Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.062494] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.528751] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 24.850780] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 25.910832] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.45' (ECDSA) to the list of known hosts. 2018/02/26 14:32:45 fuzzer started 2018/02/26 14:32:46 dialing manager at 10.128.0.26:43807 2018/02/26 14:32:50 kcov=true, comps=false 2018/02/26 14:32:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x104006) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) sendfile(r0, r0, &(0x7f0000000040), 0x10000000200) 2018/02/26 14:32:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000014fdc)=ANY=[@ANYBLOB="24000000520043040000000000000000020000001000010001000000000000002caa78658f08af5b3582c2aaf576c4bf1e141dede7cf0602f8fe09795ed9589c1fcd7e757c709a0b134444c6e952c023adbd577876384a69734879d462d092c45cabf63cb686289ffb72b227d680852cfebd99777dbbc3b0351ed09d424ca422f9d067ab520d028b0bffff216b69d2a78399bdec50fc0f7bcc158b77d8cb1736b700dc86bb4db7b6c75f976163d7600c248a661f6bd930dfd90e429cc3c0488814c4044e99e2df6eaa1717b46cae5c050dcf6b65f6"], 0x1}, 0x1}, 0x0) 2018/02/26 14:32:51 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fe0000)=0x3) 2018/02/26 14:32:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x139d0d95984f6e0f, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, []}, 0xb8}, 0x1}, 0x0) 2018/02/26 14:32:51 executing program 5: r0 = socket$inet(0x2, 0x3, 0x80000000006) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x138, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000240), &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000d000000000000000000626f6e64300000005e00000000000000697036677265746170300000000000007663616e3000000000000000000000007fab73d10c20c0d3cdb67f420bd417ee0180c20000000000000000000180c2000000000000000000000070000000d000000008010000415544495400000000000000000000000000000000000000000000000000735a08000000c89f837a94671a2f0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaa000000000000000000000000"]}, 0x188) 2018/02/26 14:32:51 executing program 1: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)='systemem0}(\'$\x00', 0xfffffffffffffffa) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 2018/02/26 14:32:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x1, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) 2018/02/26 14:32:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000189ff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000112e68)=ANY=[@ANYBLOB="2400000029000100000000000000000003000000100000000c00080000000000"], 0x1}, 0x1}, 0x0) [ 37.311526] IPVS: Creating netns size=2552 id=1 [ 37.381698] IPVS: Creating netns size=2552 id=2 [ 37.449100] IPVS: Creating netns size=2552 id=3 [ 37.545538] IPVS: Creating netns size=2552 id=4 [ 37.632717] IPVS: Creating netns size=2552 id=5 [ 37.727459] IPVS: Creating netns size=2552 id=6 [ 37.836288] IPVS: Creating netns size=2552 id=7 [ 37.963932] IPVS: Creating netns size=2552 id=8 2018/02/26 14:32:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00007b5000)='net/ip6_mr_cache\x00') pread64(r0, &(0x7f0000000000), 0xfffffe6a, 0x1000000001ffffff) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) 2018/02/26 14:32:55 executing program 4: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 2018/02/26 14:32:56 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xffffffffffffffff, 0x8}, 0xc) [ 41.912560] audit: type=1400 audit(1519655576.244:5): avc: denied { create } for pid=5067 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/26 14:32:56 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000a73f2a)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "7ec292", 0x8, 0x2b, 0x0, @dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, 0x0) 2018/02/26 14:32:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x40000002000ff, 0x1}, 0x22) 2018/02/26 14:32:56 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @empty}, 0x1c) listen(r0, 0x3) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000911f68)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x98) 2018/02/26 14:32:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 14:32:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/126) 2018/02/26 14:32:56 executing program 5: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./control/file0\x00') syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000040)='./control/file2/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00002ccff0)='./control/file1\x00') close(r0) 2018/02/26 14:32:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/167, 0xa7}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000400)=""/79, 0x4f}], 0x3, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/82, 0x52}, {&(0x7f0000000840)=""/23, 0x17}, {&(0x7f0000000880)=""/57, 0x39}], 0x3, 0x0) r0 = socket$inet(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/26 14:32:56 executing program 7: 2018/02/26 14:32:56 executing program 6: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x80000001}, {{@in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x32}, 0x0, @in6=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000415ff8)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) connect$inet6(r0, &(0x7f0000bd2000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 14:32:56 executing program 1: request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000082000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000df2000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) 2018/02/26 14:32:56 executing program 7: r0 = socket$inet6(0xa, 0x80803, 0x800000001) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000f48fb8)=ANY=[@ANYBLOB="00030000000000000702000000000000000000000011000100000000"], 0x1) setsockopt$inet6_opts(r0, 0x29, 0x4000000000000036, &(0x7f000002b000)=@dstopts={0x0, 0x0, [], []}, 0x8) [ 42.491458] audit: type=1400 audit(1519655576.824:6): avc: denied { write } for pid=5213 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/26 14:32:56 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x3, {0x2, 0x2, 0x1, 0x1, 0x28f}}) 2018/02/26 14:32:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x332, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00005be000)="ac", 0x1, 0x0, 0x0, 0x0) 2018/02/26 14:32:56 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) 2018/02/26 14:32:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x332, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00005be000)="ac", 0x1, 0x0, 0x0, 0x0) 2018/02/26 14:32:56 executing program 2: 2018/02/26 14:32:56 executing program 4: 2018/02/26 14:32:57 executing program 2: 2018/02/26 14:32:57 executing program 0: 2018/02/26 14:32:57 executing program 4: 2018/02/26 14:32:57 executing program 3: 2018/02/26 14:32:57 executing program 5: 2018/02/26 14:32:57 executing program 1: 2018/02/26 14:32:57 executing program 3: 2018/02/26 14:32:57 executing program 2: 2018/02/26 14:32:57 executing program 0: 2018/02/26 14:32:57 executing program 7: 2018/02/26 14:32:57 executing program 4: 2018/02/26 14:32:57 executing program 6: 2018/02/26 14:32:57 executing program 2: 2018/02/26 14:32:57 executing program 4: 2018/02/26 14:32:57 executing program 5: 2018/02/26 14:32:57 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='*\x00', 0x0) 2018/02/26 14:32:57 executing program 3: 2018/02/26 14:32:57 executing program 7: 2018/02/26 14:32:57 executing program 2: 2018/02/26 14:32:57 executing program 6: 2018/02/26 14:32:57 executing program 4: 2018/02/26 14:32:57 executing program 1: 2018/02/26 14:32:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)=@ax25, 0x10, &(0x7f0000000280)=[]}}, {{&(0x7f00000002c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @ipv4={[], [], @remote}}}}, 0x3a, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=""/95, 0x5f}}], 0x2, 0x0, &(0x7f00000004c0)={0x77359400}) close(r0) 2018/02/26 14:32:57 executing program 6: mkdir(&(0x7f0000570000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)=""/55, 0x37) mount(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ocfs2\x00', 0x0, &(0x7f00000001c0)) 2018/02/26 14:32:57 executing program 2: 2018/02/26 14:32:57 executing program 7: 2018/02/26 14:32:57 executing program 3: 2018/02/26 14:32:57 executing program 1: 2018/02/26 14:32:57 executing program 0: 2018/02/26 14:32:57 executing program 3: 2018/02/26 14:32:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000ef0fc8)={&(0x7f000000eff4)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000023002908000000000000000014000000100007000c0002000000005cc97500e0000002"], 0x1}, 0x1}, 0x0) 2018/02/26 14:32:57 executing program 7: r0 = syz_open_dev$loop(&(0x7f00003ea000)='/dev/loop#\x00', 0x0, 0x0) readahead(r0, 0x0, 0x53) 2018/02/26 14:32:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x1) 2018/02/26 14:32:57 executing program 2: unshare(0x400) r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) 2018/02/26 14:32:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/02/26 14:32:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000016bc0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000c80300000000000000000000d0010000e0020000e0020000e002000004000000", @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80000000000000000000000000000000000000000000000000028004d41524b0000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffff0000000000000000000000000000000000000000000000000000000000000000c000e80000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200003f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1400bbac1400aa02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2) syz_emit_ethernet(0x2a, &(0x7f0000008000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @dev={0xac, 0x14}, @random="877c020000a5", @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}}, &(0x7f0000002000)) 2018/02/26 14:32:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44010000170001082cbd7000fedbdf25000001f0000000000000000000000000000004d2ff0000000000000000000000000000000000000000000000000000000000f0ff00000000ffffffff0000000000000000000000004e3580004e2000000a00208032001000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000000000000000000001ac1400aae3ffffff00000000000000004e2100024e2080160000008f731a3616d7470f8ec95f27c1b41f1cea45122091c97dd0e8841601be159639285fd774", @ANYRES32=0xffffffffffffffff, @ANYBLOB="080000000000000000f8ff03000000000300000000000000e70b6e0b0000000007000000000000000200000000000000030000000000000006000000000000006288ffffffffffff3f0000000000000003000000000000000800000000000000ff0f0000b56b6e0002010200000000000300000004000000090000002bbd70001c000400fdff4e214e200000fe8000000000000000000000000000aa"], 0x5}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 2018/02/26 14:32:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) 2018/02/26 14:32:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2018/02/26 14:32:57 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x6100) read$eventfd(r0, &(0x7f0000000040), 0x8) 2018/02/26 14:32:57 executing program 4: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) mkdir(&(0x7f0000839000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000d4000)='./control\x00', 0x0) rename(&(0x7f00000f2ff8)='./file0\x00', &(0x7f0000ab5ff6)='./control\x00') 2018/02/26 14:32:57 executing program 3: r0 = socket$inet6(0xa, 0x400000000801, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 14:32:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000759000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') sendfile(r0, r1, &(0x7f0000a12000), 0x1) 2018/02/26 14:32:57 executing program 3: symlink(&(0x7f000000bffa)='./control\x00', &(0x7f000000cffa)='./bus\x00') symlink(&(0x7f0000ad9ff4)='./bus/file0\x00', &(0x7f0000ee1ff6)='./control\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)) syz_fuse_mount(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 14:32:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f000062e000)={&(0x7f0000690ff6)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r0) 2018/02/26 14:32:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 2018/02/26 14:32:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000213000)={&(0x7f0000c17000)={0x10}, 0xc, &(0x7f00006fa000)={&(0x7f000082ffa8)=@ipv4_deladdr={0x18, 0x15, 0x801, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, []}, 0x18}, 0x1}, 0x0) 2018/02/26 14:32:57 executing program 7: ptrace(0xffffffffffffffff, 0x0) 2018/02/26 14:32:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) openat$dir(0xffffffffffffff9c, &(0x7f00000d3000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000d43000)='./file0\x00', 0x4) 2018/02/26 14:32:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000ecafc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000905000)=ANY=[@ANYBLOB="140000001d00ffff000000000000000001000004"], 0x1}, 0x1}, 0x0) 2018/02/26 14:32:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f0000000140), 0x1d0, 0x50) 2018/02/26 14:32:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x2000000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x400, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 2018/02/26 14:32:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000faeff4)) clock_gettime(0x0, &(0x7f0000d98ff0)={0x0, 0x0}) ppoll(&(0x7f0000a18000)=[{r1}, {r0}], 0x2, &(0x7f000071d000)={0x0, r2+30000000}, &(0x7f0000e33000), 0x8) mount(&(0x7f0000833000)='./file0\x00', &(0x7f0000972000)='.', &(0x7f0000e63000)='ramfs\x00', 0x0, &(0x7f0000caa000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) umount2(&(0x7f0000da1fff)='.', 0x0) 2018/02/26 14:32:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002a00210800000900033e0020040000000000d821160000"], 0x1}, 0x1}, 0x0) 2018/02/26 14:32:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f0000000140), 0x1d0, 0x0) 2018/02/26 14:32:57 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)=""/156, &(0x7f0000000100)=0x9c) 2018/02/26 14:32:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f00008e2fba)="958e392937a186d6306a3615593baa57ff0002060000000000079ab4d5ed5cff0300000000", 0x25) 2018/02/26 14:32:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) r1 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000c60000)={{{@in=@empty, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) getgid() getpgid(r1) getresgid(&(0x7f0000c06000), &(0x7f0000498000), &(0x7f0000843ffc)) gettid() getresuid(&(0x7f0000e8e000), &(0x7f0000657ffc), &(0x7f00008cbffc)) lstat(&(0x7f00000b4000)='./file0\x00', &(0x7f0000ea5fbc)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00004c2000)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000326f18)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000c12000)=0xfffffffffffffe08) lstat(&(0x7f0000c6aff8)='./file0\x00', &(0x7f000041b000)) gettid() lstat(&(0x7f0000589ff8)='./file0\x00', &(0x7f000093bfbc)) getegid() getpid() getresuid(&(0x7f0000c2a000), &(0x7f0000cb0000), &(0x7f0000a41000)) fstat(r0, &(0x7f0000352fbc)) getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000001b000)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000e9c000)=0xe8) getgroups(0x1, &(0x7f000039bffc)=[0x0]) fcntl$getown(r0, 0x9) lstat(&(0x7f0000a9eff8)='./file0\x00', &(0x7f0000000040)) getgroups(0x1, &(0x7f0000cc0000)=[0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000a2ffe)) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000106ff4), &(0x7f0000322000)=0xc) getpgid(r2) getresuid(&(0x7f00001e2000), &(0x7f0000c07000), &(0x7f0000d26ffc)) getresgid(&(0x7f0000074000), &(0x7f00003f6000), &(0x7f00002beffc)) sendmmsg$unix(r0, &(0x7f0000938000)=[{&(0x7f0000182ff8)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000016fb8)=[{&(0x7f0000a58f31)="74b02629e9ada4e9f8f8d67f110947bd012ddc9c44224cd5752da36f21388ab0c9ea46c90d872067e9873a6fc77c830cc34b544e8ffa573f9d9526a4b1b9d93cbc96f320199df52910aa0183b8c60c1fee59694369b848c3aa3eaceb74b71eef70a6f88fa414e52a9e697e60d53edc1c0b10eb15903c2d7513e9929157828b2bdd29b524bcaf7dd0d4b4a95f440d5ad3ef4ac2dd9384bcf5349b8b00417142675ae1a1ad6165a22d85e24da5208de7fde8a3afaa69d62af28c856f73fd515ce7a8c8e16ba551436473f5edaf60d6b9", 0xcf}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000cc4fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r3, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f0000ac2fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000f78000)=0x6, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000ce5000)=0x32) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x27ffe) sendmsg$nl_generic(r4, &(0x7f00004d5000)={&(0x7f0000530000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f00003f7000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x48080) sendfile(r4, r5, &(0x7f000053cffc), 0x8080000001) 2018/02/26 14:32:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00007f2000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000736000)={0x0, 0x81000000200007d}) 2018/02/26 14:32:57 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000008000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @dev={0xac, 0x14}, @random="877c020000a5", @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}}, &(0x7f0000002000)) 2018/02/26 14:32:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002a0021080000000000ddffff02000000100000da60962c49d541900e57dc078cac47d50c0000000000"], 0x1}, 0x1}, 0x0) 2018/02/26 14:32:57 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00003f0ff1)='/dev/sequencer\x00', 0x0, 0x0) memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000030fb4)) 2018/02/26 14:32:57 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003cffc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000255ff0)={&(0x7f0000c0c000)=@setneightbl={0x14, 0x43, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 14:32:57 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x0, @empty}, 0x10) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f000086a000), 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x40002106) 2018/02/26 14:32:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8000000086) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 2018/02/26 14:32:57 executing program 7: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) truncate(&(0x7f0000000080)='./file0/bus\x00', 0x0) 2018/02/26 14:32:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00007f2000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000736000)={0x0, 0x81000000200007d}) 2018/02/26 14:32:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2b) connect$inet6(r0, &(0x7f0000017000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f000001f000)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)="c9", 0x1}, {&(0x7f0000000580)="3c7d7cf9ca7d25a6443181dacebb72a0b5c304d881daf76a428f57bae624d64bfbf6e3621ff83f6e65816f344e212d5669d0dd58f7ab68364e582d9b6e8242ca636309cd0967d92453835ac689ff456fb03ad853f20a258852f6babf2b1fc0eefcaed739123486f0744bab4af8d9474c1f410a6f2f05bb4b71f41032bbe82b111f94a47d42abe288b0a2d974146463d0a34501a4a339f5e3f988", 0x9a}], 0x2, &(0x7f0000004000)=[]}, 0x0) 2018/02/26 14:32:57 executing program 5: 2018/02/26 14:32:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffc) getsockopt$inet6_buf(r0, 0x29, 0x45, &(0x7f0000000100)=""/30, &(0x7f0000000000)=0x1e) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000080)={@common='teql0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) 2018/02/26 14:32:57 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000016bc0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000016000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3f}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x2}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x418) syz_emit_ethernet(0x2a, &(0x7f0000008000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @dev={0xac, 0x14}, @random="877c020000a5", @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}}, &(0x7f0000002000)) 2018/02/26 14:32:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xe02, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x800200020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f00002d3f70)=[{&(0x7f0000fe5ff0)='p', 0x1}], 0x1) writev(r0, &(0x7f0000818ff0)=[{&(0x7f000016bde8)="0b9a95785f11e0e7b6f4de7afeabc7fc7700481d21aa090ef74dd23f6917aa54cc941ce48faf0fecfbaea6fb58e831e4284bb669534554be9c8911c4ce4510c0cccd5ef9711215b1692e0cc3a976a73a03400c8afe4088eb49defb5726d42f2d09dde2047becdcf42a1b5102b65a03230f17f52cb0aabe474c8e3e1c0272010fc4e1fc1b6d962c12df28672325fc31eb62512649acd171b37505adbcffd4e766d468ff97dd0e920793a7b988f8b42524b3ab0c84e3b07f0603e794c4717df7b0253c515f5cd92b976a3cf73e9236de2c78ab6cec8c4b0f303e140b4f0000a8b4d2c5f37db05f308d5a98ef85e298438c8b7dd72e5cf4c0961feb6697d62419cb5f14e714d4b447eda90095914ec1a553a3aa6adcbb1b003bcfaff59fda291626e82d31c9eeca02e4f8f0b80e9966950b52fc83dd850e63a6ed05f8d03f65df950b1350702e68cf786df2614e3db7b54faf7203b73bca9b2e57bfaa78c27da20d9a1d630c58f97cce4c4c50ee76e0df940a85437c2b29cf80cbc9c69bdba9a3832c9e2a0b902d043d373184f91ea58a97ce765a215b724dce351892867225d96cecbc2e0ea85c0e74fa531de0d4f021b93ecb83648128ab81371e10bc07d217894f16857219a7fe9c6ac8fbfcf75547561c5f2202f242696700e28fe35419ed7caeea0a1226ea47c6679cbb75fbf0ffa904d48f68565669cca08ef994f193555ff4", 0x201}], 0x1) shutdown(r0, 0x1) 2018/02/26 14:32:57 executing program 7: 2018/02/26 14:32:57 executing program 1: 2018/02/26 14:32:57 executing program 0: 2018/02/26 14:32:57 executing program 2: 2018/02/26 14:32:57 executing program 7: 2018/02/26 14:32:57 executing program 1: 2018/02/26 14:32:57 executing program 6: 2018/02/26 14:32:57 executing program 0: 2018/02/26 14:32:57 executing program 7: 2018/02/26 14:32:57 executing program 6: 2018/02/26 14:32:57 executing program 2: 2018/02/26 14:32:57 executing program 4: 2018/02/26 14:32:57 executing program 5: 2018/02/26 14:32:57 executing program 1: 2018/02/26 14:32:57 executing program 4: 2018/02/26 14:32:57 executing program 2: 2018/02/26 14:32:57 executing program 6: 2018/02/26 14:32:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffc) getsockopt$inet6_buf(r0, 0x29, 0x45, &(0x7f0000000100)=""/30, &(0x7f0000000000)=0x1e) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000080)={@common='teql0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) 2018/02/26 14:32:57 executing program 0: 2018/02/26 14:32:57 executing program 7: 2018/02/26 14:32:57 executing program 4: 2018/02/26 14:32:57 executing program 5: 2018/02/26 14:32:57 executing program 2: 2018/02/26 14:32:57 executing program 1: 2018/02/26 14:32:57 executing program 7: 2018/02/26 14:32:57 executing program 6: 2018/02/26 14:32:57 executing program 4: 2018/02/26 14:32:57 executing program 0: 2018/02/26 14:32:57 executing program 3: 2018/02/26 14:32:57 executing program 5: 2018/02/26 14:32:57 executing program 1: 2018/02/26 14:32:57 executing program 4: 2018/02/26 14:32:58 executing program 2: 2018/02/26 14:32:58 executing program 0: 2018/02/26 14:32:58 executing program 7: 2018/02/26 14:32:58 executing program 1: 2018/02/26 14:32:58 executing program 5: 2018/02/26 14:32:58 executing program 0: 2018/02/26 14:32:58 executing program 6: 2018/02/26 14:32:58 executing program 4: 2018/02/26 14:32:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x400454d1, &(0x7f0000000ffc)) 2018/02/26 14:32:58 executing program 3: 2018/02/26 14:32:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000009fe4)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000003ff0)=[{&(0x7f000000af89)="0200", 0x2}], 0x1, &(0x7f0000000000)=[]}, 0x2000c080) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004fe0)=[{&(0x7f0000006000)="cf16", 0x2}], 0x1, &(0x7f0000006000)=[]}, 0x0) 2018/02/26 14:32:58 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xef) sendto$inet6(r0, &(0x7f0000001ffe), 0x0, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1a) 2018/02/26 14:32:58 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000938ff4)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}}, 0xc) 2018/02/26 14:32:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x6) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f000060f000)=""/217, 0xd9) dup2(r1, r0) ioctl$TCXONC(r1, 0x540a, 0x0) 2018/02/26 14:32:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) 2018/02/26 14:32:58 executing program 5: 2018/02/26 14:32:58 executing program 2: 2018/02/26 14:32:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='pagemap\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x500, 0xffffffffffffffff, 0x3, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) pread64(r0, &(0x7f0000000040)=""/8, 0xfffffffffffffe59, 0x0) 2018/02/26 14:32:58 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002180)='K', 0x1}], 0x1, &(0x7f0000003200)=[]}}], 0x1, 0x0) 2018/02/26 14:32:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x3c, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001000000000000000", @ANYPTR64=&(0x7f000000afd0)=ANY=[@ANYBLOB="00000000000000000000000000000000c3b2a1235900b6ba7b2f4382500855e4"]], 0x0, 0x0, &(0x7f0000009000)}) [ 43.826232] audit: type=1400 audit(1519655578.164:7): avc: denied { set_context_mgr } for pid=5601 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 43.870597] audit: type=1400 audit(1519655578.204:8): avc: denied { call } for pid=5601 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 43.893696] binder: 5601:5603 got transaction with invalid offsets ptr [ 43.900422] binder: 5601:5603 transaction failed 29201/-14, size 80-16 line 3156 [ 43.908797] binder: BINDER_SET_CONTEXT_MGR already set [ 43.914314] binder: 5601:5609 ioctl 40046207 0 returned -16 2018/02/26 14:32:58 executing program 6: 2018/02/26 14:32:58 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000a76000)='/selinux/load\x00', 0x2, 0x0) pwrite64(r0, &(0x7f000028cfc7), 0x2cc, 0x0) 2018/02/26 14:32:58 executing program 4: perf_event_open(&(0x7f0000bba000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}], 0x1, 0x0) 2018/02/26 14:32:58 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000d9dfa9)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}, 0x0) 2018/02/26 14:32:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x6) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f000060f000)=""/217, 0xd9) dup2(r1, r0) ioctl$TCXONC(r1, 0x540a, 0x0) 2018/02/26 14:32:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20000002) write$sndseq(r0, &(0x7f0000000000)=[], 0x4e8) clock_gettime(0x0, &(0x7f000024bff0)={0x0, 0x0}) ppoll(&(0x7f0000103ff8)=[{r0}], 0x1, &(0x7f000005cff0)={0x0, r1+30000000}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 2018/02/26 14:32:58 executing program 2: 2018/02/26 14:32:58 executing program 5: 2018/02/26 14:32:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='pagemap\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0xfffffffffffffee0, 0x0) 2018/02/26 14:32:58 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') sendfile(r0, r0, &(0x7f0000000000), 0x7fff) 2018/02/26 14:32:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000180)=[@increfs_done={0x40106308, r1, 0x2}, @enter_looper={0x630c}, @exit_looper={0x630d}, @register_looper={0x630b}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f00000000c0)}) [ 43.921270] binder_alloc: 5601: binder_alloc_buf, no vma [ 43.926963] binder: 5601:5607 transaction failed 29189/-3, size 80-16 line 3128 [ 43.946193] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.966144] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 14:32:58 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000406fd8)=[{r0}], 0x1, 0x0) 2018/02/26 14:32:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000000000)=""/101, 0x65, 0x1, 0x0, 0x0) 2018/02/26 14:32:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f000050dff8), 0x86) 2018/02/26 14:32:58 executing program 1: 2018/02/26 14:32:58 executing program 3: 2018/02/26 14:32:58 executing program 1: 2018/02/26 14:32:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f000050dff8), 0x86) [ 43.989266] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 44.029110] binder: 5631:5633 BC_INCREFS_DONE uffffffffffffffff no match [ 44.071864] binder: 5631:5648 BC_INCREFS_DONE uffffffffffffffff no match [ 44.082103] binder: 5631:5633 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 44.089821] binder: 5631:5648 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 44.089826] binder: 5631:5648 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2018/02/26 14:32:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='pagemap\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0xfffffffffffffee0, 0x0) 2018/02/26 14:32:58 executing program 3: 2018/02/26 14:32:58 executing program 7: 2018/02/26 14:32:58 executing program 1: 2018/02/26 14:32:58 executing program 2: 2018/02/26 14:32:58 executing program 6: 2018/02/26 14:32:58 executing program 4: 2018/02/26 14:32:58 executing program 0: 2018/02/26 14:32:58 executing program 7: 2018/02/26 14:32:58 executing program 0: [ 44.118819] binder: 5631:5633 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2018/02/26 14:32:58 executing program 3: 2018/02/26 14:32:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x4ab, 0x800000020000000, &(0x7f0000303000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) writev(r0, &(0x7f0000793fa0)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) sendto(r0, &(0x7f00001a6000), 0x0, 0x0, &(0x7f000020ffa0)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75296811812f17fcb15b854768b106479b8744cc07f4ef85104f214b714432d6b762b606b112d7bdfaa9811dffe7e6bf498b64cded3bcd7ee27eb2bed57758"}, 0x58) 2018/02/26 14:32:58 executing program 6: 2018/02/26 14:32:58 executing program 1: 2018/02/26 14:32:58 executing program 2: close(0xffffffffffffffff) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000004fe8)=[{0x6}]}) 2018/02/26 14:32:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4013, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 2018/02/26 14:32:58 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180), &(0x7f00000001c0), 0x8) 2018/02/26 14:32:58 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3f}, &(0x7f0000000180)=0x14) 2018/02/26 14:32:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000032000)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f00009c4000)={0x24, 0xa, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x10, 0x1, [@typed={0xc, 0x0, @uid}]}]}, 0x24}, 0x1}, 0x0) 2018/02/26 14:32:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f000031bfe0)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x1, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) 2018/02/26 14:32:58 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000000)) ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000040)=0x3183e918) [ 44.225917] audit: type=1326 audit(1519655578.564:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=5666 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf770cba9 code=0x0 [ 44.249817] audit: type=1400 audit(1519655578.564:10): avc: denied { create } for pid=5677 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/26 14:32:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 14:32:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2018/02/26 14:32:58 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x1, @empty}, 0x10) recvmsg(r0, &(0x7f000050d000)={0x0, 0x0, &(0x7f00000f7000)=[], 0x0, &(0x7f0000765faf)}, 0x43) 2018/02/26 14:32:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000007000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000012000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)=@generic, 0xff3c, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0xffe4}], 0x3b5, &(0x7f0000000000)=""/115, 0x73}, 0x0) sendmsg(r0, &(0x7f0000001980)={0x0, 0xfffffffffffffdf5, &(0x7f0000000080)=[], 0x111}, 0x0) sendmsg(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="ba", 0x1}], 0x1, &(0x7f00000019c0)=[]}, 0x0) 2018/02/26 14:32:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe2000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x80000000, 0x0, 0x20000000002, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000011fe0)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000060d000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x200080000000, 0x0, 0x2}, 0x20) 2018/02/26 14:32:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000eff4)={0x10, 0x34000}, 0xc, &(0x7f00000b4ff0)={&(0x7f0000000000)={0x14, 0x23, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0xc}, [@generic]}, 0x14}, 0x1}, 0x0) [ 44.255948] audit: type=1400 audit(1519655578.594:11): avc: denied { write } for pid=5677 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/26 14:32:58 executing program 0: syz_open_dev$random(&(0x7f0000000180)='/dev/random\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000040)={0x14, 0x14, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 14:32:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000907ff8)='./file0\x00', &(0x7f0000058ffd)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f0000000040)) 2018/02/26 14:32:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe2000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x80000000, 0x0, 0x20000000002, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000011fe0)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000060d000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x200080000000, 0x0, 0x2}, 0x20) [ 44.414245] tmpfs: No value for mount option 'tmpfs' [ 44.429534] tmpfs: No value for mount option 'tmpfs' 2018/02/26 14:32:58 executing program 1: 2018/02/26 14:32:58 executing program 5: 2018/02/26 14:32:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000907ff8)='./file0\x00', &(0x7f0000058ffd)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f0000000040)) 2018/02/26 14:32:58 executing program 2: 2018/02/26 14:32:58 executing program 1: [ 44.630672] tmpfs: No value for mount option 'tmpfs' 2018/02/26 14:32:59 executing program 4: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 6: 2018/02/26 14:32:59 executing program 0: 2018/02/26 14:32:59 executing program 2: 2018/02/26 14:32:59 executing program 1: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) 2018/02/26 14:32:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 2018/02/26 14:32:59 executing program 7: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000060e000/0x1000)=nil, 0x1000, 0x7) 2018/02/26 14:32:59 executing program 2: 2018/02/26 14:32:59 executing program 1: 2018/02/26 14:32:59 executing program 4: 2018/02/26 14:32:59 executing program 7: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 6: 2018/02/26 14:32:59 executing program 4: 2018/02/26 14:32:59 executing program 0: 2018/02/26 14:32:59 executing program 5: 2018/02/26 14:32:59 executing program 1: 2018/02/26 14:32:59 executing program 7: 2018/02/26 14:32:59 executing program 2: 2018/02/26 14:32:59 executing program 4: 2018/02/26 14:32:59 executing program 6: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 0: 2018/02/26 14:32:59 executing program 5: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 7: 2018/02/26 14:32:59 executing program 2: 2018/02/26 14:32:59 executing program 7: 2018/02/26 14:32:59 executing program 5: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 0: 2018/02/26 14:32:59 executing program 1: 2018/02/26 14:32:59 executing program 4: 2018/02/26 14:32:59 executing program 6: 2018/02/26 14:32:59 executing program 0: 2018/02/26 14:32:59 executing program 1: 2018/02/26 14:32:59 executing program 6: 2018/02/26 14:32:59 executing program 2: 2018/02/26 14:32:59 executing program 5: 2018/02/26 14:32:59 executing program 4: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 7: 2018/02/26 14:32:59 executing program 0: 2018/02/26 14:32:59 executing program 1: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 6: 2018/02/26 14:32:59 executing program 2: 2018/02/26 14:32:59 executing program 7: 2018/02/26 14:32:59 executing program 5: 2018/02/26 14:32:59 executing program 4: 2018/02/26 14:32:59 executing program 1: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 4: 2018/02/26 14:32:59 executing program 0: 2018/02/26 14:32:59 executing program 6: 2018/02/26 14:32:59 executing program 5: 2018/02/26 14:32:59 executing program 2: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 7: 2018/02/26 14:32:59 executing program 1: 2018/02/26 14:32:59 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8)=[], &(0x7f0000a81fe8)=[]}}}], 0x235, 0x0, &(0x7f000005af7e)}) 2018/02/26 14:32:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000939000)=0x1) 2018/02/26 14:32:59 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x801, 0x0) getsockname(r1, &(0x7f0000000040)=@in={0x0, 0xffffffffffffffff, @loopback}, &(0x7f0000000080)=0x10) fchdir(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) 2018/02/26 14:32:59 executing program 4: syz_emit_ethernet(0x46, &(0x7f00009d8fba)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x2000000000001, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @dev={0xac, 0x14, 0x0, 0x13}, {[]}}, @icmp=@dest_unreach={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[]}}, "000086ddffff0003"}}}}}, &(0x7f000048fff4)) 2018/02/26 14:32:59 executing program 2: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 7: [ 45.117410] binder_alloc: binder_alloc_mmap_handler: 5814 20000000-20002000 already mapped failed -16 [ 45.136408] binder: BINDER_SET_CONTEXT_MGR already set [ 45.142564] binder: 5814:5815 ioctl 40046207 0 returned -16 [ 45.148994] binder_alloc: 5814: binder_alloc_buf, no vma [ 45.155171] binder: 5814:5823 transaction failed 29189/-3, size 0-0 line 3128 2018/02/26 14:32:59 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000f07000)={{0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, {0xa, 0xffffffffffffffff, 0x4, @empty}, 0x0, [0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]}, 0x5c) 2018/02/26 14:32:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000aa00000000000000000000ffffac1400aa00000000000000000000000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000683d8468b0bff064ca9f66ad3cb9684e8ac42ffab96491a65b8a829ff3027593c281cc36610447e5d87a9ffe1041005bfebd2415d1b9a91316927953a6150209d94f46f1df3fde2eb97d7e974fd9db97331e6c1fdd14e3b901e6f0fad60ce6a77e2816d28fae99a310c90c7b18c61f08"], 0x3}, 0x1}, 0x0) 2018/02/26 14:32:59 executing program 2: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00005affff)={@common='ip6tnl0\x00'}) sendmsg$nl_route(r0, &(0x7f0000c91fc8)={&(0x7f00008a6ff4)={0x10}, 0xc, &(0x7f00007bdff0)={&(0x7f0000c13000)=ANY=[@ANYBLOB="2800000010000100000000000000000000000000", @ANYBLOB="000000000000000008001300e15deafdadba38685174a1848bf0744d159db1febf44d1371c9a7a77d1dccbcfca0a30c9b794b6e29081af60dc313e0e414d6a625d828c4c011b1bdc4e02e1b8ca40e7d67e331f71c756c005b8d4e7d370f5e9e751dc2ac7e1947311161409c6781ae243d924fb0b6bee648e840001d9ca3d00db8db41caf7a43d3befb328f112db83df4"], 0x2}, 0x1}, 0x0) 2018/02/26 14:32:59 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x25}, {}]}) 2018/02/26 14:32:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000e77ff8)='rxrpc_s\x00', &(0x7f000076c000)={0x73, 0x79, 0x7a}, &(0x7f0000e94000)='user\x00', 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000a86000)='keyring\x00', &(0x7f0000000ffb)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000947ffb)='user\x00', &(0x7f0000a2dffb)={0x73, 0x79, 0x7a}, &(0x7f000018e000)='D', 0x1, r1) r3 = add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000d08000)={0x73, 0x79, 0x7a}, &(0x7f0000a6beca)="b33ab70079ebe0d94f729cd653e520c19ad7d97fe21769e7c4db44c249b544230ba287fb8bd6ed3d6ccf59ef70995bdae8e0ecd3fff35a537424f222d2818d08ca27e0ec82165fe365a0e6b9485f2d925493f60c01e33e208c7eba67fc19a9497f5b07e5849d2e875b0081d640b336616fe0f3c3002813b4627ee7597689525e8e81f750a86eb580fb4690ea527e6bd3d32b1a91f944edbc4b1f50050000000000000098b600579f3af3f864e1c324f6928f6672f98f7e149be31bd78b506e8b", 0xc0, r0) keyctl$dh_compute(0x17, &(0x7f0000baaff4)={r2, r3, r3}, &(0x7f0000742000)=""/3, 0x3, &(0x7f0000be2fc8)={&(0x7f00001f8fef)={'rmd320\x00'}}) rt_sigsuspend(&(0x7f0000000040), 0x8) 2018/02/26 14:32:59 executing program 4: r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000944fde)="220000005e000721004f10f7e2ffd90000000000000000edff000000e700ff02f157", 0x22) 2018/02/26 14:32:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00007f3ffb)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0xffffffffffffffff, @empty}, 0x10) shutdown(r0, 0x0) 2018/02/26 14:32:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000008f37)}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000afd0)={0x0, 0x0, &(0x7f0000015000)=[], 0x0, 0x0, &(0x7f0000016000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000bfd0)={0x0, 0x0, &(0x7f0000007000)=[], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/26 14:32:59 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x2e4) sched_setaffinity(0x0, 0x8, &(0x7f0000e86ff8)=0x5) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000754000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/48) [ 45.176323] binder: undelivered transaction 5, process died. [ 45.207820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=94 sclass=netlink_route_socket 2018/02/26 14:32:59 executing program 3: epoll_create1(0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f00000021c0)) r0 = socket(0x1000000010, 0x802, 0x4) sendmsg$nl_route(r0, &(0x7f0000f72fc8)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f00006d8000)=@ipv4_newaddr={0x18, 0x14, 0x40000000001, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x18}, 0x1}, 0x0) 2018/02/26 14:32:59 executing program 1: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2713, &(0x7f0000000040)=""/1520, &(0x7f0000000000)=0x5f0) 2018/02/26 14:32:59 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xef) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000014ffc)=0x2000000000000002, 0x4) sendto$inet6(r0, &(0x7f0000015fff), 0x0, 0x0, &(0x7f0000003000)={0xa, 0xffffffffffffffff, 0x200, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/26 14:32:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6=@empty, 0xffffffffffffffff, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/26 14:32:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsync(0xffffffffffffffff) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)=ANY=[@ANYBLOB="20000000000b01000000000000000000000000000c40010000000000"], 0x1c}, 0x1}, 0x0) 2018/02/26 14:32:59 executing program 6: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f0000d43fe4)=@in6={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000000)="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", 0x2c9}, {&(0x7f0000001100)="323baff69a927e47de66c652f4ea28f417dc34f62ab6a551f72715b106724833f8c6253b8e3f905b2f6289bc4538514b9aecad779e145c80a44ae8fd572b85a1199f25e1c52c3207077cf4c77afcf309702fbf30929a08ba8a36651028d486e2e97bbfb4c1733b9de138cab233f0fbf3eba73a16d3ea2dee1653385e000c146bdb66321f19248aab4adb9ba426157eacf47b12365eb6c35614981762d691bdfaa362a6", 0xa3}, {&(0x7f0000001280)="24f81821e16700b465a90fa8f9c37675e7f7ce456d978189464a01f74c7406ea7ac60ad3552d10cf8f3b6268977d4e22a7e2520b7269899650be9e5a34b1c789198a2c54729f32fd93de5a7ffac7fa20cec91d35be6fe9ddd23364c4b2c07064ead1ce16fdfb5fba0c93773c89af54d4855defbab2ecbb887f65ae72d7c3240ed3740d58359913730b4ce6832f38c030d004433e2c91933e92856faf26f52c21229406f8a74fdaa29575", 0xaa}], 0x3}, 0x8000) close(r0) 2018/02/26 14:32:59 executing program 1: timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000000)) syslog(0x3, &(0x7f0000000040)=""/4096, 0x6d6665862840fa73) [ 45.219623] binder: 5837:5842 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 45.246773] binder: BINDER_SET_CONTEXT_MGR already set [ 45.255773] binder: 5837:5842 ioctl 40046207 0 returned -16 [ 45.262547] binder: 5837:5853 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/02/26 14:32:59 executing program 0: 2018/02/26 14:32:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000008f37)}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000afd0)={0x0, 0x0, &(0x7f0000015000)=[], 0x0, 0x0, &(0x7f0000016000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000bfd0)={0x0, 0x0, &(0x7f0000007000)=[], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/26 14:32:59 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f00002cbff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000812ff0)='./control/file0\x00', &(0x7f0000d98ff8)='./file0\x00') dup2(r0, r1) 2018/02/26 14:32:59 executing program 4: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000000a000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f000000a000)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 2018/02/26 14:32:59 executing program 0: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00') rename(&(0x7f00000f7ff0)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000080)='./control\x00', 0x0) dup2(r0, r1) 2018/02/26 14:32:59 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x25, 0x0, 0xff}, {}]}) [ 45.352183] binder: 5873:5876 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 45.373215] binder: BINDER_SET_CONTEXT_MGR already set [ 45.394997] binder: 5873:5876 ioctl 40046207 0 returned -16 [ 45.408366] binder: 5873:5894 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/02/26 14:32:59 executing program 1: 2018/02/26 14:32:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000939000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) 2018/02/26 14:32:59 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f0000001000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 14:32:59 executing program 4: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 7: 2018/02/26 14:32:59 executing program 0: 2018/02/26 14:32:59 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f00002cbff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000812ff0)='./control/file0\x00', &(0x7f0000d98ff8)='./file0\x00') dup2(r0, r1) 2018/02/26 14:32:59 executing program 2: 2018/02/26 14:32:59 executing program 7: 2018/02/26 14:32:59 executing program 3: 2018/02/26 14:32:59 executing program 4: 2018/02/26 14:33:00 executing program 7: 2018/02/26 14:33:00 executing program 0: 2018/02/26 14:33:00 executing program 1: 2018/02/26 14:33:00 executing program 3: 2018/02/26 14:33:00 executing program 6: 2018/02/26 14:33:00 executing program 2: 2018/02/26 14:33:00 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f00002cbff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000812ff0)='./control/file0\x00', &(0x7f0000d98ff8)='./file0\x00') dup2(r0, r1) 2018/02/26 14:33:00 executing program 4: 2018/02/26 14:33:00 executing program 0: 2018/02/26 14:33:00 executing program 6: 2018/02/26 14:33:00 executing program 4: 2018/02/26 14:33:00 executing program 2: 2018/02/26 14:33:00 executing program 1: 2018/02/26 14:33:00 executing program 3: 2018/02/26 14:33:00 executing program 7: 2018/02/26 14:33:00 executing program 4: 2018/02/26 14:33:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000478ff5)='mountstats\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000100)=""/163, 0xa3}, {&(0x7f0000000240)=""/4, 0x4}], 0x2) 2018/02/26 14:33:00 executing program 2: 2018/02/26 14:33:00 executing program 6: 2018/02/26 14:33:00 executing program 1: 2018/02/26 14:33:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00005e4000)={0x14, 0x1d, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 14:33:00 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c, &(0x7f0000fc8000)=[]}, 0x8000) 2018/02/26 14:33:00 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f00002cbff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000812ff0)='./control/file0\x00', &(0x7f0000d98ff8)='./file0\x00') dup2(r0, r1) 2018/02/26 14:33:00 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000d1df52)=""/174) 2018/02/26 14:33:00 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001080)={0x0, 0x0, 0x3, 0x0, "7e0118a90870ef7c69e78939717ec7ef60b2085c8baa3016f27f0ebda54c2d75"}) 2018/02/26 14:33:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x8000000000050, &(0x7f0000000000)=""/185, &(0x7f00000000c0)=0x9d) 2018/02/26 14:33:00 executing program 1: r0 = inotify_init1(0x400001801) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=""/130, &(0x7f0000000140)=0x82) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x40, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000ff8)=@abs, 0x8) 2018/02/26 14:33:00 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000e54000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1b) 2018/02/26 14:33:00 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000f20000)='/dev/autofs\x00', 0x80000, 0x0) sendto(r0, &(0x7f0000000000)="55ed0b4db01f", 0x6, 0x20000000, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 2018/02/26 14:33:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) writev(r0, &(0x7f0000ec6000)=[{&(0x7f0000c80000)="390000001300090468fe00008100000006ee004003000000450001070000fe1419001a0004000200003f0002000007e200e10c00f41ee40009", 0x39}], 0x1) 2018/02/26 14:33:00 executing program 3: rt_sigaction(0x0, &(0x7f0000cabfe0), 0x0, 0xfffffffffffffcb7, &(0x7f0000fed000)) r0 = socket$nl_route(0x10, 0x3, 0x0) fadvise64(r0, 0x0, 0xb, 0x5) socketpair(0x1, 0x5, 0x4, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_ipx_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={"d1fd9085746bc86edc5f8984404eef37", {0x4, 0x1, 0x1000, "af7cd8496116", 0xfffffffffffffffa}}) 2018/02/26 14:33:00 executing program 1: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000197ff4)={0x0}, &(0x7f0000360000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000eb8ff8)={0x0, 0x0}) truncate(&(0x7f0000000000)='./file0\x00', 0x400) process_vm_readv(r2, &(0x7f0000d00fd8)=[{&(0x7f0000d7bf58)=""/168, 0xa8}], 0x1, &(0x7f0000270000)=[{&(0x7f0000bda000)=""/4096, 0x1000}], 0x1, 0x0) INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes [ 242.253557] INFO: task syz-executor2:5971 blocked for more than 120 seconds. [ 242.260782] Not tainted 4.4.118-g5f7f76a #25 [ 242.266319] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 242.274296] syz-executor2 D ffff8801c466fa60 29768 5971 3855 0x20020004 [ 242.281707] ffff8801c466fa60 ffff8801c466f9f8 ffffffff837647a5 ffff8801c466fa68 [ 242.289706] ffffffff81003058 0000000000000000 ffff8801db31fdb8 ffff8801db31fde0 [ 242.297696] ffff8801db31f4d8 ffff8801c563c800 ffff8801c89cc800 0000000000000000 [ 242.305752] Call Trace: [ 242.308329] [] ? preempt_schedule+0x25/0x30 [ 242.314313] [] ? ___preempt_schedule+0x12/0x14 [ 242.320518] [] schedule+0x7a/0x1b0 [ 242.325706] [] __lock_sock+0xf1/0x180 [ 242.331129] [] ? sock_init_data+0xcc0/0xcc0 [ 242.337105] [] ? lock_sock_nested+0x43/0x120 [ 242.343139] [] ? prepare_to_wait_event+0x420/0x420 [ 242.349716] [] ? get_parent_ip+0xd/0x50 [ 242.355327] [] lock_sock_nested+0xf6/0x120 [ 242.361186] [] ipv6_getorigdst+0x136/0x610 [ 242.367087] [] ? ipv6_print_tuple+0x30/0x30 [ 242.373034] [] ? __ww_mutex_lock_interruptible+0x14d0/0x14d0 [ 242.380487] [] ? mutex_unlock+0x9/0x10 [ 242.386019] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 242.393091] [] compat_nf_getsockopt+0xfd/0x130 [ 242.399329] [] compat_ipv6_getsockopt+0x1fa/0x2f0 [ 242.405817] [] ? ipv6_getsockopt+0x250/0x250 [ 242.411898] [] inet_csk_compat_getsockopt+0x95/0x120 [ 242.418659] [] ? ipv6_getsockopt+0x250/0x250 [ 242.424706] [] compat_tcp_getsockopt+0x3d/0x70 [ 242.430912] [] compat_sock_common_getsockopt+0xb2/0x140 [ 242.437921] [] ? tcp_getsockopt+0xd0/0xd0 [ 242.443717] [] compat_SyS_getsockopt+0x14f/0x2a0 [ 242.450098] [] ? sock_common_getsockopt+0xd0/0xd0 [ 242.456592] [] ? compat_SyS_setsockopt+0x290/0x290 [ 242.463148] [] ? do_fast_syscall_32+0xd7/0x8a0 [ 242.469383] [] ? compat_SyS_setsockopt+0x290/0x290 [ 242.475954] [] do_fast_syscall_32+0x321/0x8a0 [ 242.482071] [] sysenter_flags_fixed+0xd/0x17 [ 242.488310] 1 lock held by syz-executor2/5971: [ 242.492864] #0: (sk_lock-AF_INET6){+.+.+.}, at: [] compat_ipv6_getsockopt+0x1df/0x2f0 [ 242.503174] Sending NMI to all CPUs: [ 242.507019] NMI backtrace for cpu 0 [ 242.510625] CPU: 0 PID: 485 Comm: khungtaskd Not tainted 4.4.118-g5f7f76a #25 [ 242.517898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.527685] task: ffff8800bb361800 task.stack: ffff8800bb368000 [ 242.533732] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1a0 [ 242.542451] RSP: 0018:ffff8800bb36fcb8 EFLAGS: 00000046 [ 242.547900] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 242.555170] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300 [ 242.562423] RBP: ffff8800bb36fce0 R08: 0000000000000001 R09: 0000000000000000 [ 242.569688] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 242.576951] R13: 0000000000000003 R14: ffffffff8426f420 R15: 0000000000000002 [ 242.584239] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 242.592619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.598509] CR2: 00007f597f6ee000 CR3: 00000000b6696000 CR4: 0000000000160670 [ 242.605774] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.613024] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.620301] Stack: [ 242.622420] ffffffff8426f420 ffffffff847ef9c0 fffffbfff08fd9ec dffffc0000000000 [ 242.629979] ffff8801db31bca0 ffff8800bb36fd00 ffffffff810b999b ffffffff839f63c0 [ 242.637507] 0000000000000003 ffff8800bb36fd60 ffffffff81d0ef94 ffffffff8141b013 [ 242.645049] Call Trace: [ 242.647609] [] nmi_raise_cpu_backtrace+0x5b/0x70 [ 242.654747] [] nmi_trigger_all_cpu_backtrace+0x4a4/0x550 [ 242.661819] [] ? print_lock+0xab/0xae [ 242.667269] [] ? irq_force_complete_move+0x3b0/0x3b0 [ 242.674012] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 242.680995] [] watchdog+0x6fa/0xae0 [ 242.686271] [] ? watchdog+0xc3/0xae0 [ 242.691605] [] kthread+0x268/0x300 [ 242.696808] [] ? reset_hung_task_detector+0x20/0x20 [ 242.703466] [] ? kthread_create_on_node+0x400/0x400 [ 242.710102] [] ? kthread_create_on_node+0x400/0x400 [ 242.716765] [] ret_from_fork+0x55/0x80 [ 242.722294] [] ? kthread_create_on_node+0x400/0x400 [ 242.728964] Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 6b 2f 17 00 4c 89 e7 57 9d 0f 1f [ 242.747945] NMI backtrace for cpu 1 [ 242.751542] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.118-g5f7f76a #25 [ 242.758585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.767942] task: ffff8801d9b49800 task.stack: ffff8801d9b58000 [ 242.773999] RIP: 0010:[] [] native_safe_halt+0x6/0x10 [ 242.782378] RSP: 0018:ffff8801d9b5fd98 EFLAGS: 00000246 [ 242.787821] RAX: 0000000000000007 RBX: ffffffff847ddac8 RCX: 0000000000000000 [ 242.795077] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8801d9b4a0cc [ 242.802321] RBP: ffff8801d9b5fd98 R08: 0000000000000000 R09: 0000000000000000 [ 242.809595] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 242.817028] R13: fffffbfff070889c R14: ffffffff847ebe38 R15: 0000000000000000 [ 242.824296] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 242.832496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.838388] CR2: 00007fbc4bd1b9b8 CR3: 00000000b6696000 CR4: 0000000000160670 [ 242.845654] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.852898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.860172] Stack: [ 242.862295] ffff8801d9b5fdd0 ffffffff81027e85 ffff8801d9b60000 ffffffff847ddac8 [ 242.869922] fffffbfff070889c ffffffff847ebe38 0000000000000000 ffff8801d9b5fde0 [ 242.877447] ffffffff810293fa ffff8801d9b5fdf8 ffffffff81221468 dffffc0000000000 [ 242.885148] Call Trace: [ 242.887704] [] default_idle+0x55/0x3c0 [ 242.893221] [] arch_cpu_idle+0xa/0x10 [ 242.898674] [] default_idle_call+0x48/0x70 [ 242.904550] [] cpu_startup_entry+0x5fd/0x8f0 [ 242.910576] [] ? call_cpuidle+0xe0/0xe0 [ 242.916197] [] ? clockevents_register_device+0x122/0x230 [ 242.923268] [] start_secondary+0x304/0x3e0 [ 242.929151] [] ? set_cpu_sibling_map+0x1080/0x1080 [ 242.935716] Code: 00 00 00 00 00 55 48 89 e5 fa 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 66 0f 1f 84 [ 242.954992] Kernel panic - not syncing: hung_task: blocked tasks [ 242.961117] CPU: 0 PID: 485 Comm: khungtaskd Not tainted 4.4.118-g5f7f76a #25 [ 242.968355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.977686] 0000000000000000 276c0d60eb7080eb ffff8800bb36fca8 ffffffff81d0402d [ 242.985669] ffffffff83883080 ffff8800bb36fd80 dffffc0000000000 7fffffffffffffff [ 242.993731] ffff8801c89c8448 ffff8800bb36fd70 ffffffff8141aaea 0000000041b58ab3 [ 243.001702] Call Trace: [ 243.004260] [] dump_stack+0xc1/0x124 [ 243.009594] [] panic+0x1aa/0x388 [ 243.014586] [] ? percpu_up_read.constprop.45+0xe1/0xe1 [ 243.021480] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 243.028727] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 243.035971] [] watchdog+0x70b/0xae0 [ 243.041216] [] ? watchdog+0xc3/0xae0 [ 243.046551] [] kthread+0x268/0x300 [ 243.051713] [] ? reset_hung_task_detector+0x20/0x20 [ 243.058349] [] ? kthread_create_on_node+0x400/0x400 [ 243.064988] [] ? kthread_create_on_node+0x400/0x400 [ 243.071636] [] ret_from_fork+0x55/0x80 [ 243.077146] [] ? kthread_create_on_node+0x400/0x400 [ 243.084266] Dumping ftrace buffer: [ 243.087818] (ftrace buffer empty) [ 243.091502] Kernel Offset: disabled [ 243.095113] Rebooting in 86400 seconds..