50)=[], 0x0, &(0x7f000092f000)=""/180, 0xb4}, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) unshare(0x400) clone(0x0, &(0x7f0000002000-0x1), &(0x7f0000b02000), &(0x7f00000ab000-0x4), &(0x7f0000002000+0x886)) 2018/02/06 13:57:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000484000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000b0c000-0x38)={&(0x7f0000df6000+0xa59)=@ax25, 0x10, &(0x7f0000534000-0x50)=[], 0x0, &(0x7f000092f000)=""/180, 0xb4}, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) unshare(0x400) clone(0x0, &(0x7f0000002000-0x1), &(0x7f0000b02000), &(0x7f00000ab000-0x4), &(0x7f0000002000+0x886)) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000007000-0x30)='/dev/urandom\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fchown(r1, 0x0, 0x0) pwritev(r1, &(0x7f0000eb4000-0x48)=[{&(0x7f0000d43000)="90", 0x1}], 0x1, 0x0) close(r0) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f000075a000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000031a000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000dcb000)={{}, 'port1\x00'}) 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000fd6000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00007be000-0x4)=0x8, 0x0) 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000fd6000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00007be000-0x4)=0x8, 0x0) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000452000-0x10)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001fa000-0x20)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000afa000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x8, 0x7ffffffe}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/06 13:57:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000484000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000b0c000-0x38)={&(0x7f0000df6000+0xa59)=@ax25, 0x10, &(0x7f0000534000-0x50)=[], 0x0, &(0x7f000092f000)=""/180, 0xb4}, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) unshare(0x400) clone(0x0, &(0x7f0000002000-0x1), &(0x7f0000b02000), &(0x7f00000ab000-0x4), &(0x7f0000002000+0x886)) 2018/02/06 13:57:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f000075a000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000031a000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000dcb000)={{}, 'port1\x00'}) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f000075a000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000031a000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000dcb000)={{}, 'port1\x00'}) 2018/02/06 13:57:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000484000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000b0c000-0x38)={&(0x7f0000df6000+0xa59)=@ax25, 0x10, &(0x7f0000534000-0x50)=[], 0x0, &(0x7f000092f000)=""/180, 0xb4}, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) unshare(0x400) clone(0x0, &(0x7f0000002000-0x1), &(0x7f0000b02000), &(0x7f00000ab000-0x4), &(0x7f0000002000+0x886)) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x26, 0x1) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f00004ef000-0xa)='./control\x00', 0x20000000000001a, 0x0) execveat(r0, &(0x7f0000010000)='./control\x00', &(0x7f000003f000)=[], &(0x7f0000002000-0x18)=[&(0x7f000003f000)="6b657972696e66ee"], 0x0) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0x66000)=nil, 0x66000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000066000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000060000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) writev(r0, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)="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", 0x1001}], 0x1) 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000fd6000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00007be000-0x4)=0x8, 0x0) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xdc0000)=nil, 0xdc0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000b7d000), 0x4) 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000c000-0x6)='./control\x00', &(0x7f000000b000-0x6)='./bus\x00') mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f000000d000-0xa)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaf8000)=nil, 0xaf8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000082a000)='./bus\x00', 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f000000d000-0x6)='./bus\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000740000-0x6)='./bus\x00', r1, &(0x7f00007fa000)='./control\x00', 0x2) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0x66000)=nil, 0x66000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000066000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000060000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) writev(r0, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)="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", 0x1001}], 0x1) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x26, 0x1) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f00004ef000-0xa)='./control\x00', 0x20000000000001a, 0x0) execveat(r0, &(0x7f0000010000)='./control\x00', &(0x7f000003f000)=[], &(0x7f0000002000-0x18)=[&(0x7f000003f000)="6b657972696e66ee"], 0x0) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xdc0000)=nil, 0xdc0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000b7d000), 0x4) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0x66000)=nil, 0x66000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000066000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000060000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) writev(r0, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)="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", 0x1001}], 0x1) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xdc0000)=nil, 0xdc0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000b7d000), 0x4) 2018/02/06 13:57:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x26, 0x1) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f00004ef000-0xa)='./control\x00', 0x20000000000001a, 0x0) execveat(r0, &(0x7f0000010000)='./control\x00', &(0x7f000003f000)=[], &(0x7f0000002000-0x18)=[&(0x7f000003f000)="6b657972696e66ee"], 0x0) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x26, 0x1) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f00004ef000-0xa)='./control\x00', 0x20000000000001a, 0x0) execveat(r0, &(0x7f0000010000)='./control\x00', &(0x7f000003f000)=[], &(0x7f0000002000-0x18)=[&(0x7f000003f000)="6b657972696e66ee"], 0x0) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0x66000)=nil, 0x66000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000066000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000060000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) writev(r0, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)="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", 0x1001}], 0x1) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0xdc0000)=nil, 0xdc0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000b7d000), 0x4) 2018/02/06 13:57:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x26, 0x1) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f00004ef000-0xa)='./control\x00', 0x20000000000001a, 0x0) execveat(r0, &(0x7f0000010000)='./control\x00', &(0x7f000003f000)=[], &(0x7f0000002000-0x18)=[&(0x7f000003f000)="6b657972696e66ee"], 0x0) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de3000-0x1), 0x0, 0x20000815, &(0x7f0000db5000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x26, 0x1) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f00004ef000-0xa)='./control\x00', 0x20000000000001a, 0x0) execveat(r0, &(0x7f0000010000)='./control\x00', &(0x7f000003f000)=[], &(0x7f0000002000-0x18)=[&(0x7f000003f000)="6b657972696e66ee"], 0x0) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fcntl$lock(r0, 0x5, &(0x7f0000012000)) 2018/02/06 13:57:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f000075a000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000031a000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000dcb000)={{}, 'port1\x00'}) 2018/02/06 13:57:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000030f000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x8000000004) ptrace$setopts(0x4209, r2, 0x4000000400203, 0x0) 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000c000-0x6)='./control\x00', &(0x7f000000b000-0x6)='./bus\x00') mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f000000d000-0xa)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaf8000)=nil, 0xaf8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000082a000)='./bus\x00', 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f000000d000-0x6)='./bus\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000740000-0x6)='./bus\x00', r1, &(0x7f00007fa000)='./control\x00', 0x2) 2018/02/06 13:57:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x26, 0x1) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f00004ef000-0xa)='./control\x00', 0x20000000000001a, 0x0) execveat(r0, &(0x7f0000010000)='./control\x00', &(0x7f000003f000)=[], &(0x7f0000002000-0x18)=[&(0x7f000003f000)="6b657972696e66ee"], 0x0) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f000059d000), &(0x7f000010f000-0x4)=0x4) 2018/02/06 13:57:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000305000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000286000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fcntl$lock(r0, 0x5, &(0x7f0000012000)) 2018/02/06 13:57:29 executing program 6: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000c000-0x6)='./control\x00', &(0x7f000000b000-0x6)='./bus\x00') mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f000000d000-0xa)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaf8000)=nil, 0xaf8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000082a000)='./bus\x00', 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f000000d000-0x6)='./bus\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000740000-0x6)='./bus\x00', r1, &(0x7f00007fa000)='./control\x00', 0x2) 2018/02/06 13:57:29 executing program 7: mmap(&(0x7f0000000000/0x51000)=nil, 0x51000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000008000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x0, 'client1\x00', 0x0, "ffffffff2b000006", "a6e7fdc21ca077ef1dae8000000000000000f6ff2ecd999baa11b5dda31cd901"}) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f000059d000), &(0x7f000010f000-0x4)=0x4) 2018/02/06 13:57:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00006d5000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001262, &(0x7f0000cab000-0x3)) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fcntl$lock(r0, 0x5, &(0x7f0000012000)) 2018/02/06 13:57:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000030f000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x8000000004) ptrace$setopts(0x4209, r2, 0x4000000400203, 0x0) 2018/02/06 13:57:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fcntl$lock(r0, 0x5, &(0x7f0000012000)) 2018/02/06 13:57:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000305000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000286000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2018/02/06 13:57:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f000059d000), &(0x7f000010f000-0x4)=0x4) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000c000-0x6)='./control\x00', &(0x7f000000b000-0x6)='./bus\x00') mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f000000d000-0xa)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaf8000)=nil, 0xaf8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000082a000)='./bus\x00', 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f000000d000-0x6)='./bus\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000740000-0x6)='./bus\x00', r1, &(0x7f00007fa000)='./control\x00', 0x2) 2018/02/06 13:57:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00006d5000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001262, &(0x7f0000cab000-0x3)) 2018/02/06 13:57:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000e2b000-0x4), 0x4) 2018/02/06 13:57:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f000059d000), &(0x7f000010f000-0x4)=0x4) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000305000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000286000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000030f000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x8000000004) ptrace$setopts(0x4209, r2, 0x4000000400203, 0x0) 2018/02/06 13:57:30 executing program 5: mmap(&(0x7f0000000000/0xfe5000)=nil, 0xfe5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe4000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000fd6000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/06 13:57:30 executing program 1: setpriority(0x3, 0x0, 0x0) 2018/02/06 13:57:30 executing program 1: setpriority(0x3, 0x0, 0x0) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00008f6000-0x9)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000084c000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x7003) dup3(r0, r1, 0x0) 2018/02/06 13:57:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00006d5000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001262, &(0x7f0000cab000-0x3)) 2018/02/06 13:57:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000d5a000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000b35000)=[{&(0x7f0000901000)=""/172, 0xac}], 0x1, 0x3) 2018/02/06 13:57:30 executing program 5: mmap(&(0x7f0000000000/0xfe5000)=nil, 0xfe5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe4000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000fd6000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000030f000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x8000000004) ptrace$setopts(0x4209, r2, 0x4000000400203, 0x0) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000305000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000286000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2018/02/06 13:57:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000e2b000-0x4), 0x4) 2018/02/06 13:57:30 executing program 1: setpriority(0x3, 0x0, 0x0) 2018/02/06 13:57:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00006d5000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001262, &(0x7f0000cab000-0x3)) 2018/02/06 13:57:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000e2b000-0x4), 0x4) 2018/02/06 13:57:30 executing program 5: mmap(&(0x7f0000000000/0xfe5000)=nil, 0xfe5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe4000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000fd6000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de3000-0xc)={0x10}, 0x84, &(0x7f00007a8000)={&(0x7f0000d7f000-0x14)={0x14, 0x5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b40000-0x54)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/06 13:57:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000e2b000-0x4), 0x4) 2018/02/06 13:57:30 executing program 5: mmap(&(0x7f0000000000/0xfe5000)=nil, 0xfe5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe4000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000fd6000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/06 13:57:30 executing program 1: setpriority(0x3, 0x0, 0x0) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00008f6000-0x9)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000084c000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x7003) dup3(r0, r1, 0x0) 2018/02/06 13:57:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000418000-0x119f)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}}}, 0x36) [ 55.366926] device gre0 entered promiscuous mode 2018/02/06 13:57:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000d5a000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000b35000)=[{&(0x7f0000901000)=""/172, 0xac}], 0x1, 0x3) 2018/02/06 13:57:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00008f6000-0x9)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000084c000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x7003) dup3(r0, r1, 0x0) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00008f6000-0x9)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000084c000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x7003) dup3(r0, r1, 0x0) 2018/02/06 13:57:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000856000-0x10)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) clone(0x0, &(0x7f0000fd7000), &(0x7f0000fd6000-0x4), &(0x7f0000f70000-0x4), &(0x7f0000f7b000-0xf4)) tkill(r1, 0x15) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de3000-0xc)={0x10}, 0x84, &(0x7f00007a8000)={&(0x7f0000d7f000-0x14)={0x14, 0x5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b40000-0x54)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/06 13:57:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000418000-0x119f)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}}}, 0x36) 2018/02/06 13:57:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000418000-0x119f)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}}}, 0x36) 2018/02/06 13:57:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00008f6000-0x9)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000084c000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x7003) dup3(r0, r1, 0x0) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de3000-0xc)={0x10}, 0x84, &(0x7f00007a8000)={&(0x7f0000d7f000-0x14)={0x14, 0x5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00008f6000-0x9)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000084c000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x7003) dup3(r0, r1, 0x0) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b40000-0x54)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/06 13:57:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00008f6000-0x9)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000084c000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x7003) dup3(r0, r1, 0x0) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de3000-0xc)={0x10}, 0x84, &(0x7f00007a8000)={&(0x7f0000d7f000-0x14)={0x14, 0x5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 55.464121] device gre0 entered promiscuous mode [ 55.545043] device gre0 entered promiscuous mode 2018/02/06 13:57:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000856000-0x10)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) clone(0x0, &(0x7f0000fd7000), &(0x7f0000fd6000-0x4), &(0x7f0000f70000-0x4), &(0x7f0000f7b000-0xf4)) tkill(r1, 0x15) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000033e000)={0x500, 0x0, 'client0\x00', 0x0, "4f34a4b4009347bc", "69dca9d65c3a7b99e635ae4b83829da2866dd0ca05c5054c781d7eabd7c3920f", 0x7, 0x9}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000991000)=0x200, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00008d8000), 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000c5000-0xe), 0x0, 0x20000020, &(0x7f000051b000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000723000-0xe)='/dev/keychord\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000a83000-0xb7)="801cff94d5fbf61d34ead06d82bab80388a4f02866390871c5ec708d1b3defa78c60e6b943706e482ebdf4dcebf1aa1fe77956f2cf0bfa209cd20d4445e2716685d218d095c6f5b1213c2ee56ba13deb769af3a91059f5b44abf6ef756b3ccafda116f64be96c7ac2c6f9805c6792d321f48a8ace2d61542c8e8dca43f726793933d1a5d6247b18975cd013385f8db28dd3baf298a83aa079954a003a6a159ce0bf8276cfe68b87c16097d6e893495278ba9ce5cfd228c", 0xb7) r2 = getegid() clock_gettime(0x0, &(0x7f0000f7f000-0x10)) getitimer(0x1, &(0x7f0000546000)) clock_gettime(0x0, &(0x7f00008fd000)={0x0, 0x0}) utimensat(r1, &(0x7f0000c41000-0x8)='./file0\x00', &(0x7f000098a000)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00008cf000)='/selinux/checkreqprot\x00', 0x0, 0x0) fdatasync(r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00004ff000)=0xcd, 0x4) getresgid(&(0x7f0000d7c000-0x4), &(0x7f00005aa000-0x4), &(0x7f00009fd000-0x4)=0x0) setregid(r2, r6) fcntl$notify(r0, 0x402, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000a73000), 0x14) futimesat(r5, &(0x7f0000692000-0x8)='./file0\x00', &(0x7f0000de1000)={{0x0, 0x2710}, {0x0, 0x2710}}) writev(r0, &(0x7f0000e2e000)=[{&(0x7f0000557000-0x65)="d636edc2735fbedca774ab20aa2d4fc9b09f130987eacfc878932d44ee14c1d4bcb32074ab0f0c6561b85566b3fa3c14c391bf606ec7c9c8767344638df33179a275433b79378757721a15a49e6629a2bd200e1b4f0b6bec726e6140665949ab574672fa40", 0x65}], 0x1) ppoll(&(0x7f0000cd9000)=[{r0, 0x10}, {r0, 0x3004}, {r0, 0x1000}], 0x3, &(0x7f00005cd000+0x69c), &(0x7f0000af6000-0x8)={0x9}, 0x8) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00002e9000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000ce4000), 0x0, 0x1, &(0x7f0000f78000)=@abs={0x0, 0x0, 0x0}, 0x8) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b40000-0x54)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/06 13:57:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000d5a000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000b35000)=[{&(0x7f0000901000)=""/172, 0xac}], 0x1, 0x3) 2018/02/06 13:57:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000418000-0x119f)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}}}, 0x36) 2018/02/06 13:57:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000418000-0x119f)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}}}, 0x36) 2018/02/06 13:57:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000856000-0x10)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) clone(0x0, &(0x7f0000fd7000), &(0x7f0000fd6000-0x4), &(0x7f0000f70000-0x4), &(0x7f0000f7b000-0xf4)) tkill(r1, 0x15) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00002e9000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000ce4000), 0x0, 0x1, &(0x7f0000f78000)=@abs={0x0, 0x0, 0x0}, 0x8) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4e000-0xf)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f0000f7e000-0x90)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x5, 0xfffffffffffffff7}}], 0x30) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00002e9000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000ce4000), 0x0, 0x1, &(0x7f0000f78000)=@abs={0x0, 0x0, 0x0}, 0x8) [ 55.655497] device gre0 entered promiscuous mode 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000033e000)={0x500, 0x0, 'client0\x00', 0x0, "4f34a4b4009347bc", "69dca9d65c3a7b99e635ae4b83829da2866dd0ca05c5054c781d7eabd7c3920f", 0x7, 0x9}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000991000)=0x200, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00008d8000), 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000c5000-0xe), 0x0, 0x20000020, &(0x7f000051b000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000723000-0xe)='/dev/keychord\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000a83000-0xb7)="801cff94d5fbf61d34ead06d82bab80388a4f02866390871c5ec708d1b3defa78c60e6b943706e482ebdf4dcebf1aa1fe77956f2cf0bfa209cd20d4445e2716685d218d095c6f5b1213c2ee56ba13deb769af3a91059f5b44abf6ef756b3ccafda116f64be96c7ac2c6f9805c6792d321f48a8ace2d61542c8e8dca43f726793933d1a5d6247b18975cd013385f8db28dd3baf298a83aa079954a003a6a159ce0bf8276cfe68b87c16097d6e893495278ba9ce5cfd228c", 0xb7) r2 = getegid() clock_gettime(0x0, &(0x7f0000f7f000-0x10)) getitimer(0x1, &(0x7f0000546000)) clock_gettime(0x0, &(0x7f00008fd000)={0x0, 0x0}) utimensat(r1, &(0x7f0000c41000-0x8)='./file0\x00', &(0x7f000098a000)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00008cf000)='/selinux/checkreqprot\x00', 0x0, 0x0) fdatasync(r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00004ff000)=0xcd, 0x4) getresgid(&(0x7f0000d7c000-0x4), &(0x7f00005aa000-0x4), &(0x7f00009fd000-0x4)=0x0) setregid(r2, r6) fcntl$notify(r0, 0x402, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000a73000), 0x14) futimesat(r5, &(0x7f0000692000-0x8)='./file0\x00', &(0x7f0000de1000)={{0x0, 0x2710}, {0x0, 0x2710}}) writev(r0, &(0x7f0000e2e000)=[{&(0x7f0000557000-0x65)="d636edc2735fbedca774ab20aa2d4fc9b09f130987eacfc878932d44ee14c1d4bcb32074ab0f0c6561b85566b3fa3c14c391bf606ec7c9c8767344638df33179a275433b79378757721a15a49e6629a2bd200e1b4f0b6bec726e6140665949ab574672fa40", 0x65}], 0x1) ppoll(&(0x7f0000cd9000)=[{r0, 0x10}, {r0, 0x3004}, {r0, 0x1000}], 0x3, &(0x7f00005cd000+0x69c), &(0x7f0000af6000-0x8)={0x9}, 0x8) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00002e9000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000ce4000), 0x0, 0x1, &(0x7f0000f78000)=@abs={0x0, 0x0, 0x0}, 0x8) 2018/02/06 13:57:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000d5a000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000b35000)=[{&(0x7f0000901000)=""/172, 0xac}], 0x1, 0x3) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000033e000)={0x500, 0x0, 'client0\x00', 0x0, "4f34a4b4009347bc", "69dca9d65c3a7b99e635ae4b83829da2866dd0ca05c5054c781d7eabd7c3920f", 0x7, 0x9}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000991000)=0x200, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00008d8000), 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000c5000-0xe), 0x0, 0x20000020, &(0x7f000051b000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000723000-0xe)='/dev/keychord\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000a83000-0xb7)="801cff94d5fbf61d34ead06d82bab80388a4f02866390871c5ec708d1b3defa78c60e6b943706e482ebdf4dcebf1aa1fe77956f2cf0bfa209cd20d4445e2716685d218d095c6f5b1213c2ee56ba13deb769af3a91059f5b44abf6ef756b3ccafda116f64be96c7ac2c6f9805c6792d321f48a8ace2d61542c8e8dca43f726793933d1a5d6247b18975cd013385f8db28dd3baf298a83aa079954a003a6a159ce0bf8276cfe68b87c16097d6e893495278ba9ce5cfd228c", 0xb7) r2 = getegid() clock_gettime(0x0, &(0x7f0000f7f000-0x10)) getitimer(0x1, &(0x7f0000546000)) clock_gettime(0x0, &(0x7f00008fd000)={0x0, 0x0}) utimensat(r1, &(0x7f0000c41000-0x8)='./file0\x00', &(0x7f000098a000)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00008cf000)='/selinux/checkreqprot\x00', 0x0, 0x0) fdatasync(r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00004ff000)=0xcd, 0x4) getresgid(&(0x7f0000d7c000-0x4), &(0x7f00005aa000-0x4), &(0x7f00009fd000-0x4)=0x0) setregid(r2, r6) fcntl$notify(r0, 0x402, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000a73000), 0x14) futimesat(r5, &(0x7f0000692000-0x8)='./file0\x00', &(0x7f0000de1000)={{0x0, 0x2710}, {0x0, 0x2710}}) writev(r0, &(0x7f0000e2e000)=[{&(0x7f0000557000-0x65)="d636edc2735fbedca774ab20aa2d4fc9b09f130987eacfc878932d44ee14c1d4bcb32074ab0f0c6561b85566b3fa3c14c391bf606ec7c9c8767344638df33179a275433b79378757721a15a49e6629a2bd200e1b4f0b6bec726e6140665949ab574672fa40", 0x65}], 0x1) ppoll(&(0x7f0000cd9000)=[{r0, 0x10}, {r0, 0x3004}, {r0, 0x1000}], 0x3, &(0x7f00005cd000+0x69c), &(0x7f0000af6000-0x8)={0x9}, 0x8) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000033e000)={0x500, 0x0, 'client0\x00', 0x0, "4f34a4b4009347bc", "69dca9d65c3a7b99e635ae4b83829da2866dd0ca05c5054c781d7eabd7c3920f", 0x7, 0x9}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000991000)=0x200, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00008d8000), 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000c5000-0xe), 0x0, 0x20000020, &(0x7f000051b000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000723000-0xe)='/dev/keychord\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000a83000-0xb7)="801cff94d5fbf61d34ead06d82bab80388a4f02866390871c5ec708d1b3defa78c60e6b943706e482ebdf4dcebf1aa1fe77956f2cf0bfa209cd20d4445e2716685d218d095c6f5b1213c2ee56ba13deb769af3a91059f5b44abf6ef756b3ccafda116f64be96c7ac2c6f9805c6792d321f48a8ace2d61542c8e8dca43f726793933d1a5d6247b18975cd013385f8db28dd3baf298a83aa079954a003a6a159ce0bf8276cfe68b87c16097d6e893495278ba9ce5cfd228c", 0xb7) r2 = getegid() clock_gettime(0x0, &(0x7f0000f7f000-0x10)) getitimer(0x1, &(0x7f0000546000)) clock_gettime(0x0, &(0x7f00008fd000)={0x0, 0x0}) utimensat(r1, &(0x7f0000c41000-0x8)='./file0\x00', &(0x7f000098a000)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00008cf000)='/selinux/checkreqprot\x00', 0x0, 0x0) fdatasync(r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00004ff000)=0xcd, 0x4) getresgid(&(0x7f0000d7c000-0x4), &(0x7f00005aa000-0x4), &(0x7f00009fd000-0x4)=0x0) setregid(r2, r6) fcntl$notify(r0, 0x402, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000a73000), 0x14) futimesat(r5, &(0x7f0000692000-0x8)='./file0\x00', &(0x7f0000de1000)={{0x0, 0x2710}, {0x0, 0x2710}}) writev(r0, &(0x7f0000e2e000)=[{&(0x7f0000557000-0x65)="d636edc2735fbedca774ab20aa2d4fc9b09f130987eacfc878932d44ee14c1d4bcb32074ab0f0c6561b85566b3fa3c14c391bf606ec7c9c8767344638df33179a275433b79378757721a15a49e6629a2bd200e1b4f0b6bec726e6140665949ab574672fa40", 0x65}], 0x1) ppoll(&(0x7f0000cd9000)=[{r0, 0x10}, {r0, 0x3004}, {r0, 0x1000}], 0x3, &(0x7f00005cd000+0x69c), &(0x7f0000af6000-0x8)={0x9}, 0x8) [ 55.678256] device gre0 entered promiscuous mode 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000033e000)={0x500, 0x0, 'client0\x00', 0x0, "4f34a4b4009347bc", "69dca9d65c3a7b99e635ae4b83829da2866dd0ca05c5054c781d7eabd7c3920f", 0x7, 0x9}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000991000)=0x200, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00008d8000), 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000c5000-0xe), 0x0, 0x20000020, &(0x7f000051b000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000723000-0xe)='/dev/keychord\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000a83000-0xb7)="801cff94d5fbf61d34ead06d82bab80388a4f02866390871c5ec708d1b3defa78c60e6b943706e482ebdf4dcebf1aa1fe77956f2cf0bfa209cd20d4445e2716685d218d095c6f5b1213c2ee56ba13deb769af3a91059f5b44abf6ef756b3ccafda116f64be96c7ac2c6f9805c6792d321f48a8ace2d61542c8e8dca43f726793933d1a5d6247b18975cd013385f8db28dd3baf298a83aa079954a003a6a159ce0bf8276cfe68b87c16097d6e893495278ba9ce5cfd228c", 0xb7) r2 = getegid() clock_gettime(0x0, &(0x7f0000f7f000-0x10)) getitimer(0x1, &(0x7f0000546000)) clock_gettime(0x0, &(0x7f00008fd000)={0x0, 0x0}) utimensat(r1, &(0x7f0000c41000-0x8)='./file0\x00', &(0x7f000098a000)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00008cf000)='/selinux/checkreqprot\x00', 0x0, 0x0) fdatasync(r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00004ff000)=0xcd, 0x4) getresgid(&(0x7f0000d7c000-0x4), &(0x7f00005aa000-0x4), &(0x7f00009fd000-0x4)=0x0) setregid(r2, r6) fcntl$notify(r0, 0x402, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000a73000), 0x14) futimesat(r5, &(0x7f0000692000-0x8)='./file0\x00', &(0x7f0000de1000)={{0x0, 0x2710}, {0x0, 0x2710}}) writev(r0, &(0x7f0000e2e000)=[{&(0x7f0000557000-0x65)="d636edc2735fbedca774ab20aa2d4fc9b09f130987eacfc878932d44ee14c1d4bcb32074ab0f0c6561b85566b3fa3c14c391bf606ec7c9c8767344638df33179a275433b79378757721a15a49e6629a2bd200e1b4f0b6bec726e6140665949ab574672fa40", 0x65}], 0x1) ppoll(&(0x7f0000cd9000)=[{r0, 0x10}, {r0, 0x3004}, {r0, 0x1000}], 0x3, &(0x7f00005cd000+0x69c), &(0x7f0000af6000-0x8)={0x9}, 0x8) 2018/02/06 13:57:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000856000-0x10)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) clone(0x0, &(0x7f0000fd7000), &(0x7f0000fd6000-0x4), &(0x7f0000f70000-0x4), &(0x7f0000f7b000-0xf4)) tkill(r1, 0x15) 2018/02/06 13:57:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000af7000)=""/201) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f000088a000)=""/232) 2018/02/06 13:57:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000856000-0x10)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) clone(0x0, &(0x7f0000fd7000), &(0x7f0000fd6000-0x4), &(0x7f0000f70000-0x4), &(0x7f0000f7b000-0xf4)) tkill(r1, 0x15) 2018/02/06 13:57:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000418000-0x119f)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}}}, 0x36) 2018/02/06 13:57:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000418000-0x119f)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}}}, 0x36) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfb4000)=nil, 0xfb4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000fad000)={0x1, &(0x7f0000fb2000-0x8)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) ioperm(0x0, 0x40, 0x0) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000033e000)={0x500, 0x0, 'client0\x00', 0x0, "4f34a4b4009347bc", "69dca9d65c3a7b99e635ae4b83829da2866dd0ca05c5054c781d7eabd7c3920f", 0x7, 0x9}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000991000)=0x200, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00008d8000), 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000c5000-0xe), 0x0, 0x20000020, &(0x7f000051b000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000723000-0xe)='/dev/keychord\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000a83000-0xb7)="801cff94d5fbf61d34ead06d82bab80388a4f02866390871c5ec708d1b3defa78c60e6b943706e482ebdf4dcebf1aa1fe77956f2cf0bfa209cd20d4445e2716685d218d095c6f5b1213c2ee56ba13deb769af3a91059f5b44abf6ef756b3ccafda116f64be96c7ac2c6f9805c6792d321f48a8ace2d61542c8e8dca43f726793933d1a5d6247b18975cd013385f8db28dd3baf298a83aa079954a003a6a159ce0bf8276cfe68b87c16097d6e893495278ba9ce5cfd228c", 0xb7) r2 = getegid() clock_gettime(0x0, &(0x7f0000f7f000-0x10)) getitimer(0x1, &(0x7f0000546000)) clock_gettime(0x0, &(0x7f00008fd000)={0x0, 0x0}) utimensat(r1, &(0x7f0000c41000-0x8)='./file0\x00', &(0x7f000098a000)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00008cf000)='/selinux/checkreqprot\x00', 0x0, 0x0) fdatasync(r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00004ff000)=0xcd, 0x4) getresgid(&(0x7f0000d7c000-0x4), &(0x7f00005aa000-0x4), &(0x7f00009fd000-0x4)=0x0) setregid(r2, r6) fcntl$notify(r0, 0x402, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000a73000), 0x14) futimesat(r5, &(0x7f0000692000-0x8)='./file0\x00', &(0x7f0000de1000)={{0x0, 0x2710}, {0x0, 0x2710}}) writev(r0, &(0x7f0000e2e000)=[{&(0x7f0000557000-0x65)="d636edc2735fbedca774ab20aa2d4fc9b09f130987eacfc878932d44ee14c1d4bcb32074ab0f0c6561b85566b3fa3c14c391bf606ec7c9c8767344638df33179a275433b79378757721a15a49e6629a2bd200e1b4f0b6bec726e6140665949ab574672fa40", 0x65}], 0x1) ppoll(&(0x7f0000cd9000)=[{r0, 0x10}, {r0, 0x3004}, {r0, 0x1000}], 0x3, &(0x7f00005cd000+0x69c), &(0x7f0000af6000-0x8)={0x9}, 0x8) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfb4000)=nil, 0xfb4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000fad000)={0x1, &(0x7f0000fb2000-0x8)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) ioperm(0x0, 0x40, 0x0) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000033e000)={0x500, 0x0, 'client0\x00', 0x0, "4f34a4b4009347bc", "69dca9d65c3a7b99e635ae4b83829da2866dd0ca05c5054c781d7eabd7c3920f", 0x7, 0x9}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000991000)=0x200, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00008d8000), 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000c5000-0xe), 0x0, 0x20000020, &(0x7f000051b000-0x10)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000723000-0xe)='/dev/keychord\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000a83000-0xb7)="801cff94d5fbf61d34ead06d82bab80388a4f02866390871c5ec708d1b3defa78c60e6b943706e482ebdf4dcebf1aa1fe77956f2cf0bfa209cd20d4445e2716685d218d095c6f5b1213c2ee56ba13deb769af3a91059f5b44abf6ef756b3ccafda116f64be96c7ac2c6f9805c6792d321f48a8ace2d61542c8e8dca43f726793933d1a5d6247b18975cd013385f8db28dd3baf298a83aa079954a003a6a159ce0bf8276cfe68b87c16097d6e893495278ba9ce5cfd228c", 0xb7) r2 = getegid() clock_gettime(0x0, &(0x7f0000f7f000-0x10)) getitimer(0x1, &(0x7f0000546000)) clock_gettime(0x0, &(0x7f00008fd000)={0x0, 0x0}) utimensat(r1, &(0x7f0000c41000-0x8)='./file0\x00', &(0x7f000098a000)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00008cf000)='/selinux/checkreqprot\x00', 0x0, 0x0) fdatasync(r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00004ff000)=0xcd, 0x4) getresgid(&(0x7f0000d7c000-0x4), &(0x7f00005aa000-0x4), &(0x7f00009fd000-0x4)=0x0) setregid(r2, r6) fcntl$notify(r0, 0x402, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000a73000), 0x14) futimesat(r5, &(0x7f0000692000-0x8)='./file0\x00', &(0x7f0000de1000)={{0x0, 0x2710}, {0x0, 0x2710}}) writev(r0, &(0x7f0000e2e000)=[{&(0x7f0000557000-0x65)="d636edc2735fbedca774ab20aa2d4fc9b09f130987eacfc878932d44ee14c1d4bcb32074ab0f0c6561b85566b3fa3c14c391bf606ec7c9c8767344638df33179a275433b79378757721a15a49e6629a2bd200e1b4f0b6bec726e6140665949ab574672fa40", 0x65}], 0x1) ppoll(&(0x7f0000cd9000)=[{r0, 0x10}, {r0, 0x3004}, {r0, 0x1000}], 0x3, &(0x7f00005cd000+0x69c), &(0x7f0000af6000-0x8)={0x9}, 0x8) [ 55.869322] device gre0 entered promiscuous mode 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfb4000)=nil, 0xfb4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000fad000)={0x1, &(0x7f0000fb2000-0x8)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) ioperm(0x0, 0x40, 0x0) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x481, &(0x7f00006c2000)=""/24, &(0x7f0000916000-0x4)) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfb4000)=nil, 0xfb4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000fad000)={0x1, &(0x7f0000fb2000-0x8)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) ioperm(0x0, 0x40, 0x0) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x481, &(0x7f00006c2000)=""/24, &(0x7f0000916000-0x4)) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000038000-0x8)='./file0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x481, &(0x7f00006c2000)=""/24, &(0x7f0000916000-0x4)) [ 55.944655] device gre0 entered promiscuous mode 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000038000-0x8)='./file0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x481, &(0x7f00006c2000)=""/24, &(0x7f0000916000-0x4)) 2018/02/06 13:57:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000af7000)=""/201) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f000088a000)=""/232) 2018/02/06 13:57:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000af7000)=""/201) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f000088a000)=""/232) 2018/02/06 13:57:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000856000-0x10)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) clone(0x0, &(0x7f0000fd7000), &(0x7f0000fd6000-0x4), &(0x7f0000f70000-0x4), &(0x7f0000f7b000-0xf4)) tkill(r1, 0x15) 2018/02/06 13:57:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000856000-0x10)={0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x0, 0x4, &(0x7f0000ee0000-0x10)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) clone(0x0, &(0x7f0000fd7000), &(0x7f0000fd6000-0x4), &(0x7f0000f70000-0x4), &(0x7f0000f7b000-0xf4)) tkill(r1, 0x15) 2018/02/06 13:57:30 executing program 5: ioprio_set$pid(0x2, 0x0, 0x7ffd) ioprio_get$pid(0x3, 0x0) 2018/02/06 13:57:30 executing program 5: ioprio_set$pid(0x2, 0x0, 0x7ffd) ioprio_get$pid(0x3, 0x0) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000038000-0x8)='./file0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) clone(0x0, &(0x7f0000572000), &(0x7f0000dad000-0x4), &(0x7f00009a9000-0x4), &(0x7f0000501000)) connect(r0, &(0x7f0000932000-0xc)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/06 13:57:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/06 13:57:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000038000-0x8)='./file0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:30 executing program 5: ioprio_set$pid(0x2, 0x0, 0x7ffd) ioprio_get$pid(0x3, 0x0) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000226000)='./control\x00', 0x0) r0 = open(&(0x7f0000ac3000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00004f1000-0xa)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000563000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000842000)='./file0\x00', r1, &(0x7f00007a4000)='./control\x00') renameat2(r0, &(0x7f000001e000-0xa)='./control\x00', r1, &(0x7f0000e15000-0xa)='./control\x00', 0x2) 2018/02/06 13:57:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) clone(0x0, &(0x7f0000572000), &(0x7f0000dad000-0x4), &(0x7f00009a9000-0x4), &(0x7f0000501000)) connect(r0, &(0x7f0000932000-0xc)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000226000)='./control\x00', 0x0) r0 = open(&(0x7f0000ac3000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00004f1000-0xa)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000563000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000842000)='./file0\x00', r1, &(0x7f00007a4000)='./control\x00') renameat2(r0, &(0x7f000001e000-0xa)='./control\x00', r1, &(0x7f0000e15000-0xa)='./control\x00', 0x2) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) clone(0x0, &(0x7f0000572000), &(0x7f0000dad000-0x4), &(0x7f00009a9000-0x4), &(0x7f0000501000)) connect(r0, &(0x7f0000932000-0xc)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/06 13:57:30 executing program 5: ioprio_set$pid(0x2, 0x0, 0x7ffd) ioprio_get$pid(0x3, 0x0) 2018/02/06 13:57:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000af7000)=""/201) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f000088a000)=""/232) 2018/02/06 13:57:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000af7000)=""/201) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f000088a000)=""/232) 2018/02/06 13:57:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000-0x38)={&(0x7f0000014000)={0x10}, 0xc, &(0x7f0000019000)={&(0x7f0000019000-0x34)={0x24, 0x2000002e, 0x2000000443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x10, 0x0, @str='nodev\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x1000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000b68000-0x4), &(0x7f0000f4e000)=0x4) 2018/02/06 13:57:30 executing program 5: mmap(&(0x7f0000000000/0xf8e000)=nil, 0xf8e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f0000814000)={0x10}, 0xc, &(0x7f0000f88000)={&(0x7f0000f8d000-0x98)=@ipv6_newroute={0x30, 0x18, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_MULTIPATH={0x14, 0x9, [{0x8}, {0x8}]}]}, 0x30}, 0x1}, 0x0) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000226000)='./control\x00', 0x0) r0 = open(&(0x7f0000ac3000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00004f1000-0xa)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000563000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000842000)='./file0\x00', r1, &(0x7f00007a4000)='./control\x00') renameat2(r0, &(0x7f000001e000-0xa)='./control\x00', r1, &(0x7f0000e15000-0xa)='./control\x00', 0x2) 2018/02/06 13:57:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000-0x38)={&(0x7f0000014000)={0x10}, 0xc, &(0x7f0000019000)={&(0x7f0000019000-0x34)={0x24, 0x2000002e, 0x2000000443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x10, 0x0, @str='nodev\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:30 executing program 5: mmap(&(0x7f0000000000/0xf8e000)=nil, 0xf8e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f0000814000)={0x10}, 0xc, &(0x7f0000f88000)={&(0x7f0000f8d000-0x98)=@ipv6_newroute={0x30, 0x18, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_MULTIPATH={0x14, 0x9, [{0x8}, {0x8}]}]}, 0x30}, 0x1}, 0x0) 2018/02/06 13:57:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000226000)='./control\x00', 0x0) r0 = open(&(0x7f0000ac3000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00004f1000-0xa)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000563000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000842000)='./file0\x00', r1, &(0x7f00007a4000)='./control\x00') renameat2(r0, &(0x7f000001e000-0xa)='./control\x00', r1, &(0x7f0000e15000-0xa)='./control\x00', 0x2) 2018/02/06 13:57:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000-0x38)={&(0x7f0000014000)={0x10}, 0xc, &(0x7f0000019000)={&(0x7f0000019000-0x34)={0x24, 0x2000002e, 0x2000000443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x10, 0x0, @str='nodev\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:30 executing program 5: mmap(&(0x7f0000000000/0xf8e000)=nil, 0xf8e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f0000814000)={0x10}, 0xc, &(0x7f0000f88000)={&(0x7f0000f8d000-0x98)=@ipv6_newroute={0x30, 0x18, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_MULTIPATH={0x14, 0x9, [{0x8}, {0x8}]}]}, 0x30}, 0x1}, 0x0) 2018/02/06 13:57:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) clone(0x0, &(0x7f0000572000), &(0x7f0000dad000-0x4), &(0x7f00009a9000-0x4), &(0x7f0000501000)) connect(r0, &(0x7f0000932000-0xc)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/06 13:57:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) clone(0x0, &(0x7f0000572000), &(0x7f0000dad000-0x4), &(0x7f00009a9000-0x4), &(0x7f0000501000)) connect(r0, &(0x7f0000932000-0xc)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/06 13:57:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000af7000)=""/201) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f000088a000)=""/232) 2018/02/06 13:57:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x1000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000b68000-0x4), &(0x7f0000f4e000)=0x4) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000-0x38)={&(0x7f0000014000)={0x10}, 0xc, &(0x7f0000019000)={&(0x7f0000019000-0x34)={0x24, 0x2000002e, 0x2000000443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x10, 0x0, @str='nodev\x00'}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f00002be000-0x1)='.') 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xf8e000)=nil, 0xf8e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f0000814000)={0x10}, 0xc, &(0x7f0000f88000)={&(0x7f0000f8d000-0x98)=@ipv6_newroute={0x30, 0x18, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_MULTIPATH={0x14, 0x9, [{0x8}, {0x8}]}]}, 0x30}, 0x1}, 0x0) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000073d000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000af7000)=""/201) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f000088a000)=""/232) 2018/02/06 13:57:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x1000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000b68000-0x4), &(0x7f0000f4e000)=0x4) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) clone(0x0, &(0x7f0000572000), &(0x7f0000dad000-0x4), &(0x7f00009a9000-0x4), &(0x7f0000501000)) connect(r0, &(0x7f0000932000-0xc)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/06 13:57:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) clone(0x0, &(0x7f0000572000), &(0x7f0000dad000-0x4), &(0x7f00009a9000-0x4), &(0x7f0000501000)) connect(r0, &(0x7f0000932000-0xc)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/06 13:57:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x20, 0x0, 0x0) 2018/02/06 13:57:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x20, 0x0, 0x0) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/06 13:57:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x20, 0x0, 0x0) 2018/02/06 13:57:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x20, 0x0, 0x0) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f00002be000-0x1)='.') 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x100300, &(0x7f0000010000-0x3e)="80", &(0x7f0000010000-0x4), &(0x7f0000010000-0x4), &(0x7f0000b5f000)) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0xa7da3082c6276f4b, &(0x7f0000000000)) 2018/02/06 13:57:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x1000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000b68000-0x4), &(0x7f0000f4e000)=0x4) 2018/02/06 13:57:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x0) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@loopback={0x0, 0x1}, @in6=@dev={0xfe, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f00005da000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x100300, &(0x7f0000010000-0x3e)="80", &(0x7f0000010000-0x4), &(0x7f0000010000-0x4), &(0x7f0000b5f000)) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027d000-0xe0)='mountstats\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x0) pread64(r0, &(0x7f0000085000)=""/80, 0x50, 0x22) 2018/02/06 13:57:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x0) 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x100300, &(0x7f0000010000-0x3e)="80", &(0x7f0000010000-0x4), &(0x7f0000010000-0x4), &(0x7f0000b5f000)) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f00002be000-0x1)='.') 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027d000-0xe0)='mountstats\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x0) pread64(r0, &(0x7f0000085000)=""/80, 0x50, 0x22) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0xa7da3082c6276f4b, &(0x7f0000000000)) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/06 13:57:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x0) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f00002be000-0x1)='.') 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@loopback={0x0, 0x1}, @in6=@dev={0xfe, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f00005da000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x100300, &(0x7f0000010000-0x3e)="80", &(0x7f0000010000-0x4), &(0x7f0000010000-0x4), &(0x7f0000b5f000)) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027d000-0xe0)='mountstats\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x0) pread64(r0, &(0x7f0000085000)=""/80, 0x50, 0x22) 2018/02/06 13:57:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027d000-0xe0)='mountstats\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x0) pread64(r0, &(0x7f0000085000)=""/80, 0x50, 0x22) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0xa7da3082c6276f4b, &(0x7f0000000000)) 2018/02/06 13:57:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x0) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027d000-0xe0)='mountstats\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x0) pread64(r0, &(0x7f0000085000)=""/80, 0x50, 0x22) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000684000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00009c4000-0x34)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}]}, 0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000231000)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@loopback={0x0, 0x1}, @in6=@dev={0xfe, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f00005da000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendto$inet(r0, &(0x7f00002bb000)='C', 0x1, 0x0, &(0x7f0000bb7000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000ec2000)='yeah\x00', 0x2b) sendmsg$unix(r1, &(0x7f0000f89000)={&(0x7f0000fd8000+0x1a6)=@abs, 0x8, &(0x7f0000682000)=[{&(0x7f00001b6000-0x1000)="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", 0x71d}], 0x1, &(0x7f0000781000-0x40)=[]}, 0x0) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027d000-0xe0)='mountstats\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x0) pread64(r0, &(0x7f0000085000)=""/80, 0x50, 0x22) 2018/02/06 13:57:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027d000-0xe0)='mountstats\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x0) pread64(r0, &(0x7f0000085000)=""/80, 0x50, 0x22) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@loopback={0x0, 0x1}, @in6=@dev={0xfe, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f00005da000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0xa7da3082c6276f4b, &(0x7f0000000000)) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027d000-0xe0)='mountstats\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x0) pread64(r0, &(0x7f0000085000)=""/80, 0x50, 0x22) 2018/02/06 13:57:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027d000-0xe0)='mountstats\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x0) pread64(r0, &(0x7f0000085000)=""/80, 0x50, 0x22) 2018/02/06 13:57:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) renameat2(0xffffffffffffffff, &(0x7f0000a82000-0x7)='./file0\x00', 0xffffffffffffffff, &(0x7f00003bf000)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f000082b000)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x4, 0x4, "00ac9d3026ff96debbce418cde9e3acccee47d5b628469e5bb1e754dc681fb15ee87357346794a30aeac408d62e359b7fe18a8637580454cc37b90847b112562", "de9ed0697a2d97ba35f5793454ab851ba610fe6f14018d36c4589ea353ec412521378fd5dc3da92b8a800e099c5cb005374370b9feee8ddac89cf01b5b6bc0af", "805dbfa88c687e42fbc709827da5b197b7b4fa4249c9c0e44efedaccc9764f26", [0xc732]}) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x34e, 0x0, &(0x7f00001e5000-0x8)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000000d000-0xa5)}) [ 56.536691] binder: 11693:11695 unknown command 0 [ 56.542357] binder: 11693:11695 ioctl c0306201 2000a000 returned -22 [ 56.552014] binder_alloc: binder_alloc_mmap_handler: 11693 20000000-20002000 already mapped failed -16 [ 56.562950] binder: BINDER_SET_CONTEXT_MGR already set [ 56.568240] binder: 11693:11697 ioctl 40046207 0 returned -16 [ 56.576070] binder: 11693:11695 unknown command 0 [ 56.576691] binder_alloc: 11693: binder_alloc_buf, no vma 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00006d5000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125e, &(0x7f0000a24000)) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xae2000)=nil, 0xae2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f00005f7000-0x3a)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f0000ae1000-0x4)=0x1f) ioctl$sock_FIOGETOWN(r1, 0x800454dd, &(0x7f000098e000)) 2018/02/06 13:57:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x25, 0x0, 0x0, "00000707c89d"}}) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027d000-0xe0)='mountstats\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x0) pread64(r0, &(0x7f0000085000)=""/80, 0x50, 0x22) 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendto$inet(r0, &(0x7f00002bb000)='C', 0x1, 0x0, &(0x7f0000bb7000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000ec2000)='yeah\x00', 0x2b) sendmsg$unix(r1, &(0x7f0000f89000)={&(0x7f0000fd8000+0x1a6)=@abs, 0x8, &(0x7f0000682000)=[{&(0x7f00001b6000-0x1000)="6e23c64e3b33814954e57383e3aacac749945304ea7ec2807dce46aa94091c7375db1935cbe271f60b3e32c4b1a89462fa3d5bb2acc966ca82f32ab8924a8560fc73a651c0c1416fe8767a6b6bb5015798b20b73f9350dcae7e0e8e68804cf88e700c36845e5d2b71930f431250651f1b4f1f387717182dea91851687dcac48c59fd7322c4314bb31fd859c41bdfaee691d6ffc255429e3d30a5fc8f8f5584d2113922adab2e97ca6d985690b37125977c8a763ee2f05c7d448a8ce6da00550050ff69d92270bc22674e1a8af7ace19452335753bdc787424c5411961f35f0525c26183158d0f9983f4c2cc5fa69c29a8aa939b383ba09bf4a8f5478d91d43747b3e322bf859c0468fe6f60e724628d78d894a3b84986d1e8fb29036c5f3d0503e618f8407bb13bf97154d7510b185a3f0cc7f195172f98d99adfbea94a066db37069ddb70aadc03ff1ae1af1dd89b5bec32be0e35f1cc519f16fd2f92f4b1446b2215f9742f16156a80ccba432161b98993678811c9ae1636c5c524a75acb504ffa7586140fa5f792aa2e54af60e98e206a3e4e0aadb8161890652509aba2ffdf959771c67662a5e057ef63b79d572ec9154bc9c8c43d58de1c1efe737037078544a1c602ac7dc4cb5ecb351d083d2ccc8a1ed70dd8ee8202bea9bd856dd6ee7bdb4f9cccbc75bb8cd23c9a1c4966fe1534ff462e09f597007a375ef31195d6067baffe981629b0daa3212cbc376a269ae65c7ba5afaf6c00018db92c7122ffabe7608226493be32c940c4c2e832192ad5010765f13edde275c49e5f123864f3cbef1e27d81b12b3cfb9c0403cc2a97a704d923ba3334acb19bff0be1a3ff0a7eb381fa42b73a21361299e0d95dbcfbd8be26ff7737b093e4b12a60c35f94d695a3c9336b82bfba54698977cd3cbcc58daaac214f7ada28eabc63c19e34c1e502c6bbff104c1ca18c92fbd0db0a033bb1ea0991a6d4414a86c93d786886263f2f8d7e91af9a7c5688d34e4404c561ecf878cb1237848b26dc1dc74800e195972940ace309598b0d5a5b83c49d335368c47b9ea5df6afaa6618861ccf0a11b773837e2ab75c6d46330570aeacf18a911607cba91eef5936e3b678afc2c1237ba2603bf7eec62d116ba1a8b85650e057533023a1d4aae8b87373e2b2b821ed57eb8c681694758ab2d2b5422434fb4be11f87671759d8640fcbb917376214740a6d6d92fd17c7b7ac492a7a971520a7b8d94c8ee0592afd5cad3c6495fd3a9aefb5c68432eba8bf647a931263b11490385a215bc1ba56410596750531e173317f4cb2b861dcc2c7ed942cc6b80993a90ad18c1d5f1f0dc9dbbb889c18ec58c4e6f5dc6e37ec0bceaabca53838199c940b0d297168f5a5db0b21c4df7f59ecf15b1e66efedf21dd7b1dd10b7177a8e970b501688fb790c16fa39ebf808c703f3332fe5cec651c4210dafd50ec196a48cfe58d8301aa70b21eb37f4f557e5b071f2e550243bc3d6cba5fcc069ca7046a3e044544dbcc57dae5d3d563d710f23cfc8050829f06dabf6a175a74d94775e81debb2b80daf733df0aba762b21555e48bc48ca7740a8bc6371ba0dcbe30ad8c6ddb8c3255d5802be77ac52060d6e2740a2674f44b154fce92025ee01377e2f53c5c4b6ddfa242a86a1da3f317185f9898404394f83a9c57904d54045456ea41cbbff8a44e415000d82f7542d84d2499450e609abc17a82afed4ce516a9bec8187272e84c55bb57050ce5df5b447e12da0d5539cca81121917051ba6c4c5315b95a35c928f4e5afb0666d934cc10ac69cf737cbc679f03ad62fb369a905c97737ae41d08ed92395d8d97a33bc954a09087fe720b15b044ed09a686cd935944bdf318a621147b40c992977d944e9c899a016845f127e425e2e83f2f5828754445a5c0fcef287f71d466cba0bb41c9e9906055239564827648a02103b24c822efef6ec41473962001f3472822ad8eb42e54794de4bb141385242a29450a5c6e4e8e93d29af1296c3db56c9408a0b9695b874f522ccd726fbeed69572c63666cc1da991b6b50a95c0dd534bdfc77a759d2be7a1982876cbbdcac56bd71eb32a579f26dad74fa04ec77ef5d29b17b03e459a7ce48f71b280e7abb7faff8331c690e4b342ea10b76fe522727f556ec4dcf8494f60cfe2b05c7ad8d5483244b5654b3c17e73451ad587ca1691a85f82856e9e5e2d8ab0186ad4f230958ea26bc621de0415a95889a6f0ef59f25f47ec33229596ed986a5003558bce664a2ee0cf785f94f02d1d4a9b8a6958586ffb0e598b57878a41de85445c182ae631c8cd5ab11b876edd9243fd43594fb20705831a8894d2d4bee840477ceba7f01781ed2dd5581e98cd8ba18081c1d2617066c619702e0693ac0c9b6ec552df3b03e19d2807eb3a327ae307c4b64ec997ef724db8c4a57e136392bc0965cf7f8f4289df727020b0674d3eefef6f7a5458a8c37f5969f62c69bce2364ef1d598054b2af8e933382f7c7526f13f42951c95bed179c905e2924f7d7e24a54c7766fc684a9c5af1dc40948051e23005d53074a8b0a92d9ff", 0x71d}], 0x1, &(0x7f0000781000-0x40)=[]}, 0x0) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x34e, 0x0, &(0x7f00001e5000-0x8)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000000d000-0xa5)}) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x34e, 0x0, &(0x7f00001e5000-0x8)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000000d000-0xa5)}) 2018/02/06 13:57:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendto$inet(r0, &(0x7f00002bb000)='C', 0x1, 0x0, &(0x7f0000bb7000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000ec2000)='yeah\x00', 0x2b) sendmsg$unix(r1, &(0x7f0000f89000)={&(0x7f0000fd8000+0x1a6)=@abs, 0x8, &(0x7f0000682000)=[{&(0x7f00001b6000-0x1000)="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", 0x71d}], 0x1, &(0x7f0000781000-0x40)=[]}, 0x0) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x34e, 0x0, &(0x7f00001e5000-0x8)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000000d000-0xa5)}) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x34e, 0x0, &(0x7f00001e5000-0x8)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000000d000-0xa5)}) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000096000)=[{&(0x7f0000e62000-0x58)="580000001400192340a14b80040d8c560a0600000000e076000543d8d8fe5800000024ca7f4f643e8900050028635a000510f5100002000000000000001c04ed5dfffff500002f000d0001000404080000fdff0000000005", 0x58}], 0x1) [ 56.576708] binder: 11693:11697 transaction failed 29189/-3, size 56-8 line 3127 [ 56.594053] binder: 11693:11695 ioctl c0306201 2000a000 returned -22 [ 56.602093] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.607609] binder: release 11693:11695 transaction 171 out, still active [ 56.619668] binder: undelivered TRANSACTION_COMPLETE 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) 2018/02/06 13:57:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x25, 0x0, 0x0, "00000707c89d"}}) 2018/02/06 13:57:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendto$inet(r0, &(0x7f00002bb000)='C', 0x1, 0x0, &(0x7f0000bb7000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000ec2000)='yeah\x00', 0x2b) sendmsg$unix(r1, &(0x7f0000f89000)={&(0x7f0000fd8000+0x1a6)=@abs, 0x8, &(0x7f0000682000)=[{&(0x7f00001b6000-0x1000)="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", 0x71d}], 0x1, &(0x7f0000781000-0x40)=[]}, 0x0) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x34e, 0x0, &(0x7f00001e5000-0x8)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000000d000-0xa5)}) [ 56.630833] binder: 11707:11710 unknown command 0 2018/02/06 13:57:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x25, 0x0, 0x0, "00000707c89d"}}) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xae2000)=nil, 0xae2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f00005f7000-0x3a)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f0000ae1000-0x4)=0x1f) ioctl$sock_FIOGETOWN(r1, 0x800454dd, &(0x7f000098e000)) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000072b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x34e, 0x0, &(0x7f00001e5000-0x8)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000006000-0x54)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000000d000-0xa5)}) 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendto$inet(r0, &(0x7f00002bb000)='C', 0x1, 0x0, &(0x7f0000bb7000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000ec2000)='yeah\x00', 0x2b) sendmsg$unix(r1, &(0x7f0000f89000)={&(0x7f0000fd8000+0x1a6)=@abs, 0x8, &(0x7f0000682000)=[{&(0x7f00001b6000-0x1000)="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", 0x71d}], 0x1, &(0x7f0000781000-0x40)=[]}, 0x0) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) [ 56.630841] binder: 11707:11710 ioctl c0306201 2000a000 returned -22 [ 56.631525] binder: BINDER_SET_CONTEXT_MGR already set [ 56.631532] binder: 11698:11704 ioctl 40046207 0 returned -16 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000096000)=[{&(0x7f0000e62000-0x58)="580000001400192340a14b80040d8c560a0600000000e076000543d8d8fe5800000024ca7f4f643e8900050028635a000510f5100002000000000000001c04ed5dfffff500002f000d0001000404080000fdff0000000005", 0x58}], 0x1) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xae2000)=nil, 0xae2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f00005f7000-0x3a)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f0000ae1000-0x4)=0x1f) ioctl$sock_FIOGETOWN(r1, 0x800454dd, &(0x7f000098e000)) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) 2018/02/06 13:57:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x25, 0x0, 0x0, "00000707c89d"}}) 2018/02/06 13:57:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x25, 0x0, 0x0, "00000707c89d"}}) 2018/02/06 13:57:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendto$inet(r0, &(0x7f00002bb000)='C', 0x1, 0x0, &(0x7f0000bb7000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000ec2000)='yeah\x00', 0x2b) sendmsg$unix(r1, &(0x7f0000f89000)={&(0x7f0000fd8000+0x1a6)=@abs, 0x8, &(0x7f0000682000)=[{&(0x7f00001b6000-0x1000)="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", 0x71d}], 0x1, &(0x7f0000781000-0x40)=[]}, 0x0) 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto(r0, &(0x7f0000024000-0xc3)="e6", 0x1, 0x0, &(0x7f0000538000+0x571)=@can={0x1d}, 0x10) sendto$inet(r0, &(0x7f00002bb000)='C', 0x1, 0x0, &(0x7f0000bb7000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000ec2000)='yeah\x00', 0x2b) sendmsg$unix(r1, &(0x7f0000f89000)={&(0x7f0000fd8000+0x1a6)=@abs, 0x8, &(0x7f0000682000)=[{&(0x7f00001b6000-0x1000)="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", 0x71d}], 0x1, &(0x7f0000781000-0x40)=[]}, 0x0) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000096000)=[{&(0x7f0000e62000-0x58)="580000001400192340a14b80040d8c560a0600000000e076000543d8d8fe5800000024ca7f4f643e8900050028635a000510f5100002000000000000001c04ed5dfffff500002f000d0001000404080000fdff0000000005", 0x58}], 0x1) 2018/02/06 13:57:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x25, 0x0, 0x0, "00000707c89d"}}) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) 2018/02/06 13:57:31 executing program 2: mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fcntl$addseals(r1, 0x409, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() tkill(r2, 0x16) lseek(r1, 0x0, 0x4) close(r0) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xae2000)=nil, 0xae2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f00005f7000-0x3a)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f0000ae1000-0x4)=0x1f) ioctl$sock_FIOGETOWN(r1, 0x800454dd, &(0x7f000098e000)) [ 56.631685] binder: 11698:11704 unknown command 0 [ 56.631692] binder: 11698:11704 ioctl c0306201 2000a000 returned -22 [ 56.659775] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000622000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000df8000-0x4)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000f72000)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000096000)=[{&(0x7f0000e62000-0x58)="580000001400192340a14b80040d8c560a0600000000e076000543d8d8fe5800000024ca7f4f643e8900050028635a000510f5100002000000000000001c04ed5dfffff500002f000d0001000404080000fdff0000000005", 0x58}], 0x1) [ 56.659782] binder: 11716:11718 ioctl 40046207 0 returned -16 [ 56.659940] binder: 11716:11718 unknown command 0 [ 56.659946] binder: 11716:11718 ioctl c0306201 2000a000 returned -22 [ 56.661109] binder_alloc: 11707: binder_alloc_buf, no vma [ 56.661126] binder: 11716:11718 transaction failed 29189/-3, size 56-8 line 3127 [ 56.670327] binder: BINDER_SET_CONTEXT_MGR already set [ 56.670334] binder: 11717:11721 ioctl 40046207 0 returned -16 [ 56.670487] binder: 11717:11721 unknown command 0 [ 56.670493] binder: 11717:11721 ioctl c0306201 2000a000 returned -22 [ 56.671438] binder_alloc: 11707: binder_alloc_buf, no vma [ 56.671455] binder: 11717:11721 transaction failed 29189/-3, size 56-8 line 3127 [ 56.711779] binder: BINDER_SET_CONTEXT_MGR already set [ 56.711787] binder: 11728:11733 ioctl 40046207 0 returned -16 [ 56.712131] binder: 11728:11733 unknown command 0 [ 56.712138] binder: 11728:11733 ioctl c0306201 2000a000 returned -22 [ 56.712887] binder_alloc: 11707: binder_alloc_buf, no vma [ 56.712904] binder: 11728:11733 transaction failed 29189/-3, size 56-8 line 3127 [ 56.716099] binder: BINDER_SET_CONTEXT_MGR already set [ 56.716106] binder: 11736:11739 ioctl 40046207 0 returned -16 [ 56.716260] binder: 11736:11739 unknown command 0 [ 56.716266] binder: 11736:11739 ioctl c0306201 2000a000 returned -22 [ 56.718856] binder_alloc: 11707: binder_alloc_buf, no vma [ 56.718876] binder: 11736:11739 transaction failed 29189/-3, size 56-8 line 3127 2018/02/06 13:57:31 executing program 2: mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fcntl$addseals(r1, 0x409, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() tkill(r2, 0x16) lseek(r1, 0x0, 0x4) close(r0) 2018/02/06 13:57:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x25, 0x0, 0x0, "00000707c89d"}}) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) unshare(0x40600) mq_notify(0xffffffffffffffff, &(0x7f0000c38000)={0x20000000, 0x0, 0x2, @tid}) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eba000)='/dev/ptmx\x00', 0x0, 0x0) close(r0) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xa76000)=nil, 0xa76000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000a73000)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f00003f0000-0x10)={0x0, 0x0, 0x30005}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000671000-0x8)={0xfff7fffffffffdb0}, 0x8, 0x0) readv(r2, &(0x7f0000a73000-0x10)=[{&(0x7f0000066000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000622000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000df8000-0x4)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000f72000)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/06 13:57:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000622000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000df8000-0x4)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000f72000)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r1, r0) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x0, 0x0, 0x0, 0x3fe, @time, {}, {}, @note}], 0x30) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xd3b000)=nil, 0xd3b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00001e9000-0x8)={0x19980330}, &(0x7f0000033000-0x18)) setgid(0x0) [ 56.923490] binder: send failed reply for transaction 171, target dead [ 56.930225] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.935772] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.941325] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.946909] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.967574] binder: release 11698:11704 transaction 178 out, still active 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eba000)='/dev/ptmx\x00', 0x0, 0x0) close(r0) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r1, r0) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x0, 0x0, 0x0, 0x3fe, @time, {}, {}, @note}], 0x30) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eba000)='/dev/ptmx\x00', 0x0, 0x0) close(r0) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xd3b000)=nil, 0xd3b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00001e9000-0x8)={0x19980330}, &(0x7f0000033000-0x18)) setgid(0x0) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) unshare(0x40600) mq_notify(0xffffffffffffffff, &(0x7f0000c38000)={0x20000000, 0x0, 0x2, @tid}) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eba000)='/dev/ptmx\x00', 0x0, 0x0) close(r0) [ 56.971431] audit_printk_skb: 7 callbacks suppressed [ 56.971440] audit: type=1400 audit(1517925451.723:20): avc: denied { setgid } for pid=11801 comm="syz-executor3" capability=6 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 57.013130] binder: undelivered TRANSACTION_COMPLETE [ 57.019513] binder: release 11707:11710 transaction 177 out, still active 2018/02/06 13:57:31 executing program 2: mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fcntl$addseals(r1, 0x409, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() tkill(r2, 0x16) lseek(r1, 0x0, 0x4) close(r0) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xd3b000)=nil, 0xd3b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00001e9000-0x8)={0x19980330}, &(0x7f0000033000-0x18)) setgid(0x0) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r1, r0) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x0, 0x0, 0x0, 0x3fe, @time, {}, {}, @note}], 0x30) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000022e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000001}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f000001d000)='-', 0x1) connect$inet(r0, &(0x7f00000ae000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00003cc000)=0x2, 0x4) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) unshare(0x40600) mq_notify(0xffffffffffffffff, &(0x7f0000c38000)={0x20000000, 0x0, 0x2, @tid}) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xa76000)=nil, 0xa76000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000a73000)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f00003f0000-0x10)={0x0, 0x0, 0x30005}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000671000-0x8)={0xfff7fffffffffdb0}, 0x8, 0x0) readv(r2, &(0x7f0000a73000-0x10)=[{&(0x7f0000066000-0x1000)=""/4096, 0x1000}], 0x1) [ 57.026678] binder: undelivered TRANSACTION_COMPLETE [ 57.031900] binder: send failed reply for transaction 177, target dead [ 57.038552] binder: send failed reply for transaction 178, target dead 2018/02/06 13:57:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000622000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000df8000-0x4)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000f72000)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000022e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000001}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f000001d000)='-', 0x1) connect$inet(r0, &(0x7f00000ae000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00003cc000)=0x2, 0x4) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xa76000)=nil, 0xa76000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000a73000)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f00003f0000-0x10)={0x0, 0x0, 0x30005}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000671000-0x8)={0xfff7fffffffffdb0}, 0x8, 0x0) readv(r2, &(0x7f0000a73000-0x10)=[{&(0x7f0000066000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) unshare(0x40600) mq_notify(0xffffffffffffffff, &(0x7f0000c38000)={0x20000000, 0x0, 0x2, @tid}) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xd3b000)=nil, 0xd3b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00001e9000-0x8)={0x19980330}, &(0x7f0000033000-0x18)) setgid(0x0) 2018/02/06 13:57:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r1, r0) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x0, 0x0, 0x0, 0x3fe, @time, {}, {}, @note}], 0x30) 2018/02/06 13:57:31 executing program 2: mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fcntl$addseals(r1, 0x409, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() tkill(r2, 0x16) lseek(r1, 0x0, 0x4) close(r0) 2018/02/06 13:57:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000622000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000df8000-0x4)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000f72000)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000022e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000001}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f000001d000)='-', 0x1) connect$inet(r0, &(0x7f00000ae000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00003cc000)=0x2, 0x4) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000022e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000001}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f000001d000)='-', 0x1) connect$inet(r0, &(0x7f00000ae000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00003cc000)=0x2, 0x4) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xa76000)=nil, 0xa76000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000a73000)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f00003f0000-0x10)={0x0, 0x0, 0x30005}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000671000-0x8)={0xfff7fffffffffdb0}, 0x8, 0x0) readv(r2, &(0x7f0000a73000-0x10)=[{&(0x7f0000066000-0x1000)=""/4096, 0x1000}], 0x1) 2018/02/06 13:57:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001c5000-0x8)='./file0\x00', 0x0) getxattr(&(0x7f0000e23000)='./file0\x00', &(0x7f0000e90000)=@known='security.selinux\x00', &(0x7f0000add000), 0xfffffffffffffede) 2018/02/06 13:57:31 executing program 0: mlock2(&(0x7f00009c6000/0x4000)=nil, 0x4000, 0x2) 2018/02/06 13:57:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000022e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000001}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f000001d000)='-', 0x1) connect$inet(r0, &(0x7f00000ae000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00003cc000)=0x2, 0x4) 2018/02/06 13:57:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f000002f000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000035000)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000001000-0x4)=r1) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x43e) ioctl$sock_FIOGETOWN(r2, 0x400454d1, &(0x7f0000001000-0x4)) 2018/02/06 13:57:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000022e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000001}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f000001d000)='-', 0x1) connect$inet(r0, &(0x7f00000ae000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00003cc000)=0x2, 0x4) 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000022e000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000001}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f000001d000)='-', 0x1) connect$inet(r0, &(0x7f00000ae000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00003cc000)=0x2, 0x4) 2018/02/06 13:57:32 executing program 0: mlock2(&(0x7f00009c6000/0x4000)=nil, 0x4000, 0x2) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b45000+0x8a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) read(r0, &(0x7f0000744000)=""/4096, 0x1000) 2018/02/06 13:57:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000095d000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') pread64(r0, &(0x7f0000aa0000), 0x0, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001c5000-0x8)='./file0\x00', 0x0) getxattr(&(0x7f0000e23000)='./file0\x00', &(0x7f0000e90000)=@known='security.selinux\x00', &(0x7f0000add000), 0xfffffffffffffede) 2018/02/06 13:57:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000622000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000419000-0xb0)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00001a0000-0x17)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000df8000-0x4)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000f72000)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdc000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f000002f000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000035000)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000001000-0x4)=r1) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x43e) ioctl$sock_FIOGETOWN(r2, 0x400454d1, &(0x7f0000001000-0x4)) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002000)={&(0x7f0000008000)={0x10}, 0xc, &(0x7f0000006000-0x10)={&(0x7f0000005000-0x264)=@polexpire={0xd0, 0x1b, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001}}}, [@etimer_thresh={0x8, 0xc, 0x4}, @policy_type={0xc, 0x10, {0x7ffffffc}}]}, 0xd0}, 0x1}, 0x0) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f000002f000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000035000)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000001000-0x4)=r1) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x43e) ioctl$sock_FIOGETOWN(r2, 0x400454d1, &(0x7f0000001000-0x4)) 2018/02/06 13:57:32 executing program 0: mlock2(&(0x7f00009c6000/0x4000)=nil, 0x4000, 0x2) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001c5000-0x8)='./file0\x00', 0x0) getxattr(&(0x7f0000e23000)='./file0\x00', &(0x7f0000e90000)=@known='security.selinux\x00', &(0x7f0000add000), 0xfffffffffffffede) 2018/02/06 13:57:32 executing program 0: mlock2(&(0x7f00009c6000/0x4000)=nil, 0x4000, 0x2) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f000002f000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000035000)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000001000-0x4)=r1) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x43e) ioctl$sock_FIOGETOWN(r2, 0x400454d1, &(0x7f0000001000-0x4)) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001c5000-0x8)='./file0\x00', 0x0) getxattr(&(0x7f0000e23000)='./file0\x00', &(0x7f0000e90000)=@known='security.selinux\x00', &(0x7f0000add000), 0xfffffffffffffede) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002000)={&(0x7f0000008000)={0x10}, 0xc, &(0x7f0000006000-0x10)={&(0x7f0000005000-0x264)=@polexpire={0xd0, 0x1b, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001}}}, [@etimer_thresh={0x8, 0xc, 0x4}, @policy_type={0xc, 0x10, {0x7ffffffc}}]}, 0xd0}, 0x1}, 0x0) 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r0, &(0x7f00006f5000-0x38)={&(0x7f0000aee000-0x1c)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c, &(0x7f0000190000)=[], 0x0, &(0x7f00007fb000)=[{0x18, 0x29, 0x5, "8d"}], 0x18}, 0x0) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b45000+0x8a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) read(r0, &(0x7f0000744000)=""/4096, 0x1000) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000b7f000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_names=@syzn={0x73, 0x79, 0x7a}}) 2018/02/06 13:57:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000095d000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') pread64(r0, &(0x7f0000aa0000), 0x0, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/06 13:57:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000095d000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') pread64(r0, &(0x7f0000aa0000), 0x0, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000066000)='user\x00', &(0x7f0000919000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00003c9000-0x68)="cb", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000072a000)='auxv\x00') pread64(r0, &(0x7f00008af000), 0x0, 0x0) 2018/02/06 13:57:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000095d000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') pread64(r0, &(0x7f0000aa0000), 0x0, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b45000+0x8a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) read(r0, &(0x7f0000744000)=""/4096, 0x1000) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000b7f000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_names=@syzn={0x73, 0x79, 0x7a}}) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002000)={&(0x7f0000008000)={0x10}, 0xc, &(0x7f0000006000-0x10)={&(0x7f0000005000-0x264)=@polexpire={0xd0, 0x1b, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001}}}, [@etimer_thresh={0x8, 0xc, 0x4}, @policy_type={0xc, 0x10, {0x7ffffffc}}]}, 0xd0}, 0x1}, 0x0) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000072a000)='auxv\x00') pread64(r0, &(0x7f00008af000), 0x0, 0x0) 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000066000)='user\x00', &(0x7f0000919000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00003c9000-0x68)="cb", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r0, &(0x7f00006f5000-0x38)={&(0x7f0000aee000-0x1c)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c, &(0x7f0000190000)=[], 0x0, &(0x7f00007fb000)=[{0x18, 0x29, 0x5, "8d"}], 0x18}, 0x0) 2018/02/06 13:57:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000095d000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') pread64(r0, &(0x7f0000aa0000), 0x0, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000072a000)='auxv\x00') pread64(r0, &(0x7f00008af000), 0x0, 0x0) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b45000+0x8a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) read(r0, &(0x7f0000744000)=""/4096, 0x1000) 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r0, &(0x7f00006f5000-0x38)={&(0x7f0000aee000-0x1c)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c, &(0x7f0000190000)=[], 0x0, &(0x7f00007fb000)=[{0x18, 0x29, 0x5, "8d"}], 0x18}, 0x0) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000b7f000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_names=@syzn={0x73, 0x79, 0x7a}}) 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000066000)='user\x00', &(0x7f0000919000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00003c9000-0x68)="cb", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002000)={&(0x7f0000008000)={0x10}, 0xc, &(0x7f0000006000-0x10)={&(0x7f0000005000-0x264)=@polexpire={0xd0, 0x1b, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001}}}, [@etimer_thresh={0x8, 0xc, 0x4}, @policy_type={0xc, 0x10, {0x7ffffffc}}]}, 0xd0}, 0x1}, 0x0) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000072a000)='auxv\x00') pread64(r0, &(0x7f00008af000), 0x0, 0x0) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000004000-0xd)='dns_resolver\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000001000-0x5)='user\x00', 0x0) 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r0, &(0x7f00006f5000-0x38)={&(0x7f0000aee000-0x1c)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c, &(0x7f0000190000)=[], 0x0, &(0x7f00007fb000)=[{0x18, 0x29, 0x5, "8d"}], 0x18}, 0x0) 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000066000)='user\x00', &(0x7f0000919000)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00003c9000-0x68)="cb", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000b7f000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_names=@syzn={0x73, 0x79, 0x7a}}) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f000002b000-0xd8), 0xfffffffffffffd52, 0x0, 0x0, 0x0) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fd8000-0x28)=@hopopts={0x0, 0x0, [], []}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000bfd000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feb000-0x7)={0x20080522}, &(0x7f0000fea000)) 2018/02/06 13:57:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000095d000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') pread64(r0, &(0x7f0000aa0000), 0x0, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/06 13:57:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000251000+0xdca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000dad000-0x37)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000095d000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') pread64(r0, &(0x7f0000aa0000), 0x0, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e6000-0x10)={&(0x7f0000abe000-0x104)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr=0x3}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f00006e2000-0xd)='dns_resolver\x00', &(0x7f00005ca000)={0x73, 0x79, 0x7a}, &(0x7f0000e81000-0x1)='\x00', 0xfffffffffffffffb) 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000916000-0x8)='./file0\x00', 0x40, 0x40) modify_ldt$write2(0x11, &(0x7f0000cbc000-0x10)={0x810}, 0x10) execveat(r0, &(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000001000-0x10)=[], &(0x7f0000002000-0x1c)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000edb000-0x9)="747275737465641e00", &(0x7f0000077000-0x1)='\x00'], 0x1000) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feb000-0x7)={0x20080522}, &(0x7f0000fea000)) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fd8000-0x28)=@hopopts={0x0, 0x0, [], []}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000bfd000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f00003f7000-0x92)="290000001800310900200101000000070200000000000000000100000c007a0004001000000ef4ff01", 0x29}], 0x1) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feb000-0x7)={0x20080522}, &(0x7f0000fea000)) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fd8000-0x28)=@hopopts={0x0, 0x0, [], []}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000bfd000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f000002b000-0xd8), 0xfffffffffffffd52, 0x0, 0x0, 0x0) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feb000-0x7)={0x20080522}, &(0x7f0000fea000)) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000fd8000-0x28)=@hopopts={0x0, 0x0, [], []}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000bfd000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f000002b000-0xd8), 0xfffffffffffffd52, 0x0, 0x0, 0x0) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) sysinfo(&(0x7f0000916000-0xd7)=""/215) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f000002b000-0xd8), 0xfffffffffffffd52, 0x0, 0x0, 0x0) 2018/02/06 13:57:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000b2000-0xa)="260000005e00091d0000000002000000800000010000800000000000a34c085b1ee9ff07356a", 0x26) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00008bc000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000083d000-0x16)='sessionid\x00') exit(0x0) readv(r1, &(0x7f0000766000)=[{&(0x7f0000f9a000)=""/49, 0x31}], 0x1) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f00003f7000-0x92)="290000001800310900200101000000070200000000000000000100000c007a0004001000000ef4ff01", 0x29}], 0x1) 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e6000-0x10)={&(0x7f0000abe000-0x104)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr=0x3}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) sysinfo(&(0x7f0000916000-0xd7)=""/215) 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000916000-0x8)='./file0\x00', 0x40, 0x40) modify_ldt$write2(0x11, &(0x7f0000cbc000-0x10)={0x810}, 0x10) execveat(r0, &(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000001000-0x10)=[], &(0x7f0000002000-0x1c)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000edb000-0x9)="747275737465641e00", &(0x7f0000077000-0x1)='\x00'], 0x1000) 2018/02/06 13:57:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000916000-0x8)='./file0\x00', 0x40, 0x40) modify_ldt$write2(0x11, &(0x7f0000cbc000-0x10)={0x810}, 0x10) execveat(r0, &(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000001000-0x10)=[], &(0x7f0000002000-0x1c)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000edb000-0x9)="747275737465641e00", &(0x7f0000077000-0x1)='\x00'], 0x1000) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f00003f7000-0x92)="290000001800310900200101000000070200000000000000000100000c007a0004001000000ef4ff01", 0x29}], 0x1) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f00003f7000-0x92)="290000001800310900200101000000070200000000000000000100000c007a0004001000000ef4ff01", 0x29}], 0x1) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) sysinfo(&(0x7f0000916000-0xd7)=""/215) 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000916000-0x8)='./file0\x00', 0x40, 0x40) modify_ldt$write2(0x11, &(0x7f0000cbc000-0x10)={0x810}, 0x10) execveat(r0, &(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000001000-0x10)=[], &(0x7f0000002000-0x1c)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000edb000-0x9)="747275737465641e00", &(0x7f0000077000-0x1)='\x00'], 0x1000) 2018/02/06 13:57:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000916000-0x8)='./file0\x00', 0x40, 0x40) modify_ldt$write2(0x11, &(0x7f0000cbc000-0x10)={0x810}, 0x10) execveat(r0, &(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000001000-0x10)=[], &(0x7f0000002000-0x1c)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000edb000-0x9)="747275737465641e00", &(0x7f0000077000-0x1)='\x00'], 0x1000) 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e6000-0x10)={&(0x7f0000abe000-0x104)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr=0x3}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f00003f7000-0x92)="290000001800310900200101000000070200000000000000000100000c007a0004001000000ef4ff01", 0x29}], 0x1) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f00003f7000-0x92)="290000001800310900200101000000070200000000000000000100000c007a0004001000000ef4ff01", 0x29}], 0x1) 2018/02/06 13:57:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000b2000-0xa)="260000005e00091d0000000002000000800000010000800000000000a34c085b1ee9ff07356a", 0x26) 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000916000-0x8)='./file0\x00', 0x40, 0x40) modify_ldt$write2(0x11, &(0x7f0000cbc000-0x10)={0x810}, 0x10) execveat(r0, &(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000001000-0x10)=[], &(0x7f0000002000-0x1c)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000edb000-0x9)="747275737465641e00", &(0x7f0000077000-0x1)='\x00'], 0x1000) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00008bc000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000083d000-0x16)='sessionid\x00') exit(0x0) readv(r1, &(0x7f0000766000)=[{&(0x7f0000f9a000)=""/49, 0x31}], 0x1) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) sysinfo(&(0x7f0000916000-0xd7)=""/215) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007d1000-0x8), 0x8) clock_gettime(0x0, &(0x7f0000e86000)={0x0, 0x0}) ppoll(&(0x7f0000e06000)=[{r0}], 0x1, &(0x7f0000b41000-0x10)={0x0, r1+10000000}, &(0x7f00008dc000-0x8), 0x8) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/06 13:57:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000916000-0x8)='./file0\x00', 0x40, 0x40) modify_ldt$write2(0x11, &(0x7f0000cbc000-0x10)={0x810}, 0x10) execveat(r0, &(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000001000-0x10)=[], &(0x7f0000002000-0x1c)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000edb000-0x9)="747275737465641e00", &(0x7f0000077000-0x1)='\x00'], 0x1000) 2018/02/06 13:57:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000b2000-0xa)="260000005e00091d0000000002000000800000010000800000000000a34c085b1ee9ff07356a", 0x26) 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e6000-0x10)={&(0x7f0000abe000-0x104)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr=0x3}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f00003f7000-0x92)="290000001800310900200101000000070200000000000000000100000c007a0004001000000ef4ff01", 0x29}], 0x1) 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00009e9000)='./file0\x00', &(0x7f0000289000-0x10)=@random={'system.', 'user]GPL\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00008fa000)=""/232) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() [ 57.904090] device lo entered promiscuous mode [ 57.915902] device lo left promiscuous mode 2018/02/06 13:57:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00009e9000)='./file0\x00', &(0x7f0000289000-0x10)=@random={'system.', 'user]GPL\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00008fa000)=""/232) 2018/02/06 13:57:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000b2000-0xa)="260000005e00091d0000000002000000800000010000800000000000a34c085b1ee9ff07356a", 0x26) 2018/02/06 13:57:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00008bc000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000083d000-0x16)='sessionid\x00') exit(0x0) readv(r1, &(0x7f0000766000)=[{&(0x7f0000f9a000)=""/49, 0x31}], 0x1) 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00009e6000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7001) 2018/02/06 13:57:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = syz_open_dev$tun(&(0x7f0000f1f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f00008c4000)=[{r0}], 0x1, &(0x7f00005d3000-0x10)={0x77359400}, &(0x7f0000afb000), 0x8) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007d1000-0x8), 0x8) clock_gettime(0x0, &(0x7f0000e86000)={0x0, 0x0}) ppoll(&(0x7f0000e06000)=[{r0}], 0x1, &(0x7f0000b41000-0x10)={0x0, r1+10000000}, &(0x7f00008dc000-0x8), 0x8) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/06 13:57:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00009e6000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7001) 2018/02/06 13:57:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00008bc000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000083d000-0x16)='sessionid\x00') exit(0x0) readv(r1, &(0x7f0000766000)=[{&(0x7f0000f9a000)=""/49, 0x31}], 0x1) 2018/02/06 13:57:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00009e6000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7001) 2018/02/06 13:57:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007d1000-0x8), 0x8) clock_gettime(0x0, &(0x7f0000e86000)={0x0, 0x0}) ppoll(&(0x7f0000e06000)=[{r0}], 0x1, &(0x7f0000b41000-0x10)={0x0, r1+10000000}, &(0x7f00008dc000-0x8), 0x8) signalfd(r0, &(0x7f0000e82000), 0x8) [ 58.077982] device lo entered promiscuous mode [ 58.090234] device lo entered promiscuous mode [ 58.096774] device lo left promiscuous mode [ 58.155002] device lo left promiscuous mode 2018/02/06 13:57:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00009e6000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7001) 2018/02/06 13:57:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00009e9000)='./file0\x00', &(0x7f0000289000-0x10)=@random={'system.', 'user]GPL\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00008fa000)=""/232) 2018/02/06 13:57:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007d1000-0x8), 0x8) clock_gettime(0x0, &(0x7f0000e86000)={0x0, 0x0}) ppoll(&(0x7f0000e06000)=[{r0}], 0x1, &(0x7f0000b41000-0x10)={0x0, r1+10000000}, &(0x7f00008dc000-0x8), 0x8) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/06 13:57:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = syz_open_dev$tun(&(0x7f0000f1f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f00008c4000)=[{r0}], 0x1, &(0x7f00005d3000-0x10)={0x77359400}, &(0x7f0000afb000), 0x8) 2018/02/06 13:57:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000fa6000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) timer_gettime(0x0, &(0x7f00007b5000-0x20)) 2018/02/06 13:57:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000fa6000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) timer_gettime(0x0, &(0x7f00007b5000-0x20)) 2018/02/06 13:57:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000001000-0x83), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000be5000-0x8)='./file0\x00', 0x10000000007fd, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f000017a000-0x8)=[], &(0x7f000077a000)=[]) open$dir(&(0x7f00008b4000)='./file0\x00', 0x200, 0x0) 2018/02/06 13:57:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000fa6000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) timer_gettime(0x0, &(0x7f00007b5000-0x20)) 2018/02/06 13:57:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000fa6000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) timer_gettime(0x0, &(0x7f00007b5000-0x20)) [ 58.247386] device lo entered promiscuous mode [ 58.259355] device lo entered promiscuous mode [ 58.267252] device lo entered promiscuous mode [ 58.274516] device lo entered promiscuous mode [ 58.282890] device lo left promiscuous mode 2018/02/06 13:57:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) accept4$inet6(0xffffffffffffffff, &(0x7f000077a000)={0x0, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00009cd000-0x4)=0x1c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000cec000)='/selinux/context\x00', 0x2, 0x0) mlock2(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000c3f000)) 2018/02/06 13:57:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00009e9000)='./file0\x00', &(0x7f0000289000-0x10)=@random={'system.', 'user]GPL\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00008fa000)=""/232) 2018/02/06 13:57:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000001000-0x83), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000be5000-0x8)='./file0\x00', 0x10000000007fd, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f000017a000-0x8)=[], &(0x7f000077a000)=[]) open$dir(&(0x7f00008b4000)='./file0\x00', 0x200, 0x0) 2018/02/06 13:57:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000001000-0x83), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000be5000-0x8)='./file0\x00', 0x10000000007fd, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f000017a000-0x8)=[], &(0x7f000077a000)=[]) open$dir(&(0x7f00008b4000)='./file0\x00', 0x200, 0x0) [ 58.367667] device lo left promiscuous mode [ 58.468669] device lo left promiscuous mode [ 58.524670] device lo left promiscuous mode [ 58.571928] device lo entered promiscuous mode [ 58.578172] device lo left promiscuous mode 2018/02/06 13:57:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000001000-0x83), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000be5000-0x8)='./file0\x00', 0x10000000007fd, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f000017a000-0x8)=[], &(0x7f000077a000)=[]) open$dir(&(0x7f00008b4000)='./file0\x00', 0x200, 0x0) 2018/02/06 13:57:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000dcc000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f00007b8000-0x20)=[{&(0x7f0000604000)=""/8, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000073000)=0x1) r1 = getpgrp(0x0) r2 = syz_open_dev$usbmon(&(0x7f0000a64000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r4, 0x8, r1) read$eventfd(r2, &(0x7f0000e5b000-0x8), 0x8) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b29000-0x20)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 2018/02/06 13:57:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000210000)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000968000-0x1c)=@req3={0x8000, 0x3}, 0x1c) 2018/02/06 13:57:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) accept4$inet6(0xffffffffffffffff, &(0x7f000077a000)={0x0, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00009cd000-0x4)=0x1c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000cec000)='/selinux/context\x00', 0x2, 0x0) mlock2(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000c3f000)) 2018/02/06 13:57:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000001000-0x83), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000be5000-0x8)='./file0\x00', 0x10000000007fd, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f000017a000-0x8)=[], &(0x7f000077a000)=[]) open$dir(&(0x7f00008b4000)='./file0\x00', 0x200, 0x0) 2018/02/06 13:57:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = syz_open_dev$tun(&(0x7f0000f1f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f00008c4000)=[{r0}], 0x1, &(0x7f00005d3000-0x10)={0x77359400}, &(0x7f0000afb000), 0x8) 2018/02/06 13:57:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = syz_open_dev$tun(&(0x7f0000f1f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f00008c4000)=[{r0}], 0x1, &(0x7f00005d3000-0x10)={0x77359400}, &(0x7f0000afb000), 0x8) 2018/02/06 13:57:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000210000)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000968000-0x1c)=@req3={0x8000, 0x3}, 0x1c) [ 58.668501] device lo entered promiscuous mode 2018/02/06 13:57:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000cc3000-0x13)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) 2018/02/06 13:57:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000210000)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000968000-0x1c)=@req3={0x8000, 0x3}, 0x1c) 2018/02/06 13:57:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000001000-0x83), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000be5000-0x8)='./file0\x00', 0x10000000007fd, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f000017a000-0x8)=[], &(0x7f000077a000)=[]) open$dir(&(0x7f00008b4000)='./file0\x00', 0x200, 0x0) 2018/02/06 13:57:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000026b000)=@newsa={0x180, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'rmd256\x00'}}}, @algo_crypt={0x48, 0x2, {{'ctr-aes-aesni\x00'}}}]}, 0x180}, 0x1}, 0x0) 2018/02/06 13:57:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000210000)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000968000-0x1c)=@req3={0x8000, 0x3}, 0x1c) [ 58.692818] device lo entered promiscuous mode [ 58.698769] device lo left promiscuous mode 2018/02/06 13:57:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000026b000)=@newsa={0x180, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'rmd256\x00'}}}, @algo_crypt={0x48, 0x2, {{'ctr-aes-aesni\x00'}}}]}, 0x180}, 0x1}, 0x0) [ 58.818087] device lo left promiscuous mode 2018/02/06 13:57:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000001000-0x83), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000be5000-0x8)='./file0\x00', 0x10000000007fd, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f000017a000-0x8)=[], &(0x7f000077a000)=[]) open$dir(&(0x7f00008b4000)='./file0\x00', 0x200, 0x0) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000026b000)=@newsa={0x180, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'rmd256\x00'}}}, @algo_crypt={0x48, 0x2, {{'ctr-aes-aesni\x00'}}}]}, 0x180}, 0x1}, 0x0) 2018/02/06 13:57:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) accept4$inet6(0xffffffffffffffff, &(0x7f000077a000)={0x0, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00009cd000-0x4)=0x1c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000cec000)='/selinux/context\x00', 0x2, 0x0) mlock2(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000c3f000)) 2018/02/06 13:57:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='proclo}\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fchmod(r1, 0x0) close(r1) close(r0) 2018/02/06 13:57:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000dcc000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f00007b8000-0x20)=[{&(0x7f0000604000)=""/8, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000073000)=0x1) r1 = getpgrp(0x0) r2 = syz_open_dev$usbmon(&(0x7f0000a64000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r4, 0x8, r1) read$eventfd(r2, &(0x7f0000e5b000-0x8), 0x8) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b29000-0x20)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) mremap(&(0x7f0000aa6000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000b2d000/0x4000)=nil) sync() 2018/02/06 13:57:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000f9e000)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000086c000)='/selinux/policy\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00005b3000), 0x3f) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000495000-0xa4)=[@in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}], 0x1c) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c8000-0xc)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f000026b000)=@newsa={0x180, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'rmd256\x00'}}}, @algo_crypt={0x48, 0x2, {{'ctr-aes-aesni\x00'}}}]}, 0x180}, 0x1}, 0x0) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000cf1000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, &(0x7f0000419000-0xee)='R', 0x1) vmsplice(r0, &(0x7f00006bf000)=[{&(0x7f0000473000)}], 0x1, 0x0) 2018/02/06 13:57:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000000a, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000864000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_data=&(0x7f0000247000-0x20)="000000000000006a01000000000000075b200004000000004000e7003072a901"}) 2018/02/06 13:57:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000f9e000)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000086c000)='/selinux/policy\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00005b3000), 0x3f) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000495000-0xa4)=[@in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}], 0x1c) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000cf1000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, &(0x7f0000419000-0xee)='R', 0x1) vmsplice(r0, &(0x7f00006bf000)=[{&(0x7f0000473000)}], 0x1, 0x0) [ 59.324232] device lo entered promiscuous mode [ 59.335107] device lo entered promiscuous mode [ 59.352845] device lo left promiscuous mode [ 59.458006] device lo left promiscuous mode 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000cf1000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, &(0x7f0000419000-0xee)='R', 0x1) vmsplice(r0, &(0x7f00006bf000)=[{&(0x7f0000473000)}], 0x1, 0x0) 2018/02/06 13:57:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000f9e000)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000086c000)='/selinux/policy\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00005b3000), 0x3f) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000495000-0xa4)=[@in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}], 0x1c) 2018/02/06 13:57:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='proclo}\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fchmod(r1, 0x0) close(r1) close(r0) 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000195000-0x27)="2600000026004701925ef1f70722000c07fff700010000000700ff36b807475105001a000000", 0x26) 2018/02/06 13:57:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000dcc000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f00007b8000-0x20)=[{&(0x7f0000604000)=""/8, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000073000)=0x1) r1 = getpgrp(0x0) r2 = syz_open_dev$usbmon(&(0x7f0000a64000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r4, 0x8, r1) read$eventfd(r2, &(0x7f0000e5b000-0x8), 0x8) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b29000-0x20)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 2018/02/06 13:57:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) accept4$inet6(0xffffffffffffffff, &(0x7f000077a000)={0x0, 0xffffffffffffffff, 0x0, @remote}, &(0x7f00009cd000-0x4)=0x1c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000cec000)='/selinux/context\x00', 0x2, 0x0) mlock2(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000c3f000)) 2018/02/06 13:57:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000ade000-0x38)={&(0x7f000096d000)={0x10}, 0xc, &(0x7f0000900000)={&(0x7f0000d32000-0x24)=@ipv6_getroute={0x24, 0x1a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_UID={0x8, 0x19}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000cf1000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, &(0x7f0000419000-0xee)='R', 0x1) vmsplice(r0, &(0x7f00006bf000)=[{&(0x7f0000473000)}], 0x1, 0x0) 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xd, &(0x7f0000fed000-0x10)={0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000126000)={{r0}, {0x0, 0x1c9c380}}, &(0x7f0000771000-0x20)) 2018/02/06 13:57:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000ade000-0x38)={&(0x7f000096d000)={0x10}, 0xc, &(0x7f0000900000)={&(0x7f0000d32000-0x24)=@ipv6_getroute={0x24, 0x1a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_UID={0x8, 0x19}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xd, &(0x7f0000fed000-0x10)={0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000126000)={{r0}, {0x0, 0x1c9c380}}, &(0x7f0000771000-0x20)) 2018/02/06 13:57:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000f9e000)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000086c000)='/selinux/policy\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00005b3000), 0x3f) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000495000-0xa4)=[@in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}], 0x1c) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xd, &(0x7f0000fed000-0x10)={0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000126000)={{r0}, {0x0, 0x1c9c380}}, &(0x7f0000771000-0x20)) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xd, &(0x7f0000fed000-0x10)={0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000126000)={{r0}, {0x0, 0x1c9c380}}, &(0x7f0000771000-0x20)) 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xd, &(0x7f0000fed000-0x10)={0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000126000)={{r0}, {0x0, 0x1c9c380}}, &(0x7f0000771000-0x20)) 2018/02/06 13:57:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000ade000-0x38)={&(0x7f000096d000)={0x10}, 0xc, &(0x7f0000900000)={&(0x7f0000d32000-0x24)=@ipv6_getroute={0x24, 0x1a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_UID={0x8, 0x19}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xd, &(0x7f0000fed000-0x10)={0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000126000)={{r0}, {0x0, 0x1c9c380}}, &(0x7f0000771000-0x20)) 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xd, &(0x7f0000fed000-0x10)={0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000126000)={{r0}, {0x0, 0x1c9c380}}, &(0x7f0000771000-0x20)) 2018/02/06 13:57:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='proclo}\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fchmod(r1, 0x0) close(r1) close(r0) 2018/02/06 13:57:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000ade000-0x38)={&(0x7f000096d000)={0x10}, 0xc, &(0x7f0000900000)={&(0x7f0000d32000-0x24)=@ipv6_getroute={0x24, 0x1a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_UID={0x8, 0x19}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getrandom(&(0x7f0000edf000-0x54)=""/84, 0x54, 0x0) 2018/02/06 13:57:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/06 13:57:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000dcc000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f00007b8000-0x20)=[{&(0x7f0000604000)=""/8, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000073000)=0x1) r1 = getpgrp(0x0) r2 = syz_open_dev$usbmon(&(0x7f0000a64000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000009000-0x8)=0x3f) fcntl$setown(r4, 0x8, r1) read$eventfd(r2, &(0x7f0000e5b000-0x8), 0x8) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b29000-0x20)=[{r5}], 0x1, 0xfffffffffffffff8) dup3(r4, r5, 0x0) tkill(r3, 0x16) 2018/02/06 13:57:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/06 13:57:34 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) seccomp(0x1, 0x0, &(0x7f0000001000)={0x30d, &(0x7f0000012000-0x8)=[]}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) syz_open_dev$sg(&(0x7f0000003000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) clone(0x0, &(0x7f0000004000-0x1000), &(0x7f0000006000), &(0x7f0000008000), &(0x7f0000002000-0x63)) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getrandom(&(0x7f0000edf000-0x54)=""/84, 0x54, 0x0) 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) clone(0x0, &(0x7f0000004000-0x1000), &(0x7f0000006000), &(0x7f0000008000), &(0x7f0000002000-0x63)) [ 59.742133] FAULT_FLAG_ALLOW_RETRY missing 30 [ 59.747913] CPU: 1 PID: 12380 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 59.755537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.764875] ffff8801d83878b0 ffffffff81d94b69 ffff8801d8387b90 0000000000000000 [ 59.772855] ffff8801b6686590 ffff8801d8387a80 ffff8801b6686480 ffff8801d8387aa8 [ 59.780838] ffffffff816624ba 0000000000001244 ffff8801c3b938f0 ffff8801c3b938a0 [ 59.788814] Call Trace: [ 59.791380] [] dump_stack+0xc1/0x128 [ 59.796718] [] handle_userfault+0xa3a/0x1310 [ 59.802748] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 59.809734] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 59.816114] [] ? unwind_next_frame+0x86/0xe0 [ 59.822145] [] ? handle_mm_fault+0x117b/0x2530 [ 59.828345] [] ? handle_mm_fault+0x1fc3/0x2530 [ 59.834548] [] handle_mm_fault+0x1fd1/0x2530 [ 59.840576] [] ? __pmd_alloc+0x410/0x410 [ 59.846257] [] __do_page_fault+0x5c2/0xd40 [ 59.852114] [] ? mm_fault_error+0x2c0/0x2c0 [ 59.858055] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.864694] [] do_page_fault+0x27/0x30 [ 59.870201] [] page_fault+0x28/0x30 [ 59.875451] [] ? copy_user_enhanced_fast_string+0xe/0x20 [ 59.882523] [] ? bpf_prog_create_from_user+0x121/0x2c0 [ 59.889419] [] ? watchdog_nmi_disable+0x120/0x120 [ 59.895882] [] do_seccomp+0x632/0x1860 [ 59.901392] [] ? SyS_futex+0x22e/0x2d0 [ 59.906899] [] ? __put_seccomp_filter+0xa0/0xa0 [ 59.913187] [] ? do_futex+0x15c0/0x15c0 [ 59.918780] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 59.925420] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 59.932231] [] SyS_seccomp+0x24/0x30 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getrandom(&(0x7f0000edf000-0x54)=""/84, 0x54, 0x0) 2018/02/06 13:57:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='proclo}\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fchmod(r1, 0x0) close(r1) close(r0) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getrandom(&(0x7f0000edf000-0x54)=""/84, 0x54, 0x0) 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) clone(0x0, &(0x7f0000004000-0x1000), &(0x7f0000006000), &(0x7f0000008000), &(0x7f0000002000-0x63)) 2018/02/06 13:57:34 executing program 3: mmap(&(0x7f0000000000/0xf68000)=nil, 0xf68000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000ef5000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000dca000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_ivalue=0xe02}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000f64000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000051d000)=@ethtool_rxfh_indir={0x1, 0x0, []}}) 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) clone(0x0, &(0x7f0000004000-0x1000), &(0x7f0000006000), &(0x7f0000008000), &(0x7f0000002000-0x63)) [ 59.937565] [] entry_SYSCALL_64_fastpath+0x29/0xe8 2018/02/06 13:57:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x40880) read(r0, &(0x7f00001fa000-0x18)=""/24, 0x18) 2018/02/06 13:57:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:34 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) seccomp(0x1, 0x0, &(0x7f0000001000)={0x30d, &(0x7f0000012000-0x8)=[]}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) syz_open_dev$sg(&(0x7f0000003000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 60.018318] FAULT_FLAG_ALLOW_RETRY missing 30 [ 60.023673] CPU: 0 PID: 12422 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 60.031291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.040632] ffff8801c38c78b0 ffffffff81d94b69 ffff8801c38c7b90 0000000000000000 [ 60.048616] ffff8801b6686110 ffff8801c38c7a80 ffff8801b6686000 ffff8801c38c7aa8 [ 60.056614] ffffffff816624ba 0000000000001244 ffff8801bbefe8f0 ffff8801bbefe8a0 [ 60.064596] Call Trace: [ 60.067159] [] dump_stack+0xc1/0x128 [ 60.072499] [] handle_userfault+0xa3a/0x1310 [ 60.078532] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 60.085513] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 60.091887] [] ? unwind_next_frame+0x86/0xe0 [ 60.097922] [] ? handle_mm_fault+0x117b/0x2530 [ 60.104120] [] ? handle_mm_fault+0x1fc3/0x2530 [ 60.110327] [] handle_mm_fault+0x1fd1/0x2530 [ 60.116360] [] ? __pmd_alloc+0x410/0x410 [ 60.122044] [] __do_page_fault+0x5c2/0xd40 [ 60.127904] [] ? mm_fault_error+0x2c0/0x2c0 [ 60.133852] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 60.140491] [] do_page_fault+0x27/0x30 [ 60.146000] [] page_fault+0x28/0x30 [ 60.151248] [] ? copy_user_enhanced_fast_string+0xe/0x20 [ 60.158404] [] ? bpf_prog_create_from_user+0x121/0x2c0 [ 60.165301] [] ? watchdog_nmi_disable+0x120/0x120 [ 60.171763] [] do_seccomp+0x632/0x1860 [ 60.177272] [] ? SyS_futex+0x22e/0x2d0 [ 60.182779] [] ? __put_seccomp_filter+0xa0/0xa0 [ 60.189067] [] ? do_futex+0x15c0/0x15c0 [ 60.194663] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 60.201301] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 60.208118] [] SyS_seccomp+0x24/0x30 [ 60.213468] [] entry_SYSCALL_64_fastpath+0x29/0xe8 2018/02/06 13:57:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/06 13:57:35 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) seccomp(0x1, 0x0, &(0x7f0000001000)={0x30d, &(0x7f0000012000-0x8)=[]}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) syz_open_dev$sg(&(0x7f0000003000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/06 13:57:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x40880) read(r0, &(0x7f00001fa000-0x18)=""/24, 0x18) 2018/02/06 13:57:35 executing program 3: mmap(&(0x7f0000000000/0xf68000)=nil, 0xf68000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000ef5000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000dca000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_ivalue=0xe02}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000f64000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000051d000)=@ethtool_rxfh_indir={0x1, 0x0, []}}) 2018/02/06 13:57:35 executing program 3: mmap(&(0x7f0000000000/0xf68000)=nil, 0xf68000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000ef5000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000dca000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_ivalue=0xe02}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000f64000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000051d000)=@ethtool_rxfh_indir={0x1, 0x0, []}}) [ 60.351731] FAULT_FLAG_ALLOW_RETRY missing 30 [ 60.357821] CPU: 1 PID: 12441 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 60.365450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.374789] ffff8801baa1f8b0 ffffffff81d94b69 ffff8801baa1fb90 0000000000000000 [ 60.382762] ffff8801cfd2cd10 ffff8801baa1fa80 ffff8801cfd2cc00 ffff8801baa1faa8 [ 60.390742] ffffffff816624ba 0000000000001244 ffff8801c76538f0 ffff8801c76538a0 [ 60.398716] Call Trace: [ 60.401276] [] dump_stack+0xc1/0x128 [ 60.406611] [] handle_userfault+0xa3a/0x1310 [ 60.412641] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 60.419624] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 60.425999] [] ? unwind_next_frame+0x86/0xe0 [ 60.432028] [] ? handle_mm_fault+0x117b/0x2530 [ 60.438229] [] ? handle_mm_fault+0x1fc3/0x2530 [ 60.444429] [] handle_mm_fault+0x1fd1/0x2530 [ 60.450463] [] ? __pmd_alloc+0x410/0x410 [ 60.456152] [] __do_page_fault+0x5c2/0xd40 [ 60.462008] [] ? mm_fault_error+0x2c0/0x2c0 [ 60.467960] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 60.474607] [] do_page_fault+0x27/0x30 [ 60.480123] [] page_fault+0x28/0x30 [ 60.485371] [] ? copy_user_enhanced_fast_string+0xe/0x20 [ 60.492448] [] ? bpf_prog_create_from_user+0x121/0x2c0 [ 60.499345] [] ? watchdog_nmi_disable+0x120/0x120 [ 60.505808] [] do_seccomp+0x632/0x1860 [ 60.511315] [] ? SyS_futex+0x22e/0x2d0 [ 60.516820] [] ? __put_seccomp_filter+0xa0/0xa0 [ 60.523109] [] ? do_futex+0x15c0/0x15c0 [ 60.528720] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 60.535355] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 60.542163] [] SyS_seccomp+0x24/0x30 [ 60.547498] [] entry_SYSCALL_64_fastpath+0x29/0xe8 2018/02/06 13:57:35 executing program 3: mmap(&(0x7f0000000000/0xf68000)=nil, 0xf68000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000ef5000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000dca000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_ivalue=0xe02}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000f64000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000051d000)=@ethtool_rxfh_indir={0x1, 0x0, []}}) 2018/02/06 13:57:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) seccomp(0x1, 0x0, &(0x7f0000001000)={0x30d, &(0x7f0000012000-0x8)=[]}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) syz_open_dev$sg(&(0x7f0000003000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x40880) read(r0, &(0x7f00001fa000-0x18)=""/24, 0x18) 2018/02/06 13:57:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/06 13:57:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000053b000)=0x8000201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000014c000)={@generic="431df1f38e6e005a112f648d1c22ce26", @ifru_flags=0x1}) r1 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r2 = syz_open_dev$tun(&(0x7f0000ada000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000053b000)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) 2018/02/06 13:57:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f00003f0000-0x10)={0x0, 0x0, 0x20005}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000950000)=""/128, 0x80) [ 60.728213] FAULT_FLAG_ALLOW_RETRY missing 30 [ 60.736816] CPU: 0 PID: 12460 Comm: syz-executor5 Not tainted 4.9.80-g550c01d #29 [ 60.744466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.753818] ffff8801c117f8b0 ffffffff81d94b69 ffff8801c117fb90 0000000000000000 [ 60.761869] ffff8801cfd2ce90 ffff8801c117fa80 ffff8801cfd2cd80 ffff8801c117faa8 [ 60.769859] ffffffff816624ba 0000000000001244 ffff8801be5e68f0 ffff8801be5e68a0 [ 60.777848] Call Trace: [ 60.780409] [] dump_stack+0xc1/0x128 [ 60.785755] [] handle_userfault+0xa3a/0x1310 [ 60.791793] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 60.798772] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 60.805148] [] ? unwind_next_frame+0x86/0xe0 [ 60.811173] [] ? handle_mm_fault+0x117b/0x2530 [ 60.817373] [] ? handle_mm_fault+0x1fc3/0x2530 [ 60.823573] [] handle_mm_fault+0x1fd1/0x2530 [ 60.829597] [] ? __pmd_alloc+0x410/0x410 [ 60.835278] [] __do_page_fault+0x5c2/0xd40 [ 60.841132] [] ? mm_fault_error+0x2c0/0x2c0 [ 60.847071] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 60.853704] [] do_page_fault+0x27/0x30 [ 60.859210] [] page_fault+0x28/0x30 [ 60.864458] [] ? copy_user_enhanced_fast_string+0xe/0x20 [ 60.871527] [] ? bpf_prog_create_from_user+0x121/0x2c0 [ 60.878424] [] ? watchdog_nmi_disable+0x120/0x120 [ 60.884970] [] do_seccomp+0x632/0x1860 [ 60.890477] [] ? SyS_futex+0x22e/0x2d0 [ 60.896069] [] ? __put_seccomp_filter+0xa0/0xa0 [ 60.902355] [] ? do_futex+0x15c0/0x15c0 [ 60.908122] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 60.914763] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 60.921568] [] SyS_seccomp+0x24/0x30 2018/02/06 13:57:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00008fa000)=""/232) 2018/02/06 13:57:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f00003f0000-0x10)={0x0, 0x0, 0x20005}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000950000)=""/128, 0x80) 2018/02/06 13:57:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0xc, 0x0, &(0x7f0000005000-0x68)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000002000)}) [ 60.926898] [] entry_SYSCALL_64_fastpath+0x29/0xe8 2018/02/06 13:57:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f00003f0000-0x10)={0x0, 0x0, 0x20005}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000950000)=""/128, 0x80) 2018/02/06 13:57:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x40880) read(r0, &(0x7f00001fa000-0x18)=""/24, 0x18) 2018/02/06 13:57:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000031e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r2, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000720000-0xa)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) recvmsg(r4, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:35 executing program 7: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x39, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/06 13:57:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f00003f0000-0x10)={0x0, 0x0, 0x20005}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000950000)=""/128, 0x80) [ 60.969280] binder: 12481:12482 BC_FREE_BUFFER u0000000020000000 matched unreturned buffer [ 60.996436] binder: BINDER_SET_CONTEXT_MGR already set [ 61.002629] binder: 12481:12490 ioctl 40046207 0 returned -16 2018/02/06 13:57:35 executing program 7: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x39, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) [ 61.016212] binder_alloc: 12481: binder_alloc_buf, no vma [ 61.022139] binder: 12481:12495 transaction failed 29189/-3, size 0-0 line 3127 [ 61.033839] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.039320] binder: release 12481:12482 transaction 188 out, still active [ 61.047097] binder: undelivered TRANSACTION_COMPLETE [ 61.052379] binder: send failed reply for transaction 188, target dead 2018/02/06 13:57:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0xc, 0x0, &(0x7f0000005000-0x68)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:35 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000576000-0xeb)=""/235, 0xeb}], 0x1) 2018/02/06 13:57:35 executing program 7: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x39, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/06 13:57:35 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000001000-0x4), &(0x7f000049e000), &(0x7f0000000000)) getpgid(0x0) 2018/02/06 13:57:35 executing program 6: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x8000) 2018/02/06 13:57:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00008fa000)=""/232) 2018/02/06 13:57:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x4, @loopback={0x0, 0x1}}, 0x0, [0x0, 0x0, 0x8001]}, 0x5c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/02/06 13:57:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0xc, 0x0, &(0x7f0000005000-0x68)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:35 executing program 6: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x8000) 2018/02/06 13:57:35 executing program 6: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x8000) 2018/02/06 13:57:35 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000001000-0x4), &(0x7f000049e000), &(0x7f0000000000)) getpgid(0x0) 2018/02/06 13:57:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x4, @loopback={0x0, 0x1}}, 0x0, [0x0, 0x0, 0x8001]}, 0x5c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/02/06 13:57:35 executing program 7: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x39, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) [ 61.119560] binder: 12502:12512 BC_FREE_BUFFER u0000000020000000 matched unreturned buffer [ 61.137150] binder: BINDER_SET_CONTEXT_MGR already set [ 61.147580] binder: release 12502:12512 transaction 191 out, still active [ 61.158531] binder: 12498:12515 ioctl 40046207 0 returned -16 [ 61.164756] binder: undelivered TRANSACTION_COMPLETE 2018/02/06 13:57:35 executing program 6: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x8000) 2018/02/06 13:57:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x4, @loopback={0x0, 0x1}}, 0x0, [0x0, 0x0, 0x8001]}, 0x5c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/02/06 13:57:35 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000576000-0xeb)=""/235, 0xeb}], 0x1) 2018/02/06 13:57:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0xc, 0x0, &(0x7f0000005000-0x68)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:35 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000576000-0xeb)=""/235, 0xeb}], 0x1) 2018/02/06 13:57:35 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000001000-0x4), &(0x7f000049e000), &(0x7f0000000000)) getpgid(0x0) 2018/02/06 13:57:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0xc, 0x0, &(0x7f0000005000-0x68)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00008fa000)=""/232) 2018/02/06 13:57:35 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000576000-0xeb)=""/235, 0xeb}], 0x1) 2018/02/06 13:57:35 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000576000-0xeb)=""/235, 0xeb}], 0x1) 2018/02/06 13:57:35 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000001000-0x4), &(0x7f000049e000), &(0x7f0000000000)) getpgid(0x0) 2018/02/06 13:57:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0xc, 0x0, &(0x7f0000005000-0x68)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:35 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000576000-0xeb)=""/235, 0xeb}], 0x1) 2018/02/06 13:57:35 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000576000-0xeb)=""/235, 0xeb}], 0x1) 2018/02/06 13:57:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x4, @loopback={0x0, 0x1}}, 0x0, [0x0, 0x0, 0x8001]}, 0x5c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x4, @loopback={0x0, 0x1}}, 0x0, [0x0, 0x0, 0x8001]}, 0x5c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) [ 61.164779] binder: send failed reply for transaction 191, target dead [ 61.181788] binder: 12498:12515 transaction failed 29189/-22, size 0-0 line 3004 [ 61.193400] binder: undelivered TRANSACTION_ERROR: 29189 [ 61.207513] binder: 12535:12538 BC_FREE_BUFFER u0000000020000000 matched unreturned buffer [ 61.217949] binder: BINDER_SET_CONTEXT_MGR already set [ 61.217960] binder: 12536:12543 ioctl 40046207 0 returned -16 [ 61.218943] binder: 12536:12543 BC_FREE_BUFFER u0000000020000000 no match [ 61.221511] binder: release 12536:12543 transaction 195 out, still active [ 61.221515] binder: undelivered TRANSACTION_COMPLETE [ 61.231420] binder: BINDER_SET_CONTEXT_MGR already set [ 61.231428] binder: 12553:12556 ioctl 40046207 0 returned -16 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00008fa000)=""/232) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x4, @loopback={0x0, 0x1}}, 0x0, [0x0, 0x0, 0x8001]}, 0x5c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/02/06 13:57:36 executing program 2: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x8000) 2018/02/06 13:57:36 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x8000) 2018/02/06 13:57:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005a3000-0xe8)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000bdf000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3f}, {0xff, 0x0, 0x3f, 0x3f, 0x3560, 0x6, 0x9}, {0x0, 0x1}, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0xbd}}, 0xe8) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f0000b60000-0x41)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000332000-0x1), 0x1) mount(&(0x7f000008a000)='./file0\x00', &(0x7f0000303000)='.', &(0x7f000079b000-0x6)='msdos\x00', 0x11080, &(0x7f0000253000-0x1000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00003ac000)={@dev, @broadcast}, &(0x7f0000a5f000)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000ad7000), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c8c000-0xb), &(0x7f000055f000)=0xb) mmap$binder(&(0x7f0000215000/0xa000)=nil, 0xa000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0xc, 0x0, &(0x7f0000005000-0x68)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/06 13:57:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000401000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00006b8000)={0x13, 0x0, &(0x7f00005d5000-0x8f)}) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x4, @loopback={0x0, 0x1}}, 0x0, [0x0, 0x0, 0x8001]}, 0x5c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x8000) 2018/02/06 13:57:36 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/checkreqprot\x00', 0x101140, 0x0) 2018/02/06 13:57:36 executing program 2: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x8000) [ 61.232378] binder: 12553:12556 BC_FREE_BUFFER u0000000020000000 no match [ 61.244151] binder: release 12553:12556 transaction 196 out, still active [ 61.244155] binder: undelivered TRANSACTION_COMPLETE [ 61.309916] binder: release 12535:12538 transaction 194 out, still active [ 61.317686] binder: undelivered TRANSACTION_COMPLETE 2018/02/06 13:57:36 executing program 2: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x8000) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @dccp={{0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) sendto$inet(r0, &(0x7f00002cb000), 0x0, 0x0, &(0x7f0000265000-0x10)={0x2, 0x1, @empty}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000bbb000-0x4)) 2018/02/06 13:57:36 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/checkreqprot\x00', 0x101140, 0x0) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0xfa2000)=nil, 0xfa2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000015000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9d000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x8000) [ 61.330596] binder: 12572:12575 BC_FREE_BUFFER u0000000020000000 matched unreturned buffer [ 61.331458] device syz7 entered promiscuous mode [ 61.377568] binder: send failed reply for transaction 194, target dead [ 61.386508] binder: send failed reply for transaction 195, target dead [ 61.391592] device syz7 left promiscuous mode 2018/02/06 13:57:36 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/checkreqprot\x00', 0x101140, 0x0) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0x35d000)=nil, 0x35d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000035d000-0x20)=[{0x8, 0x40}, {0x3, 0xfff}, {0xb, 0x2}, {0x4, 0x200}], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000035d000-0x9)='/dev/ppp\x00', 0xc0000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000030000-0x16)='/selinux/checkreqprot\x00', 0xa0000, 0x0) linkat(r1, &(0x7f000035d000-0x8)='./file0\x00', r2, &(0x7f00000c5000)='./file0\x00', 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg(r3, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @dccp={{0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendto$inet(r0, &(0x7f00002cb000), 0x0, 0x0, &(0x7f0000265000-0x10)={0x2, 0x1, @empty}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000bbb000-0x4)) 2018/02/06 13:57:36 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 2018/02/06 13:57:36 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) 2018/02/06 13:57:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005a3000-0xe8)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000bdf000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3f}, {0xff, 0x0, 0x3f, 0x3f, 0x3560, 0x6, 0x9}, {0x0, 0x1}, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0xbd}}, 0xe8) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f0000b60000-0x41)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000332000-0x1), 0x1) mount(&(0x7f000008a000)='./file0\x00', &(0x7f0000303000)='.', &(0x7f000079b000-0x6)='msdos\x00', 0x11080, &(0x7f0000253000-0x1000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00003ac000)={@dev, @broadcast}, &(0x7f0000a5f000)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000ad7000), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c8c000-0xb), &(0x7f000055f000)=0xb) mmap$binder(&(0x7f0000215000/0xa000)=nil, 0xa000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000401000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00006b8000)={0x13, 0x0, &(0x7f00005d5000-0x8f)}) 2018/02/06 13:57:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005a3000-0xe8)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000bdf000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3f}, {0xff, 0x0, 0x3f, 0x3f, 0x3560, 0x6, 0x9}, {0x0, 0x1}, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0xbd}}, 0xe8) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f0000b60000-0x41)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000332000-0x1), 0x1) mount(&(0x7f000008a000)='./file0\x00', &(0x7f0000303000)='.', &(0x7f000079b000-0x6)='msdos\x00', 0x11080, &(0x7f0000253000-0x1000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00003ac000)={@dev, @broadcast}, &(0x7f0000a5f000)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000ad7000), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c8c000-0xb), &(0x7f000055f000)=0xb) mmap$binder(&(0x7f0000215000/0xa000)=nil, 0xa000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:36 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/checkreqprot\x00', 0x101140, 0x0) [ 61.401393] binder: send failed reply for transaction 196, target dead [ 61.408220] binder: release 12572:12575 transaction 198 out, still active [ 61.415173] binder: undelivered TRANSACTION_COMPLETE [ 61.420293] binder: send failed reply for transaction 198, target dead 2018/02/06 13:57:36 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @dccp={{0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendto$inet(r0, &(0x7f00002cb000), 0x0, 0x0, &(0x7f0000265000-0x10)={0x2, 0x1, @empty}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000bbb000-0x4)) 2018/02/06 13:57:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005a3000-0xe8)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000bdf000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3f}, {0xff, 0x0, 0x3f, 0x3f, 0x3560, 0x6, 0x9}, {0x0, 0x1}, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0xbd}}, 0xe8) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f0000b60000-0x41)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000332000-0x1), 0x1) mount(&(0x7f000008a000)='./file0\x00', &(0x7f0000303000)='.', &(0x7f000079b000-0x6)='msdos\x00', 0x11080, &(0x7f0000253000-0x1000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00003ac000)={@dev, @broadcast}, &(0x7f0000a5f000)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000ad7000), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c8c000-0xb), &(0x7f000055f000)=0xb) mmap$binder(&(0x7f0000215000/0xa000)=nil, 0xa000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:36 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0x35d000)=nil, 0x35d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000035d000-0x20)=[{0x8, 0x40}, {0x3, 0xfff}, {0xb, 0x2}, {0x4, 0x200}], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000035d000-0x9)='/dev/ppp\x00', 0xc0000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000030000-0x16)='/selinux/checkreqprot\x00', 0xa0000, 0x0) linkat(r1, &(0x7f000035d000-0x8)='./file0\x00', r2, &(0x7f00000c5000)='./file0\x00', 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg(r3, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @dccp={{0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendto$inet(r0, &(0x7f00002cb000), 0x0, 0x0, &(0x7f0000265000-0x10)={0x2, 0x1, @empty}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000bbb000-0x4)) [ 61.472467] device syz7 entered promiscuous mode [ 61.488623] device syz7 left promiscuous mode 2018/02/06 13:57:36 executing program 4: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0x35d000)=nil, 0x35d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000035d000-0x20)=[{0x8, 0x40}, {0x3, 0xfff}, {0xb, 0x2}, {0x4, 0x200}], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000035d000-0x9)='/dev/ppp\x00', 0xc0000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000030000-0x16)='/selinux/checkreqprot\x00', 0xa0000, 0x0) linkat(r1, &(0x7f000035d000-0x8)='./file0\x00', r2, &(0x7f00000c5000)='./file0\x00', 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg(r3, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0x35d000)=nil, 0x35d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000035d000-0x20)=[{0x8, 0x40}, {0x3, 0xfff}, {0xb, 0x2}, {0x4, 0x200}], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000035d000-0x9)='/dev/ppp\x00', 0xc0000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000030000-0x16)='/selinux/checkreqprot\x00', 0xa0000, 0x0) linkat(r1, &(0x7f000035d000-0x8)='./file0\x00', r2, &(0x7f00000c5000)='./file0\x00', 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg(r3, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/06 13:57:36 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) 2018/02/06 13:57:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005a3000-0xe8)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000bdf000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3f}, {0xff, 0x0, 0x3f, 0x3f, 0x3560, 0x6, 0x9}, {0x0, 0x1}, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0xbd}}, 0xe8) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f0000b60000-0x41)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000332000-0x1), 0x1) mount(&(0x7f000008a000)='./file0\x00', &(0x7f0000303000)='.', &(0x7f000079b000-0x6)='msdos\x00', 0x11080, &(0x7f0000253000-0x1000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00003ac000)={@dev, @broadcast}, &(0x7f0000a5f000)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000ad7000), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c8c000-0xb), &(0x7f000055f000)=0xb) mmap$binder(&(0x7f0000215000/0xa000)=nil, 0xa000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000401000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00006b8000)={0x13, 0x0, &(0x7f00005d5000-0x8f)}) 2018/02/06 13:57:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005a3000-0xe8)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000bdf000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3f}, {0xff, 0x0, 0x3f, 0x3f, 0x3560, 0x6, 0x9}, {0x0, 0x1}, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0xbd}}, 0xe8) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f0000b60000-0x41)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000332000-0x1), 0x1) mount(&(0x7f000008a000)='./file0\x00', &(0x7f0000303000)='.', &(0x7f000079b000-0x6)='msdos\x00', 0x11080, &(0x7f0000253000-0x1000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00003ac000)={@dev, @broadcast}, &(0x7f0000a5f000)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000ad7000), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c8c000-0xb), &(0x7f000055f000)=0xb) mmap$binder(&(0x7f0000215000/0xa000)=nil, 0xa000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005a3000-0xe8)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000bdf000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3f}, {0xff, 0x0, 0x3f, 0x3f, 0x3560, 0x6, 0x9}, {0x0, 0x1}, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0xbd}}, 0xe8) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f0000b60000-0x41)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000332000-0x1), 0x1) mount(&(0x7f000008a000)='./file0\x00', &(0x7f0000303000)='.', &(0x7f000079b000-0x6)='msdos\x00', 0x11080, &(0x7f0000253000-0x1000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00003ac000)={@dev, @broadcast}, &(0x7f0000a5f000)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000ad7000), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c8c000-0xb), &(0x7f000055f000)=0xb) mmap$binder(&(0x7f0000215000/0xa000)=nil, 0xa000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0x35d000)=nil, 0x35d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000035d000-0x20)=[{0x8, 0x40}, {0x3, 0xfff}, {0xb, 0x2}, {0x4, 0x200}], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000035d000-0x9)='/dev/ppp\x00', 0xc0000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000030000-0x16)='/selinux/checkreqprot\x00', 0xa0000, 0x0) linkat(r1, &(0x7f000035d000-0x8)='./file0\x00', r2, &(0x7f00000c5000)='./file0\x00', 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg(r3, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0x35d000)=nil, 0x35d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000035d000-0x20)=[{0x8, 0x40}, {0x3, 0xfff}, {0xb, 0x2}, {0x4, 0x200}], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000035d000-0x9)='/dev/ppp\x00', 0xc0000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000030000-0x16)='/selinux/checkreqprot\x00', 0xa0000, 0x0) linkat(r1, &(0x7f000035d000-0x8)='./file0\x00', r2, &(0x7f00000c5000)='./file0\x00', 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg(r3, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0x35d000)=nil, 0x35d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000035d000-0x20)=[{0x8, 0x40}, {0x3, 0xfff}, {0xb, 0x2}, {0x4, 0x200}], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000035d000-0x9)='/dev/ppp\x00', 0xc0000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000030000-0x16)='/selinux/checkreqprot\x00', 0xa0000, 0x0) linkat(r1, &(0x7f000035d000-0x8)='./file0\x00', r2, &(0x7f00000c5000)='./file0\x00', 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg(r3, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0x35d000)=nil, 0x35d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000035d000-0x20)=[{0x8, 0x40}, {0x3, 0xfff}, {0xb, 0x2}, {0x4, 0x200}], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000035d000-0x9)='/dev/ppp\x00', 0xc0000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000030000-0x16)='/selinux/checkreqprot\x00', 0xa0000, 0x0) linkat(r1, &(0x7f000035d000-0x8)='./file0\x00', r2, &(0x7f00000c5000)='./file0\x00', 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg(r3, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0}, {}, {}, 0x0, 0x0}, {{@in=@loopback=0x7f000001, 0x0}, 0x0, @in6=@empty, 0x0}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0x35d000)=nil, 0x35d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000035d000-0x20)=[{0x8, 0x40}, {0x3, 0xfff}, {0xb, 0x2}, {0x4, 0x200}], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000035d000-0x9)='/dev/ppp\x00', 0xc0000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000030000-0x16)='/selinux/checkreqprot\x00', 0xa0000, 0x0) linkat(r1, &(0x7f000035d000-0x8)='./file0\x00', r2, &(0x7f00000c5000)='./file0\x00', 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg(r3, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0x35d000)=nil, 0x35d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000035c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000035d000-0x20)=[{0x8, 0x40}, {0x3, 0xfff}, {0xb, 0x2}, {0x4, 0x200}], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000035d000-0x9)='/dev/ppp\x00', 0xc0000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000030000-0x16)='/selinux/checkreqprot\x00', 0xa0000, 0x0) linkat(r1, &(0x7f000035d000-0x8)='./file0\x00', r2, &(0x7f00000c5000)='./file0\x00', 0x400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x0}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg(r3, &(0x7f00001f1000)={&(0x7f0000200000-0x1c)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x1c, &(0x7f000035a000-0x10)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) [ 61.780396] device syz7 entered promiscuous mode [ 61.799118] device syz7 left promiscuous mode 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0}, {}, {}, 0x0, 0x0}, {{@in=@loopback=0x7f000001, 0x0}, 0x0, @in6=@empty, 0x0}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/02/06 13:57:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005a3000-0xe8)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000bdf000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3f}, {0xff, 0x0, 0x3f, 0x3f, 0x3560, 0x6, 0x9}, {0x0, 0x1}, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0xbd}}, 0xe8) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f0000b60000-0x41)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000332000-0x1), 0x1) mount(&(0x7f000008a000)='./file0\x00', &(0x7f0000303000)='.', &(0x7f000079b000-0x6)='msdos\x00', 0x11080, &(0x7f0000253000-0x1000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00003ac000)={@dev, @broadcast}, &(0x7f0000a5f000)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000ad7000), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c8c000-0xb), &(0x7f000055f000)=0xb) mmap$binder(&(0x7f0000215000/0xa000)=nil, 0xa000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) setresgid(0x0, 0x0, 0x0) 2018/02/06 13:57:36 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004000-0x10)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) 2018/02/06 13:57:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005a3000-0xe8)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000bdf000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3f}, {0xff, 0x0, 0x3f, 0x3f, 0x3560, 0x6, 0x9}, {0x0, 0x1}, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0xbd}}, 0xe8) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f0000b60000-0x41)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000332000-0x1), 0x1) mount(&(0x7f000008a000)='./file0\x00', &(0x7f0000303000)='.', &(0x7f000079b000-0x6)='msdos\x00', 0x11080, &(0x7f0000253000-0x1000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00003ac000)={@dev, @broadcast}, &(0x7f0000a5f000)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000ad7000), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c8c000-0xb), &(0x7f000055f000)=0xb) mmap$binder(&(0x7f0000215000/0xa000)=nil, 0xa000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000401000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00006b8000)={0x13, 0x0, &(0x7f00005d5000-0x8f)}) 2018/02/06 13:57:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00005a3000-0xe8)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000bdf000-0x4)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000ff9000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3f}, {0xff, 0x0, 0x3f, 0x3f, 0x3560, 0x6, 0x9}, {0x0, 0x1}, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x2b}, 0x0, @in=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0xbd}}, 0xe8) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f0000b60000-0x41)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000332000-0x1), 0x1) mount(&(0x7f000008a000)='./file0\x00', &(0x7f0000303000)='.', &(0x7f000079b000-0x6)='msdos\x00', 0x11080, &(0x7f0000253000-0x1000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00003ac000)={@dev, @broadcast}, &(0x7f0000a5f000)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000ad7000), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000c8c000-0xb), &(0x7f000055f000)=0xb) mmap$binder(&(0x7f0000215000/0xa000)=nil, 0xa000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xe75000)=nil, 0xe75000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000e6c000), 0xffe3, 0x0, &(0x7f0000e27000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0}, {}, {}, 0x0, 0x0}, {{@in=@loopback=0x7f000001, 0x0}, 0x0, @in6=@empty, 0x0}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) setresgid(0x0, 0x0, 0x0) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xe75000)=nil, 0xe75000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000e6c000), 0xffe3, 0x0, &(0x7f0000e27000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0}, {}, {}, 0x0, 0x0}, {{@in=@loopback=0x7f000001, 0x0}, 0x0, @in6=@empty, 0x0}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xe75000)=nil, 0xe75000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000e6c000), 0xffe3, 0x0, &(0x7f0000e27000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) setresgid(0x0, 0x0, 0x0) 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) setresgid(0x0, 0x0, 0x0) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xe75000)=nil, 0xe75000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000e6c000), 0xffe3, 0x0, &(0x7f0000e27000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) [ 61.975854] device syz7 entered promiscuous mode [ 61.984118] device syz7 left promiscuous mode 2018/02/06 13:57:36 executing program 2: clock_adjtime(0xa, &(0x7f0000cef000-0xd0)) 2018/02/06 13:57:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00003ab000-0x3)="ff29", 0x0) fallocate(r0, 0x1, 0x0, 0x10000) ftruncate(r0, 0x4fa) fallocate(r0, 0x1, 0x0, 0x10000) lseek(r0, 0x0, 0x4) 2018/02/06 13:57:36 executing program 3: mmap(&(0x7f0000000000/0x59000)=nil, 0x59000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xa, 0x2, 0x88) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008000)={0xa, 0x0, 0x0, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_nat_t_port={0x1}]}, 0x18}, 0x1}, 0x0) 2018/02/06 13:57:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5f000-0xb)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clone(0x40000000, &(0x7f00008a2000), &(0x7f0000d6d000-0x4), &(0x7f0000ca4000), &(0x7f0000ab6000-0xa0)) shutdown(r0, 0x1) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) process_vm_readv(0x0, &(0x7f00004bd000)=[], 0x0, &(0x7f0000fe0000-0x10)=[], 0x0, 0x0) 2018/02/06 13:57:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) recvmsg(0xffffffffffffffff, &(0x7f00002e1000-0x38)={&(0x7f000038d000)=@ax25, 0x10, &(0x7f0000f65000-0x40)=[]}, 0x10000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce6000-0x4)='/dev/ptmx\x00', 0x0, 0x0) 2018/02/06 13:57:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_fuse_mount(&(0x7f0000185000)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) syz_open_dev$sndseq(&(0x7f0000902000)='/dev/snd/seq\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f000033a000-0x8), 0x8) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000ba3000-0x60)={0x0, 0x0, 0x1, @tid}, &(0x7f0000610000)) clock_gettime(0x0, &(0x7f00000cf000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00005c1000-0x20)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f0000ca6000-0x20)) 2018/02/06 13:57:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00003ab000-0x3)="ff29", 0x0) fallocate(r0, 0x1, 0x0, 0x10000) ftruncate(r0, 0x4fa) fallocate(r0, 0x1, 0x0, 0x10000) lseek(r0, 0x0, 0x4) 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000ba3000-0x60)={0x0, 0x0, 0x1, @tid}, &(0x7f0000610000)) clock_gettime(0x0, &(0x7f00000cf000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00005c1000-0x20)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f0000ca6000-0x20)) 2018/02/06 13:57:36 executing program 3: mmap(&(0x7f0000000000/0x59000)=nil, 0x59000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xa, 0x2, 0x88) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008000)={0xa, 0x0, 0x0, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_nat_t_port={0x1}]}, 0x18}, 0x1}, 0x0) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) process_vm_readv(0x0, &(0x7f00004bd000)=[], 0x0, &(0x7f0000fe0000-0x10)=[], 0x0, 0x0) 2018/02/06 13:57:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00003ab000-0x3)="ff29", 0x0) fallocate(r0, 0x1, 0x0, 0x10000) ftruncate(r0, 0x4fa) fallocate(r0, 0x1, 0x0, 0x10000) lseek(r0, 0x0, 0x4) 2018/02/06 13:57:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000ba3000-0x60)={0x0, 0x0, 0x1, @tid}, &(0x7f0000610000)) clock_gettime(0x0, &(0x7f00000cf000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00005c1000-0x20)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f0000ca6000-0x20)) 2018/02/06 13:57:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) process_vm_readv(0x0, &(0x7f00004bd000)=[], 0x0, &(0x7f0000fe0000-0x10)=[], 0x0, 0x0) 2018/02/06 13:57:36 executing program 3: mmap(&(0x7f0000000000/0x59000)=nil, 0x59000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xa, 0x2, 0x88) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008000)={0xa, 0x0, 0x0, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_nat_t_port={0x1}]}, 0x18}, 0x1}, 0x0) 2018/02/06 13:57:36 executing program 2: clock_adjtime(0xa, &(0x7f0000cef000-0xd0)) 2018/02/06 13:57:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00003ab000-0x3)="ff29", 0x0) fallocate(r0, 0x1, 0x0, 0x10000) ftruncate(r0, 0x4fa) fallocate(r0, 0x1, 0x0, 0x10000) lseek(r0, 0x0, 0x4) [ 62.234850] IPVS: Creating netns size=2536 id=9 [ 62.255872] device lo entered promiscuous mode [ 62.262679] device lo left promiscuous mode [ 62.300894] device lo entered promiscuous mode [ 62.308018] device lo left promiscuous mode [ 62.983829] pktgen: kernel_thread() failed for cpu 0 [ 62.988962] pktgen: Cannot create thread for cpu 0 (-4) [ 62.994391] pktgen: kernel_thread() failed for cpu 1 [ 62.999763] pktgen: Cannot create thread for cpu 1 (-4) [ 63.005116] pktgen: Initialization failed for all threads 2018/02/06 13:57:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) process_vm_readv(0x0, &(0x7f00004bd000)=[], 0x0, &(0x7f0000fe0000-0x10)=[], 0x0, 0x0) 2018/02/06 13:57:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000ba3000-0x60)={0x0, 0x0, 0x1, @tid}, &(0x7f0000610000)) clock_gettime(0x0, &(0x7f00000cf000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00005c1000-0x20)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f0000ca6000-0x20)) 2018/02/06 13:57:37 executing program 7: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@common='lo\x00', &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x18, 0x0, 0x0, "00000107c89d"}}) 2018/02/06 13:57:37 executing program 3: mmap(&(0x7f0000000000/0x59000)=nil, 0x59000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xa, 0x2, 0x88) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008000)={0xa, 0x0, 0x0, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_nat_t_port={0x1}]}, 0x18}, 0x1}, 0x0) 2018/02/06 13:57:37 executing program 2: clock_adjtime(0xa, &(0x7f0000cef000-0xd0)) 2018/02/06 13:57:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) recvmsg(0xffffffffffffffff, &(0x7f00002e1000-0x38)={&(0x7f000038d000)=@ax25, 0x10, &(0x7f0000f65000-0x40)=[]}, 0x10000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce6000-0x4)='/dev/ptmx\x00', 0x0, 0x0) 2018/02/06 13:57:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5f000-0xb)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clone(0x40000000, &(0x7f00008a2000), &(0x7f0000d6d000-0x4), &(0x7f0000ca4000), &(0x7f0000ab6000-0xa0)) shutdown(r0, 0x1) 2018/02/06 13:57:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_fuse_mount(&(0x7f0000185000)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) syz_open_dev$sndseq(&(0x7f0000902000)='/dev/snd/seq\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f000033a000-0x8), 0x8) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:37 executing program 3: mmap(&(0x7f0000000000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000022000)='/dev/input/event#\x00', 0x1, 0x0) close(r0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000025000)=0x6) socketpair(0x0, 0x800, 0x0, &(0x7f0000027000-0x8)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000007000)='/selinux/enforce\x00', 0x60000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000028000-0x18)={0x0, 0x0, 0x0, 0x5000000000000}, &(0x7f0000022000-0x4)=0x18) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000028000)=""/236) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000025000-0xb8)=@ipv6_delroute={0x1c, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x1c}, 0x1}, 0x0) syz_open_dev$sndtimer(&(0x7f0000025000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)=""/184) 2018/02/06 13:57:37 executing program 0: mmap(&(0x7f0000000000/0xf91000)=nil, 0xf91000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000f8a000)='/dev/autofs\x00', 0x10000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x60, &(0x7f0000f8a000-0x6d)="04b11a1745a26b1c20ef4d0ec22ace62c585ab2cc1f92d4feb6649ab2c974244703ff5c604fddee1cd00000001874fac05343c46508aed6efecc07041e9ebd2d0000000000000002", 0x48) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000f8e000)="fc83ce371f95bf2e0c9a033d12377afe", 0xfffffffffffffc54) recvfrom(r1, &(0x7f00004d4000-0xe0)=""/224, 0xe0, 0x2000, &(0x7f0000251000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x0, 0x3, 0x2, 0xffffffffffff960a}}, 0x2e) 2018/02/06 13:57:37 executing program 2: clock_adjtime(0xa, &(0x7f0000cef000-0xd0)) 2018/02/06 13:57:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, &(0x7f00004d5000-0x1000)="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", 0x821, 0x0, &(0x7f0000089000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00005a3000), 0x4) sendto$inet6(r0, &(0x7f0000bc2000), 0x0, 0x0, &(0x7f0000f34000-0x1c)={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/06 13:57:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000c9000-0x4)=0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) 2018/02/06 13:57:37 executing program 0: mmap(&(0x7f0000000000/0xf91000)=nil, 0xf91000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000f8a000)='/dev/autofs\x00', 0x10000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x60, &(0x7f0000f8a000-0x6d)="04b11a1745a26b1c20ef4d0ec22ace62c585ab2cc1f92d4feb6649ab2c974244703ff5c604fddee1cd00000001874fac05343c46508aed6efecc07041e9ebd2d0000000000000002", 0x48) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000f8e000)="fc83ce371f95bf2e0c9a033d12377afe", 0xfffffffffffffc54) recvfrom(r1, &(0x7f00004d4000-0xe0)=""/224, 0xe0, 0x2000, &(0x7f0000251000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x0, 0x3, 0x2, 0xffffffffffff960a}}, 0x2e) [ 63.139104] device lo entered promiscuous mode [ 63.152100] syz-executor0: vmalloc: allocation failure: 15157949456 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 63.152108] CPU: 1 PID: 12777 Comm: syz-executor0 Not tainted 4.9.80-g550c01d #29 [ 63.152113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2018/02/06 13:57:37 executing program 0: mmap(&(0x7f0000000000/0xf91000)=nil, 0xf91000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000f8a000)='/dev/autofs\x00', 0x10000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x60, &(0x7f0000f8a000-0x6d)="04b11a1745a26b1c20ef4d0ec22ace62c585ab2cc1f92d4feb6649ab2c974244703ff5c604fddee1cd00000001874fac05343c46508aed6efecc07041e9ebd2d0000000000000002", 0x48) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000f8e000)="fc83ce371f95bf2e0c9a033d12377afe", 0xfffffffffffffc54) recvfrom(r1, &(0x7f00004d4000-0xe0)=""/224, 0xe0, 0x2000, &(0x7f0000251000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x0, 0x3, 0x2, 0xffffffffffff960a}}, 0x2e) 2018/02/06 13:57:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, &(0x7f00004d5000-0x1000)="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", 0x821, 0x0, &(0x7f0000089000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00005a3000), 0x4) sendto$inet6(r0, &(0x7f0000bc2000), 0x0, 0x0, &(0x7f0000f34000-0x1c)={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/06 13:57:37 executing program 0: mmap(&(0x7f0000000000/0xf91000)=nil, 0xf91000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000f8a000)='/dev/autofs\x00', 0x10000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x60, &(0x7f0000f8a000-0x6d)="04b11a1745a26b1c20ef4d0ec22ace62c585ab2cc1f92d4feb6649ab2c974244703ff5c604fddee1cd00000001874fac05343c46508aed6efecc07041e9ebd2d0000000000000002", 0x48) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000f8e000)="fc83ce371f95bf2e0c9a033d12377afe", 0xfffffffffffffc54) recvfrom(r1, &(0x7f00004d4000-0xe0)=""/224, 0xe0, 0x2000, &(0x7f0000251000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x0, 0x3, 0x2, 0xffffffffffff960a}}, 0x2e) 2018/02/06 13:57:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, &(0x7f00004d5000-0x1000)="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", 0x821, 0x0, &(0x7f0000089000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00005a3000), 0x4) sendto$inet6(r0, &(0x7f0000bc2000), 0x0, 0x0, &(0x7f0000f34000-0x1c)={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 63.152127] ffff8801b6487880 ffffffff81d94b69 1ffff10036c90f13 ffff8801b6428000 [ 63.152139] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b6487990 [ 63.152151] ffffffff81451ca2 024000c200000003 0000000041b58ab3 ffffffff84195215 [ 63.152153] Call Trace: [ 63.152167] [] dump_stack+0xc1/0x128 [ 63.152177] [] warn_alloc+0x212/0x240 [ 63.152186] [] ? zone_watermark_ok_safe+0x280/0x280 [ 63.152198] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.152207] [] ? __alloc_pages_nodemask+0x534/0x6b0 [ 63.152215] [] ? __alloc_pages_slowpath+0x1d90/0x1d90 [ 63.152225] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 63.152234] [] __vmalloc_node_range+0x3f5/0x5f0 [ 63.152242] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.152249] [] ? kmalloc_order_trace+0x7a/0x190 [ 63.152257] [] ? release_sock+0x14c/0x1c0 [ 63.152265] [] vmalloc+0x5b/0x70 [ 63.152275] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 63.152282] [] xt_alloc_entry_offsets+0x41/0x60 [ 63.152290] [] translate_table+0x2da/0x1cd0 [ 63.152298] [] ? ___slab_alloc.constprop.78+0x3cd/0x560 [ 63.152306] [] ? arpt_alloc_initial_table+0x690/0x690 [ 63.152314] [] ? check_stack_object+0x68/0x140 [ 63.152321] [] ? __check_object_size+0x174/0x3a9 [ 63.152327] [] ? 0xffffffff810002b8 [ 63.152333] [] do_arpt_set_ctl+0x2b7/0x650 [ 63.152341] [] ? compat_do_arpt_set_ctl+0x6d0/0x6d0 [ 63.152350] [] ? __mutex_unlock_slowpath+0x220/0x3d0 [ 63.152358] [] ? __ww_mutex_lock+0x14a0/0x14a0 [ 63.152366] [] ? mutex_unlock+0x9/0x10 [ 63.152375] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 63.152383] [] nf_setsockopt+0x67/0xc0 [ 63.152391] [] ip_setsockopt+0xa1/0xb0 [ 63.152399] [] tcp_setsockopt+0x82/0xd0 [ 63.152407] [] sock_common_setsockopt+0x95/0xd0 [ 63.152416] [] SyS_setsockopt+0x160/0x250 [ 63.152423] [] ? SyS_recv+0x40/0x40 [ 63.152431] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 63.152439] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 63.152447] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 63.152455] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 63.152458] Mem-Info: [ 63.152478] active_anon:26202 inactive_anon:39 isolated_anon:0 [ 63.152478] active_file:3704 inactive_file:8347 isolated_file:0 [ 63.152478] unevictable:0 dirty:117 writeback:0 unstable:0 [ 63.152478] slab_reclaimable:6110 slab_unreclaimable:59669 [ 63.152478] mapped:24070 shmem:46 pagetables:660 bounce:0 [ 63.152478] free:1503786 free_pcp:340 free_cma:0 [ 63.152495] Node 0 active_anon:104808kB inactive_anon:156kB active_file:14816kB inactive_file:33388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96280kB dirty:468kB writeback:0kB shmem:184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 57344kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 63.152517] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 63.152550] DMA32 free:2979960kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:760kB local_pcp:712kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 63.152578] Normal free:3019276kB min:36824kB low:46028kB high:55232kB active_anon:104808kB inactive_anon:156kB active_file:14816kB inactive_file:33388kB unevictable:0kB writepending:468kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:24440kB slab_unreclaimable:238676kB kernel_stack:5664kB pagetables:2640kB bounce:0kB free_pcp:596kB local_pcp:440kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 63.152627] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2979960kB Normal: 337*4kB (UME) 396*8kB (UME) 223*16kB (UM) 308*32kB (UME) 224*64kB (UME) 168*128kB (UME) 190*256kB (UM) 121*512kB (UME) 44*1024kB (UME) 3*2048kB (ME) 684*4096kB (M) = 3017236kB [ 63.152745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 63.152748] 12096 total pagecache pages [ 63.152751] 0 pages in swap cache [ 63.152756] Swap cache stats: add 0, delete 0, find 0/0 [ 63.152758] Free swap = 0kB [ 63.152760] Total swap = 0kB [ 63.152762] 1965969 pages RAM [ 63.152764] 0 pages HighMem/MovableOnly [ 63.152766] 320509 pages reserved [ 63.168209] syz-executor0: vmalloc: allocation failure: 15157949456 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 63.168219] CPU: 1 PID: 12777 Comm: syz-executor0 Not tainted 4.9.80-g550c01d #29 [ 63.168223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.168236] ffff8801b6487880 ffffffff81d94b69 1ffff10036c90f13 ffff8801b6428000 [ 63.168246] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b6487990 [ 63.168256] ffffffff81451ca2 024000c200000003 0000000041b58ab3 ffffffff84195215 [ 63.168257] Call Trace: [ 63.168270] [] dump_stack+0xc1/0x128 [ 63.168282] [] warn_alloc+0x212/0x240 [ 63.168292] [] ? zone_watermark_ok_safe+0x280/0x280 [ 63.168302] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.168310] [] ? __alloc_pages_nodemask+0x534/0x6b0 [ 63.168319] [] ? __alloc_pages_slowpath+0x1d90/0x1d90 [ 63.168329] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 63.168337] [] __vmalloc_node_range+0x3f5/0x5f0 [ 63.168345] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.168354] [] ? kmalloc_order_trace+0x7a/0x190 [ 63.168363] [] ? release_sock+0x14c/0x1c0 [ 63.168369] [] vmalloc+0x5b/0x70 [ 63.168377] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 63.168384] [] xt_alloc_entry_offsets+0x41/0x60 [ 63.168391] [] translate_table+0x2da/0x1cd0 [ 63.168400] [] ? __lock_is_held+0xa1/0xf0 [ 63.168407] [] ? arpt_alloc_initial_table+0x690/0x690 [ 63.168416] [] ? check_stack_object+0x68/0x140 [ 63.168423] [] ? __check_object_size+0x174/0x3a9 [ 63.168428] [] ? 0xffffffff810002b8 [ 63.168435] [] do_arpt_set_ctl+0x2b7/0x650 [ 63.168443] [] ? compat_do_arpt_set_ctl+0x6d0/0x6d0 [ 63.168452] [] ? __mutex_unlock_slowpath+0x220/0x3d0 [ 63.168461] [] ? __ww_mutex_lock+0x14a0/0x14a0 [ 63.168469] [] ? mutex_unlock+0x9/0x10 [ 63.168477] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 63.168484] [] nf_setsockopt+0x67/0xc0 [ 63.168491] [] ip_setsockopt+0xa1/0xb0 [ 63.168499] [] tcp_setsockopt+0x82/0xd0 [ 63.168506] [] sock_common_setsockopt+0x95/0xd0 [ 63.168513] [] SyS_setsockopt+0x160/0x250 [ 63.168520] [] ? SyS_recv+0x40/0x40 [ 63.168527] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 63.168535] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 63.168543] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 63.168550] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 63.168558] Mem-Info: [ 63.168579] active_anon:25185 inactive_anon:39 isolated_anon:0 [ 63.168579] active_file:3704 inactive_file:8347 isolated_file:0 [ 63.168579] unevictable:0 dirty:117 writeback:0 unstable:0 [ 63.168579] slab_reclaimable:6110 slab_unreclaimable:59699 [ 63.168579] mapped:24095 shmem:46 pagetables:660 bounce:0 [ 63.168579] free:1504783 free_pcp:412 free_cma:0 [ 63.168595] Node 0 active_anon:100740kB inactive_anon:156kB active_file:14816kB inactive_file:33388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96380kB dirty:468kB writeback:0kB shmem:184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 57344kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 63.168610] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 63.168636] DMA32 free:2979960kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:760kB local_pcp:712kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 63.168662] Normal free:3023264kB min:36824kB low:46028kB high:55232kB active_anon:100740kB inactive_anon:156kB active_file:14816kB inactive_file:33388kB unevictable:0kB writepending:468kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:24440kB slab_unreclaimable:238796kB kernel_stack:5632kB pagetables:2640kB bounce:0kB free_pcp:884kB local_pcp:580kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 63.168715] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2979960kB Normal: 306*4kB (UME) 398*8kB (UME) 223*16kB (UM) 308*32kB (UME) 224*64kB (UME) 168*128kB (UME) 190*256kB (UM) 121*512kB (UME) 44*1024kB (UME) 4*2048kB (ME) 685*4096kB (M) = 3023272kB [ 63.168807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 63.168809] 12096 total pagecache pages [ 63.168812] 0 pages in swap cache [ 63.168816] Swap cache stats: add 0, delete 0, find 0/0 [ 63.168818] Free swap = 0kB [ 63.168819] Total swap = 0kB [ 63.168821] 1965969 pages RAM [ 63.168823] 0 pages HighMem/MovableOnly [ 63.168825] 320509 pages reserved [ 63.184114] syz-executor0: vmalloc: allocation failure: 15157949456 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 63.184122] CPU: 0 PID: 12791 Comm: syz-executor0 Not tainted 4.9.80-g550c01d #29 [ 63.184125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.184138] ffff8801b1877880 ffffffff81d94b69 1ffff1003630ef13 ffff8801b5d61800 [ 63.184149] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b1877990 [ 63.184159] ffffffff81451ca2 024000c200000003 0000000041b58ab3 ffffffff84195215 [ 63.184161] Call Trace: [ 63.184172] [] dump_stack+0xc1/0x128 [ 63.184181] [] warn_alloc+0x212/0x240 [ 63.184189] [] ? zone_watermark_ok_safe+0x280/0x280 [ 63.184197] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.184211] [] ? __alloc_pages_nodemask+0x534/0x6b0 [ 63.184220] [] ? __alloc_pages_slowpath+0x1d90/0x1d90 [ 63.184230] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 63.184240] [] __vmalloc_node_range+0x3f5/0x5f0 [ 63.184249] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.184257] [] ? kmalloc_order_trace+0x7a/0x190 [ 63.184268] [] ? release_sock+0x14c/0x1c0 [ 63.184277] [] vmalloc+0x5b/0x70 [ 63.184287] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 63.184294] [] xt_alloc_entry_offsets+0x41/0x60 [ 63.184301] [] translate_table+0x2da/0x1cd0 [ 63.184310] [] ? __lock_is_held+0xa1/0xf0 [ 63.184317] [] ? arpt_alloc_initial_table+0x690/0x690 [ 63.184325] [] ? check_stack_object+0x68/0x140 [ 63.184332] [] ? __check_object_size+0x174/0x3a9 [ 63.184337] [] ? 0xffffffff810002b8 [ 63.184344] [] do_arpt_set_ctl+0x2b7/0x650 [ 63.184350] [] ? compat_do_arpt_set_ctl+0x6d0/0x6d0 [ 63.184359] [] ? __mutex_unlock_slowpath+0x220/0x3d0 [ 63.184367] [] ? __ww_mutex_lock+0x14a0/0x14a0 [ 63.184375] [] ? mutex_unlock+0x9/0x10 [ 63.184384] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 63.184392] [] nf_setsockopt+0x67/0xc0 [ 63.184400] [] ip_setsockopt+0xa1/0xb0 [ 63.184408] [] tcp_setsockopt+0x82/0xd0 [ 63.184415] [] sock_common_setsockopt+0x95/0xd0 [ 63.184422] [] SyS_setsockopt+0x160/0x250 [ 63.184428] [] ? SyS_recv+0x40/0x40 [ 63.184435] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 63.184444] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 63.184451] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 63.184459] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 63.184461] Mem-Info: [ 63.184478] active_anon:27245 inactive_anon:39 isolated_anon:0 [ 63.184478] active_file:3704 inactive_file:8347 isolated_file:0 [ 63.184478] unevictable:0 dirty:117 writeback:0 unstable:0 [ 63.184478] slab_reclaimable:6110 slab_unreclaimable:59724 [ 63.184478] mapped:24095 shmem:46 pagetables:660 bounce:0 [ 63.184478] free:1502562 free_pcp:386 free_cma:0 [ 63.184492] Node 0 active_anon:108980kB inactive_anon:156kB active_file:14816kB inactive_file:33388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96380kB dirty:468kB writeback:0kB shmem:184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 57344kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 63.184508] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 63.184533] DMA32 free:2979960kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:760kB local_pcp:48kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 63.184612] Normal free:3014380kB min:36824kB low:46028kB high:55232kB active_anon:108980kB inactive_anon:156kB active_file:14816kB inactive_file:33388kB unevictable:0kB writepending:468kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:24440kB slab_unreclaimable:238896kB kernel_stack:5920kB pagetables:2640kB bounce:0kB free_pcp:784kB local_pcp:168kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 63.184662] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2979960kB Normal: 203*4kB (UME) 394*8kB (UM) 225*16kB (UME) 304*32kB (ME) 221*64kB (UME) 168*128kB (UME) 190*256kB (UM) 121*512kB (UME) 44*1024kB (UME) 2*2048kB (ME) 684*4096kB (M) = 3014348kB [ 63.184756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 63.184759] 12096 total pagecache pages [ 63.184762] 0 pages in swap cache [ 63.184766] Swap cache stats: add 0, delete 0, find 0/0 [ 63.184767] Free swap = 0kB [ 63.184769] Total swap = 0kB [ 63.184771] 1965969 pages RAM [ 63.184773] 0 pages HighMem/MovableOnly [ 63.184775] 320509 pages reserved [ 63.202860] syz-executor0: vmalloc: allocation failure: 15157949456 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 63.202868] CPU: 0 PID: 12798 Comm: syz-executor0 Not tainted 4.9.80-g550c01d #29 [ 63.202872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.202885] ffff8801b307f880 ffffffff81d94b69 1ffff1003660ff13 ffff8801b5e43000 [ 63.202895] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b307f990 [ 63.202906] ffffffff81451ca2 024000c200000003 0000000041b58ab3 ffffffff84195215 [ 63.202908] Call Trace: [ 63.202921] [] dump_stack+0xc1/0x128 [ 63.202930] [] warn_alloc+0x212/0x240 [ 63.202939] [] ? zone_watermark_ok_safe+0x280/0x280 [ 63.202947] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.202957] [] ? __alloc_pages_nodemask+0x534/0x6b0 [ 63.202966] [] ? __alloc_pages_slowpath+0x1d90/0x1d90 [ 63.202978] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 63.202986] [] __vmalloc_node_range+0x3f5/0x5f0 [ 63.202994] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.203001] [] ? kmalloc_order_trace+0x7a/0x190 [ 63.203009] [] ? release_sock+0x14c/0x1c0 [ 63.203017] [] vmalloc+0x5b/0x70 [ 63.203030] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 63.203038] [] xt_alloc_entry_offsets+0x41/0x60 [ 63.203045] [] translate_table+0x2da/0x1cd0 [ 63.203054] [] ? __lock_is_held+0xa1/0xf0 [ 63.203061] [] ? arpt_alloc_initial_table+0x690/0x690 [ 63.203069] [] ? check_stack_object+0x68/0x140 [ 63.203076] [] ? __check_object_size+0x174/0x3a9 [ 63.203082] [] ? 0xffffffff810002b8 [ 63.203088] [] do_arpt_set_ctl+0x2b7/0x650 [ 63.203095] [] ? compat_do_arpt_set_ctl+0x6d0/0x6d0 [ 63.203104] [] ? __mutex_unlock_slowpath+0x220/0x3d0 [ 63.203112] [] ? __ww_mutex_lock+0x14a0/0x14a0 [ 63.203120] [] ? mutex_unlock+0x9/0x10 [ 63.203129] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 63.203137] [] nf_setsockopt+0x67/0xc0 [ 63.203145] [] ip_setsockopt+0xa1/0xb0 [ 63.203153] [] tcp_setsockopt+0x82/0xd0 [ 63.203160] [] sock_common_setsockopt+0x95/0xd0 [ 63.203167] [] SyS_setsockopt+0x160/0x250 [ 63.203173] [] ? SyS_recv+0x40/0x40 [ 63.203180] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 63.203189] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 63.203197] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 63.203209] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 63.203312] Mem-Info: [ 63.203330] active_anon:28823 inactive_anon:39 isolated_anon:0 [ 63.203330] active_file:3704 inactive_file:8347 isolated_file:0 [ 63.203330] unevictable:0 dirty:117 writeback:0 unstable:0 [ 63.203330] slab_reclaimable:6110 slab_unreclaimable:59755 [ 63.203330] mapped:24095 shmem:46 pagetables:660 bounce:0 [ 63.203330] free:1500874 free_pcp:399 free_cma:0 [ 63.203346] Node 0 active_anon:115292kB inactive_anon:156kB active_file:14816kB inactive_file:33388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96380kB dirty:468kB writeback:0kB shmem:184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 57344kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 63.203365] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 63.203392] DMA32 free:2979960kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:760kB local_pcp:48kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 63.203419] Normal free:3007628kB min:36824kB low:46028kB high:55232kB active_anon:115292kB inactive_anon:156kB active_file:14816kB inactive_file:33388kB unevictable:0kB writepending:468kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:24440kB slab_unreclaimable:239020kB kernel_stack:6016kB pagetables:2640kB bounce:0kB free_pcp:836kB local_pcp:264kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 63.203465] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2979960kB Normal: 141*4kB (UME) 394*8kB (UM) 225*16kB (UME) 305*32kB (UME) 216*64kB (UME) 168*128kB (UME) 190*256kB (UM) 121*512kB (UME) 44*1024kB (UME) 1*2048kB (E) 683*4096kB (M) = 3007668kB [ 63.203789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 63.203791] 12096 total pagecache pages [ 63.203795] 0 pages in swap cache [ 63.203798] Swap cache stats: add 0, delete 0, find 0/0 [ 63.203800] Free swap = 0kB [ 63.203802] Total swap = 0kB [ 63.203804] 1965969 pages RAM [ 63.203806] 0 pages HighMem/MovableOnly [ 63.203808] 320509 pages reserved [ 63.225607] syz-executor0: vmalloc: allocation failure: 15157949456 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 63.225615] CPU: 0 PID: 12803 Comm: syz-executor0 Not tainted 4.9.80-g550c01d #29 [ 63.225619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.225632] ffff8801b5e5f880 ffffffff81d94b69 1ffff10036bcbf13 ffff8801b5e41800 [ 63.225642] ffffffff83ab8ea0 0000000000000001 0000000000400000 ffff8801b5e5f990 [ 63.225657] ffffffff81451ca2 024000c200000003 0000000041b58ab3 ffffffff84195215 [ 63.225658] Call Trace: [ 63.225671] [] dump_stack+0xc1/0x128 [ 63.225681] [] warn_alloc+0x212/0x240 [ 63.225691] [] ? zone_watermark_ok_safe+0x280/0x280 [ 63.225700] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.225708] [] ? __alloc_pages_nodemask+0x534/0x6b0 [ 63.225716] [] ? __alloc_pages_slowpath+0x1d90/0x1d90 [ 63.225726] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 63.225734] [] __vmalloc_node_range+0x3f5/0x5f0 [ 63.225742] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 63.225749] [] ? kmalloc_order_trace+0x7a/0x190 [ 63.225758] [] ? release_sock+0x14c/0x1c0 [ 63.225765] [] vmalloc+0x5b/0x70 [ 63.225774] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 63.225781] [] xt_alloc_entry_offsets+0x41/0x60 [ 63.225788] [] translate_table+0x2da/0x1cd0 [ 63.225797] [] ? __lock_is_held+0xa1/0xf0 [ 63.225804] [] ? arpt_alloc_initial_table+0x690/0x690 [ 63.225812] [] ? check_stack_object+0x68/0x140 [ 63.225819] [] ? __check_object_size+0x174/0x3a9 [ 63.225824] [] ? 0xffffffff810002b8 [ 63.225831] [] do_arpt_set_ctl+0x2b7/0x650 [ 63.225838] [] ? compat_do_arpt_set_ctl+0x6d0/0x6d0 [ 63.225847] [] ? __mutex_unlock_slowpath+0x220/0x3d0 [ 63.225854] [] ? __ww_mutex_lock+0x14a0/0x14a0 [ 63.225862] [] ? mutex_unlock+0x9/0x10 [ 63.225871] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 63.225879] [] nf_setsockopt+0x67/0xc0 [ 63.225887] [] ip_setsockopt+0xa1/0xb0 [ 63.225894] [] tcp_setsockopt+0x82/0xd0 [ 63.225902] [] sock_common_setsockopt+0x95/0xd0 [ 63.225908] [] SyS_setsockopt+0x160/0x250 [ 63.225915] [] ? SyS_recv+0x40/0x40 [ 63.225922] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 63.225930] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 63.225938] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 63.225945] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 63.228775] Mem-Info: [ 63.228794] active_anon:27759 inactive_anon:39 isolated_anon:0 [ 63.228794] active_file:3704 inactive_file:8347 isolated_file:0 [ 63.228794] unevictable:0 dirty:117 writeback:0 unstable:0 [ 63.228794] slab_reclaimable:6110 slab_unreclaimable:59780 [ 63.228794] mapped:24070 shmem:46 pagetables:660 bounce:0 [ 63.228794] free:1501968 free_pcp:435 free_cma:0 [ 63.228810] Node 0 active_anon:111036kB inactive_anon:156kB active_file:14816kB inactive_file:33388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96280kB dirty:468kB writeback:0kB shmem:184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 57344kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 63.228827] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2908 6410 6410 [ 63.228852] DMA32 free:2979960kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:760kB local_pcp:48kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 [ 63.228877] Normal free:3012004kB min:36824kB low:46028kB high:55232kB active_anon:111036kB inactive_anon:156kB active_file:14816kB inactive_file:33388kB unevictable:0kB writepending:468kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:24440kB slab_unreclaimable:239120kB kernel_stack:5888kB pagetables:2640kB bounce:0kB free_pcp:980kB local_pcp:472kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 [ 63.228923] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2979960kB Normal: 141*4kB (UME) 394*8kB (UM) 232*16kB (UME) 309*32kB (UME) 216*64kB (UME) 168*128kB (UME) 190*256kB (UM) 121*512kB (UME) 44*1024kB (UME) 3*2048kB (ME) 683*4096kB (M) = 3012004kB [ 63.229014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 63.229016] 12096 total pagecache pages [ 63.229019] 0 pages in swap cache [ 63.229023] Swap cache stats: add 0, delete 0, find 0/0 [ 63.229025] Free swap = 0kB [ 63.229027] Total swap = 0kB [ 63.229029] 1965969 pages RAM [ 63.229031] 0 pages HighMem/MovableOnly [ 63.229033] 320509 pages reserved [ 65.789659] device lo left promiscuous mode 2018/02/06 13:57:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00009cc000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa7000-0x9)='t', 0x1}], 0x1) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)) 2018/02/06 13:57:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_fuse_mount(&(0x7f0000185000)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) syz_open_dev$sndseq(&(0x7f0000902000)='/dev/snd/seq\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f000033a000-0x8), 0x8) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:40 executing program 0: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000fe7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000fe8000-0x1)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x8ff8c, &(0x7f00002e9000)) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/06 13:57:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, &(0x7f00004d5000-0x1000)="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", 0x821, 0x0, &(0x7f0000089000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00005a3000), 0x4) sendto$inet6(r0, &(0x7f0000bc2000), 0x0, 0x0, &(0x7f0000f34000-0x1c)={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 65.841369] pktgen: kernel_thread() failed for cpu 1 [ 65.846703] pktgen: Cannot create thread for cpu 1 (-4) [ 65.858326] IPVS: Creating netns size=2536 id=10 2018/02/06 13:57:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000fb6000-0x10)=[{&(0x7f0000fb4000)="1f", 0x1}], 0x1) writev(r0, &(0x7f0000fb6000-0x10)=[], 0x270) 2018/02/06 13:57:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5f000-0xb)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clone(0x40000000, &(0x7f00008a2000), &(0x7f0000d6d000-0x4), &(0x7f0000ca4000), &(0x7f0000ab6000-0xa0)) shutdown(r0, 0x1) 2018/02/06 13:57:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00009cc000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa7000-0x9)='t', 0x1}], 0x1) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)) 2018/02/06 13:57:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_fuse_mount(&(0x7f0000185000)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r0]}], 0x1}, 0x0) syz_open_dev$sndseq(&(0x7f0000902000)='/dev/snd/seq\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f000033a000-0x8), 0x8) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) pselect6(0x40, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40)={0xffffffffffffffe1}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/06 13:57:40 executing program 0: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0) 2018/02/06 13:57:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000557000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00008b6000-0x50)={{0xff, 0x8000c}}) 2018/02/06 13:57:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) recvmsg(0xffffffffffffffff, &(0x7f00002e1000-0x38)={&(0x7f000038d000)=@ax25, 0x10, &(0x7f0000f65000-0x40)=[]}, 0x10000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce6000-0x4)='/dev/ptmx\x00', 0x0, 0x0) 2018/02/06 13:57:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) personality(0x5000007) r0 = syz_open_dev$mice(&(0x7f0000386000-0x10)='/dev/input/mice\x00', 0x0, 0x20e803) ppoll(&(0x7f0000726000-0x20)=[{r0}], 0x1, &(0x7f0000880000-0x10)={0x77359400}, &(0x7f0000fb0000-0x8), 0x8) 2018/02/06 13:57:40 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fchownat(0xffffffffffffffff, &(0x7f0000012000-0x8)='./file0\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000557000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00008b6000-0x50)={{0xff, 0x8000c}}) 2018/02/06 13:57:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) personality(0x5000007) r0 = syz_open_dev$mice(&(0x7f0000386000-0x10)='/dev/input/mice\x00', 0x0, 0x20e803) ppoll(&(0x7f0000726000-0x20)=[{r0}], 0x1, &(0x7f0000880000-0x10)={0x77359400}, &(0x7f0000fb0000-0x8), 0x8) 2018/02/06 13:57:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00009cc000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa7000-0x9)='t', 0x1}], 0x1) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)) 2018/02/06 13:57:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000557000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00008b6000-0x50)={{0xff, 0x8000c}}) 2018/02/06 13:57:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) personality(0x5000007) r0 = syz_open_dev$mice(&(0x7f0000386000-0x10)='/dev/input/mice\x00', 0x0, 0x20e803) ppoll(&(0x7f0000726000-0x20)=[{r0}], 0x1, &(0x7f0000880000-0x10)={0x77359400}, &(0x7f0000fb0000-0x8), 0x8) 2018/02/06 13:57:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) personality(0x5000007) r0 = syz_open_dev$mice(&(0x7f0000386000-0x10)='/dev/input/mice\x00', 0x0, 0x20e803) ppoll(&(0x7f0000726000-0x20)=[{r0}], 0x1, &(0x7f0000880000-0x10)={0x77359400}, &(0x7f0000fb0000-0x8), 0x8) 2018/02/06 13:57:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00009cc000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa7000-0x9)='t', 0x1}], 0x1) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)) [ 65.965614] device lo entered promiscuous mode [ 65.979645] device lo left promiscuous mode 2018/02/06 13:57:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000557000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00008b6000-0x50)={{0xff, 0x8000c}}) [ 66.582529] pktgen: kernel_thread() failed for cpu 0 [ 66.587638] pktgen: Cannot create thread for cpu 0 (-4) [ 66.593321] pktgen: kernel_thread() failed for cpu 1 [ 66.598411] pktgen: Cannot create thread for cpu 1 (-4) [ 66.603872] pktgen: Initialization failed for all threads 2018/02/06 13:57:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5f000-0xb)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clone(0x40000000, &(0x7f00008a2000), &(0x7f0000d6d000-0x4), &(0x7f0000ca4000), &(0x7f0000ab6000-0xa0)) shutdown(r0, 0x1) 2018/02/06 13:57:41 executing program 0: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0) 2018/02/06 13:57:41 executing program 2: ioprio_get$uid(0x3, 0x0) 2018/02/06 13:57:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000b1d000-0x20)={{}, {0x77359400}}, &(0x7f0000e68000-0x20)) 2018/02/06 13:57:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00008a4000-0x20)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}) recvmsg(0xffffffffffffffff, &(0x7f00002e1000-0x38)={&(0x7f000038d000)=@ax25, 0x10, &(0x7f0000f65000-0x40)=[]}, 0x10000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce6000-0x4)='/dev/ptmx\x00', 0x0, 0x0) 2018/02/06 13:57:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000058000-0x60)=[{{}, 0x0, 0x2000000000002}, {{0x77359400}}], 0x30) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000735000-0x4)=0x1) 2018/02/06 13:57:41 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fchownat(0xffffffffffffffff, &(0x7f0000012000-0x8)='./file0\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:41 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fchownat(0xffffffffffffffff, &(0x7f0000012000-0x8)='./file0\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:41 executing program 0: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0) 2018/02/06 13:57:41 executing program 7: timer_create(0x800007, &(0x7f00005d1000)={0x0, 0x0, 0x0, @thr={&(0x7f00007a0000-0x12), &(0x7f0000dec000-0x87)}}, &(0x7f00008b7000-0x4)) 2018/02/06 13:57:41 executing program 0: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0) 2018/02/06 13:57:41 executing program 2: ioprio_get$uid(0x3, 0x0) 2018/02/06 13:57:41 executing program 7: timer_create(0x800007, &(0x7f00005d1000)={0x0, 0x0, 0x0, @thr={&(0x7f00007a0000-0x12), &(0x7f0000dec000-0x87)}}, &(0x7f00008b7000-0x4)) 2018/02/06 13:57:41 executing program 7: timer_create(0x800007, &(0x7f00005d1000)={0x0, 0x0, 0x0, @thr={&(0x7f00007a0000-0x12), &(0x7f0000dec000-0x87)}}, &(0x7f00008b7000-0x4)) [ 66.712995] device lo entered promiscuous mode 2018/02/06 13:57:41 executing program 2: ioprio_get$uid(0x3, 0x0) 2018/02/06 13:57:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000645000-0x8), &(0x7f0000ded000), &(0x7f000052f000)={0x40000077359400}, 0x8) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000bdc000-0xc)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) fcntl$setown(r2, 0x8, r0) fcntl$setsig(r5, 0xa, 0x12) r6 = gettid() tkill(r6, 0x100000000000016) [ 66.738929] device lo left promiscuous mode [ 66.791789] pktgen: kernel_thread() failed for cpu 0 [ 66.796910] pktgen: Cannot create thread for cpu 0 (-4) [ 66.802383] pktgen: kernel_thread() failed for cpu 1 [ 66.807481] pktgen: Cannot create thread for cpu 1 (-4) [ 66.812846] pktgen: Initialization failed for all threads 2018/02/06 13:57:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000058000-0x60)=[{{}, 0x0, 0x2000000000002}, {{0x77359400}}], 0x30) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000735000-0x4)=0x1) 2018/02/06 13:57:41 executing program 2: ioprio_get$uid(0x3, 0x0) 2018/02/06 13:57:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000645000-0x8), &(0x7f0000ded000), &(0x7f000052f000)={0x40000077359400}, 0x8) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000bdc000-0xc)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) fcntl$setown(r2, 0x8, r0) fcntl$setsig(r5, 0xa, 0x12) r6 = gettid() tkill(r6, 0x100000000000016) 2018/02/06 13:57:41 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fchownat(0xffffffffffffffff, &(0x7f0000012000-0x8)='./file0\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:41 executing program 7: timer_create(0x800007, &(0x7f00005d1000)={0x0, 0x0, 0x0, @thr={&(0x7f00007a0000-0x12), &(0x7f0000dec000-0x87)}}, &(0x7f00008b7000-0x4)) 2018/02/06 13:57:41 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x939000)=nil, 0x939000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000443000)={@common="6c6f00000000000000000000000000ff", &(0x7f0000939000-0x5)=@ethtool_eeprom={0x4b}}) 2018/02/06 13:57:41 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fchownat(0xffffffffffffffff, &(0x7f0000012000-0x8)='./file0\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x8, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/06 13:57:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000329000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000ff9000-0x9)="6e6574000606703600") exit(0x0) getdents(r1, &(0x7f0000bcd000), 0x0) 2018/02/06 13:57:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, []}) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/06 13:57:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, []}) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/06 13:57:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x8, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/06 13:57:41 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x939000)=nil, 0x939000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000443000)={@common="6c6f00000000000000000000000000ff", &(0x7f0000939000-0x5)=@ethtool_eeprom={0x4b}}) 2018/02/06 13:57:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x8, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/06 13:57:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, []}) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/06 13:57:41 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fchownat(0xffffffffffffffff, &(0x7f0000012000-0x8)='./file0\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:41 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fchownat(0xffffffffffffffff, &(0x7f0000012000-0x8)='./file0\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/06 13:57:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000329000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000ff9000-0x9)="6e6574000606703600") exit(0x0) getdents(r1, &(0x7f0000bcd000), 0x0) 2018/02/06 13:57:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000645000-0x8), &(0x7f0000ded000), &(0x7f000052f000)={0x40000077359400}, 0x8) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000bdc000-0xc)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) fcntl$setown(r2, 0x8, r0) fcntl$setsig(r5, 0xa, 0x12) r6 = gettid() tkill(r6, 0x100000000000016) 2018/02/06 13:57:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000058000-0x60)=[{{}, 0x0, 0x2000000000002}, {{0x77359400}}], 0x30) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000735000-0x4)=0x1) 2018/02/06 13:57:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, []}) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/06 13:57:41 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x939000)=nil, 0x939000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000443000)={@common="6c6f00000000000000000000000000ff", &(0x7f0000939000-0x5)=@ethtool_eeprom={0x4b}}) 2018/02/06 13:57:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x8, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/06 13:57:41 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x939000)=nil, 0x939000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000443000)={@common="6c6f00000000000000000000000000ff", &(0x7f0000939000-0x5)=@ethtool_eeprom={0x4b}}) 2018/02/06 13:57:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f000063c000)={&(0x7f00004f3000-0x1dc)=@newsa={0x1b4, 0x10, 0x721, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@empty, @in=@rand_addr}, {@in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x833}, @in6=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000002}, [@algo_auth_trunc={0xc4, 0x14, {{'sha1\x00'}, 0x3c0, 0x0, "938777e1092893c8c156e35f6cce6e2be93f15e4c1793d4d01de8f03880a547e10d9f2c2795657d50c005d7818dbae34c91612eae3cc5a187a396002d804e7706cc3d6e16913ac76efd084d767a9983f518d946b52adfd57ddcffc6a4eba10520d431e4c3150604beea9bc0d49c991e56eb694f69eff2cd7"}}]}, 0x1b4}, 0x1}, 0x0) 2018/02/06 13:57:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000329000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000ff9000-0x9)="6e6574000606703600") exit(0x0) getdents(r1, &(0x7f0000bcd000), 0x0) 2018/02/06 13:57:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f000037c000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000f3c000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendto$inet6(r0, &(0x7f0000ffc000)="c2", 0x1, 0x0, &(0x7f00001e0000-0x1c)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto(r0, &(0x7f0000f1e000-0xdd), 0xffffffffffffff02, 0x0, &(0x7f0000ffb000-0x10)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/06 13:57:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) write$tun(r0, &(0x7f0000ba9000-0x3506)=@hdr={0x1, 0x0, 0x0, 0x1, 0x0, 0x0, @ipv6={0x0, 0x6, "88173b", 0x14, 0x0, 0x0, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}, 0x46) 2018/02/06 13:57:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000645000-0x8), &(0x7f0000ded000), &(0x7f000052f000)={0x40000077359400}, 0x8) pipe(&(0x7f0000d8c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000e13000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x80007387, 0x0) r4 = dup2(r2, r3) r5 = syz_open_dev$random(&(0x7f0000bdc000-0xc)='/dev/random\x00', 0x0, 0x0) dup2(r2, r5) ioctl$int_in(r4, 0x5452, &(0x7f0000e36000-0x8)=0x45) fcntl$setown(r2, 0x8, r0) fcntl$setsig(r5, 0xa, 0x12) r6 = gettid() tkill(r6, 0x100000000000016) 2018/02/06 13:57:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000058000-0x60)=[{{}, 0x0, 0x2000000000002}, {{0x77359400}}], 0x30) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000735000-0x4)=0x1) 2018/02/06 13:57:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000359000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5e000-0x20)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000002000-0x4e)=""/1, 0x1}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f000090a000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) readv(r2, &(0x7f000065e000-0x38)=[{&(0x7f00000cc000)=""/67, 0x43}], 0x1) 2018/02/06 13:57:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) write$tun(r0, &(0x7f0000ba9000-0x3506)=@hdr={0x1, 0x0, 0x0, 0x1, 0x0, 0x0, @ipv6={0x0, 0x6, "88173b", 0x14, 0x0, 0x0, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}, 0x46) [ 67.121835] keychord: Insufficient bytes present for keycount 56 [ 67.138263] keychord: Insufficient bytes present for keycount 56 2018/02/06 13:57:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000329000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000ff9000-0x9)="6e6574000606703600") exit(0x0) getdents(r1, &(0x7f0000bcd000), 0x0) 2018/02/06 13:57:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) write$tun(r0, &(0x7f0000ba9000-0x3506)=@hdr={0x1, 0x0, 0x0, 0x1, 0x0, 0x0, @ipv6={0x0, 0x6, "88173b", 0x14, 0x0, 0x0, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}, 0x46) 2018/02/06 13:57:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f000063c000)={&(0x7f00004f3000-0x1dc)=@newsa={0x1b4, 0x10, 0x721, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@empty, @in=@rand_addr}, {@in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x833}, @in6=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000002}, [@algo_auth_trunc={0xc4, 0x14, {{'sha1\x00'}, 0x3c0, 0x0, "938777e1092893c8c156e35f6cce6e2be93f15e4c1793d4d01de8f03880a547e10d9f2c2795657d50c005d7818dbae34c91612eae3cc5a187a396002d804e7706cc3d6e16913ac76efd084d767a9983f518d946b52adfd57ddcffc6a4eba10520d431e4c3150604beea9bc0d49c991e56eb694f69eff2cd7"}}]}, 0x1b4}, 0x1}, 0x0) 2018/02/06 13:57:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f000063c000)={&(0x7f00004f3000-0x1dc)=@newsa={0x1b4, 0x10, 0x721, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@empty, @in=@rand_addr}, {@in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x833}, @in6=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000002}, [@algo_auth_trunc={0xc4, 0x14, {{'sha1\x00'}, 0x3c0, 0x0, "938777e1092893c8c156e35f6cce6e2be93f15e4c1793d4d01de8f03880a547e10d9f2c2795657d50c005d7818dbae34c91612eae3cc5a187a396002d804e7706cc3d6e16913ac76efd084d767a9983f518d946b52adfd57ddcffc6a4eba10520d431e4c3150604beea9bc0d49c991e56eb694f69eff2cd7"}}]}, 0x1b4}, 0x1}, 0x0) 2018/02/06 13:57:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00007e8000-0x28)={0x0, 0x0, 0x0, 0x0, "4ef0173ae7291ce0d440ca4586508c706e04fdbef46dd08ce27728dd547b78d5"}) 2018/02/06 13:57:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) write$tun(r0, &(0x7f0000ba9000-0x3506)=@hdr={0x1, 0x0, 0x0, 0x1, 0x0, 0x0, @ipv6={0x0, 0x6, "88173b", 0x14, 0x0, 0x0, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}, 0x46) 2018/02/06 13:57:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f000063c000)={&(0x7f00004f3000-0x1dc)=@newsa={0x1b4, 0x10, 0x721, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@empty, @in=@rand_addr}, {@in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x833}, @in6=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000002}, [@algo_auth_trunc={0xc4, 0x14, {{'sha1\x00'}, 0x3c0, 0x0, "938777e1092893c8c156e35f6cce6e2be93f15e4c1793d4d01de8f03880a547e10d9f2c2795657d50c005d7818dbae34c91612eae3cc5a187a396002d804e7706cc3d6e16913ac76efd084d767a9983f518d946b52adfd57ddcffc6a4eba10520d431e4c3150604beea9bc0d49c991e56eb694f69eff2cd7"}}]}, 0x1b4}, 0x1}, 0x0) [ 67.162492] keychord: Insufficient bytes present for keycount 56 [ 67.184774] keychord: Insufficient bytes present for keycount 56 2018/02/06 13:57:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000359000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5e000-0x20)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000002000-0x4e)=""/1, 0x1}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f000090a000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) readv(r2, &(0x7f000065e000-0x38)=[{&(0x7f00000cc000)=""/67, 0x43}], 0x1) 2018/02/06 13:57:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000072b000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f00005d8000)=[{0x10000000028, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x10) 2018/02/06 13:57:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x3, &(0x7f0000443000-0x18)=[{0x100050}, {0x25}, {0x6}]}, 0x10) writev(r1, &(0x7f00000a6000)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/06 13:57:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000072b000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f00005d8000)=[{0x10000000028, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x10) [ 67.218819] keychord: Insufficient bytes present for keycount 56 2018/02/06 13:57:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00007e8000-0x28)={0x0, 0x0, 0x0, 0x0, "4ef0173ae7291ce0d440ca4586508c706e04fdbef46dd08ce27728dd547b78d5"}) 2018/02/06 13:57:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000359000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5e000-0x20)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000002000-0x4e)=""/1, 0x1}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f000090a000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) readv(r2, &(0x7f000065e000-0x38)=[{&(0x7f00000cc000)=""/67, 0x43}], 0x1) 2018/02/06 13:57:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000072b000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f00005d8000)=[{0x10000000028, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x10) 2018/02/06 13:57:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x3, &(0x7f0000443000-0x18)=[{0x100050}, {0x25}, {0x6}]}, 0x10) writev(r1, &(0x7f00000a6000)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/06 13:57:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x3, &(0x7f0000443000-0x18)=[{0x100050}, {0x25}, {0x6}]}, 0x10) writev(r1, &(0x7f00000a6000)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/06 13:57:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000072b000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f00005d8000)=[{0x10000000028, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x10) 2018/02/06 13:57:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000359000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5e000-0x20)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000002000-0x4e)=""/1, 0x1}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f000090a000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) readv(r2, &(0x7f000065e000-0x38)=[{&(0x7f00000cc000)=""/67, 0x43}], 0x1) 2018/02/06 13:57:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00007e8000-0x28)={0x0, 0x0, 0x0, 0x0, "4ef0173ae7291ce0d440ca4586508c706e04fdbef46dd08ce27728dd547b78d5"}) 2018/02/06 13:57:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/06 13:57:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00002fa000)={0x20000000, 0xffffffffffffffff, 0x0, @tid}) 2018/02/06 13:57:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x3, &(0x7f0000443000-0x18)=[{0x100050}, {0x25}, {0x6}]}, 0x10) writev(r1, &(0x7f00000a6000)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/06 13:57:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f00009e7000)={&(0x7f000077a000)={0x10}, 0xc, &(0x7f0000746000)={&(0x7f000036a000-0x58)=@newneigh={0x24, 0x1c, 0x509, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, r1}, [@NDA_DST_IPV4={0x8, 0x1, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:42 executing program 5: unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000216000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/06 13:57:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00002fa000)={0x20000000, 0xffffffffffffffff, 0x0, @tid}) 2018/02/06 13:57:42 executing program 7: mmap(&(0x7f0000000000/0x9a6000)=nil, 0x9a6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000017000)='oom_score_adj\x00') lseek(r0, 0x0, 0x3) 2018/02/06 13:57:42 executing program 5: unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000216000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/06 13:57:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f00009e7000)={&(0x7f000077a000)={0x10}, 0xc, &(0x7f0000746000)={&(0x7f000036a000-0x58)=@newneigh={0x24, 0x1c, 0x509, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, r1}, [@NDA_DST_IPV4={0x8, 0x1, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00002fa000)={0x20000000, 0xffffffffffffffff, 0x0, @tid}) 2018/02/06 13:57:42 executing program 5: unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000216000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/06 13:57:42 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00002fa000)={0x20000000, 0xffffffffffffffff, 0x0, @tid}) 2018/02/06 13:57:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f00009e7000)={&(0x7f000077a000)={0x10}, 0xc, &(0x7f0000746000)={&(0x7f000036a000-0x58)=@newneigh={0x24, 0x1c, 0x509, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, r1}, [@NDA_DST_IPV4={0x8, 0x1, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:42 executing program 7: mmap(&(0x7f0000000000/0x9a6000)=nil, 0x9a6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000017000)='oom_score_adj\x00') lseek(r0, 0x0, 0x3) 2018/02/06 13:57:42 executing program 5: unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000216000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/06 13:57:42 executing program 6: unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000216000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/06 13:57:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f00009e7000)={&(0x7f000077a000)={0x10}, 0xc, &(0x7f0000746000)={&(0x7f000036a000-0x58)=@newneigh={0x24, 0x1c, 0x509, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, r1}, [@NDA_DST_IPV4={0x8, 0x1, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) 2018/02/06 13:57:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00007e8000-0x28)={0x0, 0x0, 0x0, 0x0, "4ef0173ae7291ce0d440ca4586508c706e04fdbef46dd08ce27728dd547b78d5"}) 2018/02/06 13:57:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f000012f000-0x7e)='net/dev\x00') sendfile(r0, r1, &(0x7f0000dee000), 0x8001) 2018/02/06 13:57:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000a06000)="b63db85e1a8d020000000000003ef0071dcc436a0c5fd2bc7018cebc9b97ae21b14dd82c678ce22c9b160096aa1fae1a43", 0x31) readv(r0, &(0x7f000063c000)=[{&(0x7f0000695000-0x3e)=""/62, 0xffffff43}], 0x100000000000031e) 2018/02/06 13:57:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000ac9000)='vegas\x00', 0x6) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xfffffffffffffefc, 0x0, 0x0, 0x0) 2018/02/06 13:57:42 executing program 6: unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000216000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/06 13:57:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x401) 2018/02/06 13:57:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x0}, 0x8) connect(r0, &(0x7f0000986000-0x8)=@un=@abs={0x1, 0x0, 0x0}, 0x8) 2018/02/06 13:57:42 executing program 7: mmap(&(0x7f0000000000/0x9a6000)=nil, 0x9a6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000017000)='oom_score_adj\x00') lseek(r0, 0x0, 0x3) 2018/02/06 13:57:42 executing program 6: unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000216000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/06 13:57:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f000012f000-0x7e)='net/dev\x00') sendfile(r0, r1, &(0x7f0000dee000), 0x8001) [ 67.601456] sg_write: data in/out 167158/1 bytes for SCSI command 0x67-- guessing data in; [ 67.601456] program syz-executor1 not setting count and/or reply_len properly [ 67.633749] ================================================================== [ 67.633767] BUG: KASAN: wild-memory-access in sg_read+0xe5c/0x1440 [ 67.633774] Read of size 4096 at addr ffe70873f7f2b000 by task syz-executor1/13133 [ 67.633775] [ 67.633796] CPU: 0 PID: 13133 Comm: syz-executor1 Not tainted 4.9.80-g550c01d #29 [ 67.633801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.633815] ffff8801b42afa38 ffffffff81d94b69 ffe70873f7f2b000 0000000000001000 [ 67.633827] 0000000000000000 0000000000000000 ffff8801c5ef4340 ffff8801b42afa80 [ 67.633838] ffffffff8153e49e ffffffff8266a72c 0000000000000282 b11e0ea3aa111a19 [ 67.633841] Call Trace: [ 67.633851] [] dump_stack+0xc1/0x128 [ 67.633860] [] kasan_report+0x15e/0x360 [ 67.633867] [] ? sg_read+0xe5c/0x1440 [ 67.633875] [] check_memory_region+0x137/0x190 [ 67.633882] [] kasan_check_read+0x11/0x20 [ 67.633888] [] sg_read+0xe5c/0x1440 [ 67.633896] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 67.633902] [] ? fsnotify+0xf30/0xf30 [ 67.633910] [] ? avc_policy_seqno+0x9/0x20 [ 67.633919] [] do_loop_readv_writev.part.17+0x141/0x1e0 [ 67.633926] [] ? security_file_permission+0x89/0x1e0 [ 67.633933] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 67.633940] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 67.633947] [] do_readv_writev+0x520/0x750 [ 67.633954] [] ? vfs_write+0x530/0x530 [ 67.633962] [] ? kcov_ioctl+0x24/0x1c0 [ 67.633972] [] ? check_preemption_disabled+0x3b/0x200 [ 67.633979] [] ? __fget+0x201/0x3a0 [ 67.633986] [] ? __fget+0x228/0x3a0 [ 67.633992] [] ? __fget+0x47/0x3a0 [ 67.634000] [] vfs_readv+0x84/0xc0 [ 67.634007] [] do_readv+0xe6/0x250 [ 67.634014] [] ? vfs_readv+0xc0/0xc0 [ 67.634022] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 67.634032] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 67.634040] [] SyS_readv+0x27/0x30 [ 67.634047] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 67.634050] ================================================================== [ 67.634052] Disabling lock debugging due to kernel taint [ 67.634056] Kernel panic - not syncing: panic_on_warn set ... [ 67.634056] [ 67.634064] CPU: 0 PID: 13133 Comm: syz-executor1 Tainted: G B 4.9.80-g550c01d #29 [ 67.634068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.634079] ffff8801b42af958 ffffffff81d94b69 ffffffff841970af ffff8801b42afa30 [ 67.634088] 0000000000000000 0000000000000000 ffff8801c5ef4340 ffff8801b42afa20 [ 67.634098] ffffffff8142f541 0000000041b58ab3 ffffffff8418ab20 ffffffff8142f385 [ 67.634099] Call Trace: [ 67.634107] [] dump_stack+0xc1/0x128 [ 67.634115] [] panic+0x1bc/0x3a8 [ 67.634124] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 67.634133] [] kasan_end_report+0x50/0x50 [ 67.634140] [] kasan_report+0x167/0x360 [ 67.634146] [] ? sg_read+0xe5c/0x1440 [ 67.634154] [] check_memory_region+0x137/0x190 [ 67.634160] [] kasan_check_read+0x11/0x20 [ 67.634166] [] sg_read+0xe5c/0x1440 [ 67.634173] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 67.634180] [] ? fsnotify+0xf30/0xf30 [ 67.634187] [] ? avc_policy_seqno+0x9/0x20 [ 67.634196] [] do_loop_readv_writev.part.17+0x141/0x1e0 [ 67.634202] [] ? security_file_permission+0x89/0x1e0 [ 67.634209] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 67.634216] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 67.634223] [] do_readv_writev+0x520/0x750 [ 67.634230] [] ? vfs_write+0x530/0x530 [ 67.634237] [] ? kcov_ioctl+0x24/0x1c0 [ 67.634246] [] ? check_preemption_disabled+0x3b/0x200 [ 67.634253] [] ? __fget+0x201/0x3a0 [ 67.634260] [] ? __fget+0x228/0x3a0 [ 67.634266] [] ? __fget+0x47/0x3a0 [ 67.634274] [] vfs_readv+0x84/0xc0 [ 67.634281] [] do_readv+0xe6/0x250 [ 67.634296] [] ? vfs_readv+0xc0/0xc0 [ 67.634305] [] ? entry_SYSCALL_64_fastpath+0x5/0xe8 [ 67.634315] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 67.634324] [] SyS_readv+0x27/0x30 [ 67.634330] [] entry_SYSCALL_64_fastpath+0x29/0xe8 [ 67.634783] Dumping ftrace buffer: [ 67.634791] (ftrace buffer empty) [ 67.634794] Kernel Offset: disabled [ 68.109899] Rebooting in 86400 seconds..