[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 21.410003] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.319905] random: sshd: uninitialized urandom read (32 bytes read, 41 bits of entropy available) [ 26.713712] random: sshd: uninitialized urandom read (32 bytes read, 41 bits of entropy available) [ 27.707554] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.36' (ECDSA) to the list of known hosts. 2018/02/26 09:32:03 fuzzer started 2018/02/26 09:32:04 dialing manager at 10.128.0.26:33791 2018/02/26 09:32:08 kcov=true, comps=false 2018/02/26 09:32:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/02/26 09:32:09 executing program 1: syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) userfaultfd(0x0) syz_open_dev$sg(&(0x7f0000b65000)='/dev/sg#\x00', 0x0, 0x0) unshare(0x40600) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/02/26 09:32:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000086fa8)="580000001400192300bb4b80040d8c560a0600000000bc76489643c218fe58a2e04a03ca8164643e8900000028215a0004fbf5100000002800000004001ce1ed5e000000000022000d00010007000002121f00ec6b0f536e", 0x58}], 0x1) 2018/02/26 09:32:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002ffc), &(0x7f0000004ffc)=0x2c6) 2018/02/26 09:32:09 executing program 7: mkdir(&(0x7f000043eff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x40, &(0x7f000000a000)) r0 = creat(&(0x7f0000cd5000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00007ec000)={0x1}) writev(r0, &(0x7f0000728fa0)=[{&(0x7f0000ccafb9)="1c", 0x1}], 0x1) truncate(&(0x7f0000afe000)='./file0/bus\x00', 0x0) 2018/02/26 09:32:09 executing program 5: r0 = gettid() setpgid(r0, 0x0) 2018/02/26 09:32:09 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000009000)=[{&(0x7f0000008000)="5500000018007ff404000000000040930206000000a843096c2623692500080004000a000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/26 09:32:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) close(r0) [ 39.028890] IPVS: Creating netns size=2552 id=1 [ 39.079938] IPVS: Creating netns size=2552 id=2 [ 39.125558] IPVS: Creating netns size=2552 id=3 [ 39.184630] IPVS: Creating netns size=2552 id=4 [ 39.252657] IPVS: Creating netns size=2552 id=5 [ 39.337660] IPVS: Creating netns size=2552 id=6 [ 39.472519] IPVS: Creating netns size=2552 id=7 [ 39.653391] IPVS: Creating netns size=2552 id=8 2018/02/26 09:32:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a80ff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005406, &(0x7f000014dff8)) 2018/02/26 09:32:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000f38ffc)=0x3, 0x4) sendto$inet6(r0, &(0x7f00009f0fc3), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000f61000)=[{{&(0x7f0000f62ff0)=@ipx, 0x10, &(0x7f0000f5d000)=[], 0x0, &(0x7f0000f62000)}}], 0x1, 0x2041, 0x0) 2018/02/26 09:32:14 executing program 1: madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x10) madvise(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x11) 2018/02/26 09:32:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000fb9fc8)={&(0x7f00008ee000)={0x10}, 0xc, &(0x7f0000fe8000)={&(0x7f0000fe9fc2)=@updsa={0x138, 0x1a, 0xa09, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@dev={0xac, 0x14}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x3c}, @in=@multicast2=0xe0000002, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@algo_auth={0x48, 0x1, {{'ghash-generic\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/26 09:32:14 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f0000001440)=@ax25, 0x10, &(0x7f0000001580)=[]}}], 0x1, 0x0, &(0x7f00000016c0)) 2018/02/26 09:32:14 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000001340)=[]}}, {{&(0x7f0000002600)=@in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c, &(0x7f0000000000)=[]}}], 0x2, 0x0) 2018/02/26 09:32:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002ffc), &(0x7f0000004ffc)=0x2c6) 2018/02/26 09:32:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000040cfdc)="2400000058001f0014b2f407000904000200071008000100ffffffff0800030000000000", 0x24) 2018/02/26 09:32:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00001b3000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000007fff4)) 2018/02/26 09:32:14 executing program 5: mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/26 09:32:14 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4b, &(0x7f00000c6000)={{{@in=@rand_addr=0x6, @in=@rand_addr}}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, 0xe8) 2018/02/26 09:32:14 executing program 7: mmap(&(0x7f0000000000/0xf8a000)=nil, 0xf8a000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f86000)={0x2, 0x2004, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:32:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002ffc), &(0x7f0000004ffc)=0x2c6) 2018/02/26 09:32:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000040cfdc)="2400000058001f0014b2f407000904000200071008000100ffffffff0800030000000000", 0x24) [ 44.348509] capability: warning: `syz-executor6' uses 32-bit capabilities (legacy support in use) 2018/02/26 09:32:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x98) 2018/02/26 09:32:14 executing program 3: mmap(&(0x7f0000000000/0xfbf000)=nil, 0xfbf000, 0x1, 0x800000000000032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000), 0x4) 2018/02/26 09:32:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000040cfdc)="2400000058001f0014b2f407000904000200071008000100ffffffff0800030000000000", 0x24) 2018/02/26 09:32:14 executing program 0: r0 = socket(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 2018/02/26 09:32:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002ffc), &(0x7f0000004ffc)=0x2c6) 2018/02/26 09:32:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00001f4ff0)=[{&(0x7f0000967000)="580000001400192300a13680040d8c560a0600000000e076fffffffffffffc01000004ca7f64643e8900050028635a0004fbf510000200dd1b000000160000ed5dfffff5000022000d00010004040800bc50ea0000000000", 0x58}], 0x1) 2018/02/26 09:32:14 executing program 7: mmap(&(0x7f0000000000/0xf8a000)=nil, 0xf8a000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f86000)={0x2, 0x2004, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:32:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000a28fff), 0xfffffffffffffc63, 0x20008045, &(0x7f00008e2000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000104fd8)=[{r0}], 0x1, &(0x7f0000928000)={0x0, 0x1c9c380}, &(0x7f0000c73000), 0x8) 2018/02/26 09:32:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000040cfdc)="2400000058001f0014b2f407000904000200071008000100ffffffff0800030000000000", 0x24) 2018/02/26 09:32:14 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000358fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5dfe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00002d4000)='/proc/self/net/pfkey\x00', 0x0, 0x0) pread64(r2, &(0x7f0000227ff9)=""/7, 0x7, 0x0) 2018/02/26 09:32:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}]}, 0xa0}, 0x1}, 0x0) 2018/02/26 09:32:14 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000000), 0x0) 2018/02/26 09:32:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00001f4ff0)=[{&(0x7f0000967000)="580000001400192300a13680040d8c560a0600000000e076fffffffffffffc01000004ca7f64643e8900050028635a0004fbf510000200dd1b000000160000ed5dfffff5000022000d00010004040800bc50ea0000000000", 0x58}], 0x1) 2018/02/26 09:32:14 executing program 2: mkdir(&(0x7f0000676000)='./file0\x00', 0x0) mount(&(0x7f0000671000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000909000)='ramfs\x00', 0x9, &(0x7f0000088000)) mount(&(0x7f00006abff8)='./file0\x00', &(0x7f0000032000)='./file0\x00', &(0x7f0000016ff5)='openpromfs\x00', 0x7ffbf, &(0x7f000002ff17)) 2018/02/26 09:32:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000a28fff), 0xfffffffffffffc63, 0x20008045, &(0x7f00008e2000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000104fd8)=[{r0}], 0x1, &(0x7f0000928000)={0x0, 0x1c9c380}, &(0x7f0000c73000), 0x8) 2018/02/26 09:32:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00001f4ff0)=[{&(0x7f0000967000)="580000001400192300a13680040d8c560a0600000000e076fffffffffffffc01000004ca7f64643e8900050028635a0004fbf510000200dd1b000000160000ed5dfffff5000022000d00010004040800bc50ea0000000000", 0x58}], 0x1) 2018/02/26 09:32:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 2018/02/26 09:32:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f6b000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000040)=@ethtool_gstrings={0x1b}}) 2018/02/26 09:32:14 executing program 7: mmap(&(0x7f0000000000/0xf8a000)=nil, 0xf8a000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f86000)={0x2, 0x2004, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:32:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000a28fff), 0xfffffffffffffc63, 0x20008045, &(0x7f00008e2000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000104fd8)=[{r0}], 0x1, &(0x7f0000928000)={0x0, 0x1c9c380}, &(0x7f0000c73000), 0x8) 2018/02/26 09:32:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00001f4ff0)=[{&(0x7f0000967000)="580000001400192300a13680040d8c560a0600000000e076fffffffffffffc01000004ca7f64643e8900050028635a0004fbf510000200dd1b000000160000ed5dfffff5000022000d00010004040800bc50ea0000000000", 0x58}], 0x1) 2018/02/26 09:32:14 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000207fbc)={{0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x8, {0x2, 0xffffffffffffffff, @rand_addr}, @common="006f73000a0fff000008000065004080"}) 2018/02/26 09:32:14 executing program 6: getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00005e6ff8), &(0x7f0000080ffc)=0x8) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000076f000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x80247009, 0x20000000) 2018/02/26 09:32:14 executing program 0: r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000040fffc)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00004aefee)="120000001600e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000ca9f44)=""/188, 0xbc, 0x0, &(0x7f0000920000)=@nl=@kern={0x10}, 0xc) 2018/02/26 09:32:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000a28fff), 0xfffffffffffffc63, 0x20008045, &(0x7f00008e2000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000104fd8)=[{r0}], 0x1, &(0x7f0000928000)={0x0, 0x1c9c380}, &(0x7f0000c73000), 0x8) [ 44.540559] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 2018/02/26 09:32:14 executing program 4: r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000040fffc)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00004aefee)="120000001600e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000ca9f44)=""/188, 0xbc, 0x0, &(0x7f0000920000)=@nl=@kern={0x10}, 0xc) 2018/02/26 09:32:14 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x3, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendmsg(r1, &(0x7f0000b82000)={&(0x7f000092fffa)=@hci={0x1f}, 0xc, &(0x7f0000e42000)=[{&(0x7f0000781000)="23f25cc4c984636994f457561b9ac6f91889e748", 0x14}], 0x1, &(0x7f0000634000)=[]}, 0x0) sendto$inet(r1, &(0x7f0000e1a000)="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", 0x709, 0x0, &(0x7f0000e8c000)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/26 09:32:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000736000)='sessionid\x00') pread64(r0, &(0x7f00006f6000)=""/10, 0xa, 0x0) 2018/02/26 09:32:14 executing program 7: mmap(&(0x7f0000000000/0xf8a000)=nil, 0xf8a000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f86000)={0x2, 0x2004, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:32:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 2018/02/26 09:32:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 2018/02/26 09:32:14 executing program 0: r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000040fffc)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00004aefee)="120000001600e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000ca9f44)=""/188, 0xbc, 0x0, &(0x7f0000920000)=@nl=@kern={0x10}, 0xc) 2018/02/26 09:32:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2000000000018, &(0x7f00005f2fff), 0x0) 2018/02/26 09:32:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2000000000018, &(0x7f00005f2fff), 0x0) 2018/02/26 09:32:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2000000000018, &(0x7f00005f2fff), 0x0) 2018/02/26 09:32:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x14, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:32:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 2018/02/26 09:32:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2000000000018, &(0x7f00005f2fff), 0x0) 2018/02/26 09:32:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 2018/02/26 09:32:15 executing program 7: socketpair$unix(0x1, 0x200000000005, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000d30ff0)=[{0x24}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001aff6)=@abs, 0x8, &(0x7f0000012fa0)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/26 09:32:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) [ 44.714549] audit: type=1400 audit(1519637535.027:5): avc: denied { create } for pid=5320 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/26 09:32:15 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x3, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendmsg(r1, &(0x7f0000b82000)={&(0x7f000092fffa)=@hci={0x1f}, 0xc, &(0x7f0000e42000)=[{&(0x7f0000781000)="23f25cc4c984636994f457561b9ac6f91889e748", 0x14}], 0x1, &(0x7f0000634000)=[]}, 0x0) sendto$inet(r1, &(0x7f0000e1a000)="63ab4fa07d8b57b2431f7383c3be17647469370d25f1cdbc994877822e9449b3a11af15964c9f860018dc07732fb83e66a568605d043e676ac4312c963ef484b58a76c59f6b4855b35a3ec66268593a433b1d80317bcd8f3dbb90f97102ba4ace45a1c3d9676e6e3cdf6f70d6c002e2ecc1cfbaa3344a53a5f3460229d804e3766bacb2952f192d79c9d6374e64bc5df6539aa211389e94f310b8eba56f61ef1c3d27460e97a58d9d71575e5706d0760a9acf09c2fe5f46bd7739f4695e27d23d3eeeab219cfcac82c7bbb906928d8cecc46fc5c0f97dc5416adedda72298e46462f0e3ae2ebeeb60268dd77ba71f611374458cf8dfeacbeac02e826559171da6030236dd077e0d8eb4fab5a7cfed34d95fbb809b3c10345e2750c2edc1e1e5e13f3c6e12853da23043316baf54ac4af327f3823762b1af93588df1348535ca9e1e9e4d0e7c27d0213645a3f79ef9669ada14a8b0354357e1a1d081d74ff54b3e28e170e6f001749e5d4bc6137062c1030a73792cd34790749a57f0df0bf070e756915913a48815718627e01e6798473783a2ec50f5fe92084d211b4060604f68d30296d1772471f812904fbfb73c55efb9268ef8e2b0e5a15339e7a3ca5ed2327b4ba2c479d4b6a27e72f607261459b1863033d7c39a409a5d27d2d6ef79b5d49baf951afa5526b8ff879163dc3ed552704aae9b07f1d63a2bf0bbeea25165e2e038b74319fb44eff3f29d351f44f30f598a2ff7895ec2d7f5c2ecba831efc014371996e7b2994aabd2c711651c83bf0eb13191d61b0ec20aa070223e3eaed1a87d907668e10085cdf1b53a10da660cdd26f91c4d725aa3b417fd052ff6aafa14fc42c7165a06799d8da0cbdc8c64c81d199b3c003dbcb0915d57ebf581bacd2a21009b5cc5947a940a1db10873a57165fb6ee5d421be2e9a2a2be2f02ec4dc1ae494257995bb1fc37039373999ab38a866334029ef6623d990c015279f1fa9b918cffe65740fdc500d400a7b6ad3b940235fee71ecd8aa9e8709cce1c199ab55e48c552e0f1041a70946637934d60196f3db0cdb98f484771eb2cf0c5bb5b0279c6493630959f57917a47c2bf285c00a1fa0ba59250a8bc19e85beb6ce18221edf4abcce425d19a83aed98f38100bc071193282ec407b0f899ad3a3bf462c9ee1ceb137dc4d2112be7172b933450e616004c1e7515a0ac87b5170acc81b5c73c0093ca932d4a46f26071790303443ff5cd06f58919a0e8eea9bc7de9faea77bbe4fac490da61c1e4a7184d35ba31ec4c624577c676bfc902741d6605651d875a4acb56a85124d293f569a4d28797727e656f977aaf13d53ccc8eae378e4d8dc6bf75a34040394cf795f1f81b53af4f51f0ab9d33de7b5882d01b30c98279482355b49936f243f10d1d88ef45653411e684aa9cb5182f9513b8bd4c6a7e2b6331bf60f37f22b875ad7c19ae42d2b9b0428f8bf3bf72646e291792e1211816ad74c44be758a58f3273f0fff720fc6a3085211cc7f5734c03eb26685c8f8fde4976006242cd803096a971afeafe28498ace99069c939b2874d037a50250aa927ee9a1757dbd29649febb18968ff1bb1aa5fdeff0c5f7f5bcaa2212b1aaaf3c359760e63eea823644bbbb6bb22996dbaf929ec75d0df9f9d6b6154ca568be48cd969ddd9ae58c6fc8cbbb8af2d416c71faad546618c803f5d8e990fa999b7c82ac6ec02d86f28129b163dc976b3a9c566ba662fc75e1fdf1cbaa4e81e779d520d971528b0762c75910639f8223a46ff3df43913b88bbf521de1c38ff791d09424ff67baa23317137f2064cf0f7e615b6d3ca650089e3e64591066e91404d627c73c9128ef168ce4eb47c69210d4bf4d256d0d4b2bcd4304f2db97cbce0b9b9a8bf1512774bd606b5f30c318ae1906590753c520d3ddbc105a7b45c41bc45b3d97127332d6aa6ec91a18c75b3d1f5d66a9d9d895bcfa3c8b5253d716f4037173dcf8aaa9bce4ebd9803058fb91f9baab0cb6a0a3791b3afd35de568f1f617fc36a9161400f395b1b1c95379805d8bdbcaa2dab6fc4ec4f8738342d2c27caff633aefb401ffa461349e7385b0afe9cdfbc777975b6b7a09269185a205a81662514124fa1268c5043bed673c29bb6a2aac26d3cb7c9527d22915c8580068789c2f64e290fe8e3dadfc8b4d386ddd200b57bc0b5661324d3454773be95fa278534a27d923f0941ca1c323d27f866ac93fdb2cd6374afc1d0e427d085979aeb90c53cf5ac846ee9af17225d4b426c0245eecb8e44bfae2c63059bc8acca7ef45fbbc9c2349d468d609337b323ce0a838eff641b01b326ecdc0a5bbab91e56d5e90b83df62e871b47433fa28163c69903ca148c3f1a67190429ac0832a6eeb49ae7af427cccd4c0412e3467cce9452ef1e608705431cb1938ebe268100f97cd0081e59b4434f34b97828985f34cb3bc29761a1928dfa4d7f79a2deec096475b5f160383286dd645eda04de24cf1642f3ee201e3dffc572062bedaf202b3d18279b2e842c4b166622197aae4c14", 0x709, 0x0, &(0x7f0000e8c000)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/26 09:32:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000710ffc)=0x8, 0x4) 2018/02/26 09:32:15 executing program 7: mmap(&(0x7f0000000000/0xd19000)=nil, 0xd19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x7f) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2003) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000f1dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f000093e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000650ffc)=0xb) stat(&(0x7f0000212000)='./file0\x00', &(0x7f0000e6afbc)) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000df1000)=0x8, 0x4) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008045, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000ef9ff0)) r1 = dup(r0) accept4$packet(0xffffffffffffffff, &(0x7f00008ad000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000878000)=0x14, 0x0) recvfrom$packet(r1, &(0x7f0000848f13)=""/237, 0xed, 0x10020, &(0x7f0000534fec)={0x11, 0x17, r2, 0x1, 0x9, 0x6, @random="d142f91f7afc"}, 0x14) recvmmsg(r0, &(0x7f000073eda8)=[{{&(0x7f0000025fa8)=@alg, 0x58, &(0x7f00009f4fa0)=[{&(0x7f00003eef44)=""/188, 0xbc}, {&(0x7f0000ac3000)=""/75, 0x4b}, {&(0x7f0000a79000)=""/154, 0x9a}, {&(0x7f0000160f1b)=""/229, 0xe5}, {&(0x7f0000ad2f9f)=""/97, 0x61}, {&(0x7f00004a5000)=""/6, 0x6}], 0x6, 0x0, 0x0, 0x419e}, 0x5}, {{&(0x7f00005a4ffa)=@hci, 0x6, &(0x7f0000ec2000)=[{&(0x7f00008edf23)=""/221, 0xdd}, {&(0x7f0000eb4000)=""/4096, 0x1000}, {&(0x7f0000fc2000)=""/21, 0x15}, {&(0x7f00005b2f2e)=""/210, 0xd2}, {&(0x7f00008c2000)=""/137, 0x89}], 0x5, 0x0, 0x0, 0x5}, 0x65}, {{&(0x7f0000e3fff8)=@sco, 0x8, &(0x7f000071b000)=[{&(0x7f000071cf02)=""/254, 0xfe}, {&(0x7f00001bf000)=""/4096, 0x1000}], 0x2, &(0x7f0000230fc4)=""/60, 0x3c}, 0x4}, {{&(0x7f0000effff0)=@nfc, 0x10, &(0x7f0000541fc0)=[{&(0x7f00002d4000)=""/18, 0x12}, {&(0x7f0000652f26)=""/218, 0xda}, {&(0x7f0000338fe2)=""/30, 0x1e}, {&(0x7f0000baf000)=""/57, 0x39}], 0x4, &(0x7f0000683000)=""/240, 0xf0, 0xb203}, 0x401}, {{&(0x7f0000b4ffec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[], 0x0}}, 0x14, &(0x7f00007e4000)=[]}}], 0x5, 0x0, &(0x7f00001bdff0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000fe5ffc)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000564ffc)) perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0xf, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$ipx(r3, &(0x7f0000ef0000)="b7864c07db4e66f9ff8afc603c5e10748258fb881f83e4b8e83233cc", 0x1c, 0x0, &(0x7f0000b4a000)={0x4, 0x0, 0x0, "ff0f0000006a"}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000d3a000), 0x4) accept$inet(0xffffffffffffffff, &(0x7f0000ff4000)={0x0, 0x0, @empty}, &(0x7f0000a20000)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000ba1000)={0x0, 0x4}, &(0x7f0000adc000)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f000016bff4)=@sack_info={r4}, &(0x7f0000584ffc)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00005feff8)=@assoc_value, 0x8) sendto$inet(r0, &(0x7f000058b000)="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", 0x100, 0x4, 0x0, 0x0) 2018/02/26 09:32:15 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000d24ff0)={0x0, &(0x7f0000bf3000)=[]}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000d1b000)) 2018/02/26 09:32:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x14, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:32:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 2018/02/26 09:32:15 executing program 4: r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000040fffc)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00004aefee)="120000001600e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000ca9f44)=""/188, 0xbc, 0x0, &(0x7f0000920000)=@nl=@kern={0x10}, 0xc) 2018/02/26 09:32:15 executing program 0: r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000040fffc)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00004aefee)="120000001600e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000ca9f44)=""/188, 0xbc, 0x0, &(0x7f0000920000)=@nl=@kern={0x10}, 0xc) [ 44.878493] audit: type=1400 audit(1519637535.197:6): avc: denied { write } for pid=5348 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/26 09:32:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f000031eff6)='net/icmp\x00') pread64(r0, &(0x7f00008fa000), 0x0, 0x800000000000) 2018/02/26 09:32:15 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00008ebff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000ff1000)={{0x1}}) 2018/02/26 09:32:15 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) 2018/02/26 09:32:15 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x3, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendmsg(r1, &(0x7f0000b82000)={&(0x7f000092fffa)=@hci={0x1f}, 0xc, &(0x7f0000e42000)=[{&(0x7f0000781000)="23f25cc4c984636994f457561b9ac6f91889e748", 0x14}], 0x1, &(0x7f0000634000)=[]}, 0x0) sendto$inet(r1, &(0x7f0000e1a000)="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", 0x709, 0x0, &(0x7f0000e8c000)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/26 09:32:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x14, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:32:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f0000032000)={0x30, 0x10, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@nested={0x1c, 0x10000001, [@typed={0x18, 0x0, @ipv6=@loopback={0x0, 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/26 09:32:15 executing program 0: r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000040fffc)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00004aefee)="120000001600e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000ca9f44)=""/188, 0xbc, 0x0, &(0x7f0000920000)=@nl=@kern={0x10}, 0xc) 2018/02/26 09:32:15 executing program 4: r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f000040fffc)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00004aefee)="120000001600e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000ca9f44)=""/188, 0xbc, 0x0, &(0x7f0000920000)=@nl=@kern={0x10}, 0xc) 2018/02/26 09:32:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f4, &(0x7f0000932fd8)={@common='sit0\x00', @ifru_data=&(0x7f00009f1000)="010109070007000000fa000011000200dfff0000054e0000000000000004eb00"}) 2018/02/26 09:32:15 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x3, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendmsg(r1, &(0x7f0000b82000)={&(0x7f000092fffa)=@hci={0x1f}, 0xc, &(0x7f0000e42000)=[{&(0x7f0000781000)="23f25cc4c984636994f457561b9ac6f91889e748", 0x14}], 0x1, &(0x7f0000634000)=[]}, 0x0) sendto$inet(r1, &(0x7f0000e1a000)="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", 0x709, 0x0, &(0x7f0000e8c000)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/26 09:32:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x14, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:32:15 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) utime(&(0x7f0000011000)='./file0\x00', &(0x7f0000012ff0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000a7fff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:32:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f0000032000)={0x30, 0x10, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@nested={0x1c, 0x10000001, [@typed={0x18, 0x0, @ipv6=@loopback={0x0, 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/26 09:32:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b8c000)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00002f3000)={0x0, 0x0}) ppoll(&(0x7f0000180000)=[{r0}], 0x1, &(0x7f0000a1dff8)={0x0, r1+10000000}, &(0x7f0000c14ff8), 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) 2018/02/26 09:32:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000797000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) pipe(&(0x7f0000000000)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000a18000)={r1, 0x1, 0x6, @empty}, 0x10) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) 2018/02/26 09:32:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) fcntl$setstatus(r0, 0x4, 0x400) writev(r0, &(0x7f0000793fa0)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) 2018/02/26 09:32:15 executing program 1: pipe2(&(0x7f00004f3000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) read(r0, &(0x7f00000aafb6)=""/74, 0x4a) ioctl$int_in(r1, 0x5452, &(0x7f0000affff8)=0x7) dup2(r0, r2) 2018/02/26 09:32:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f0000032000)={0x30, 0x10, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@nested={0x1c, 0x10000001, [@typed={0x18, 0x0, @ipv6=@loopback={0x0, 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/26 09:32:15 executing program 3: setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)='\x00', 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, "2daeb6e6635fc6c465653d28bf60996c01fb24793598ed9ae816c77b68dac333"}) 2018/02/26 09:32:15 executing program 0: unshare(0x8000400) r0 = socket(0x2, 0x2, 0x0) flistxattr(r0, &(0x7f0000d14000)=""/15, 0xf) 2018/02/26 09:32:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000563000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) 2018/02/26 09:32:15 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) tkill(r2, 0x12) 2018/02/26 09:32:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f0000032000)={0x30, 0x10, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, [@nested={0x1c, 0x10000001, [@typed={0x18, 0x0, @ipv6=@loopback={0x0, 0x1}}]}]}, 0x30}, 0x1}, 0x0) 2018/02/26 09:32:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) sendto$inet6(r0, &(0x7f000037c000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) 2018/02/26 09:32:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) fcntl$setstatus(r0, 0x4, 0x400) writev(r0, &(0x7f0000793fa0)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) 2018/02/26 09:32:15 executing program 7: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000c40000)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') renameat2(r0, &(0x7f000000bfec)='./file0/file0/file0\x00', r0, &(0x7f000016517f)='./file1\x00', 0x1) 2018/02/26 09:32:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) fcntl$setstatus(r0, 0x4, 0x400) writev(r0, &(0x7f0000793fa0)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) 2018/02/26 09:32:15 executing program 6: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x800, 0x0, 0x2000ff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00004c3ffc)=0x9, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000beeee8)=[{&(0x7f00004b5000)=@in6={0xa, 0x0, 0x886, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000c14fb0)=[], 0x0, &(0x7f0000e82fd0)=[@init={0x18, 0x84}], 0x30}], 0x1, 0x0) [ 45.187159] device syz5 entered promiscuous mode 2018/02/26 09:32:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) linkat(0xffffffffffffffff, &(0x7f0000011000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000004000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f0000872fff)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000bb6ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:32:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) fcntl$setstatus(r0, 0x4, 0x400) writev(r0, &(0x7f0000793fa0)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) [ 45.239802] device syz5 left promiscuous mode 2018/02/26 09:32:15 executing program 7: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000c40000)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') renameat2(r0, &(0x7f000000bfec)='./file0/file0/file0\x00', r0, &(0x7f000016517f)='./file1\x00', 0x1) 2018/02/26 09:32:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000ca6000)={&(0x7f00005d7ff4)={0x10}, 0xc, &(0x7f0000ba8ff0)={&(0x7f0000f53000)=@delpolicy={0x50, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in6=@empty}, 0xffffffffffffffff, 0x3}, []}, 0x50}, 0x1}, 0x0) 2018/02/26 09:32:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 2018/02/26 09:32:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000000)=[], 0x0, &(0x7f0000000240)=[{0x18, 0x29, 0x4, '+\a'}], 0x18}}], 0x2, 0x0) 2018/02/26 09:32:15 executing program 6: r0 = socket$unix(0x1, 0x8000000005, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000332ff7)='net/arp\x00') sendfile(r0, r1, &(0x7f00004db000)=0x40, 0x63) 2018/02/26 09:32:15 executing program 5: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000b28ff8)='./file0\x00', &(0x7f00008f8ff8)='./file0\x00', &(0x7f0000b4eff9)='proc\x00', 0x1000000001, 0x0) lchown(&(0x7f00000c8ff8)='./file0\x00', 0x0, 0x0) 2018/02/26 09:32:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000010ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4400000000001278, &(0x7f0000020000)) 2018/02/26 09:32:15 executing program 4: unshare(0x40600) r0 = syz_open_dev$random(&(0x7f0000cf9000)='/dev/random\x00', 0x0, 0x0) tee(r0, r0, 0x3, 0x0) 2018/02/26 09:32:15 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) 2018/02/26 09:32:15 executing program 6: r0 = socket$unix(0x1, 0x8000000005, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000332ff7)='net/arp\x00') sendfile(r0, r1, &(0x7f00004db000)=0x40, 0x63) 2018/02/26 09:32:15 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) shutdown(r1, 0x1) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 2018/02/26 09:32:15 executing program 7: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000c40000)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') renameat2(r0, &(0x7f000000bfec)='./file0/file0/file0\x00', r0, &(0x7f000016517f)='./file1\x00', 0x1) 2018/02/26 09:32:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000000040)="112c736563757269747970726f632e2e00", 0x2) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fcntl$addseals(r1, 0x409, 0x0) write$selinux_load(r2, &(0x7f0000000380)={0xf97cff8c, 0x8, 'SE Linux'}, 0x10) close(r0) 2018/02/26 09:32:15 executing program 5: futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0xfffffffffffff1bf) 2018/02/26 09:32:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 2018/02/26 09:32:15 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) shutdown(r1, 0x1) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 2018/02/26 09:32:15 executing program 6: r0 = socket$unix(0x1, 0x8000000005, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000332ff7)='net/arp\x00') sendfile(r0, r1, &(0x7f00004db000)=0x40, 0x63) 2018/02/26 09:32:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000010ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4400000000001278, &(0x7f0000020000)) 2018/02/26 09:32:15 executing program 6: r0 = socket$unix(0x1, 0x8000000005, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000332ff7)='net/arp\x00') sendfile(r0, r1, &(0x7f00004db000)=0x40, 0x63) 2018/02/26 09:32:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000bcefe4)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f000001d000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x3}, 0x1c) bind$inet6(r1, &(0x7f0000d92000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x7}, 0x1c) bind$inet6(r1, &(0x7f0000bcefe4)={0xa, 0x0, 0x0, @empty}, 0x1c) 2018/02/26 09:32:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000010ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4400000000001278, &(0x7f0000020000)) 2018/02/26 09:32:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 2018/02/26 09:32:15 executing program 7: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000c40000)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') renameat2(r0, &(0x7f000000bfec)='./file0/file0/file0\x00', r0, &(0x7f000016517f)='./file1\x00', 0x1) 2018/02/26 09:32:15 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) shutdown(r1, 0x1) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 2018/02/26 09:32:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 2018/02/26 09:32:15 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f000096b000), 0x0) 2018/02/26 09:32:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000bcefe4)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f000001d000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x3}, 0x1c) bind$inet6(r1, &(0x7f0000d92000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x7}, 0x1c) bind$inet6(r1, &(0x7f0000bcefe4)={0xa, 0x0, 0x0, @empty}, 0x1c) 2018/02/26 09:32:15 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000e5aff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000bc000)=[{&(0x7f0000031f8c)='w', 0x1}], 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000e5a000)) 2018/02/26 09:32:15 executing program 5: r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6, 0xe, &(0x7f0000000a40)=@broute={'\n\x00oute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000d9e000), &(0x7f0000000240)=[{0x0, '\x00', 0x1, 0x0, 0x0, []}, {0x0, '\x00', 0x2, 0x0, 0x0, []}, {0x0, '\x00', 0x2, 0x0, 0x0, []}]}, 0x108) 2018/02/26 09:32:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000010ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4400000000001278, &(0x7f0000020000)) 2018/02/26 09:32:16 executing program 6: syz_open_dev$loop(&(0x7f00007f3ffe)='/dev/loop#\x00', 0x0, 0x66a401) 2018/02/26 09:32:16 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) shutdown(r1, 0x1) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 2018/02/26 09:32:16 executing program 2: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') utimensat(0xffffffffffffffff, &(0x7f0000000000)='//file0\x00', &(0x7f0000000040)={{0x0, 0x7530}, {0x77359400}}, 0x100) fchmodat(r0, &(0x7f0000e50fec)='./file0/file0/file0\x00', 0x0) 2018/02/26 09:32:16 executing program 6: r0 = add_key$user(&(0x7f00008dd000)='user\x00', &(0x7f00008db000)={0x73, 0x79, 0x7a}, &(0x7f00001cafb0)="b4", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 2018/02/26 09:32:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000bcefe4)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f000001d000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x3}, 0x1c) bind$inet6(r1, &(0x7f0000d92000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x7}, 0x1c) bind$inet6(r1, &(0x7f0000bcefe4)={0xa, 0x0, 0x0, @empty}, 0x1c) 2018/02/26 09:32:16 executing program 7: seccomp(0x200000000000001, 0x0, &(0x7f000002b000)={0x1, &(0x7f0000002ff8)=[{0x6, 0x0, 0x0, 0x1ffffffff}]}) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffff, @empty}, &(0x7f0000000040)=0x10, 0x0) 2018/02/26 09:32:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000526000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000768fe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x0, @random="3e7596f732f4"}}) sendto$inet(0xffffffffffffffff, &(0x7f0000762fff), 0x0, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) [ 45.754675] device gre0 entered promiscuous mode 2018/02/26 09:32:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x2800) readv(r0, &(0x7f00008eafe0)=[{&(0x7f00006fc000)=""/61, 0x3d}], 0x1) 2018/02/26 09:32:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c2aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00004f5ffc), 0x4) 2018/02/26 09:32:16 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffd, 0x43, 0x3, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/26 09:32:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000bcefe4)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f000001d000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x3}, 0x1c) bind$inet6(r1, &(0x7f0000d92000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x7}, 0x1c) bind$inet6(r1, &(0x7f0000bcefe4)={0xa, 0x0, 0x0, @empty}, 0x1c) 2018/02/26 09:32:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x31, &(0x7f00009b1000), 0x0) r1 = accept(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000040)=0x10) getsockname$unix(r1, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) r2 = socket$inet(0x2, 0x7, 0x28696b53) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[], 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x2, @broadcast=0xffffffff}, {0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}, {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x13}}, 0x4, 0x12, 0x100000000, 0x20, 0x0, 0x0, 0x10001, 0x0, 0xffff}) 2018/02/26 09:32:16 executing program 6: r0 = add_key$user(&(0x7f00008dd000)='user\x00', &(0x7f00008db000)={0x73, 0x79, 0x7a}, &(0x7f00001cafb0)="b4", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 2018/02/26 09:32:16 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigsuspend(&(0x7f000069dff8), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) tkill(r1, 0x13) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000013) 2018/02/26 09:32:16 executing program 7: r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000bb0)={'filter\x00', 0x7, 0x4, 0x400, 0x108, 0x218, 0x218, 0x108, 0x318, 0x318, 0x4, &(0x7f0000001fc0), {[{{@arp={@loopback=0x7f000001, @broadcast=0xffffffff, 0x0, 0x0, @empty, {}, @mac=@random="c10f0f125be7", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@dev={0xac, 0x14}, @rand_addr, 0x0, 0x0, @mac=@empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @generic="e6d764d2efa6af3fd6c75c73ceb310f2", @common='bcsh0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr}}}, {{@arp={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='lo\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x450) 2018/02/26 09:32:16 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mknod(&(0x7f0000013ff8)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f000039b000), &(0x7f0000bda000)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f000046a000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:32:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c2aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00004f5ffc), 0x4) 2018/02/26 09:32:16 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000066a000)={0xaa}) 2018/02/26 09:32:16 executing program 6: r0 = add_key$user(&(0x7f00008dd000)='user\x00', &(0x7f00008db000)={0x73, 0x79, 0x7a}, &(0x7f00001cafb0)="b4", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 2018/02/26 09:32:16 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffd, 0x43, 0x3, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/26 09:32:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c2aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00004f5ffc), 0x4) 2018/02/26 09:32:16 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffd, 0x43, 0x3, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/26 09:32:16 executing program 6: r0 = add_key$user(&(0x7f00008dd000)='user\x00', &(0x7f00008db000)={0x73, 0x79, 0x7a}, &(0x7f00001cafb0)="b4", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 2018/02/26 09:32:16 executing program 5: mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) mount(&(0x7f0000b29ff8)='./file0\x00', &(0x7f00008f8ff8)='./file0\x00', &(0x7f000067f000)='mqueue\x00', 0x800, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000386000), 0x395) 2018/02/26 09:32:16 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000db1ff0)={0x0, 0x0, 0xfffffffffffffffa}) 2018/02/26 09:32:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$evdev(r0, &(0x7f0000e95000)=[{}, {}], 0x30) write$sndseq(r0, &(0x7f00006d9000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:32:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c2aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00004f5ffc), 0x4) 2018/02/26 09:32:16 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffd, 0x43, 0x3, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/26 09:32:16 executing program 6: r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000)={0x9}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb2ffc)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005bfe0)={{}, {0x0, r3+10000000}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000169000)={0x1}) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/26 09:32:16 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mknod(&(0x7f0000013ff8)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f000039b000), &(0x7f0000bda000)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f000046a000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:32:16 executing program 4: seccomp(0x1, 0x0, &(0x7f00004c6000)={0x1, &(0x7f0000a7c000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getxattr(&(0x7f0000357000)='./file0\x00', &(0x7f00000d1000)=@known='system.advise\x00', &(0x7f0000d26000)=""/178, 0xb2) 2018/02/26 09:32:16 executing program 1: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8b16, &(0x7f0000001000)) 2018/02/26 09:32:16 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f000055a000)={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0xffffffffffffffff, @rand_addr}, @common="00006e6c310011000000008000"}) 2018/02/26 09:32:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mlock2(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0) 2018/02/26 09:32:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000ff6000)={@common='lo\x00', @ifru_data=&(0x7f0000ff6fe0)="0a0000008000fa0400000004bd000000ff00010000000009690007ffff2400"}) 2018/02/26 09:32:16 executing program 1: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000a64000), 0x4) 2018/02/26 09:32:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$evdev(r0, &(0x7f0000e95000)=[{}, {}], 0x30) write$sndseq(r0, &(0x7f00006d9000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:32:16 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578c0d768c915dd05000000000000000000"], 0x20) 2018/02/26 09:32:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00005e5ff0)=[{&(0x7f0000efff8c)="29000000200019fff63d0014000000040200001615f50005000000040d000c000000000200f9000008", 0x29}], 0x1) 2018/02/26 09:32:16 executing program 6: r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000)={0x9}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb2ffc)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005bfe0)={{}, {0x0, r3+10000000}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000169000)={0x1}) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/26 09:32:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$evdev(r0, &(0x7f0000e95000)=[{}, {}], 0x30) write$sndseq(r0, &(0x7f00006d9000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:32:16 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mknod(&(0x7f0000013ff8)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f000039b000), &(0x7f0000bda000)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f000046a000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:32:16 executing program 6: r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000)={0x9}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb2ffc)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005bfe0)={{}, {0x0, r3+10000000}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000169000)={0x1}) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/26 09:32:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$evdev(r0, &(0x7f0000e95000)=[{}, {}], 0x30) write$sndseq(r0, &(0x7f00006d9000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:32:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x2, &(0x7f0000896000)=""/10, &(0x7f00004b5000)=0xa) 2018/02/26 09:32:16 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000b88ff3)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000022aff4)) poll(&(0x7f00009c1000)=[{r1}], 0x1, 0x0) 2018/02/26 09:32:16 executing program 2: pipe(&(0x7f0000000000)={0x0, 0x0}) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/26 09:32:16 executing program 1: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000a64000), 0x4) 2018/02/26 09:32:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mlock2(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0) [ 46.052524] SELinux: policydb version -915875904 does not match my version range 15-30 2018/02/26 09:32:16 executing program 5: r0 = socket(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000380ffc)=0x8, 0x4) close(r0) 2018/02/26 09:32:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f2e000)={@common='lo\x00', &(0x7f0000140000)=@ethtool_eeprom={0xc}}) 2018/02/26 09:32:16 executing program 6: r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000)={0x9}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb2ffc)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005bfe0)={{}, {0x0, r3+10000000}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000169000)={0x1}) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/26 09:32:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000028ff0)={&(0x7f00002eaf9c)=@ipv4_newroute={0x2c, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_PREFSRC={0x8, 0x7, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @RTA_GATEWAY={0x8, 0x5, @local={0xac, 0x14, 0x0, 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:32:16 executing program 1: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000a64000), 0x4) 2018/02/26 09:32:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mlock2(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0) 2018/02/26 09:32:16 executing program 2: seccomp(0x200000000000001, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = memfd_create(&(0x7f0000000000), 0x0) pwrite64(r0, &(0x7f0000004000), 0x0, 0x0) 2018/02/26 09:32:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x3, 0x1}, 0x20) 2018/02/26 09:32:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080)={0x0, r1+10000000}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/26 09:32:16 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mknod(&(0x7f0000013ff8)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f000039b000), &(0x7f0000bda000)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f000046a000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:32:16 executing program 1: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000a64000), 0x4) 2018/02/26 09:32:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mlock2(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0) 2018/02/26 09:32:16 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000379000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00005b9ffc)) 2018/02/26 09:32:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f000047d000)='pagemap\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) fremovexattr(r1, &(0x7f0000012000)=@known='com.apple.FinderInfo\x00') pread64(r0, &(0x7f0000fd7000)=""/8, 0x398, 0x100000) 2018/02/26 09:32:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00009be000)='ns/mnt\x00') setns(r0, 0x4000000) 2018/02/26 09:32:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x8c000) pread64(r0, &(0x7f0000000100)=""/123, 0x62, 0x0) 2018/02/26 09:32:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00004e4ff8)='environ\x00') read(r0, &(0x7f00003fb000), 0x0) 2018/02/26 09:32:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ppoll(&(0x7f000011dff8)=[{r0}], 0x1, &(0x7f00007e3ff8), &(0x7f0000518ff8), 0x8) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/02/26 09:32:16 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c36000)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000390000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) 2018/02/26 09:32:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000e6eff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 2018/02/26 09:32:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000e6eff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 2018/02/26 09:32:16 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x2, &(0x7f00006c7ff0)=[{0x7}, {0x16}]}) 2018/02/26 09:32:16 executing program 5: clone(0xaa400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) [ 46.238445] audit: type=1400 audit(1519637536.547:7): avc: denied { set_context_mgr } for pid=5651 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/02/26 09:32:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080)={0x0, r1+10000000}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/26 09:32:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x8c000) pread64(r0, &(0x7f0000000100)=""/123, 0x62, 0x0) 2018/02/26 09:32:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000e6eff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 2018/02/26 09:32:16 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c36000)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000390000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) 2018/02/26 09:32:16 executing program 5: unshare(0x20020000) r0 = syz_open_procfs(0x0, &(0x7f0000864ff6)='ns/pid\x00') setns(r0, 0x0) [ 46.287960] audit: type=1326 audit(1519637536.597:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=5685 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453de9 code=0x0 [ 46.291651] binder: BINDER_SET_CONTEXT_MGR already set [ 46.291673] binder: 5651:5678 ioctl 40046207 0 returned -16 2018/02/26 09:32:16 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000001340)=[]}}, {{&(0x7f0000002600)=ANY=[@ANYBLOB], 0x1, &(0x7f00000027c0)=[]}}], 0x2, 0x0) 2018/02/26 09:32:16 executing program 5: unshare(0x20020000) r0 = syz_open_procfs(0x0, &(0x7f0000864ff6)='ns/pid\x00') setns(r0, 0x0) 2018/02/26 09:32:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080)={0x0, r1+10000000}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/26 09:32:16 executing program 2: mkdir(&(0x7f0000119000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) rename(&(0x7f0000b0b000)='./file0/bus\x00', &(0x7f00005b2000)='./file0\x00') 2018/02/26 09:32:16 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c36000)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000390000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) 2018/02/26 09:32:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000e6eff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 2018/02/26 09:32:16 executing program 7: r0 = gettid() ioprio_set$pid(0x2, r0, 0x0) 2018/02/26 09:32:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x8c000) pread64(r0, &(0x7f0000000100)=""/123, 0x62, 0x0) [ 46.358413] binder: undelivered death notification, 0000000000000000 [ 46.366334] binder: BINDER_SET_CONTEXT_MGR already set [ 46.372576] binder: 5698:5702 ioctl 40046207 0 returned -16 2018/02/26 09:32:16 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c36000)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000390000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) 2018/02/26 09:32:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f91f18)={{{@in6=@dev={0xfe, 0x80}, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@empty}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) [ 46.419125] binder: undelivered death notification, 0000000000000000 2018/02/26 09:32:16 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000001340)=[]}}, {{&(0x7f0000002600)=ANY=[@ANYBLOB], 0x1, &(0x7f00000027c0)=[]}}], 0x2, 0x0) 2018/02/26 09:32:16 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00007ee000), 0x10) 2018/02/26 09:32:16 executing program 7: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x42, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) ioctl$int_in(r0, 0x5421, &(0x7f0000955ff8)=0x8) mq_timedsend(r0, &(0x7f0000e3314c), 0x0, 0x0, 0x0) 2018/02/26 09:32:16 executing program 4: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) read(r1, &(0x7f0000784f76)=""/138, 0x8a) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r1) dup2(r2, r0) 2018/02/26 09:32:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000176fc8)={&(0x7f0000125ff4)={0x10}, 0xc, &(0x7f0000cffff0)={&(0x7f0000310000)=@allocspi={0xf8, 0x16, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@multicast2=0xe0000002, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {@in=@empty, 0xffffffffffffffff, 0x6c}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, 0x8000000}, []}, 0xf8}, 0x1}, 0x0) 2018/02/26 09:32:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x8c000) pread64(r0, &(0x7f0000000100)=""/123, 0x62, 0x0) 2018/02/26 09:32:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080)={0x0, r1+10000000}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/02/26 09:32:16 executing program 5: unshare(0x20020000) r0 = syz_open_procfs(0x0, &(0x7f0000864ff6)='ns/pid\x00') setns(r0, 0x0) [ 46.468511] binder: undelivered death notification, 0000000000000000 2018/02/26 09:32:16 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000001340)=[]}}, {{&(0x7f0000002600)=ANY=[@ANYBLOB], 0x1, &(0x7f00000027c0)=[]}}], 0x2, 0x0) 2018/02/26 09:32:16 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000001340)=[]}}, {{&(0x7f0000002600)=ANY=[@ANYBLOB], 0x1, &(0x7f00000027c0)=[]}}], 0x2, 0x0) 2018/02/26 09:32:16 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000001340)=[]}}, {{&(0x7f0000002600)=ANY=[@ANYBLOB], 0x1, &(0x7f00000027c0)=[]}}], 0x2, 0x0) 2018/02/26 09:32:16 executing program 2: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000000000)) 2018/02/26 09:32:16 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000001340)=[]}}, {{&(0x7f0000002600)=ANY=[@ANYBLOB], 0x1, &(0x7f00000027c0)=[]}}], 0x2, 0x0) [ 46.518464] binder: undelivered death notification, 0000000000000000 2018/02/26 09:32:16 executing program 2: mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) open$dir(&(0x7f00004be000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000fc1000)='./file0\x00', 0x2821, 0x0) 2018/02/26 09:32:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000000)=[], 0x0, &(0x7f0000000080)=[]}}, {{&(0x7f0000000a80)=@in6={0xa, 0x2, 0x0, @dev={0xfe, 0x80}}, 0x1c, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000001c00)=[], 0x269}}], 0x2, 0x0) 2018/02/26 09:32:16 executing program 4: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) read(r1, &(0x7f0000784f76)=""/138, 0x8a) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r1) dup2(r2, r0) 2018/02/26 09:32:16 executing program 5: unshare(0x20020000) r0 = syz_open_procfs(0x0, &(0x7f0000864ff6)='ns/pid\x00') setns(r0, 0x0) 2018/02/26 09:32:16 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000001340)=[]}}, {{&(0x7f0000002600)=ANY=[@ANYBLOB], 0x1, &(0x7f00000027c0)=[]}}], 0x2, 0x0) 2018/02/26 09:32:16 executing program 6: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) read(r1, &(0x7f0000784f76)=""/138, 0x8a) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r1) dup2(r2, r0) 2018/02/26 09:32:16 executing program 7: syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@generic={0x88ca, "35e1e941c1b673d6a1406f2d24a46304"}}}, &(0x7f0000000040)={0x0, 0x1}) 2018/02/26 09:32:16 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000079fff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510a, &(0x7f0000000fff)) 2018/02/26 09:32:16 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000079fff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510a, &(0x7f0000000fff)) 2018/02/26 09:32:16 executing program 7: ppoll(&(0x7f00001b2000)=[], 0x200000000000005d, &(0x7f0000553000), &(0x7f0000f06ff8), 0x5) 2018/02/26 09:32:16 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000850000)=0x0) capget(&(0x7f0000001000)={0x19980330, r0}, &(0x7f0000001fe8)) 2018/02/26 09:32:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000000)=[], 0x0, &(0x7f0000000080)=[]}}, {{&(0x7f0000000a80)=@in6={0xa, 0x2, 0x0, @dev={0xfe, 0x80}}, 0x1c, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000001c00)=[], 0x269}}], 0x2, 0x0) [ 46.598539] binder: undelivered death notification, 0000000000000000 2018/02/26 09:32:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 2018/02/26 09:32:17 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000c244fd)='user\x00', &(0x7f0000ef5ffb)={0x73, 0x79, 0x7a}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 2018/02/26 09:32:17 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000079fff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510a, &(0x7f0000000fff)) 2018/02/26 09:32:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000000)=[], 0x0, &(0x7f0000000080)=[]}}, {{&(0x7f0000000a80)=@in6={0xa, 0x2, 0x0, @dev={0xfe, 0x80}}, 0x1c, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000001c00)=[], 0x269}}], 0x2, 0x0) 2018/02/26 09:32:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000e89ff2)='attr/fscreate\x00') write$selinux_context(r0, &(0x7f0000ee3000)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22) creat(&(0x7f0000e4bff8)='./file0\x00', 0x0) 2018/02/26 09:32:17 executing program 6: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) read(r1, &(0x7f0000784f76)=""/138, 0x8a) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r1) dup2(r2, r0) 2018/02/26 09:32:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000010bfc8)={0x0, 0x0, &(0x7f0000a8fff0)={&(0x7f0000e16000)={0x2, 0xb, 0x0, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:32:17 executing program 4: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) read(r1, &(0x7f0000784f76)=""/138, 0x8a) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r1) dup2(r2, r0) 2018/02/26 09:32:17 executing program 1: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) unshare(0x40600) write(r0, &(0x7f0000750f95), 0x0) 2018/02/26 09:32:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000000)=[], 0x0, &(0x7f0000000080)=[]}}, {{&(0x7f0000000a80)=@in6={0xa, 0x2, 0x0, @dev={0xfe, 0x80}}, 0x1c, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000001c00)=[], 0x269}}], 0x2, 0x0) 2018/02/26 09:32:17 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000079fff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510a, &(0x7f0000000fff)) 2018/02/26 09:32:17 executing program 2: r0 = eventfd2(0x800000000000009, 0x0) write$eventfd(r0, &(0x7f000000aff8)=0xfffffffffffffffa, 0x8) write$eventfd(r0, &(0x7f0000475ff8), 0x8) read$eventfd(r0, &(0x7f0000f3c000), 0x8) 2018/02/26 09:32:17 executing program 3: clone(0x0, &(0x7f0000edf000), &(0x7f00005c1000), &(0x7f00003e0ffc), &(0x7f0000000000)) readlinkat(0xffffffffffffffff, &(0x7f000052c000)='./file0\x00', &(0x7f0000504000)=""/4096, 0x1000) 2018/02/26 09:32:17 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00004f6000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/02/26 09:32:17 executing program 6: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) read(r1, &(0x7f0000784f76)=""/138, 0x8a) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r1) dup2(r2, r0) 2018/02/26 09:32:17 executing program 4: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) read(r1, &(0x7f0000784f76)=""/138, 0x8a) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r1) dup2(r2, r0) 2018/02/26 09:32:17 executing program 0: modify_ldt$write2(0x11, &(0x7f0000000ff0), 0x10) modify_ldt$read(0x0, &(0x7f0000550f57)=""/169, 0xa9) 2018/02/26 09:32:17 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000e9e000)="220000002100070700be0000090007010a00001e0000000057ff040405000c000000", 0x22) 2018/02/26 09:32:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000057c000)={0x2, 0x78, 0x47, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = open(&(0x7f000054aff8)='./file0\x00', 0x2000, 0x40) faccessat(r0, &(0x7f00001fb000)='./file0\x00', 0x8, 0x400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000ad6ffd)={0x7, &(0x7f000053b000)=[{}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00006daff8)={r1}) setrlimit(0xc, &(0x7f00008ec000)={0x2, 0x7}) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) 2018/02/26 09:32:17 executing program 3: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)=@syzn={0x73, 0x79, 0x7a}, 0x10) 2018/02/26 09:32:17 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r0, 0x0) fallocate(r0, 0x0, 0x10003, 0x4) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) 2018/02/26 09:32:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x484, &(0x7f00006c2000)=""/24, &(0x7f0000915ffc)=0x18) 2018/02/26 09:32:17 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00004f6000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/02/26 09:32:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f736e6d7000c7") pread64(r0, &(0x7f0000000080)=""/234, 0xea, 0x7) 2018/02/26 09:32:17 executing program 5: clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) prctl$void(0xd) 2018/02/26 09:32:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 2018/02/26 09:32:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000005000)='projid_map\x00') lseek(r0, 0x2, 0x0) 2018/02/26 09:32:17 executing program 4: timer_create(0x6, &(0x7f0000002140)={0x0, 0x0, 0x0, @thr={&(0x7f00000010c0), &(0x7f0000001140)}}, &(0x7f00000021c0)) 2018/02/26 09:32:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f000072fff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000c9dfec)={0x1, 0x0, 0x0, 0xffffffffffffffff}) 2018/02/26 09:32:17 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000550000)={@syzn={0x73, 0x79, 0x7a}, @ifru_flags}) 2018/02/26 09:32:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00000282dc)=@dellink={0x28, 0x11, 0x50b, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:32:17 executing program 5: clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) prctl$void(0xd) 2018/02/26 09:32:17 executing program 6: syz_open_dev$evdev(&(0x7f0000fe5fee)='/dev/input/event#\x00', 0x0, 0x6000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) 2018/02/26 09:32:17 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00004f6000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/02/26 09:32:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=[], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f68fd0)={0x0, 0x0, &(0x7f0000e8dfc8)=[], 0x1, 0x0, &(0x7f000080b000)='y'}) 2018/02/26 09:32:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 2018/02/26 09:32:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f736e6d7000c7") pread64(r0, &(0x7f0000000080)=""/234, 0xea, 0x7) 2018/02/26 09:32:17 executing program 1: execveat(0xffffffffffffffff, &(0x7f0000031000)='./file0\x00', &(0x7f0000bd3000)=[], &(0x7f00000cd000)=[], 0x100) 2018/02/26 09:32:17 executing program 5: clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) prctl$void(0xd) 2018/02/26 09:32:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f736e6d7000c7") pread64(r0, &(0x7f0000000080)=""/234, 0xea, 0x7) 2018/02/26 09:32:17 executing program 1: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') chmod(&(0x7f0000000040)='./file0/file0/file0\x00', 0x0) 2018/02/26 09:32:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000fa9000)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00006b8000)={0x1, {{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000a70000)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}, 0x0, 0x0, []}, 0x98) 2018/02/26 09:32:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 2018/02/26 09:32:17 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00004f6000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 2018/02/26 09:32:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f736e6d7000c7") pread64(r0, &(0x7f0000000080)=""/234, 0xea, 0x7) 2018/02/26 09:32:17 executing program 5: clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) prctl$void(0xd) 2018/02/26 09:32:17 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) syz_fuseblk_mount(&(0x7f00007da000)='./file0/file1\x00', &(0x7f00007cdff2)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:32:17 executing program 7: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}, 0x5c) 2018/02/26 09:32:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 2018/02/26 09:32:17 executing program 4: mknod(&(0x7f0000c2a000)='./file0\x00', 0x918, 0x0) open(&(0x7f0000762ff8)='./file0\x00', 0x200, 0x0) 2018/02/26 09:32:17 executing program 1: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') chmod(&(0x7f0000000040)='./file0/file0/file0\x00', 0x0) 2018/02/26 09:32:17 executing program 7: socket$packet(0x11, 0x0, 0x300) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/26 09:32:17 executing program 2: ioprio_set$pid(0x0, 0x0, 0x7) 2018/02/26 09:32:17 executing program 3: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f0000d43fe4)=@in6={0xa, 0x1, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)=[]}, 0x8000) close(r0) 2018/02/26 09:32:17 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) syz_fuseblk_mount(&(0x7f00007da000)='./file0/file1\x00', &(0x7f00007cdff2)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:32:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000d7efec)={0x14, 0x7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:32:17 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) syz_fuseblk_mount(&(0x7f00007da000)='./file0/file1\x00', &(0x7f00007cdff2)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:32:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000ea8000)='smaps\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) 2018/02/26 09:32:17 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) syz_fuseblk_mount(&(0x7f00007da000)='./file0/file1\x00', &(0x7f00007cdff2)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:32:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) inotify_init() openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:32:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000003000)={0x1, 0x1, [@random="12faa494eda3"]}) [ 47.045438] audit: type=1400 audit(1519637537.357:9): avc: denied { create } for pid=5922 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 47.051827] IPv4: Oversized IP packet from 127.0.0.1 2018/02/26 09:32:17 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) syz_fuseblk_mount(&(0x7f00007da000)='./file0/file1\x00', &(0x7f00007cdff2)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:32:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) inotify_init() openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:32:17 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) syz_fuseblk_mount(&(0x7f00007da000)='./file0/file1\x00', &(0x7f00007cdff2)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:32:17 executing program 1: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') chmod(&(0x7f0000000040)='./file0/file0/file0\x00', 0x0) 2018/02/26 09:32:17 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000012ff8)) 2018/02/26 09:32:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000ea8000)='smaps\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) [ 47.093057] audit: type=1400 audit(1519637537.407:10): avc: denied { write } for pid=5922 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/26 09:32:17 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000012ff8)) 2018/02/26 09:32:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) inotify_init() openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:32:17 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8927, &(0x7f0000101fb0)={@common='gre0\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f00003e4000)}}) 2018/02/26 09:32:17 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) syz_fuseblk_mount(&(0x7f00007da000)='./file0/file1\x00', &(0x7f00007cdff2)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:32:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000ea8000)='smaps\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) 2018/02/26 09:32:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000ea8000)='smaps\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) 2018/02/26 09:32:17 executing program 1: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') chmod(&(0x7f0000000040)='./file0/file0/file0\x00', 0x0) 2018/02/26 09:32:17 executing program 0: getrandom(&(0x7f00006f2f5e)=""/162, 0xa2, 0xffffffffffffffff) 2018/02/26 09:32:17 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000483fbc)={{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, {0x0, @random="e46167460c7f"}, 0x0, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, @common="65716c0000ffff130100000000000200"}) 2018/02/26 09:32:17 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000012ff8)) 2018/02/26 09:32:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) inotify_init() openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:32:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x1d, 0x0, 0x9}, {}]}, 0x10) 2018/02/26 09:32:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000ea8000)='smaps\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) 2018/02/26 09:32:17 executing program 6: r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) epoll_wait(r1, &(0x7f0000ffafdc)=[{}], 0x1, 0x0) 2018/02/26 09:32:17 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000012ff8)) 2018/02/26 09:32:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000ea8000)='smaps\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) 2018/02/26 09:32:17 executing program 7: mkdir(&(0x7f000043eff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x40, &(0x7f000000a000)) r0 = creat(&(0x7f0000cd5000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00007ec000)={0x1}) unshare(0x40600) creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) 2018/02/26 09:32:17 executing program 1: mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) lseek(r0, 0x0, 0x4) 2018/02/26 09:32:17 executing program 2: r0 = add_key(&(0x7f000000070a)='pkcs7_test\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f00000a1000), 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r0) 2018/02/26 09:32:17 executing program 6: r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) epoll_wait(r1, &(0x7f0000ffafdc)=[{}], 0x1, 0x0) 2018/02/26 09:32:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000ea8000)='smaps\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) 2018/02/26 09:32:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x10, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/26 09:32:17 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00002daff0)={0x2, 0x3, @empty}, 0x10) 2018/02/26 09:32:17 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r1 = memfd_create(&(0x7f0000000000)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000ff5)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:32:17 executing program 2: clone(0x0, &(0x7f0000000040), &(0x7f0000768000), &(0x7f0000197000), &(0x7f0000000080)) mq_open(&(0x7f0000000000)='em1\\\x00', 0x0, 0x0, &(0x7f00000000c0)) 2018/02/26 09:32:17 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fgetxattr(r0, &(0x7f0000011000)=@random={'btrfs.\x00', 'selinux\x00'}, &(0x7f0000003000)=""/91, 0x5b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:32:17 executing program 6: r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) epoll_wait(r1, &(0x7f0000ffafdc)=[{}], 0x1, 0x0) 2018/02/26 09:32:17 executing program 7: mkdir(&(0x7f000043eff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x40, &(0x7f000000a000)) r0 = creat(&(0x7f0000cd5000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00007ec000)={0x1}) unshare(0x40600) creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) 2018/02/26 09:32:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000003, &(0x7f0000a14000), 0x4) 2018/02/26 09:32:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) fcntl$setown(r0, 0x8, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000000dff4)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/02/26 09:32:17 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000ad0000)=@abs={0x1}, 0x8) listen(r0, 0x0) accept4$unix(r0, 0x0, &(0x7f0000676000), 0x0) accept4(r0, &(0x7f0000fdb000)=@nfc_llcp, &(0x7f00001bd000)=0x58, 0x0) shutdown(r0, 0x0) [ 47.402617] binder: 5994:5997 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 47.432513] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/26 09:32:17 executing program 5: pipe2(&(0x7f0000fb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) vmsplice(r1, &(0x7f0000fccff0)=[{&(0x7f0000011fff)="b1", 0x1}], 0x1, 0x0) writev(r1, &(0x7f00008d6000)=[{&(0x7f0000fcff9d)="e0", 0x1}], 0x1) vmsplice(r0, &(0x7f00004c0fd0)=[{&(0x7f0000cb2fd3)="92d4", 0x2}], 0x1, 0x0) [ 47.449038] binder: 5994:6023 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 47.456099] binder: 5994:5997 ioctl 40046207 0 returned -16 2018/02/26 09:32:17 executing program 6: r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) epoll_wait(r1, &(0x7f0000ffafdc)=[{}], 0x1, 0x0) 2018/02/26 09:32:17 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dfeff4)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f000007fbd0)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_PORT_SELF={0x8, 0x19, [@nested={0x4, 0x2, []}]}]}, 0x3c}, 0x1}, 0x0) 2018/02/26 09:32:17 executing program 3: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000225000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f00000ad000/0x1000)=nil) 2018/02/26 09:32:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) 2018/02/26 09:32:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x10, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/26 09:32:17 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000ef3000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x100000001}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/68, &(0x7f0000b3e000)=0x4) 2018/02/26 09:32:17 executing program 7: mkdir(&(0x7f000043eff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x40, &(0x7f000000a000)) r0 = creat(&(0x7f0000cd5000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00007ec000)={0x1}) unshare(0x40600) creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) 2018/02/26 09:32:17 executing program 5: r0 = socket(0x10, 0x20000000802, 0x0) write(r0, &(0x7f0000370fe1)="1f000000520007f2000094fef5000f430a0017d200000028b4a500ffffb92b", 0x1f) recvmsg$netrom(r0, &(0x7f0000039000)={&(0x7f0000ebfff0)=@ax25={0x3, {"57fe5e98a9e386"}}, 0x10, &(0x7f0000099fb0)=[]}, 0x0) 2018/02/26 09:32:17 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dfeff4)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f000007fbd0)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_PORT_SELF={0x8, 0x19, [@nested={0x4, 0x2, []}]}]}, 0x3c}, 0x1}, 0x0) 2018/02/26 09:32:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000782000)=0x8000, 0x4) sendto$inet6(r0, &(0x7f00009f0fc3), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000f61000)=[{{&(0x7f0000f62ff0)=@ipx, 0x10, &(0x7f0000f5d000)=[], 0x0, &(0x7f0000f62000)}}], 0x4444444444444de, 0x2041, 0x0) 2018/02/26 09:32:17 executing program 6: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f000052dff8)='./file0\x00') 2018/02/26 09:32:17 executing program 7: mkdir(&(0x7f000043eff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x40, &(0x7f000000a000)) r0 = creat(&(0x7f0000cd5000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00007ec000)={0x1}) unshare(0x40600) creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) 2018/02/26 09:32:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x10, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/26 09:32:17 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dfeff4)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f000007fbd0)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_PORT_SELF={0x8, 0x19, [@nested={0x4, 0x2, []}]}]}, 0x3c}, 0x1}, 0x0) 2018/02/26 09:32:17 executing program 1: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000761ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setregset(0x4205, r2, 0x202, &(0x7f0000000000)={&(0x7f0000000040)}) [ 47.573784] binder: 6039:6051 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 47.632910] binder: 6062:6066 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/02/26 09:32:18 executing program 6: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/26 09:32:18 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dfeff4)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f000007fbd0)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_PORT_SELF={0x8, 0x19, [@nested={0x4, 0x2, []}]}]}, 0x3c}, 0x1}, 0x0) 2018/02/26 09:32:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000976000)={@common='sit0\x00', @ifru_ivalue=0x10001}) 2018/02/26 09:32:18 executing program 2: mmap(&(0x7f0000c0a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[]}, 0x0) mmap(&(0x7f0000c0a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:32:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x10, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/26 09:32:18 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) r2 = epoll_create(0x7) dup3(r2, r1, 0x0) connect$unix(r0, &(0x7f00006edffb)=@file={0x0, './file0\x00'}, 0xa) 2018/02/26 09:32:18 executing program 3: pipe(&(0x7f000005fff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffc) 2018/02/26 09:32:18 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) read(r0, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) dup2(r0, r2) 2018/02/26 09:32:18 executing program 5: r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) readv(r0, &(0x7f0000680000)=[{&(0x7f0000ed3f44)=""/9, 0x9}], 0x1) 2018/02/26 09:32:18 executing program 6: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f000052c000)={0x0, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000aedff0)=@syzn={0x73, 0x79, 0x7a}}) 2018/02/26 09:32:18 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7a78a04a646", 0x1b}], 0x1, &(0x7f0000334f28)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0xfffffffffffffffa, 0x84}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/26 09:32:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000140)=[@clear_death={0x40046302}], 0x0, 0x0, &(0x7f0000000200)}) 2018/02/26 09:32:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}}, &(0x7f0000000280)=0xb8) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@migrate={0xac, 0x21, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@migrate={0x5c, 0x11, [{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in=@multicast1=0xe0000001, @in=@rand_addr}]}]}, 0xac}, 0x1}, 0x0) 2018/02/26 09:32:18 executing program 4: seccomp(0x1, 0x0, &(0x7f00008c1ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) getitimer(0x0, &(0x7f0000097fe0)) [ 47.749361] binder: 6080:6082 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/02/26 09:32:18 executing program 4: seccomp(0x1, 0x0, &(0x7f00008c1ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) getitimer(0x0, &(0x7f0000097fe0)) 2018/02/26 09:32:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x2) bind$inet(r0, &(0x7f000060b000)={0x2, 0x2, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000936000)={0x2, 0x2, @empty}, 0x10) 2018/02/26 09:32:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a0603ffec048100000000a5000058000b4824ca944f64006300050028825aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e0500", 0x58}], 0x1) 2018/02/26 09:32:18 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="08000000e57efff72a00060b4400815c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="196dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000544000)={0x0, &(0x7f0000468000)=[]}) 2018/02/26 09:32:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/02/26 09:32:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}}, &(0x7f0000000280)=0xb8) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@migrate={0xac, 0x21, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@migrate={0x5c, 0x11, [{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in=@multicast1=0xe0000001, @in=@rand_addr}]}]}, 0xac}, 0x1}, 0x0) [ 47.804126] binder: BC_ACQUIRE_RESULT not supported [ 47.813347] binder: 6099:6105 ioctl c0306201 200002c0 returned -22 2018/02/26 09:32:18 executing program 0: mkdir(&(0x7f00005d6ff8)='./file0\x00', 0x0) mount(&(0x7f0000071ff8)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000026000)='mqueue\x00', 0x0, &(0x7f0000769000)) mknod(&(0x7f000006e000)='./file0/file0\x00', 0xfff, 0x0) execve(&(0x7f000073cff2)='./file0/file0\x00', &(0x7f0000557000)=[], &(0x7f00008d3000)=[&(0x7f0000c98000)='mqueue\x00', &(0x7f00009bdff6)="482165790500000006"]) 2018/02/26 09:32:18 executing program 7: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000d20000)=@newlink={0x40, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_AF_SPEC={0xc, 0x1a, []}]}, 0x40}, 0x1}, 0x0) 2018/02/26 09:32:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a0603ffec048100000000a5000058000b4824ca944f64006300050028825aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e0500", 0x58}], 0x1) 2018/02/26 09:32:18 executing program 4: seccomp(0x1, 0x0, &(0x7f00008c1ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) getitimer(0x0, &(0x7f0000097fe0)) 2018/02/26 09:32:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}}, &(0x7f0000000280)=0xb8) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@migrate={0xac, 0x21, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@migrate={0x5c, 0x11, [{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in=@multicast1=0xe0000001, @in=@rand_addr}]}]}, 0xac}, 0x1}, 0x0) 2018/02/26 09:32:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x2) bind$inet(r0, &(0x7f000060b000)={0x2, 0x2, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000936000)={0x2, 0x2, @empty}, 0x10) 2018/02/26 09:32:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) 2018/02/26 09:32:18 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="08000000e57efff72a00060b4400815c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="196dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000544000)={0x0, &(0x7f0000468000)=[]}) 2018/02/26 09:32:18 executing program 4: seccomp(0x1, 0x0, &(0x7f00008c1ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) getitimer(0x0, &(0x7f0000097fe0)) 2018/02/26 09:32:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a0603ffec048100000000a5000058000b4824ca944f64006300050028825aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e0500", 0x58}], 0x1) 2018/02/26 09:32:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}}, &(0x7f0000000280)=0xb8) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@migrate={0xac, 0x21, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@migrate={0x5c, 0x11, [{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in=@multicast1=0xe0000001, @in=@rand_addr}]}]}, 0xac}, 0x1}, 0x0) 2018/02/26 09:32:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x2) bind$inet(r0, &(0x7f000060b000)={0x2, 0x2, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000936000)={0x2, 0x2, @empty}, 0x10) 2018/02/26 09:32:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000fc7000)={@common='sit0\x00', @ifru_data=&(0x7f0000fc0fe0)="5b6dad1e34640000dbffddffff1f00000880000000000000ff00030a0b8b3609"}) 2018/02/26 09:32:18 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x40002) ioctl(r0, 0x5380, &(0x7f0000ca7000)) 2018/02/26 09:32:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000021fc8)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000013000)="8093958bca19ef5f839c2d988e80163d294835b196955ffacc24b7c09680a604f087ba79f9a5018cf9c341c7ef58e4a80210456641960cf37a14533fa28f808f47a6", 0x42}], 0x1, &(0x7f0000005000)=[]}, 0xc100) sendmsg(r0, &(0x7f0000013000)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f000002affd)="bc5856", 0x3}], 0x1, &(0x7f000002d000)=[]}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f000070cff8)=@sco, 0x8, &(0x7f0000029000)=[], 0x0, &(0x7f0000000000)=""/56, 0x38}, 0x2) 2018/02/26 09:32:18 executing program 4: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000629000)={0xfffffffffffffffa}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f00003efff0)={0x0, 0x0, 0x1000000010050005}) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) rt_sigtimedwait(&(0x7f0000ca7ff8)={0x80000000}, &(0x7f0000ff1ff0), &(0x7f0000001180)={0x77359400}, 0x8) 2018/02/26 09:32:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x2) bind$inet(r0, &(0x7f000060b000)={0x2, 0x2, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000936000)={0x2, 0x2, @empty}, 0x10) 2018/02/26 09:32:18 executing program 7: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x4, 0x800}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/02/26 09:32:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00002b9fd4)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:32:18 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="08000000e57efff72a00060b4400815c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="196dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000544000)={0x0, &(0x7f0000468000)=[]}) 2018/02/26 09:32:18 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000c53000), &(0x7f0000f8b000), &(0x7f0000416fae)) mknod(&(0x7f0000000040)='./file0\x00', 0x800a, 0x0) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=[], &(0x7f0000000400)=[]) creat(&(0x7f000071c000)='./file0\x00', 0x0) 2018/02/26 09:32:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a0603ffec048100000000a5000058000b4824ca944f64006300050028825aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e0500", 0x58}], 0x1) 2018/02/26 09:32:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000ba2000)='net/arp\x00') mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000fdaff9)=@random={'btrfs.', '\x00'}, &(0x7f00007db000)='bcsf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10, 0x0) 2018/02/26 09:32:18 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000463ffa)='logon\x00', &(0x7f000097e000)={0x73, 0x79, 0x7a}, &(0x7f000014d000)='\x00', 0x0) 2018/02/26 09:32:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000002f90)=[{&(0x7f0000002f43)=""/189, 0xbd}], 0x1, &(0x7f0000002000)=[{&(0x7f0000000000)=""/168, 0xfffffd90}], 0x1, 0x0) 2018/02/26 09:32:18 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)="0100000076626f786e65743100", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00006e7f50)={{0x80}, 'port0\x00'}) 2018/02/26 09:32:18 executing program 0: unshare(0x28060400) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) close(r0) 2018/02/26 09:32:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup2(r1, r0) pread64(r0, &(0x7f00000019c0)=""/187, 0xbb, 0x0) 2018/02/26 09:32:18 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)="0100000076626f786e65743100", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00006e7f50)={{0x80}, 'port0\x00'}) 2018/02/26 09:32:18 executing program 0: r0 = socket(0x10, 0x80003, 0x0) recvfrom$unix(r0, &(0x7f0000b67000)=""/123, 0x7b, 0x1, &(0x7f0000b67000)=@abs, 0x8) 2018/02/26 09:32:18 executing program 6: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000e3afe0)={@loopback={0x0, 0x1}}, &(0x7f0000683ffc)=0x20) 2018/02/26 09:32:18 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000874000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000184000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/02/26 09:32:18 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000463ffa)='logon\x00', &(0x7f000097e000)={0x73, 0x79, 0x7a}, &(0x7f000014d000)='\x00', 0x0) 2018/02/26 09:32:18 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="08000000e57efff72a00060b4400815c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="196dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000544000)={0x0, &(0x7f0000468000)=[]}) 2018/02/26 09:32:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000002f90)=[{&(0x7f0000002f43)=""/189, 0xbd}], 0x1, &(0x7f0000002000)=[{&(0x7f0000000000)=""/168, 0xfffffd90}], 0x1, 0x0) 2018/02/26 09:32:18 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)="0100000076626f786e65743100", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00006e7f50)={{0x80}, 'port0\x00'}) 2018/02/26 09:32:18 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000463ffa)='logon\x00', &(0x7f000097e000)={0x73, 0x79, 0x7a}, &(0x7f000014d000)='\x00', 0x0) 2018/02/26 09:32:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000002f90)=[{&(0x7f0000002f43)=""/189, 0xbd}], 0x1, &(0x7f0000002000)=[{&(0x7f0000000000)=""/168, 0xfffffd90}], 0x1, 0x0) 2018/02/26 09:32:18 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x20000000050, &(0x7f0000f1a000), &(0x7f00009ff000)) 2018/02/26 09:32:18 executing program 5: mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) r0 = open$dir(&(0x7f00004be000)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f000055f000)='./file0\x00', 0x2822, 0x0) dup2(r0, r1) 2018/02/26 09:32:18 executing program 2: clone(0x200, &(0x7f000074a000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8)=[], &(0x7f00006fcff0)=[]) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2018/02/26 09:32:18 executing program 0: mkdir(&(0x7f0000b2d000)='./file0\x00', 0x7f) capset(&(0x7f0000da9ff8)={0x19980330}, &(0x7f0000001fe8)) symlink(&(0x7f000018c000)='./file0/file0\x00', &(0x7f00008cd000)='./file0/file0\x00') 2018/02/26 09:32:18 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)="0100000076626f786e65743100", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00006e7f50)={{0x80}, 'port0\x00'}) 2018/02/26 09:32:18 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000463ffa)='logon\x00', &(0x7f000097e000)={0x73, 0x79, 0x7a}, &(0x7f000014d000)='\x00', 0x0) 2018/02/26 09:32:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000002f90)=[{&(0x7f0000002f43)=""/189, 0xbd}], 0x1, &(0x7f0000002000)=[{&(0x7f0000000000)=""/168, 0xfffffd90}], 0x1, 0x0) 2018/02/26 09:32:18 executing program 4: clone(0x0, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes [ 242.247870] INFO: task syz-executor6:6231 blocked for more than 120 seconds. [ 242.255119] Not tainted 4.4.118-g5f7f76a #24 [ 242.260180] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 242.268192] syz-executor6 D ffff8801d79c7ae0 29896 6231 3863 0x00000004 [ 242.275606] ffff8801d79c7ae0 ffff880000000006 ffff8801d866e000 ffffffff8113bd3a [ 242.283597] ffffed003b2d5558 ffff8801d96aaa00 ffff8801db21fdb8 ffff8801db21fde0 [ 242.291640] ffff8801db21f4d8 ffff8801d8668000 ffff8801d866e000 0000000000000000 [ 242.299764] Call Trace: [ 242.302332] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 242.308692] [] schedule+0x7a/0x1b0 [ 242.313861] [] __lock_sock+0xf1/0x180 [ 242.319307] [] ? sock_init_data+0xcc0/0xcc0 [ 242.325251] [] ? lock_sock_nested+0x43/0x120 [ 242.331312] [] ? prepare_to_wait_event+0x420/0x420 [ 242.337879] [] ? get_parent_ip+0xd/0x50 [ 242.343475] [] lock_sock_nested+0xf6/0x120 [ 242.349361] [] getorigdst+0xac/0x470 [ 242.354707] [] ? ipv4_print_tuple+0x30/0x30 [ 242.360686] [] ? __ww_mutex_lock_interruptible+0x14d0/0x14d0 [ 242.368127] [] ? mark_held_locks+0xaf/0x100 [ 242.374072] [] ? mutex_unlock+0x9/0x10 [ 242.379608] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 242.386680] [] nf_getsockopt+0x6a/0xc0 [ 242.392216] [] ip_getsockopt+0x144/0x1a0 [ 242.397942] [] ? do_ip_getsockopt+0x1530/0x1530 [ 242.404242] [] tcp_getsockopt+0x82/0xd0 [ 242.409887] [] sock_common_getsockopt+0x95/0xd0 [ 242.416181] [] SyS_getsockopt+0x14a/0x230 [ 242.421972] [] ? SyS_setsockopt+0x250/0x250 [ 242.427927] [] ? move_addr_to_kernel+0x50/0x50 [ 242.434131] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 242.440629] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 242.447241] 1 lock held by syz-executor6/6231: [ 242.451870] #0: (sk_lock-AF_INET){+.+.+.}, at: [] ip_getsockopt+0x12e/0x1a0 [ 242.461316] Sending NMI to all CPUs: [ 242.465148] NMI backtrace for cpu 0 [ 242.468762] CPU: 0 PID: 485 Comm: khungtaskd Not tainted 4.4.118-g5f7f76a #24 [ 242.476003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.485371] task: ffff8800bac86000 task.stack: ffff8800bac68000 [ 242.491414] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1a0 [ 242.500158] RSP: 0018:ffff8800bac6fcb8 EFLAGS: 00000046 [ 242.505579] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 242.512862] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300 [ 242.520141] RBP: ffff8800bac6fce0 R08: 0000000000000001 R09: 0000000000000000 [ 242.527386] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 242.534670] R13: 0000000000000003 R14: ffffffff8426f420 R15: 0000000000000002 [ 242.541932] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 242.550148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.556000] CR2: 00007fa2f8bbb000 CR3: 00000000b6664000 CR4: 0000000000160670 [ 242.563265] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.570529] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.577794] Stack: [ 242.579915] ffffffff8426f420 ffffffff847ef9c0 fffffbfff08fd9ec dffffc0000000000 [ 242.587417] ffff8801db31bca0 ffff8800bac6fd00 ffffffff810b999b ffffffff839f63c0 [ 242.594948] 0000000000000003 ffff8800bac6fd60 ffffffff81d0ef94 ffffffff8141b013 [ 242.602465] Call Trace: [ 242.605019] [] nmi_raise_cpu_backtrace+0x5b/0x70 [ 242.611518] [] nmi_trigger_all_cpu_backtrace+0x4a4/0x550 [ 242.618598] [] ? print_lock+0xab/0xae [ 242.624015] [] ? irq_force_complete_move+0x3b0/0x3b0 [ 242.630778] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 242.637790] [] watchdog+0x6fa/0xae0 [ 242.643035] [] ? watchdog+0xc3/0xae0 [ 242.648396] [] kthread+0x268/0x300 [ 242.653553] [] ? reset_hung_task_detector+0x20/0x20 [ 242.660214] [] ? kthread_create_on_node+0x400/0x400 [ 242.666849] [] ? kthread_create_on_node+0x400/0x400 [ 242.673500] [] ret_from_fork+0x55/0x80 [ 242.679027] [] ? kthread_create_on_node+0x400/0x400 [ 242.685662] Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 6b 2f 17 00 4c 89 e7 57 9d 0f 1f [ 242.704650] NMI backtrace for cpu 1 [ 242.708257] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.118-g5f7f76a #24 [ 242.715236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.724581] task: ffff8801d9b49800 task.stack: ffff8801d9b58000 [ 242.730620] RIP: 0010:[] [] native_safe_halt+0x6/0x10 [ 242.739006] RSP: 0018:ffff8801d9b5fd98 EFLAGS: 00000246 [ 242.744424] RAX: 0000000000000007 RBX: ffffffff847ddac8 RCX: 0000000000000000 [ 242.751681] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8801d9b4a0cc [ 242.758943] RBP: ffff8801d9b5fd98 R08: 0000000000000000 R09: 0000000000000000 [ 242.766357] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 242.773626] R13: fffffbfff070889c R14: ffffffff847ebe38 R15: 0000000000000000 [ 242.780885] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 242.789116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.794969] CR2: 00007fb3d31c3000 CR3: 00000000b6664000 CR4: 0000000000160670 [ 242.802240] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.809493] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.816733] Stack: [ 242.818871] ffff8801d9b5fdd0 ffffffff81027e85 ffff8801d9b60000 ffffffff847ddac8 [ 242.826385] fffffbfff070889c ffffffff847ebe38 0000000000000000 ffff8801d9b5fde0 [ 242.833929] ffffffff810293fa ffff8801d9b5fdf8 ffffffff81221468 dffffc0000000000 [ 242.841475] Call Trace: [ 242.844031] [] default_idle+0x55/0x3c0 [ 242.849560] [] arch_cpu_idle+0xa/0x10 [ 242.854982] [] default_idle_call+0x48/0x70 [ 242.860861] [] cpu_startup_entry+0x5fd/0x8f0 [ 242.866886] [] ? call_cpuidle+0xe0/0xe0 [ 242.872506] [] ? clockevents_register_device+0x122/0x230 [ 242.879598] [] start_secondary+0x304/0x3e0 [ 242.885450] [] ? set_cpu_sibling_map+0x1080/0x1080 [ 242.892035] Code: 00 00 00 00 00 55 48 89 e5 fa 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 66 0f 1f 84 [ 242.911219] Kernel panic - not syncing: hung_task: blocked tasks [ 242.917374] CPU: 1 PID: 485 Comm: khungtaskd Not tainted 4.4.118-g5f7f76a #24 [ 242.924614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.933939] 0000000000000000 fc9e2d4737a3d85d ffff8800bac6fca8 ffffffff81d0402d [ 242.941908] ffffffff83883080 ffff8800bac6fd80 dffffc0000000000 7fffffffffffffff [ 242.949871] ffff8800a7ccb448 ffff8800bac6fd70 ffffffff8141aaea 0000000041b58ab3 [ 242.957841] Call Trace: [ 242.960407] [] dump_stack+0xc1/0x124 [ 242.965760] [] panic+0x1aa/0x388 [ 242.970756] [] ? percpu_up_read.constprop.45+0xe1/0xe1 [ 242.977657] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 242.984901] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 242.992152] [] watchdog+0x70b/0xae0 [ 242.997403] [] ? watchdog+0xc3/0xae0 [ 243.002741] [] kthread+0x268/0x300 [ 243.007898] [] ? reset_hung_task_detector+0x20/0x20 [ 243.014534] [] ? kthread_create_on_node+0x400/0x400 [ 243.021170] [] ? kthread_create_on_node+0x400/0x400 [ 243.027817] [] ret_from_fork+0x55/0x80 [ 243.033327] [] ? kthread_create_on_node+0x400/0x400 [ 243.040504] Dumping ftrace buffer: [ 243.044055] (ftrace buffer empty) [ 243.047737] Kernel Offset: disabled [ 243.051365] Rebooting in 86400 seconds..