Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.687789] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.741940] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 25.204064] random: sshd: uninitialized urandom read (32 bytes read, 40 bits of entropy available) [ 26.429626] random: sshd: uninitialized urandom read (32 bytes read, 120 bits of entropy available) [ 31.786716] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. 2018/03/26 17:13:04 fuzzer started 2018/03/26 17:13:04 dialing manager at 10.128.0.26:37123 [ 37.231135] audit: type=1400 audit(1522084389.385:5): avc: denied { create } for pid=3712 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/03/26 17:13:09 kcov=true, comps=false 2018/03/26 17:13:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000140)="428d5d8467d0c8d1f466d190", 0xc) 2018/03/26 17:13:11 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000001480)={0x812, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x10) 2018/03/26 17:13:11 executing program 7: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@hci, 0xc, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/183, 0xb7}, 0x0) 2018/03/26 17:13:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x14) 2018/03/26 17:13:11 executing program 4: getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480), &(0x7f00000004c0)=0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000e4bff5)='/dev/hwrng\x00', 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/03/26 17:13:11 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 2018/03/26 17:13:11 executing program 5: syz_emit_ethernet(0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00141200fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], &(0x7f00000002c0)) 2018/03/26 17:13:11 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 39.507068] IPVS: Creating netns size=2552 id=1 [ 39.600340] IPVS: Creating netns size=2552 id=2 [ 39.649638] IPVS: Creating netns size=2552 id=3 [ 39.715861] IPVS: Creating netns size=2552 id=4 [ 39.794829] IPVS: Creating netns size=2552 id=5 [ 39.920678] IPVS: Creating netns size=2552 id=6 [ 40.029403] IPVS: Creating netns size=2552 id=7 [ 40.175787] IPVS: Creating netns size=2552 id=8 2018/03/26 17:13:16 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) bind(r0, &(0x7f0000d01ff0)=ANY=[], 0x0) close(r0) [ 44.387797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 44.403775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 44.424715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 44.446676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 44.462727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2018/03/26 17:13:16 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8a", 0x1}], 0x1) close(r0) 2018/03/26 17:13:16 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'tunl0\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\b', 0x4012}) close(r0) 2018/03/26 17:13:16 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) 2018/03/26 17:13:16 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) write(r0, &(0x7f000058bfe4), 0x0) 2018/03/26 17:13:16 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/03/26 17:13:16 executing program 6: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) 2018/03/26 17:13:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x178, [0x0, 0x20000fc0, 0x20000ff0, 0x20001020], 0x0, &(0x7f00000004c0), &(0x7f0000000fc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'dummy0\x00', 'ip6gretap0\x00', 'ifb0\x00', 'ifb0\x00', @random="fc7c30f718f4", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xb8}}, @common=@log={'log\x00', 0x24, {{0x100, "24d18331b8c119e31ae2b8038662bc4bd3f49197c46d0b31af6cb4e89b81", 0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x1f8) clone(0x0, &(0x7f0000aed000), &(0x7f0000922ffc), &(0x7f0000291000), &(0x7f0000c12000)) 2018/03/26 17:13:16 executing program 7: r0 = socket(0x15, 0x80005, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 44.652995] mmap: syz-executor1 (5161) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 44.710365] audit: type=1400 audit(1522084396.865:6): avc: denied { write } for pid=5150 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/03/26 17:13:16 executing program 6: memfd_create(&(0x7f0000000000)='.md5sumj$)/trusted)vmnet1(\x00', 0x2) 2018/03/26 17:13:16 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:16 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/syss/pmtu_disc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) 2018/03/26 17:13:16 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/81, 0x51, 0x0) 2018/03/26 17:13:16 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x2080) close(r0) 2018/03/26 17:13:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}]}, 0x6) 2018/03/26 17:13:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) 2018/03/26 17:13:16 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 44.741589] audit: type=1400 audit(1522084396.895:7): avc: denied { read } for pid=5150 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/03/26 17:13:16 executing program 2: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x58ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) 2018/03/26 17:13:16 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe2000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x0, 0x0, 0x20000000002, 0x1}, 0x20) 2018/03/26 17:13:16 executing program 6: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="93", 0x1, 0x0, &(0x7f0000001240)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000)=[{&(0x7f00000000c0)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/03/26 17:13:16 executing program 5: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:17 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00'}) 2018/03/26 17:13:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x0, &(0x7f0000000080)) 2018/03/26 17:13:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/173, &(0x7f0000000200)=0xad) 2018/03/26 17:13:17 executing program 2: faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) 2018/03/26 17:13:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0x0, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/03/26 17:13:17 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x400e}}) 2018/03/26 17:13:17 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x400000000000082) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x81006) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 2018/03/26 17:13:17 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) ioctl$LOOP_CLR_FD(r0, 0x4c01) syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') 2018/03/26 17:13:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0xa, 0x100000000000006, 0x1}, 0x14}, 0x1}, 0x0) [ 44.968540] audit: type=1400 audit(1522084397.125:8): avc: denied { create } for pid=5240 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/03/26 17:13:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r1, 0x101, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/03/26 17:13:17 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x400e}}) 2018/03/26 17:13:17 executing program 7: r0 = socket$inet(0x15, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/12, &(0x7f00000002c0)=0xc) 2018/03/26 17:13:17 executing program 1: socketpair(0x11, 0x2, 0x1, &(0x7f0000000440)) 2018/03/26 17:13:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:17 executing program 2: socketpair(0x1d, 0x802, 0x2, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000440)='@*\x00') 2018/03/26 17:13:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x11, 0x0, 0x0, {0x3}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x1c}, 0x1}, 0x0) [ 45.060001] blk_update_request: I/O error, dev loop0, sector 0 2018/03/26 17:13:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000014000100000000000000000002000000", @ANYBLOB="0800080000050000080004000000000008000200ac1414aa14000300696662300000000000000000000000001400060000000000ffff00000000000000000000"], 0x2}, 0x1}, 0x0) 2018/03/26 17:13:17 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/let/ipv4/vs/backup_onlx\x00', 0x2, 0x0) 2018/03/26 17:13:17 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000e5fff4)={0x10}, 0xc, &(0x7f0000fb7000)={&(0x7f0000aeccc8)={0x14, 0x6, 0x1, 0x7fffffffd}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}]}, 0x28}, 0x1}, 0x0) 2018/03/26 17:13:17 executing program 2: mkdir(&(0x7f0000ac6000)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, &(0x7f0000000300)) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000df2ffd), 0x7fffd, &(0x7f0000751000)) 2018/03/26 17:13:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) 2018/03/26 17:13:17 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) fcntl$setstatus(r0, 0x4, 0x444800) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 2018/03/26 17:13:17 executing program 7: prctl$setfpexc(0xc, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) close(0xffffffffffffffff) 2018/03/26 17:13:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x219, 0x0, 0x0, {0x7}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) 2018/03/26 17:13:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000029000000020000002b07df2fd0846bc0964f4f8f3a7067e45ae3db17efffffff00f4b400b6eac781a550ad7647824e9f35cb2bb7e821"], 0x3a}}], 0x2, 0x0) 2018/03/26 17:13:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2018/03/26 17:13:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x1a4, [0x20000600, 0x0, 0x0, 0x20000630, 0x200007a4], 0x0, &(0x7f0000000040), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'bcsf0\x00', 'ipddp0\x00', 'ip6tnl0\x00', 'ifb0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x9c, 0xe4, 0x114, [@m802_3={'802_3\x00', 0x8}]}, [@common=@log={'log\x00', 0x24, {{0xd56, "c96845d9370f138131e5125131c8c046854be611b3128679842a9745aa0b"}}}]}, @snat={'snat\x00', 0xc, {{@random="050b7f9fb5d3", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x230) [ 45.229652] audit: type=1400 audit(1522084397.385:9): avc: denied { write } for pid=5291 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/03/26 17:13:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 2018/03/26 17:13:17 executing program 5: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f00000000c0)='.user&\x00') 2018/03/26 17:13:17 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001500ff10fffefd956fa283b70aa6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/03/26 17:13:17 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f00000affc0), &(0x7f0000000100)=[&(0x7f0000000040)='stack\x00']) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) r1 = getpid() process_vm_readv(r1, &(0x7f0000de4000)=[{&(0x7f00009e0000)=""/225, 0xe1}], 0x1, &(0x7f0000d65fb8)=[{&(0x7f000082efb5)=""/75, 0x4b}], 0x1, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/26 17:13:17 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) 2018/03/26 17:13:17 executing program 5: r0 = socket$inet(0x2, 0x803, 0x5) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0xfdd9) 2018/03/26 17:13:17 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000e5fff4)={0x10}, 0xc, &(0x7f0000fb7000)={&(0x7f0000aeccc8)={0x14, 0x6, 0x1, 0x7fffffffd}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:17 executing program 7: syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') 2018/03/26 17:13:17 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001500ff10fffefd956fa283b70aa6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 45.326419] netlink: 52 bytes leftover after parsing attributes in process `syz-executor3'. 2018/03/26 17:13:17 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:17 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000400)=@getlink={0x24, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4, 0x12}]}, 0x24}, 0x1}, 0x0) 2018/03/26 17:13:17 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setlease(r0, 0x400, 0x0) 2018/03/26 17:13:17 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/03/26 17:13:17 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_test={0x1a}}) 2018/03/26 17:13:17 executing program 5: r0 = socket(0x15, 0x80005, 0x0) flock(r0, 0xc) 2018/03/26 17:13:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)='O', 0x1) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5412, &(0x7f00000000c0)) 2018/03/26 17:13:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) fcntl$setstatus(r0, 0x4, 0x444800) sendfile(r0, r0, &(0x7f0000000080), 0xa41) 2018/03/26 17:13:17 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000500)) 2018/03/26 17:13:17 executing program 7: socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001540)) 2018/03/26 17:13:17 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f00000affc0), &(0x7f0000000100)=[&(0x7f0000000040)='stack\x00']) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) r1 = getpid() process_vm_readv(r1, &(0x7f0000de4000)=[{&(0x7f00009e0000)=""/225, 0xe1}], 0x1, &(0x7f0000d65fb8)=[{&(0x7f000082efb5)=""/75, 0x4b}], 0x1, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/26 17:13:17 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/03/26 17:13:17 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x6}, 'port1\x00'}) 2018/03/26 17:13:17 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r0, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r1}], 0x1, 0xfffffffffffffff8) r2 = dup2(r0, r1) r3 = gettid() fcntl$setown(r2, 0x8, r3) 2018/03/26 17:13:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000299000)}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 2018/03/26 17:13:17 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x3, 0x2d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'bond0\x00', 'bpq0\x00', 'gretap0\x00', 'irlan0\x00', @random="6b93ab9e373e", [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa0, 0xc8}, [@common=@dnat={'dnat\x00', 0xc, {{@empty, 0xffffffffffffffff}}}]}, @common=@redirect={'redirect\x00', 0x4, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0xd, 0x40, 0x4305, 'bpq0\x00', 'dummy0\x00', 'eql\x00', 'dummy0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x460cd8e24bd53ccd, 0xff, 0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x108, 0x150}, [@common=@redirect={'redirect\x00', 0x4, {{0xfffffffffffffffc}}}, @common=@NFLOG={'NFLOG\x00', 0x4c, {{0x3, 0x101, 0x1, 0x0, 0x0, "24c2fa0775ecfd85c4c72849b6ca813570eed1a3a52d914cc55f9356a4e2df070674b77b821a0704b1bcb726b7dcaa0da4c31aa16c6b11b716eacf825f81e63c"}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x2, 'syz1\x00', 0x8}}}}]}]}, 0x378) 2018/03/26 17:13:17 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/26 17:13:17 executing program 3: r0 = socket(0x15, 0x80005, 0x0) accept4$unix(r0, 0x0, &(0x7f00000001c0), 0x0) 2018/03/26 17:13:17 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff0100", 0x1302}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000280)=""/128) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2018/03/26 17:13:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='ext3\x00', 0x0, 0x0) 2018/03/26 17:13:17 executing program 7: mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000000)) 2018/03/26 17:13:17 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x7d54f33d600ba7e0) sendto$inet(r0, &(0x7f0000000180)="7afa", 0x2, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/03/26 17:13:17 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x227) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)={0x0, r3+10000000}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000016) [ 45.624511] FAULT_FLAG_ALLOW_RETRY missing 30 [ 45.630287] CPU: 0 PID: 5411 Comm: syz-executor5 Not tainted 4.4.124-g851fb4d #60 [ 45.637920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.647272] 0000000000000000 a755ca636e06151e ffff8801d9137600 ffffffff81d0663d [ 45.655334] ffff8800b1d6c300 1ffff1003b226ecd ffff8801d9137788 0000000000000000 [ 45.663390] 0000000000000000 ffff8801d91377b0 ffffffff81607b85 ffffffff81237770 [ 45.671440] Call Trace: 2018/03/26 17:13:17 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) 2018/03/26 17:13:17 executing program 7: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x8) 2018/03/26 17:13:17 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 45.674014] [] dump_stack+0xc1/0x124 [ 45.679378] [] handle_userfault+0x715/0xf50 [ 45.685336] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 45.692346] [] ? userfaultfd_ioctl+0x2040/0x2040 [ 45.698727] [] ? is_module_text_address+0x2a/0x50 [ 45.705223] [] ? handle_mm_fault+0xb5d/0x3190 [ 45.711368] [] ? handle_mm_fault+0x291e/0x3190 [ 45.717598] [] handle_mm_fault+0x2938/0x3190 [ 45.723647] [] ? check_irq_usage+0xb1/0xe0 [ 45.729526] [] ? copy_page_range+0x1480/0x1480 [ 45.735756] [] ? __do_page_fault+0x780/0xa00 [ 45.741893] [] ? vmacache_find+0x57/0x290 [ 45.747679] [] __do_page_fault+0x35b/0xa00 [ 45.753888] [] do_page_fault+0x27/0x30 [ 45.759401] [] page_fault+0x28/0x30 [ 45.764659] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 45.771480] [] ? do_ip_setsockopt.isra.12+0x13f8/0x2900 [ 45.778493] [] ? ip_ra_control+0x440/0x440 [ 45.784360] [] ? __lock_acquire+0xb5f/0x4b50 [ 45.790401] [] ? avc_has_perm+0x296/0x500 [ 45.796188] [] ? avc_has_perm+0x309/0x500 [ 45.801964] [] ? avc_has_perm+0xb6/0x500 [ 45.807644] [] ? avc_has_perm_noaudit+0x460/0x460 [ 45.814103] [] ? sock_has_perm+0x1c1/0x400 [ 45.819953] [] ? sock_has_perm+0x29f/0x400 [ 45.825801] [] ? sock_has_perm+0x9f/0x400 [ 45.831568] [] ? selinux_file_send_sigiotask+0x310/0x310 [ 45.838635] [] ? selinux_netlbl_socket_setsockopt+0x117/0x320 [ 45.846133] [] ? selinux_netlbl_sock_rcv_skb+0x400/0x400 [ 45.853201] [] ip_setsockopt+0x3a/0xa0 [ 45.858708] [] tcp_setsockopt+0x82/0xd0 [ 45.864299] [] sock_common_setsockopt+0x95/0xd0 [ 45.870584] [] SyS_setsockopt+0x160/0x250 [ 45.876352] [] ? SyS_recv+0x40/0x40 [ 45.881600] [] ? move_addr_to_kernel+0x50/0x50 [ 45.887798] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 45.894260] [] entry_SYSCALL_64_fastpath+0x22/0x9e 2018/03/26 17:13:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000bc0)="1ead7755d47bd6975c78c3765d65736f918745774ce7ce945bfa9268d5eb6deb1fca6318a507beaec853f16e463ba20747330037ef4c09961231f637024afbc06f850dbcffe9890bb1fc7c89ca10a6af35038920fe8dae329e4cc489ed5abce0ab9fbf8ba64aa7f0eb726434dd18b3976d1dfd61b6ba66558ce0d57fd8acc7e36a629d2a865a3853ad85d8d65176c69f350cf73bea4e9f0d9c7eae26956690dea2c9d0a0e94f57c01f7c643ca78f819a28ae070aa400039889f3e25fec01ed47a5a5539494a1967a804ebe967a15d044050440652a060098024e102ec61f764e06fd3d4f748ff348e6ed0ab2569e545d5e56c78b2045dcc12a98c90cbb93f3bb6eb5b08a10374cec1923b8aeb1792605570b64bacca8024c3df83b5c45eed7d060db4442e004dd406a03182808482025ac0726894219b2e545781fff01a88e436c1d48321991481c699df7c6bba3fb8225a3842f2fd59cec0034aaeeed94786f2ac6fba63c9d06043a6c49d43ce276f0286acd4e6cf4c7e9abe1f2769a42ae1d95c067e6da327bcaba963afa09271e1ecfd51a53bffece0fee383aa70bec585311092199905948d7d55465ad0c57701e368d3363e5f42e7ebf6429fc1fd4f793fbad39a448d1f658dbc4a275ec285256c09f68cc3db4618de606ac9c967f4a454b76d527aaa49288c6f07d4e48b8e588703a9983149d79076cebda42e966669b0cf0dd94d0c0c1564b1626608a3a0ccb2c6afdb93afced873b127601257b0e41ed8090fd905158393e801c92c9f926f1662c3b18b9e29eea3249b2c334a8d4c7cf78e8c2e8042a29a41bb686b7405e73904027bf1276778872b03b9a8b91db1a2f9df958ab056cf965c4ab085360030af7703e478e0a3161ffccd51ec0a9ce95ba8c8373562aa3903c9c5038b23d4af55095f85733e3c98efcb0cd3d4405e88da4dc911a3d480a800c6ac204b8b29b8e569b2a1f263e8ce62399dd5308c8381bbdf518d9ae8de419f124990614d26c64b1f90fef5eaf278338b1437b21b40cbcb95dcaee2775080f12bfdcfe135d1f805143b2c0754ab12f07751713b5d997875240da83d36c5d9984d02782d16b008e4a14fb8195d3584a4a2d7513627881b2707fff915bd1766ed6f9a8f017f5bf14462ee5bb0390e95b884faee2b13f482deea47bafa7ad2a85d73cfb08618906331e97040808c5c554c16e287119abfbcc2940cb37f65f6291ac2b5eed13b19733259457c600ad52aaf1a020f1f62b3064e63bb21f4b6c4b9c6517f5dd66e1cf7a9de015c68c0810e8085c9c52e04081b61298c812e87bff332bf47789e040880d31280cc1efda350ab5b658af983021c654514166bc2d43c7536c6e1a367eb961868b4484ce757690fbe39b3449c3ef012519dfe922da79e21973ab4da340d3db91d4b189edf585f7484c66e8eb6bb0308973dc421abd2186836d23246b25f7cd1586a4c07701eb1dfeadcd4656c8fefc3c83b843538b2c340feda2623cb4ce4152d94c3c46bc5e5d7583963f70623a0a8a1b55905f9619af4c059df69b96c8b8678727904d20b49670b27ee56fc8251324fb2cd4c9ca1c106be8ceb2ac2676273626fa0534e4e69ea3232c846821f385b3b691e81759e7912b0e33e9ea1d1c979021536c01e9567de517db2a863ba99ff385a3fecab732b404bfe354923eb411f73a58da88600471e3678e031abc5ab8aa2b80b7c75cd49ace61beac109c3b19369299d070ee8f4294288b2ec3041473ed0afe9baf7106b32d4c1c4d7193b840971d7112cc", 0x4f5, 0x0, &(0x7f00000000c0)={0x2}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@multicast1, @broadcast}, &(0x7f0000000140)=0xc) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/03/26 17:13:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=ANY=[], 0x0) 2018/03/26 17:13:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) getsockname$llc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) 2018/03/26 17:13:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00001e3fc8)={&(0x7f0000a03000)={0x10}, 0xc, &(0x7f0000b62ff0)={&(0x7f00006f3f7c)=@ipv6_deladdr={0x18, 0x15, 0x215, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) 2018/03/26 17:13:18 executing program 7: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000001480)={0x0, 0x11, &(0x7f0000000040)=[{&(0x7f0000000000), 0xffbf}], 0x1, &(0x7f0000000180)}, 0x0) 2018/03/26 17:13:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc2502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:18 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r0, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r1}], 0x1, 0xfffffffffffffff8) r2 = dup2(r0, r1) r3 = gettid() fcntl$setown(r2, 0x8, r3) 2018/03/26 17:13:18 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0xff) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/03/26 17:13:18 executing program 0: r0 = mq_open(&(0x7f0000000000)='@em1system%-\x00', 0x0, 0x0, &(0x7f0000000040)) preadv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)}, {&(0x7f0000001380)=""/90, 0x5a}], 0x2, 0x0) 2018/03/26 17:13:18 executing program 4: unshare(0x8000400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fgetxattr(r0, &(0x7f0000001100)=@known='security.selinux\x00', &(0x7f0000001140)=""/120, 0x78) 2018/03/26 17:13:18 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) write(r0, &(0x7f0000000000), 0x0) close(r0) 2018/03/26 17:13:18 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f3f00000000000000f228d8247070795f74637000000000000000000000005788a270a3ee042584ecb76b3ca3cf62132813f8985862f71ee762421af74db4f74698e1e6e33fa9a31f57aceeb413b58cbf875c763fed5e9d8100000000000000507cdce4ed4887b0acf8784873aa1b263f74b9c90000", 0x2, 0x0) 2018/03/26 17:13:18 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000140)={0x0, 0x0}) 2018/03/26 17:13:18 executing program 2: request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='\x00', 0x0) 2018/03/26 17:13:18 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r0, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r1}], 0x1, 0xfffffffffffffff8) r2 = dup2(r0, r1) r3 = gettid() fcntl$setown(r2, 0x8, r3) 2018/03/26 17:13:18 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00003b3000)='./file0\x00') lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000300)='eth1lo\x00', 0x7, 0x0) dup2(r1, r2) 2018/03/26 17:13:18 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) 2018/03/26 17:13:18 executing program 4: unshare(0x8000400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fgetxattr(r0, &(0x7f0000001100)=@known='security.selinux\x00', &(0x7f0000001140)=""/120, 0x78) 2018/03/26 17:13:18 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) write(r0, &(0x7f0000000000), 0x0) close(r0) 2018/03/26 17:13:18 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) 2018/03/26 17:13:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x2, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000140)}}, &(0x7f0000000200)) timer_delete(0x0) 2018/03/26 17:13:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000becff0)) epoll_create1(0x80000) 2018/03/26 17:13:18 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20000020) 2018/03/26 17:13:18 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xb) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x0, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) 2018/03/26 17:13:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0xfffffffffffffff7, 0x0) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/03/26 17:13:18 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)) 2018/03/26 17:13:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x400000000e) ioctl$FIONREAD(r0, 0x80047437, &(0x7f0000000080)) 2018/03/26 17:13:18 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6}]}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x24) 2018/03/26 17:13:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) listen(r1, 0x404) listen(r0, 0x3) 2018/03/26 17:13:18 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x0) 2018/03/26 17:13:18 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) gettid() tkill(r0, 0x16) 2018/03/26 17:13:18 executing program 0: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00008caff0)=[{&(0x7f0000b8cfb7)="480000001400190d09004bea450d8c560a84660080ffe00600100000000000a2bc5603ca0000400000000000000000000100000000000309ff0005ff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/03/26 17:13:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x400000000000082) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 2018/03/26 17:13:18 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x0) 2018/03/26 17:13:18 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)) [ 46.366202] audit: type=1400 audit(1522084398.515:10): avc: denied { create } for pid=5542 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 2018/03/26 17:13:18 executing program 3: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0x11, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @multicast1=0xe0000001}}) 2018/03/26 17:13:18 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='selinuxfs\x00', 0x1000, &(0x7f0000000100)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='squashfs\x00', 0x20, 0x0) [ 46.422927] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) [ 46.443298] netlink: 48 bytes leftover after parsing attributes in process `syz-executor0'. 2018/03/26 17:13:18 executing program 7: getpid() pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000300)='eth1lo\x00', 0x7, 0x0) dup2(r0, r1) 2018/03/26 17:13:18 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) gettid() tkill(r0, 0x16) 2018/03/26 17:13:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x3) close(r0) 2018/03/26 17:13:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0xffb8, &(0x7f0000000300)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/03/26 17:13:18 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000440)) [ 46.479676] netlink: 48 bytes leftover after parsing attributes in process `syz-executor0'. 2018/03/26 17:13:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x400000000000082) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 2018/03/26 17:13:18 executing program 4: r0 = mq_open(&(0x7f0000000ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000213000)) mq_timedsend(r0, &(0x7f0000258000)="c44d91c2b6", 0x5, 0x0, 0x0) 2018/03/26 17:13:18 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='efivarfs\x00', 0x1800, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='jfs\x00', 0x20089, &(0x7f0000000240)) 2018/03/26 17:13:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) 2018/03/26 17:13:18 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) 2018/03/26 17:13:18 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) gettid() tkill(r0, 0x16) 2018/03/26 17:13:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}, 0x1}, 0x0) 2018/03/26 17:13:18 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x8080a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={"65727370616e3000000000000200"}) 2018/03/26 17:13:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x309, 0x0, 0x0, {{{@in=@rand_addr, @in=@dev={0xac, 0x14, 0x14}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x6c}, @in6=@dev={0xfe, 0x80}}}}, 0xf8}, 0x1}, 0x0) 2018/03/26 17:13:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000d10ff0)={0x2, 0x4e20}, 0x10) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000ba6000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/03/26 17:13:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r0) 2018/03/26 17:13:18 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$eventfd(r0, &(0x7f0000000000), 0x8) [ 46.736125] syz-executor7 uses obsolete (PF_INET,SOCK_PACKET) [ 46.779784] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000191000)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f00008a5000)='coredump_filter\x00') sendfile(r1, r0, &(0x7f0000000040), 0x7ffff000) 2018/03/26 17:13:19 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, 0x0) tkill(r0, 0x16) 2018/03/26 17:13:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x890c, &(0x7f00000000c0)={"696662300200", @ifru_hwaddr=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}) 2018/03/26 17:13:19 executing program 7: setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x3b, @multicast2=0xe0000002, 0x0, 0x0, 'none\x00'}, 0x2c) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/03/26 17:13:19 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000000)='O', 0x1) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5412, &(0x7f00000000c0)) 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f000062dff0)=[{&(0x7f0000d9cfef)='\x00', 0x1}], 0x1) sendto(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x11]}}}, 0x80) 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 0: r0 = socket$inet(0x2, 0x80005, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x50) 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f00005f9000)=""/202, 0xca) shutdown(r0, 0x0) 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, 0x0) tkill(r0, 0x16) 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, 0x0) tkill(r0, 0x16) 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r3) tkill(r0, 0x16) 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r3) tkill(r0, 0x16) 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r3) tkill(r0, 0x16) 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f00000001c0)) 2018/03/26 17:13:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0x51) close(r0) 2018/03/26 17:13:19 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, &(0x7f0000000280)) 2018/03/26 17:13:19 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 2018/03/26 17:13:19 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 7: [ 47.727831] audit: type=1400 audit(1522084399.885:11): avc: denied { bind } for pid=5836 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/03/26 17:13:19 executing program 0: 2018/03/26 17:13:19 executing program 1: 2018/03/26 17:13:19 executing program 5: 2018/03/26 17:13:19 executing program 4: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 7: 2018/03/26 17:13:19 executing program 2: 2018/03/26 17:13:19 executing program 3: 2018/03/26 17:13:20 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:20 executing program 0: 2018/03/26 17:13:20 executing program 1: 2018/03/26 17:13:20 executing program 4: 2018/03/26 17:13:20 executing program 5: 2018/03/26 17:13:20 executing program 7: 2018/03/26 17:13:20 executing program 2: 2018/03/26 17:13:20 executing program 3: 2018/03/26 17:13:20 executing program 2: 2018/03/26 17:13:20 executing program 0: 2018/03/26 17:13:20 executing program 1: 2018/03/26 17:13:20 executing program 7: 2018/03/26 17:13:20 executing program 3: 2018/03/26 17:13:20 executing program 4: 2018/03/26 17:13:20 executing program 1: 2018/03/26 17:13:20 executing program 5: 2018/03/26 17:13:20 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:20 executing program 3: 2018/03/26 17:13:20 executing program 0: 2018/03/26 17:13:20 executing program 2: 2018/03/26 17:13:20 executing program 1: 2018/03/26 17:13:20 executing program 4: 2018/03/26 17:13:20 executing program 7: 2018/03/26 17:13:20 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000e9d000)="066f47767100", 0x0) ftruncate(r0, 0x0) close(r0) 2018/03/26 17:13:20 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$fuse(r0, &(0x7f0000000040)={0x10}, 0x10) ioprio_set$pid(0x2, 0x0, 0x4005) r1 = syz_open_dev$sg(&(0x7f0000007ff7)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r1, &(0x7f0000813fd0)=[{}, {}], 0x30) 2018/03/26 17:13:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000040)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="f4", 0x1}], 0x1, &(0x7f00000005c0)}, 0x0) 2018/03/26 17:13:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x100) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) write$cgroup_int(r2, &(0x7f0000001780)=ANY=[@ANYBLOB="df3cf853456a2070fc46ed506362776a2f465bc7065222c70f4ba5a47318377a57cf2cc51de3374aa62e0a014cc40788549e4f9753afb4d9d492"], 0x3a) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x10}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000400)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000240)) 2018/03/26 17:13:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$EVIOCREVOKE(r0, 0x31e, &(0x7f0000000080)=0x10) 2018/03/26 17:13:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000bc0)="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", 0x499, 0x0, &(0x7f00000000c0)={0x2}, 0x10) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/03/26 17:13:20 executing program 3: 2018/03/26 17:13:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000bc0)="1ead7755d47bd6975c78c3765d65736f918745774ce7ce945bfa9268d5eb6deb1fca6318a507beaec853f16e463ba20747330037ef4c09961231f637024afbc06f850dbcffe9890bb1fc7c89ca10a6af35038920fe8dae329e4cc489ed5abce0ab9fbf8ba64aa7f0eb726434dd18b3976d1dfd61b6ba66558ce0d57fd8acc7e36a629d2a865a3853ad85d8d65176c69f350cf73bea4e9f0d9c7eae26956690dea2c9d0a0e94f57c01f7c643ca78f819a28ae070aa400039889f3e25fec01ed47a5a5539494a1967a80", 0xc9, 0x0, &(0x7f00000000c0)={0x2}, 0x10) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@sco={0x1f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001380)="e3ff41858bf800ebe0e4d6c72389c3dc053480363d27525d90fd3dc4657d163ad18f0309bbbed24b0c411c9ebefe65d6912ef2dc533f84da3ee59df85e269a6d6667e558057d23d57d775c2f84ddb8557e37cc1e2bcf4d0421b4647b7240a440f2d9eb8fdfb6140383a22053", 0x6c}], 0x1, &(0x7f00000001c0)}}], 0x1, 0x0) 2018/03/26 17:13:20 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$fuse(r0, &(0x7f0000000040)={0x10}, 0x10) ioprio_set$pid(0x2, 0x0, 0x4005) r1 = syz_open_dev$sg(&(0x7f0000007ff7)='/dev/sg#\x00', 0x0, 0x806) write$evdev(r1, &(0x7f0000813fd0)=[{}, {}], 0x30) 2018/03/26 17:13:20 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:20 executing program 1: r0 = inotify_init1(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tgkill(r1, r1, 0x12) 2018/03/26 17:13:20 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/03/26 17:13:20 executing program 4: r0 = epoll_create1(0x0) ppoll(&(0x7f0000005640)=[{r0}], 0x1, &(0x7f00000056c0)={0x77359400}, &(0x7f0000005700), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 2018/03/26 17:13:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2018/03/26 17:13:20 executing program 7: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 2018/03/26 17:13:20 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, &(0x7f00000002c0)) 2018/03/26 17:13:20 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x4, 0x4b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000040), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bcsf0\x00', 'teql0\x00', 'bridge0\x00', 'teql0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xe8, 0x120}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'tunl0\x00', 'teql0\x00', 'ifb0\x00', 'ip_vti0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0x110, 0x140, [@quota={'quota\x00', 0x18}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x5, 0x0, 0x0, 'ip6gre0\x00', 'gre0\x00', 'bridge0\x00', 'syzkaller1\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0x70, 0xa8, 0xe0}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffc}}}]}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}}, {{{0x9, 0x0, 0x0, 'sit0\x00', 'gre0\x00', 'nr0\x00', 'gre0\x00', @random="bfbb595ed906", [], @empty, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x0, 0x81}}}}]}]}, 0x530) 2018/03/26 17:13:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 2018/03/26 17:13:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000a92000), 0x0, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0x7ffffffd, 0x10000007ffffffc}, 0x14) r1 = dup2(r0, r0) sendto$unix(r1, &(0x7f0000000140)="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", 0x219, 0x0, &(0x7f0000001140)=@abs, 0x6e) 2018/03/26 17:13:20 executing program 1: syz_emit_ethernet(0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b007b0600000000000000000000aafe8000000000000000000000000000aa0000000008000000000085", @ANYRES32=0x41424344, @ANYBLOB="1b00"], &(0x7f0000000000)={0x400000000, 0xfffffffffffffffe, [0x0, 0x0, 0xffffffffffffffff]}) 2018/03/26 17:13:20 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x1c, 0x52, 0x301, 0x0, 0x0, {0xa}}, 0x1c}, 0x1}, 0x0) 2018/03/26 17:13:20 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x323, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x6, 0x4d031, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000815000)={0x0, 0x0}) fcntl$setpipe(r1, 0x407, 0x0) vmsplice(r1, &(0x7f0000eacfd0)=[{&(0x7f0000493f7e)="ac", 0x1}], 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000f14000)=[{&(0x7f0000853fde)="8d", 0x1}], 0x1, 0x0) tee(r2, r1, 0x3c, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000002400)=[{&(0x7f0000002380)="7013", 0x2}], 0x1, 0x0) 2018/03/26 17:13:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x1276, &(0x7f0000000080)) 2018/03/26 17:13:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/03/26 17:13:20 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/03/26 17:13:20 executing program 7: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000f10fc8)={&(0x7f0000f10000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000d69f90)=[{&(0x7f00008d7f6a)=""/150, 0x96}], 0x1, &(0x7f0000762000)=""/79, 0x4f}, 0x0) sendto$inet(r0, &(0x7f0000e7b000)="dc", 0x1, 0x0, &(0x7f0000e81ff0)={0x2, 0x4e20}, 0x10) 2018/03/26 17:13:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x2c, 0xaff, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary='\b'}]}]}, 0x20}, 0x1}, 0x0) 2018/03/26 17:13:20 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r0) 2018/03/26 17:13:20 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=@delpolicy={0x50, 0x14, 0x701, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in=@multicast1=0xe0000001}}}, 0x50}, 0x1}, 0x0) 2018/03/26 17:13:20 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'teql0\x00', 0x400}) 2018/03/26 17:13:20 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) bind(r0, &(0x7f0000000280)=@nl=@kern={0x10, 0x0, 0x0, 0x400040}, 0x80) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/03/26 17:13:20 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 2018/03/26 17:13:20 executing program 4: mkdir(&(0x7f0000c1dff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, &(0x7f0000000140)) 2018/03/26 17:13:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/03/26 17:13:20 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000001c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000040)='ubifs\x00', 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000000380)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 48.342034] PF_BRIDGE: RTM_NEWNEIGH with invalid ifindex [ 48.359951] PF_BRIDGE: RTM_NEWNEIGH with invalid ifindex [ 48.400808] audit: type=1400 audit(1522084400.555:12): avc: denied { bind } for pid=5976 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 48.414746] PF_BRIDGE: RTM_NEWNEIGH with invalid ifindex 2018/03/26 17:13:21 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:21 executing program 4: r0 = epoll_create1(0x0) ppoll(&(0x7f0000005640)=[{}, {r0}], 0x2, &(0x7f00000056c0)={0x77359400}, &(0x7f0000005700), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) epoll_pwait(r0, &(0x7f0000643fb8)=[{}], 0x1, 0xfffffffffffffffb, &(0x7f000006bff8), 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 2018/03/26 17:13:21 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f0000000380)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() openat$hwrng(0xffffffffffffff9c, &(0x7f0000e4bff5)='/dev/hwrng\x00', 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/03/26 17:13:21 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x8080a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={"65727370616e3000000000000200"}) 2018/03/26 17:13:21 executing program 3: r0 = socket(0x11, 0x4000000000080003, 0x0) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) 2018/03/26 17:13:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)={{0x0, 0x1}}) 2018/03/26 17:13:21 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/03/26 17:13:22 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:22 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000100)) 2018/03/26 17:13:22 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)="01") 2018/03/26 17:13:22 executing program 4: r0 = epoll_create1(0x0) ppoll(&(0x7f0000005640)=[{}, {r0}], 0x2, &(0x7f00000056c0)={0x77359400}, &(0x7f0000005700), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) epoll_pwait(r0, &(0x7f0000643fb8)=[{}], 0x1, 0xfffffffffffffffb, &(0x7f000006bff8), 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 2018/03/26 17:13:22 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000016000)=@nl=@kern={0x10}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="5500000018007fb1b72d1cb2a4a280a80a06050010a84309a7052369250004002100009c010000000600150002000000000000dc1338d544000a9b84226eb75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000000)}, 0x0) 2018/03/26 17:13:22 executing program 7: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe6ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 2018/03/26 17:13:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="810000000000000006d2296a87900dadd4"]) 2018/03/26 17:13:22 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r0}) recvmmsg(r2, &(0x7f0000f40000)=[{{&(0x7f0000ee4000)=ANY=[], 0x0, &(0x7f0000f40fd0), 0x0, &(0x7f0000c04000)=""/184, 0xb8}}], 0x1, 0x0, &(0x7f0000f40ff0)={0x77359400}) dup2(r1, r2) tkill(r0, 0x15) 2018/03/26 17:13:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb}, 0x7a) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/03/26 17:13:22 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:22 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) bind(r1, &(0x7f0000d01ff0)=ANY=[], 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8a", 0x1}], 0x1) close(r0) 2018/03/26 17:13:22 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000100f8ffff01000000001000"], 0x10}, 0x0) 2018/03/26 17:13:22 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) 2018/03/26 17:13:22 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) [ 50.501133] netlink: 17 bytes leftover after parsing attributes in process `syz-executor2'. [ 50.512913] netlink: 17 bytes leftover after parsing attributes in process `syz-executor2'. 2018/03/26 17:13:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write(r0, &(0x7f0000000040)="6f22e992569679dbad0dda9d00bff221", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:22 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$EVIOCGREP(r0, 0x40047452, &(0x7f0000000000)=""/174) 2018/03/26 17:13:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x4008000, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendmsg(r0, &(0x7f0000610fc8)={0x0, 0x0, &(0x7f00009f8000), 0x0, &(0x7f0000864bb8)}, 0x0) 2018/03/26 17:13:22 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r0}) recvmmsg(r2, &(0x7f0000f40000)=[{{&(0x7f0000ee4000)=ANY=[], 0x0, &(0x7f0000f40fd0), 0x0, &(0x7f0000c04000)=""/184, 0xb8}}], 0x1, 0x0, &(0x7f0000f40ff0)={0x77359400}) dup2(r1, r2) tkill(r0, 0x15) 2018/03/26 17:13:22 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:22 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 2018/03/26 17:13:22 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:22 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x0, 0x0, 0xff, 0x1}, 0x20) 2018/03/26 17:13:22 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(0xffffffffffffffff, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = gettid() fcntl$setown(r1, 0x8, r2) tkill(r0, 0x16) 2018/03/26 17:13:22 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) 2018/03/26 17:13:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10, 0xf}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0xb, 0x6, 0x1}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000013000102000000000000000000000000", @ANYBLOB="0000000000000000a36515014f7126b5eb457db10800270000000000"], 0x2}, 0x1}, 0x0) 2018/03/26 17:13:22 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) sendfile(0xffffffffffffffff, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:22 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 2018/03/26 17:13:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100), &(0x7f0000000140)=[0x0]}}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/26 17:13:22 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(0xffffffffffffffff, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = gettid() fcntl$setown(r1, 0x8, r2) tkill(r0, 0x16) 2018/03/26 17:13:22 executing program 5: clone(0x100000000047fe, &(0x7f0000199000), &(0x7f0000ad8ffc), &(0x7f0000f57ffc), &(0x7f0000000140)) 2018/03/26 17:13:22 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0xfffffffffffffffd, 0x0) r1 = memfd_create(&(0x7f0000000000)='%\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 2018/03/26 17:13:22 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=""/20, 0x14}) 2018/03/26 17:13:22 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) [ 50.807615] audit: type=1400 audit(1522084402.965:13): avc: denied { set_context_mgr } for pid=6123 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 50.842970] audit: type=1400 audit(1522084402.995:14): avc: denied { call } for pid=6123 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 50.874092] binder: 6123:6134 got transaction with invalid offset (0, min 0 max 0) or object. [ 50.876250] binder: BINDER_SET_CONTEXT_MGR already set [ 50.876260] binder: 6123:6146 ioctl 40046207 0 returned -16 [ 50.882785] binder_alloc: binder_alloc_mmap_handler: 6123 2000c000-2000e000 already mapped failed -16 2018/03/26 17:13:23 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) 2018/03/26 17:13:23 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/03/26 17:13:23 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) listen(r0, 0x1008007) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x3}, 0x10) sendmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f0000000200)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000680)=@sco={0x1f}, 0x80, &(0x7f0000000700), 0x19b, &(0x7f0000000140)=[{0xffffffffffffffcc}], 0x10}}], 0x2, 0x0) 2018/03/26 17:13:23 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3", 0xe1, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) write(r0, &(0x7f0000000080)="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", 0x49d) 2018/03/26 17:13:23 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(0xffffffffffffffff, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = gettid() fcntl$setown(r1, 0x8, r2) tkill(r0, 0x16) 2018/03/26 17:13:23 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 2018/03/26 17:13:23 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000000280)='net/rt6_stats\x00') [ 50.904636] binder: 6123:6134 transaction failed 29201/-22, size 0-8 line 3197 [ 50.915009] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/26 17:13:23 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 2: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000000000)="36000000000040071901000000000000de008859eff71d45", 0x18, 0x0, &(0x7f00000001c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/03/26 17:13:23 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)=""/4096, 0x1000) 2018/03/26 17:13:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3", 0xe1, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) write(r0, &(0x7f0000000080)="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", 0x49d) 2018/03/26 17:13:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000080)="bf24ffbcdb7a992fdbb4ef43aa59de20", 0x10) 2018/03/26 17:13:23 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0xa) listen(r1, 0x0) connect$unix(r0, &(0x7f0000006000)=@file={0x1, './file0\x00'}, 0xa) dup3(r0, r1, 0x0) 2018/03/26 17:13:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f000058bfe4)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 2018/03/26 17:13:23 executing program 1: ftruncate(0xffffffffffffffff, 0x7ffe) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r0, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r1}], 0x1, 0xfffffffffffffff8) r2 = dup2(r0, r1) r3 = gettid() fcntl$setown(r2, 0x8, r3) tkill(0x0, 0x16) 2018/03/26 17:13:23 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) 2018/03/26 17:13:23 executing program 1: ftruncate(0xffffffffffffffff, 0x7ffe) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 2: r0 = socket$inet6(0xa, 0x805, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000040)="d3", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xf}, 0x1c) 2018/03/26 17:13:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f00000004c0)="6e65742f69665f696e6574360093fdd81f12659f45e9cb89f8ffffffd451bea0bcf166e408aa93f2de9c7a1786a0b83e1c0da5210d01b9336480d24bf721df26e12a6152f604622b86f9e8a6d4e0e52b4d4518804bc3d131a1c20cee863e600711d0f8cdebab9c16f184f3835747b5fcfb4a8c439d37279d64119874b715ecd26d08c0b9f7b98e72b9401bf0496339354aaf1e011da685dbc8ee74625b3974533f2e05355dadea49035c03b2809c55c2ece8b4e17928fb1361c58fe2024cfa4798878692a6cfcad49eb3c51b78c9453e001eb16c27a6a39ca29de3e43b781daa7dd4348012f3b554bb56240130d542005d2e50fe46373cfc76a6a49c1b8050c99c08ab6aa3ec304a505456d90803f21ef70a51f56c6f4998e6fbb1d9d09e754b10d4b8f03d7621be8ab07b006d8081d8c353648c513e4d06bc9a3ecd201848931a11f7db75d319c2d37f4298ff0a48ad3e2a1f1a4c3813c47084b80fd1bacef8681897d56a3b09d2d1d0d60a1d3db780d2aad06d6f0ac83cb479cc667cb00e0d4133539b1ea8a2c5ffdcd9e6f82000824ed364cdb3d9aef2b4f74545e77ecc557beb1d694fc99c505392916ed300ecd94fe0a7b30886d5c4ef01db53002a4185d19fa71fd8728f0b09de4d8ff1444fa7e59f884f27c0b3fe86fd51a3f63c6adbb36ca81d182d25b311a045ba13") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x20) unshare(0x200) r2 = syz_open_procfs(0x0, &(0x7f0000c02fca)="6e732f6d6e7400c552c5ba5dd533e308164bd83bbbef1a23efb866ab2c1b66c09db90000000000000006f4d0e9ae0e19c79a35b158ae") setns(r2, 0x0) clone(0x3002017f, &(0x7f0000000080), &(0x7f0000000000), &(0x7f000014e000), &(0x7f0000000100)) sendfile(r0, r1, &(0x7f0000000040), 0xff) 2018/03/26 17:13:23 executing program 4: syz_emit_ethernet(0x1c, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="f27e31c5ea1b", [], {@generic={0x6558, "4d098b2c52d8d522651359fe71ba"}}}, &(0x7f00000000c0)) 2018/03/26 17:13:23 executing program 1: ftruncate(0xffffffffffffffff, 0x7ffe) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 0: madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) 2018/03/26 17:13:23 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c04) 2018/03/26 17:13:23 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 2018/03/26 17:13:23 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x11, &(0x7f0000005f18)={{{@in6=@empty={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @in=@rand_addr}}, {{@in=@multicast1=0xe0000001}, 0x0, @in=@loopback=0x7f000001}}, 0xe8) 2018/03/26 17:13:23 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r0, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r1}], 0x1, 0xfffffffffffffff8) r2 = dup2(r0, r1) r3 = gettid() fcntl$setown(r2, 0x8, r3) tkill(0x0, 0x16) 2018/03/26 17:13:23 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x0, 0x2000000000002}], 0x1c1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000734ffc)=0x1) 2018/03/26 17:13:23 executing program 5: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 2018/03/26 17:13:23 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x0, r2+30000000}, 0x8) truncate(&(0x7f0000e5e000)='./file0\x00', 0x0) dup2(r0, r1) 2018/03/26 17:13:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c04) 2018/03/26 17:13:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r0, 0x0) sendmmsg(r0, &(0x7f0000007a40)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001500)="f8", 0x1}], 0x1, &(0x7f00000015c0)}}], 0x1, 0x0) 2018/03/26 17:13:23 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) 2018/03/26 17:13:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x444800) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000400)) 2018/03/26 17:13:23 executing program 3: 2018/03/26 17:13:23 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 5: mkdir(&(0x7f0000c1dff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000b75000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f00002bd93e)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) 2018/03/26 17:13:23 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x0, r2+30000000}, 0x8) truncate(&(0x7f0000e5e000)='./file0\x00', 0x0) dup2(r0, r1) 2018/03/26 17:13:23 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r0, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r1}], 0x1, 0xfffffffffffffff8) r2 = dup2(r0, r1) r3 = gettid() fcntl$setown(r2, 0x8, r3) tkill(0x0, 0x16) 2018/03/26 17:13:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x2275, &(0x7f0000000080)) 2018/03/26 17:13:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$EVIOCREVOKE(r0, 0x31e, &(0x7f0000000080)) clone(0x30020100, &(0x7f00002c9000), &(0x7f0000d70ffc), &(0x7f00001cc000), &(0x7f0000154000)) 2018/03/26 17:13:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x2691d0877f1cca9b}) 2018/03/26 17:13:23 executing program 4: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r2) r3 = memfd_create(&(0x7f0000a98000)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_access\x00') close(r1) 2018/03/26 17:13:23 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "e21c1c", 0x14, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2018/03/26 17:13:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000001c0)=[{0x20}, {0x6}]}, 0x10) write(r0, &(0x7f00000000c0), 0x0) 2018/03/26 17:13:23 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000653ff3)='attr/current\x00') write(r1, &(0x7f0000000280), 0x0) open$dir(&(0x7f0000a67000)='./file0\x00', 0x0, 0x0) 2018/03/26 17:13:23 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x3, 0x408, [0x0, 0x20000140, 0x20000608, 0x20000638], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'irlan0\x00', 'vcan0\x00', 'bond0\x00', 'rose0\x00', @link_local={0x1, 0x80, 0xc2}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xa0, 0xf0, 0x140, [@m802_3={'802_3\x00', 0x8}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}, {{{0xbd169ad99059196b, 0x0, 0x0, 'dummy0\x00', 'eql\x00', 'bcsh0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2}, [], @random="1118e89cc64f", [], 0x70, 0xf0, 0x120}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}, @common=@STANDARD={'\x00', 0x8}]}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syz_tun\x00', 'sit0\x00', 'sit0\x00', 'bcsf0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa0, 0x118}, [@common=@redirect={'redirect\x00', 0x8}]}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "6cabb51518e978f10df7ce18af3d14e31f33720e0d6c5ddc119eb274b19271439c432ed6a3db7422a36fe20ecd3a6ee385dcc9acc6a10f19574cd56725da2921"}}}}]}]}, 0x480) 2018/03/26 17:13:23 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc08c5336, &(0x7f0000000240)={{}, 'port1\x00'}) 2018/03/26 17:13:23 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) 2018/03/26 17:13:23 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:23 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$tun(r3, &(0x7f0000000240)={@void, @void, @ipv6={0x0, 0x6, "52d477", 0x14, 0x0, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x3c) dup2(r1, r2) 2018/03/26 17:13:23 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x400000008, 0x0, &(0x7f0000000000), &(0x7f0000aba000), 0x0) 2018/03/26 17:13:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delneigh={0x24, 0x1d, 0x517, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/03/26 17:13:23 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f00000000c0)}, &(0x7f00000001c0)=0xc) 2018/03/26 17:13:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='8:0\r1'], 0x5) 2018/03/26 17:13:24 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:24 executing program 5: mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000c6bff8)='.', &(0x7f000092f000)='./file0\x00', &(0x7f00000003c0)='fusectl\x00', 0x0, &(0x7f000002f000)) 2018/03/26 17:13:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xfffffd64) syz_emit_ethernet(0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa008137ffff075c000000000000c2d51d26d57c000000000000e0d26d34ac63000022d3f0a99007125c4625b9"], &(0x7f00000000c0)) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 2018/03/26 17:13:24 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/03/26 17:13:24 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000013000103000000000000000000000000", @ANYBLOB="000000000000000008000a0005000100"], 0x2}, 0x1}, 0x0) 2018/03/26 17:13:24 executing program 3: mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) 2018/03/26 17:13:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/188, 0xbc) 2018/03/26 17:13:24 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x32, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}}}}}, 0x0) 2018/03/26 17:13:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x40000000000004) writev(r0, &(0x7f000013b000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a06f8ffec0481000000000000005800004824ca944f64009400050028825a003b7dbe907902008000f0fffefffffe03ed03fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/03/26 17:13:24 executing program 5: r0 = socket(0x2, 0x3, 0x40000000000000ff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000)="36000000000040071901000000000000de008859eff71d45", 0x18, 0x0, &(0x7f00000001c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/03/26 17:13:24 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='ns/pid\x00') 2018/03/26 17:13:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 2018/03/26 17:13:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) bind(r1, &(0x7f0000d01ff0)=ANY=[], 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8a", 0x1}], 0x1) 2018/03/26 17:13:24 executing program 3: r0 = socket$inet6(0xa, 0x10000000002, 0x0) prctl$getname(0x10, &(0x7f0000000100)=""/15) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200, 0x0) sched_yield() getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0, 0xfffffffffffffc01}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000400)={r2, 0xcb, "97262dd081a5e3bcf50cea1e42e1813224b03ad9574564cbf96b0668186fef8b6a1131bc7b8166dfca177111fc5e50aa88d6b4d8094b50b0a19833f5e7c810eda534af16e0a09c4e146da628db355f43b823c532442de5d1c1d0de799edfe939454b56f7855ca7a2fec9a3c4a8179fcdb8123ef5333f728571cdaf4560f221dde3b6b23524aa5f9e83e0c7dacd15ab45bce13226a0307644c5253a51258f924cb8cc59b7c079a31aa5ed7078d5dc315206d73e8a7747d11474453a423908148dda3763891b6fa13afa3b3b"}, &(0x7f0000000500)=0xd3) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0xa74, 0x200, 0x7, 0x7fffffff}, 0x10) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000001c0)=0x54) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="7b20c30efc8e2de71f62522ab5e9e7c4", 0x10) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 2018/03/26 17:13:24 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, 0x0) 2018/03/26 17:13:24 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:24 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/bus\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f00000004c0)) 2018/03/26 17:13:25 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:25 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:25 executing program 0: 2018/03/26 17:13:25 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000b0cff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x40000000401070ca, &(0x7f0000000000)) 2018/03/26 17:13:25 executing program 3: 2018/03/26 17:13:25 executing program 2: 2018/03/26 17:13:25 executing program 4: 2018/03/26 17:13:25 executing program 5: 2018/03/26 17:13:25 executing program 4: r0 = socket$inet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x3, @local={0xfe, 0x80, [], 0xaa}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000140)}, 0x0) 2018/03/26 17:13:25 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0x51) 2018/03/26 17:13:25 executing program 7: 2018/03/26 17:13:25 executing program 2: 2018/03/26 17:13:25 executing program 3: 2018/03/26 17:13:25 executing program 7: [ 54.183758] IPVS: Creating netns size=2552 id=9 2018/03/26 17:13:27 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:27 executing program 3: 2018/03/26 17:13:27 executing program 2: 2018/03/26 17:13:27 executing program 0: 2018/03/26 17:13:27 executing program 7: 2018/03/26 17:13:27 executing program 4: 2018/03/26 17:13:27 executing program 5: 2018/03/26 17:13:27 executing program 6: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:27 executing program 3: 2018/03/26 17:13:27 executing program 5: 2018/03/26 17:13:27 executing program 4: 2018/03/26 17:13:27 executing program 0: 2018/03/26 17:13:27 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:27 executing program 3: 2018/03/26 17:13:27 executing program 0: 2018/03/26 17:13:27 executing program 2: 2018/03/26 17:13:27 executing program 4: 2018/03/26 17:13:27 executing program 6: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:27 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)="6c6f001600000098ff00", 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) 2018/03/26 17:13:27 executing program 5: 2018/03/26 17:13:27 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:27 executing program 2: 2018/03/26 17:13:27 executing program 3: 2018/03/26 17:13:27 executing program 4: 2018/03/26 17:13:27 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:27 executing program 3: 2018/03/26 17:13:27 executing program 5: 2018/03/26 17:13:27 executing program 0: 2018/03/26 17:13:27 executing program 4: 2018/03/26 17:13:27 executing program 2: 2018/03/26 17:13:27 executing program 7: 2018/03/26 17:13:27 executing program 0: 2018/03/26 17:13:27 executing program 3: 2018/03/26 17:13:28 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:28 executing program 5: 2018/03/26 17:13:28 executing program 7: 2018/03/26 17:13:28 executing program 3: 2018/03/26 17:13:28 executing program 0: 2018/03/26 17:13:28 executing program 6: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:28 executing program 2: 2018/03/26 17:13:28 executing program 4: 2018/03/26 17:13:28 executing program 2: 2018/03/26 17:13:28 executing program 0: 2018/03/26 17:13:28 executing program 3: 2018/03/26 17:13:28 executing program 4: 2018/03/26 17:13:28 executing program 5: 2018/03/26 17:13:28 executing program 7: 2018/03/26 17:13:28 executing program 3: 2018/03/26 17:13:28 executing program 2: 2018/03/26 17:13:28 executing program 0: 2018/03/26 17:13:28 executing program 6: timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:28 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:29 executing program 2: 2018/03/26 17:13:29 executing program 5: 2018/03/26 17:13:29 executing program 7: 2018/03/26 17:13:29 executing program 0: 2018/03/26 17:13:29 executing program 2: 2018/03/26 17:13:29 executing program 4: 2018/03/26 17:13:29 executing program 7: 2018/03/26 17:13:29 executing program 3: 2018/03/26 17:13:29 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:29 executing program 5: 2018/03/26 17:13:29 executing program 2: 2018/03/26 17:13:29 executing program 4: 2018/03/26 17:13:29 executing program 0: 2018/03/26 17:13:29 executing program 3: 2018/03/26 17:13:29 executing program 7: 2018/03/26 17:13:29 executing program 5: 2018/03/26 17:13:29 executing program 6: timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:29 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:29 executing program 0: 2018/03/26 17:13:29 executing program 4: 2018/03/26 17:13:29 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:29 executing program 3: 2018/03/26 17:13:29 executing program 7: 2018/03/26 17:13:29 executing program 4: 2018/03/26 17:13:29 executing program 2: 2018/03/26 17:13:29 executing program 0: 2018/03/26 17:13:29 executing program 5: 2018/03/26 17:13:29 executing program 3: 2018/03/26 17:13:29 executing program 5: 2018/03/26 17:13:29 executing program 2: 2018/03/26 17:13:29 executing program 0: 2018/03/26 17:13:30 executing program 6: timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:30 executing program 4: 2018/03/26 17:13:30 executing program 0: 2018/03/26 17:13:30 executing program 7: 2018/03/26 17:13:30 executing program 5: 2018/03/26 17:13:30 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:30 executing program 3: 2018/03/26 17:13:30 executing program 2: 2018/03/26 17:13:30 executing program 0: 2018/03/26 17:13:30 executing program 2: 2018/03/26 17:13:30 executing program 7: 2018/03/26 17:13:30 executing program 3: 2018/03/26 17:13:30 executing program 5: 2018/03/26 17:13:30 executing program 4: 2018/03/26 17:13:30 executing program 0: 2018/03/26 17:13:30 executing program 2: 2018/03/26 17:13:30 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) 2018/03/26 17:13:30 executing program 4: 2018/03/26 17:13:30 executing program 3: 2018/03/26 17:13:30 executing program 2: 2018/03/26 17:13:30 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:30 executing program 0: 2018/03/26 17:13:30 executing program 7: 2018/03/26 17:13:30 executing program 5: 2018/03/26 17:13:31 executing program 0: 2018/03/26 17:13:31 executing program 5: 2018/03/26 17:13:31 executing program 2: 2018/03/26 17:13:31 executing program 7: 2018/03/26 17:13:31 executing program 3: 2018/03/26 17:13:31 executing program 4: 2018/03/26 17:13:31 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:31 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)) 2018/03/26 17:13:31 executing program 4: 2018/03/26 17:13:31 executing program 7: 2018/03/26 17:13:31 executing program 3: 2018/03/26 17:13:31 executing program 2: 2018/03/26 17:13:31 executing program 0: 2018/03/26 17:13:31 executing program 5: 2018/03/26 17:13:31 executing program 3: 2018/03/26 17:13:31 executing program 4: 2018/03/26 17:13:31 executing program 0: 2018/03/26 17:13:31 executing program 1: 2018/03/26 17:13:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f00005f9000)=""/202, 0xca) shutdown(r0, 0x0) 2018/03/26 17:13:31 executing program 7: 2018/03/26 17:13:31 executing program 2: 2018/03/26 17:13:31 executing program 4: 2018/03/26 17:13:31 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000928f74)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f000006ff44)={0x0, 0x0, 'client0\x00', 0x0, "6318ca4c372bbf06", "99f3c2e1541fe1bfdf54840c086e666dec2aef8735f8bc6ae79d506a1f00f7b8"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/03/26 17:13:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00007da000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') sendfile(r0, r1, &(0x7f000017f000), 0x1) 2018/03/26 17:13:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000a92000), 0x0, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0x7ffffffd, 0x10000007ffffffc}, 0x14) writev(r0, &(0x7f0000793fa0)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) r1 = dup2(r0, r0) sendto$unix(r1, &(0x7f0000000140)="acea2241c00c0dc636f066f2ec4d0c4679bcd857cd8dab1c6dd33b3087c5e61a215b1897cd8b4a4330e38a144a3954a75630f26690803f7dc3f70067c5198a53895839e13985d6ed2e9bb44f364d40871f4b445345fab4dfb50f4db4c40bee754a9058418986893678262ece763c640ae59d22567a78ffedcf2ab94b89e284d216c79dccec5f5cb8693290240e4038b4118005a89baed559f5885199cd197e7110cb34498c03bfe3718f940c551adbda09af9334668ec422d2f9f783976d610d8cb78d3b2ecc2891be2919538addb5156f09965384cca530041efd4af2d81002d51343b5d5fc298d09df0e73840f2334a22104dbe3913c897b0390c47b13eb3d46f538a9a9b4ba14f873c27694f8672a589a8c5c917fb9dbd7a110ba305ccecc0fcd196f7c4625884230a20768e0a6b93d26a9f397820d06e077beed5cdf552e31d1f2780c49e2044477fd56fcc4e6cc9dd6702cbcc5ac70fe04aa6d93010cb2c972fd9546baf6febac82b15583d856dd55532638d27948f791c7e0c627a81bd966b31cc13cdd89d427574d585591f4f1d3f02cb1f5ea919156e66851031b042185516eea727a8ab364f9a659a58e10a4f0809de88d7e833610503b5c0be20aacf9f7ace4f3eb0dbe3565520e897cf1ca7c0ba743a7f4da50de0fab10584e55aa904f33aa7fcc8c5fb097ddf2709e9b9d95bc15b8d8c86816045b12d15808e6ce7fe223aafbfe5ca6548443dab80437204a25498d557c1225d", 0x219, 0x0, &(0x7f0000001140)=@abs, 0x6e) 2018/03/26 17:13:31 executing program 7: 2018/03/26 17:13:31 executing program 2: 2018/03/26 17:13:31 executing program 4: 2018/03/26 17:13:31 executing program 7: 2018/03/26 17:13:31 executing program 2: syz_open_procfs(0x0, &(0x7f0000044000)='ns/mnt\x00') 2018/03/26 17:13:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @random="0b0a97f68394"}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/03/26 17:13:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)="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", 0x6f4}], 0x1) 2018/03/26 17:13:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000007000)={0xffffffffe0000001}) 2018/03/26 17:13:31 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:31 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000b9efd6)='g', 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) readv(r1, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/03/26 17:13:31 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000140)="c1") 2018/03/26 17:13:31 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000000040)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/26 17:13:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) 2018/03/26 17:13:31 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000602000)=0x4, 0x3) socket$packet(0x11, 0xa, 0x300) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/03/26 17:13:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000080), 0x85, 0x0, &(0x7f00000001c0), &(0x7f0000000100), 0x3ffffffc) 2018/03/26 17:13:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0xa5167c18532baf21, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6, 0x2}}, 0xb8}, 0x1}, 0x0) 2018/03/26 17:13:31 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:31 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000380)=0xc) 2018/03/26 17:13:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0xa5167c18532baf21, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6, 0x2}}, 0xb8}, 0x1}, 0x0) 2018/03/26 17:13:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, r1}], 0x0, 0x0, &(0x7f0000000580)}) 2018/03/26 17:13:31 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000000040)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/26 17:13:31 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in={0xa, 0x4e20, @rand_addr}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000000b00)=[{0x10}], 0x10}, 0x1}], 0x1, 0x0) [ 59.194055] tmpfs: No value for mount option 'Á' [ 59.210908] IPv4: Oversized IP packet from 127.0.0.1 2018/03/26 17:13:31 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, r0) 2018/03/26 17:13:31 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000001000), &(0x7f0000000000)=0x4) 2018/03/26 17:13:31 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x1e0, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) 2018/03/26 17:13:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000e5fff4)={0x10}, 0xc, &(0x7f0000fb7000)={&(0x7f0000aeccc8)={0x14, 0x6, 0x1, 0x7fffffffd}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:31 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:31 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f00006ba000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001, "b09b6d5c2a91e414699d955c"}}}}}, &(0x7f0000ea3000)) 2018/03/26 17:13:31 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffe) lseek(r0, 0x0, 0x0) [ 59.291837] audit: type=1400 audit(1522084411.445:15): avc: denied { transfer } for pid=6832 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/03/26 17:13:31 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f00006ba000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001, "b09b6d5c2a91e414699d955c"}}}}}, &(0x7f0000ea3000)) 2018/03/26 17:13:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@broadcast=0xffffffff}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}}}, 0xe8) 2018/03/26 17:13:31 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001240)='ip6_vti0\x00', 0x10) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000300)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000480)='k', 0x1}], 0x1, &(0x7f0000002980)}, 0x0) 2018/03/26 17:13:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x18c2500, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/26 17:13:31 executing program 7: [ 59.332613] binder: 6832:6844 BC_INCREFS_DONE u00000000204edf8a node 5 cookie mismatch 0000000000000000 != 0000000000000001 [ 59.365496] binder: BINDER_SET_CONTEXT_MGR already set [ 59.387146] binder: 6832:6844 ioctl 40046207 0 returned -16 [ 59.393341] binder_alloc: 6832: binder_alloc_buf, no vma [ 59.401049] binder: 6832:6835 transaction failed 29189/-3, size 40-8 line 3134 2018/03/26 17:13:31 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) 2018/03/26 17:13:31 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:31 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/.ile0\x00') 2018/03/26 17:13:31 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="4c0000001200ff09fffefd956fa2830007a6008000000000000000683540150024001d0004c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/03/26 17:13:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, r1}], 0x0, 0x0, &(0x7f0000000580)}) 2018/03/26 17:13:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000004000)='\''}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) 2018/03/26 17:13:31 executing program 5: r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000400)='V', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x100) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) keyctl$setperm(0x11, r0, 0x0) [ 59.437343] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.452163] binder: release 6832:6835 transaction 4 out, still active 2018/03/26 17:13:31 executing program 1: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000140)="0dee284ccb0e3556def61b251d36b3cd25eb5a4d5a29e66f7141d5132ee1c0553c5af597580697fd3fc147c04827c9c639d8a5e2", 0x34}], 0x1, &(0x7f0000000200)}, 0x0) 2018/03/26 17:13:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) [ 59.484488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 59.494302] binder: unexpected work type, 4, not freed [ 59.501913] binder: BINDER_SET_CONTEXT_MGR already set [ 59.507538] binder: undelivered TRANSACTION_COMPLETE [ 59.511797] binder: 6877:6880 ioctl 40046207 0 returned -16 [ 59.533598] binder_alloc: binder_alloc_mmap_handler: 6875 20000000-20002000 already mapped failed -16 [ 59.537710] binder: send failed reply for transaction 4, target dead [ 59.551036] binder: BINDER_SET_CONTEXT_MGR already set [ 59.557223] binder: 6875:6881 ioctl 40046207 0 returned -16 [ 59.593668] binder: 6875:6881 unknown command 0 [ 59.593992] binder: release 6877:6880 transaction 10 out, still active [ 59.593996] binder: unexpected work type, 4, not freed [ 59.593999] binder: undelivered TRANSACTION_COMPLETE [ 59.597173] binder_alloc: 6875: binder_alloc_buf, no vma [ 59.597212] binder: 6875:6889 transaction failed 29189/-3, size 0-0 line 3134 [ 59.629112] binder: 6875:6881 ioctl c0306201 2000a000 returned -22 2018/03/26 17:13:31 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$netlink(r0, &(0x7f0000000540), &(0x7f0000000880)=0xc) 2018/03/26 17:13:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2018/03/26 17:13:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="1b", 0x1}], 0x1) 2018/03/26 17:13:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, r1}], 0x0, 0x0, &(0x7f0000000580)}) 2018/03/26 17:13:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00004fb000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "acf42f48ef6ff65ec6f1b21626c8240b1655eaf512a8d15a16e87caa0f5aec8b04eb3ef9e365c6350f55010e6f736e26332f1443385abcca5c894515b8307a8a", "3ff8000000001a0000015a86d4a42e53e2aa636053b1c18db1bca80a1ae0cb65adcbd3df5de03b96f78b55f6b9a12bbbb783950ee77f25fcde0df5506c142cd3", "e4391ec9e07e01113700010000000080001580d34e9ae8d3b20ac260004ca719"}) 2018/03/26 17:13:31 executing program 7: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') umount2(&(0x7f0000e28000)='..', 0x2) 2018/03/26 17:13:31 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) [ 59.644886] binder: undelivered TRANSACTION_COMPLETE [ 59.658978] binder: send failed reply for transaction 10, target dead [ 59.676546] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/26 17:13:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e7500000000003b56f7d21943", 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000000), 0x4) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f00000000c0), 0x4) 2018/03/26 17:13:31 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) [ 59.690626] binder: 6907:6917 BC_INCREFS_DONE u00000000204edf8a node 16 cookie mismatch 0000000000000000 != 0000000000000001 2018/03/26 17:13:31 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)="ea", 0x1}], 0x1, 0x81006) sendfile(r0, r1, &(0x7f0000000000), 0x101ffffff) 2018/03/26 17:13:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2018/03/26 17:13:31 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x7, 0x7, 0x0, 'queue1\x00'}) 2018/03/26 17:13:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000bc0)="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", 0x2e5, 0x0, &(0x7f00000000c0)={0x2}, 0x10) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/03/26 17:13:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x8) 2018/03/26 17:13:31 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e7500000000003b56f7d21943", 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000000), 0x4) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f00000000c0), 0x4) 2018/03/26 17:13:31 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) [ 59.779920] binder: release 6907:6917 transaction 15 out, still active [ 59.791849] binder: unexpected work type, 4, not freed [ 59.800913] binder: undelivered TRANSACTION_COMPLETE [ 59.806097] binder: send failed reply for transaction 15, target dead 2018/03/26 17:13:32 executing program 2: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000040)="2400000024007f380000120000000100000ff6ff01000000ff070000000000001300ff10", 0x24) 2018/03/26 17:13:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x11, 0x0, 0x0, {0x3}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x1c}, 0x1}, 0x0) 2018/03/26 17:13:32 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000640)=@l2, 0x80, &(0x7f0000000940), 0x0, &(0x7f00000009c0)=""/27, 0x1b}}], 0x1, 0x0, &(0x7f0000004400)) r0 = syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x8042) writev(r0, &(0x7f0000000500), 0x1f3) 2018/03/26 17:13:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000bc0)="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", 0x2e5, 0x0, &(0x7f00000000c0)={0x2}, 0x10) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/03/26 17:13:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2018/03/26 17:13:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000bc0)="1ead7755d47bd6975c78c3765d65736f918745774ce7ce945bfa9268d5eb6deb1fca6318a507beaec853f16e463ba20747330037ef4c09961231f637024afbc06f850dbcffe9890bb1fc7c89ca10a6af35038920fe8dae329e4cc489ed5abce0ab9fbf8ba64aa7f0eb726434dd18b3976d1dfd61b6ba66558ce0d57fd8acc7e36a629d2a865a3853ad85d8d65176c69f350cf73bea4e9f0d9c7eae26956690dea2c9d0a0e94f57c01f7c643ca78f819a28ae070aa400039889f3e25fec01ed47a5a5539494a1967a804ebe967a15d044050440652a060098024e102ec61f764e06fd3d4f748ff348e6ed0ab2569e545d5e56c78b2045dcc12a98c90cbb93f3bb6eb5b08a10374cec1923b8aeb1792605570b64bacca8024c3df83b5c45eed7d060db4442e004dd406a03182808482025ac0726894219b2e545781fff01a88e436c1d48321991481c699df7c6bba3fb8225a3842f2fd59cec0034aaeeed94786f2ac6fba63c9d06043a6c49d43ce276f0286acd4e6cf4c7e9abe1f2769a42ae1d95c067e6da327bcaba963afa09271e1ecfd51a53bffece0fee383aa70bec585311092199905948d7d55465ad0c57701e368d3363e5f42e7ebf6429fc1fd4f793fbad39a448d1f658dbc4a275ec285256c09f68cc3db4618de606ac9c967f4a454b76d527aaa49288c6f07d4e48b8e588703a9983149d79076cebda42e966669b0cf0dd94d0c0c1564b1626608a3a0ccb2c6afdb93afced873b127601257b0e41ed8090fd905158393e801c92c9f926f1662c3b18b9e29eea3249b2c334a8d4c7cf78e8c2e8042a29a41bb686b7405e73904027bf1276778872b03b9a8b91db1a2f9df958ab056cf965c4ab085360030af7703e478e0a3161ffccd51ec0a9ce95ba8c8373562aa3903c9c5038b23d4af55095f85733e3c98efcb0cd3d4405e88da4dc911a3d480a800c6ac204b8b29b8e569b2a1f263e8ce62399dd5308c8381bbdf518d9ae8de419f124990614d26c64b1f90fef5eaf278338b1437b21b40cbcb95dcaee27", 0x2e5, 0x0, &(0x7f00000000c0)={0x2}, 0x10) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/03/26 17:13:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000bc0)="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", 0x2e5, 0x0, &(0x7f00000000c0)={0x2}, 0x10) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/03/26 17:13:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000bc0)="1ead7755d47bd6975c78c3765d65736f918745774ce7ce945bfa9268d5eb6deb1fca6318a507beaec853f16e463ba20747330037ef4c09961231f637024afbc06f850dbcffe9890bb1fc7c89ca10a6af35038920fe8dae329e4cc489ed5abce0ab9fbf8ba64aa7f0eb726434dd18b3976d1dfd61b6ba66558ce0d57fd8acc7e36a629d2a865a3853ad85d8d65176c69f350cf73bea4e9f0d9c7eae26956690dea2c9d0a0e94f57c01f7c643ca78f819a28ae070aa400039889f3e25fec01ed47a5a5539494a1967a804ebe967a15d044050440652a060098024e102ec61f764e06fd3d4f748ff348e6ed0ab2569e545d5e56c78b2045dcc12a98c90cbb93f3bb6eb5b08a10374cec1923b8aeb1792605570b64bacca8024c3df83b5c45eed7d060db4442e004dd406a03182808482025ac0726894219b2e545781fff01a88e436c1d48321991481c699df7c6bba3fb8225a3842f2fd59cec0034aaeeed94786f2ac6fba63c9d06043a6c49d43ce276f0286acd4e6cf4c7e9abe1f2769a42ae1d95c067e6da327bcaba963afa09271e1ecfd51a53bffece0fee383aa70bec585311092199905948d7d55465ad0c57701e368d3363e5f42e7ebf6429fc1fd4f793fbad39a448d1f658dbc4a275ec285256c09f68cc3db4618de606ac9c967f4a454b76d527aaa49288c6f07d4e48b8e588703a9983149d79076cebda42e966669b0cf0dd94d0c0c1564b1626608a3a0ccb2c6afdb93afced873b127601257b0e41ed8090fd905158393e801c92c9f926f1662c3b18b9e29eea3249b2c334a8d4c7cf78e8c2e8042a29a41bb686b7405e73904027bf1276778872b03b9a8b91db1a2f9df958ab056cf965c4ab085360030af7703e478e0a3161ffccd51ec0a9ce95ba8c8373562aa3903c9c5038b23d4af55095f85733e3c98efcb0cd3d4405e88da4dc911a3d480a800c6ac204b8b29b8e569b2a1f263e8ce62399dd5308c8381bbdf518d9ae8de419f124990614d26c64b1f90fef5eaf278338b1437b21b40cbcb95dcaee27", 0x2e5, 0x0, &(0x7f00000000c0)={0x2}, 0x10) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/03/26 17:13:32 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='2', 0x1}], 0x1, &(0x7f00000050c0)}}], 0x1, 0x0) 2018/03/26 17:13:32 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:32 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x400000008, 0x0, &(0x7f0000000000), &(0x7f0000aba000), 0x0) 2018/03/26 17:13:32 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:32 executing program 3: r0 = socket$inet(0x11, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x3}, {0x6}]}, 0x10) 2018/03/26 17:13:32 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/03/26 17:13:32 executing program 2: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) 2018/03/26 17:13:32 executing program 3: r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) accept$ipx(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 2018/03/26 17:13:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)={{0x0, 0x1}}) 2018/03/26 17:13:32 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@setlink={0x28, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, 0x5}]}, 0x28}, 0x1}, 0x0) 2018/03/26 17:13:32 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:32 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:32 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, &(0x7f0000000200)=',') 2018/03/26 17:13:32 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/03/26 17:13:32 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@random="ff3997ffcd00", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "6f8238", 0x44, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, 0x0) [ 60.118158] device lo entered promiscuous mode [ 60.168398] device lo left promiscuous mode 2018/03/26 17:13:32 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f00000001c0), 0x48, 0x0, &(0x7f0000000140)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00d600001bef1aedff4203c544cc0100008081000003000000070718d1fc0e41a052600c8281000000"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) 2018/03/26 17:13:32 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = open(&(0x7f00002bd93e)='./bus\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x802, 0x11, r0, 0x0) mlock2(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) readv(r2, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/03/26 17:13:32 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/03/26 17:13:32 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f00000018c0)='+0', 0x2}], 0x1) 2018/03/26 17:13:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000100)="2b766d6e6574307070703173656c66736563757269747976626f786e657430766d6e6574312b1c2373656c662c21292e00") 2018/03/26 17:13:32 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x1c, 0x3, 0x206, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1}, 0x0) 2018/03/26 17:13:32 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x0, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2018/03/26 17:13:32 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000001280)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000012c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2}]}, 0x20}, 0x1}, 0x0) 2018/03/26 17:13:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @random="236147cc95f2"}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/03/26 17:13:32 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = open(&(0x7f00002bd93e)='./bus\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x802, 0x11, r0, 0x0) mlock2(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) readv(r2, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/03/26 17:13:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2018/03/26 17:13:32 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x0, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:32 executing program 7: pipe(&(0x7f0000eb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00006dc000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x8000, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x0, r3}) recvmsg(r5, &(0x7f000095cfc8)={&(0x7f0000000680)=ANY=[], 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r4, r5) r6 = gettid() tkill(r6, 0x16) write(r1, &(0x7f00000000c0)="c9", 0x1) [ 60.267518] binder: send failed reply for transaction 19 to 7038:7057 [ 60.277491] binder: 7038:7046 ioctl c0306201 20007fd0 returned -14 [ 60.301619] binder: 7038:7071 ioctl c0306201 20004000 returned -14 [ 60.308353] binder: 7038:7057 ioctl c0306201 20007fd0 returned -14 2018/03/26 17:13:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000bc0)="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", 0x4f5, 0x0, &(0x7f00000000c0)={0x2}, 0x10) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/03/26 17:13:32 executing program 1: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe6ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 2018/03/26 17:13:32 executing program 4: syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f000004dff0)=[{0x6}]}) 2018/03/26 17:13:32 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x7, 0x70, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x20001, 0x0, 0x2, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7b, 0x100000001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1b7b, 0x0, 0x7, 0x1, @perf_config_ext={0x0, 0xd2}, 0x0, 0x1f, 0x0, 0x0, 0x7, 0x4}, r1, 0x5, r0, 0x8) [ 60.319449] binder: BINDER_SET_CONTEXT_MGR already set [ 60.327933] binder_alloc: binder_alloc_mmap_handler: 7038 20000000-20001000 already mapped failed -16 [ 60.351909] binder: 7038:7046 ioctl 40046207 0 returned -16 2018/03/26 17:13:32 executing program 4: syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:32 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffe, 0x0) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) 2018/03/26 17:13:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2018/03/26 17:13:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2018/03/26 17:13:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000001c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000000)='b`0]\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}}, 0x0, 0x1, 0x0, "111d6c1ba6050dd77cf3f2f09d1cb02a25988f1ea9c5be7d9801641c99b0def45ac625ada3316175a9d341111c181811e12c196e1ab99946e5e47e0594e415670d1330cd611c3974c55bb4d50000e111"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}}, 0x0, 0x0, 0x0, "411b3f1c08455047284bea37cf1ab7534db964b7958943c7db1b29d39d5221fac53a751f6f97a5f406473879b8171ae0d09086cb18d602ee628a185531290242710b99b8401772c02989f80629dc1d9e"}, 0xd8) 2018/03/26 17:13:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bcsf0\x00') [ 60.384410] audit: type=1326 audit(1522084412.535:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7088 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x454879 code=0x0 [ 60.417586] binder: undelivered TRANSACTION_COMPLETE [ 60.423399] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.469644] SELinux: unknown mount option [ 60.474761] binder: BINDER_SET_CONTEXT_MGR already set [ 60.483074] binder: 7108:7112 ioctl 40046207 0 returned -16 2018/03/26 17:13:32 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x0, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:32 executing program 4: syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00000000c0)={0x14, 0x1, 0x9, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:32 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/03/26 17:13:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000001c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000000)='b`0]\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/03/26 17:13:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 2018/03/26 17:13:32 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000001c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000000)='b`0]\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 60.494805] audit: type=1400 audit(1522084412.645:17): avc: denied { ioctl } for pid=7116 comm="syz-executor2" path="socket:[19791]" dev="sockfs" ino=19791 ioctlcmd=89a0 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 60.519473] SELinux: unknown mount option 2018/03/26 17:13:32 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/03/26 17:13:32 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) [ 60.658422] SELinux: unknown mount option 2018/03/26 17:13:32 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:32 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000300)=0xc) 2018/03/26 17:13:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) recvmsg(r0, &(0x7f0000004b80)={&(0x7f0000004740)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000004a80), 0x0, &(0x7f0000004b00)=""/66, 0x42}, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000004440)) sendmsg$netlink(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="001200000000000000000000fddbdf2555d2bd30911568f578b6222e8c4266f860a7bb05e53fda4b447781926397e42c088a0800240000000000000000000000000000000000", @ANYBLOB="a247c3028501299e477d665ea07c4c122add132ad44f199bed90af98d20f8393e049bf0a195a08f4ca445fd318abe9001f96da7d93d76808881d4b99cc57b15360ad054952299f99a8be9d7610938c0284d3d04e8358a9ba514fb5e6e3c27128d4ac7893cdd69d218b343e2fa392e2a7c49fa3e75487afaedce30d0db56d1682dd1960cba03d9edfd7ee110c211fc14bb481aa73a86753549c521d01435a6c4d7447d55f59ad25cb8ed365dbe70def14d8a7d0081711d74906c125370266bea731351cfe57c099733624ef8bfda26d6e85782e458210f2aaef5b09e3e59afdaac681d7d1212270d2d2c475c4ebdec23316d9a186debea497fba6c2b3f0838cc03a9dce70c8b8a4e2d91115d0f4c34a2cf3eefad0367ae191a69900b72925070e95ee4d7d8667f7a6984cda6289f938ab32529ce80a54dc9dd1850f5e07af5327fca7576407a8d64bacd340b501b4c6137fab5d359cc57181ad0936fd72825ab055db122f07b664deffc777955f26cd9059ecbc1cc60df1f335e67d7239e0cbc3d8e3b761521a3a0b364ab05524dbe9dbec9010dfc925055e7d6fb66282cde6996fec3c5548100c892587299f42882ce7340052ddba78be3f74577cbd259be400d91e67b85ced184f2c5bf37b09bf9750bd9a2a95b47aef25b59c1d4f32b8a853ad5fc473bd04a25642d3881267109182e3e4b622aea9a2c689bb12f34e985612e117fdc765336cff046fbc5206dfee2984c67799d38a6dd4f1ea6475ec175a3039e2ef5ce8c3c91453ea09123c8646238c903dbd3a48e03316d680a84c7caa7e5215a3096c386c6dac8c6029aa74873a0392ba80e0b9d37ad9e5691db47dc8685a43ade337c663b8fe1468d67abf95848e6905e77f2152516faf5f49a4e2baadda18f6d677ce01bb3794b9951d22e0eb59b3604a39ba23c32882e37dadd52f4a88f2da620968bfae1c1be6c7f50ecf6b6d403bc0aef1ca5dd9da6d0c61b4b10094ad9420b457994a74b2861f4f0842a9a07d05bc400c9bf4323969a9e8204274691d65cbd2535ac614c7a83e6ef4045cd457d36cda10583ea95fd5cb6cd45e06c9b94310d0d375309aee97f9003eac2fb9b11f15d93d7d73c129a7beb9c5871f5ea1c4ce596dfda3f9e07662185a85dfa86827716cdb6db96f5dcdeead3a300ca464625ee0aa1ab3f88c9a6b860fb0c058f39c82c711cf67146e4050ad3635c2d8d2028339859cad8ceeb65ee1ffaabc575413e45d19570952ffcb92fc81cd2a73dce68c4f76c7ea9e4a12e843dc8ded007701012b546bd34046f3c145704adc92b11868f30f06cf976937e43173e8aef5e62876287ae96db8521958494fbf25468070437613d0ca255070cc332e440bec50ca5b2da54bcf30f125c0001bcb1b8d57df58d77a17d23ee28f8d85d2fb2e047afd2ff1d8b1d736cb292b0b558e734910ad1c7ce69a7ec5d3fe185499bb92071c96fd888e12ea8716acbd95e53f864d216a7c03f18caaceb4a5b17e501544ba883679494993b33f1630a81bc0ad333f6cdce5760e32b08cf86f35fe3fbc14f05a8710088270a36f0a7fe904dc2291d756ba01b53411d4d7d0c147309b5fb9884f6bd60da6598d98f163a2753b30e49e46b1fca7272dabf45b12081842a45abbb09a21d42faadec11ef25f64ee5bdf02a4806d3a97c11860a0709d36ccaa4d6e4d31f822c68adfb50086ec62fadc43f2a3c95f3d8b33e88120299317ded44e8f4c68ef64c9644079849a15afeddc1f23e32741292f608263ea8742e2e00725ceeda21812fa3d3f5521603d63b41c8421dfdd0697b086cef31d921e3adbc0fbb484d05c0e4744735933df5fcc069950409b3c4a5522d8879d0e35fcc5d78fdf0453ddaa889ee6bee4375e8dd1c1c57f61205308cca310a77ae8549e9d1f1c818b13d9b6f6cf4cdc0f62c4dc095c4585cd346a57e47db20a9207048027b10bdb43f76c943e33a7d2fd7e8f7a0cb7bbbe5a4c1dc5430b4a526d0e547bfdfb1bd94dc6b81dd715e09d08c249c042494f49bf1d0f7acceee3a26a5c8a796e14aeb4d29e26487f09ffd587a1f11dd46b8e822071d06a7dbe7317cd6b5e68eb0cb6339805872778959585e84db22614e509472b76d8b7652cb3038b8b6ddef23cdadd9624e552959503a0c856abcdb32cbd99d7e756952818cad5a88c0691b04c63116a49550580811d3e200c75db6efa01077b24c8476fdf1169c3c900128e101186a10af669f0a0f10978c2ce351791f31c36e3abb4259f7124a174c4e360ccf0caf95e4f44e17d7b4672a31360f42b9266923930559d904d12af0e7a1975c5ef4ca26432f3e6f76839203ec49966663859fdad736f85cadd7587a22f0ecb22fb754690c5660ed6be8a699eb76f3caa2e5a4529ac2e2c0ac56d9678f748fffe5d40a4462e17fc3d9252adea458f5690a6860a8da0dc7c90ddd6a648e821b8342417d28b47de11d74b0b08310dd4a31cf1557949022f4ea6408ae0fb55cb68b940c4f8c697ade70f0a74227dead2cc4e1cdc8116921fe957ae634138f4e1995e7a2be708df785cb3f87fd52f79688b8c8f55b533a89391b46a9f5f4a9f8dba42489053e4132c10d41f8aee5edfaf006a2f356ac84c2099502354f30004b1161fb7c20ad8fcbeae63dfc64601b128977d5111a9d765e7f5674b6e6304c24e3cb52646eb63953e9ce103a6458f6e46200f152fe8deae8815be7e0548563a8a71f5453cacda58fb0e6b89c2ade53000cf90a15d959a99910a1e7d3973be3d548e592cba6e1fe0a2fd78e6d5cf5a5500a445842b740f9e1295af482459b26b6c41626ce97e7721de0f2462db5536c3f4d873f27f63f0508aea5b2ab91a5cad0ad0bef53e1c3266da442f43494c2abb9814b803ffe10740649bcab274d1acf759e77a02ef7ba85e1129e92c36043256c84c28e19b9db7735d37cfcac5ea3497657542bf275a3c5b2128273952ec1170b473c48a74062c9b7958c4d7aa155c3cd1ebda47c65a4f1ae1b59cf1ecab9ecdb8ded3b88ea9606d24d7783887534c936174fa8ebb5affdce56813a66c7ad9e030483dbca26bb3ab041dad4bc77045a1fc573196b63adf489e2906c8f7c7168c521c64117b20588f7d9b7f902a3672c991cdc05a9bbce5de7a0f8565f0dd871e317f21bfbff39e747d324b8b95e44974cbc59492268fa702840afde869621e4cd1d379bb6a96f1e7a7a9ed99ea7e84448e16d4e9391029575f60a9e69358d1cce9b5ff193b68c86192e40a9cd9c24472bb9672f8a746101e3da12d1c605f163c4eea8d010d7c1b84dba207bfd37eec530efd713fb326e496853582dbd3f7f8093a81669839705d6ba9c769b11a4e41ddd96eb388823a9ed982886239f928002e081f08b7c9dcec6f043863003225a080671658ffa09789d9c9d8cff80db7ccb41fee045043ef03926d9ad3b205b61a679b7391ce10867edfbbd93d383a2550f4a2678767007e86ffe1ef4c5bbbf7ccc7a271d3261c541c163ee07a45d62be79a600e1ed1037221ccd4e25bf3c9f59fd55be7a668aa2288dc115f36f2d024539094dadbc47a053e2f1742880231bf9da8bec618b66845eeedf51332af47cfaf85141fb8327fd3a9bb617edee2595295255a43e2b9875a486a5f0bcae06b34184417011b9d6db6e423b3ecea527613cb837db057767f849efa94ff05e2140942e12c82eff0a3a3776e80e05f3cf52fa403d9f976a5b56cd737b0d80bb3fd4409d9f29171b36a8a7b03744c3bd70aa62059168322f732713bfe98ed659904657b68cd8ff8f39c580ae71099a295e2424e312962ad2baa804a25bb94d3259e1727ceda5ffd05d53c22f73880b0e84e966221e07caf4dc1509968b47ee138075ac484a5752a62d07cc241edb719029822bf480f5b9dda2c034e0735e788c76ea2d6d01d98a349d35dcd8dfabfabfd6316c64fe8c67191fe594ddd581e0a7fc9474cf0c522d894d6c1d46c8974a35de5b9984053d57953ee64b224cbe6e3cfbfe071c7a57b02a1ac26cfc69daa9660c5b5a8e30aab93422c15b9682db0d553b5945f9c56f66cc10d716b45a38299ef61994ed1f8006b2801cdfad7cf2ac7f394c7fb8eb8d812b10e7dcd6a1bbb74e47641b7c570648a18f97aa9b8a5a2699c3721e26e44a3852f734ef617a09fac3818f1b889663fcfab1a80ee8f1c9375758cdb4b89b390fae79c08ecf4ed2546ee74e0f4003d8de880407415a4809bb9aa104ec46a41e833792aadbf9da1187f135da7db2b9bfe75caf959568b19bdaf27b965d7de3613abe1ca2f95bca1089a8e7e880a7143ae66b4cf523d896638f7e523b30b68b76f2d711085592fcca57ac677950fee619849f4e9f2d7124d04ba7989cd54f94e71a67dc61031860726d9acc45fb5ccae4be3adc33403e026d49d678518463dbee56f0e476b44d0abb6b30612523d1d636facd506fc5f6158d632e0be101e63f0b032ebfcab885b55ae0c204529ed56d19a919a0b57e82c75e69ce0198f86cec68c01f8cfde9d5da58ff5e0af02a4601f9b1a05b412488a16a582c1425bd3e40c5530734f92ef6f707cd06ba531de24822936af54733f9cccf8d844337ebae692ae40520bbb778af1bc73c35131a8daee63e066ea66ab588b06b28478d810a8bb94f2112204406725bb52916907970040e43e566115555151752e38a5a557e4d140b43bf0f149760a1720467b85d5ece567bdeec2aaed0daeaddd81203b1ab4648cfb1971ab34c5c96606529c48156355ec4cd3801518676e90ed484f9b2fd3645294b70b91c2fda0d1d2007e4c682e032f776e6894489defb6367c4d5e4302403b048396db68e9d5fc33189a5751723869042150aed05342387dcc00b6f192d1d43c3dc0da1e86d70c476196c17391795ace2e0d8847cb0e7ae2aa750f9ffb568c5d27761f58ec0cb094e35a902ccbe5787e31404a69be9937706432a1c097fc95db452d21dd5b5841dd4f85ea432a4b1dc73acdb4741c2d5b58abe534a0ec7e739253b4e07d4cf7383fcb75316276e78b3f0d9211945dfa9a31df6cb4914a913accdb5f4d0942769764a21899a69471b9c1f4af0596ca12c3c2319440f016d518e0e79c82488e262dc13b29fb67b6b3d957f473c7374d83798dc0b873264c7601cd160216d1ba6f081e6bd0590c7381cb066409491b283698b7f5b489b41f9e30a188f3c1c41542697dad125d4da49b8a30ed756eeeb5ed9075bce5ef51a0e3dee7cb318135d77a1ce5422cb6839fdeb582ff72c3bb445a7474cc79ddfe3177e968159a5159f281c180f5fdb32d026b03616423d681b1c23e9053f479f31c7c17637bdcc9a5be6ca658b58e1ff792328e30e79c154d5341f422f6de0cb90ab64d1596196b1119ac223b08ae8994bf8898784666fc6b93f179f9812749166fcc17fe8f9f818104d9ca06d6114bd91374c8ea204f9eead63b4fdb9720d3803942b20bccb0278f8787858713623d1bdf7ab57fca4d48dad395d9b13a1339a4234aa5eb79f9b32f5c09d50bf6c74f746630b5582f2b5867232f9e41c411273ddeb43607f65653c0254056de337b897599875b1f6433e1ce72c320eb9de92d11b23197a4a199a934b81bf4e31105fb52a68c30b168e049e8a368676435dd5c89e7f1736c8d9135c15b162c75f218e10b0261ef57d0aae3ef48a9b73dce5440b56d3e7086f83f8cbf57adf6572baa45ec2b868139b329ac1de8f7ea72586c7fb2c9676eccf1c1ba9c245f8955b9b8519e3264857c221f60361f938eccb0174d85ea4be5bfef6608005d00", @ANYBLOB="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"], 0x3}, {&(0x7f0000005040)={0x10, 0x32, 0x201, 0x0, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x40}, 0x0) 2018/03/26 17:13:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 2018/03/26 17:13:32 executing program 7: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000180)='bcsf0\x00') 2018/03/26 17:13:32 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000001c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000000)='b`0]\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) [ 60.780681] audit: type=1400 audit(1522084412.935:18): avc: denied { create } for pid=7156 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 60.849270] audit: type=1400 audit(1522084413.005:19): avc: denied { read } for pid=7156 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 62.004114] IPVS: Creating netns size=2552 id=10 2018/03/26 17:13:35 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) sendfile(r1, r0, &(0x7f0000000280), 0x102000003) 2018/03/26 17:13:35 executing program 5: 2018/03/26 17:13:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x0, &(0x7f0000000580)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000e00)={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x4e23}, 0x0, [0x5]}, 0x5c) 2018/03/26 17:13:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000e00)={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x5c) close(r0) 2018/03/26 17:13:35 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/210, 0xd2, 0x0) 2018/03/26 17:13:35 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:35 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:35 executing program 1: 2018/03/26 17:13:35 executing program 5: [ 63.161407] SELinux: unknown mount option 2018/03/26 17:13:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="ff", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000140)="0e", 0x1}], 0x1, &(0x7f0000001240)=ANY=[]}}], 0x1, 0x0) 2018/03/26 17:13:35 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x0, @time}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 2018/03/26 17:13:35 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) 2018/03/26 17:13:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3afa31de40b14bf19ace3fa71bb9f9793afd75e15d5eca1403556dc5346ac0ea419ef0d73490e479b1b73bffc63a22fc7a6d698fbdaebfb8f29ac60cfdd6fbc017031bc443a766067457a6ec995fd4b7df3c85d636175f5041a42b6a84393f730c12bd79f07397bd93240c428b21e87", 0x150, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) write(r0, &(0x7f0000000080)="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", 0x379) 2018/03/26 17:13:35 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:35 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) [ 63.714731] IPVS: Creating netns size=2552 id=11 2018/03/26 17:13:37 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(0xffffffffffffffff, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:37 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:37 executing program 7: 2018/03/26 17:13:37 executing program 1: 2018/03/26 17:13:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000004b80), 0x0) sendmmsg(r1, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)='>', 0x1}], 0x1, &(0x7f0000000240)=ANY=[]}}], 0x1, 0x0) 2018/03/26 17:13:37 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) 2018/03/26 17:13:37 executing program 5: 2018/03/26 17:13:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3afa31de40b14bf19ace3fa71bb9f9793afd75e15d5eca1403556dc5346ac0ea419ef0d73490e479b1b73bffc63a22fc7a6d698fbdaebfb8f29ac60cfdd6fbc017031bc443a766067457a6ec995fd4b7df3c85d636175f5041a42b6a84393f730c12bd79f07397bd93240c428b21e87", 0x150, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) write(r0, &(0x7f0000000080)="3e9674a87fe662755bb5512a02a21979b4d739f1f1de2e0cfb5cc94d213d141c466152512865c9aad5b518db7d58cc19be6180bfde47ce83d117c900ff604dad8c4af2fbe95a8a6c99e6326e64d61b80e6d2846ac6f8835f8ba02644c432f90b07803a80603b7268b91d7d46b4f90673735e460d80e631d54862912536364dab8efc2d4a7def5358ccd36d04da0dfb633d22578aa7243a2d94c7a16f048ecc3f729e02f5459fe92bb8aa1961426dd6ed3130a523f344708764b98768edad3b0ad5f8d0048809d8ee5572a448276e6a41e804990e7418df8d286dbad5d29031f2696a9d6a98d1811cfb9d52f40341eafdda854602e07ae0e5394bd06772ed4eda08db8893c6c202f2a93a0d7cc3cf372c4eda2cf98b21d9489b86594e6c8af9b6a1f3d462960de8f554d04154d4157e4958b62d8efde6417e111db66286020b9ba471d7f1b24adb80e70ca4bda1073be4c26da27ebb93149718798a57e154ff5cfafab4b152d6c5bf4c054d6c82fe47262a2ded619d0c4dc57d4ca50d44ad10abf0e31419da12ddfb73b648073a69ea686bae55ef0bccd32289225d1eb2fadf5d73908aaa081d3b29ffe2e2962fe2a60abb3aa5450f1e1548420ded819752cb00b7b5a69210c8ea4f0f2ea767430ead2b10bb184eae0972f212d2bdfefa0f2974133404841313af6d8b6e709d4315d1902c0b4386b3e286cc31c28746896eb382a9ffb35c8b43a2801a5c3f63cb7fc15bf7072f007eb29214864d324d3e55b9915c6ed21b9eb3d64285c1e799b60851b96002f547f0d8192071bcae7b8f4e48969e2ae6fa3d455b5b39d6bf45d515aee3c71226b73b3eec27f6812d38c3fefc797b371522641d086f4c69a48cf9facdb43334eca68f80e2c01c15526faa961b8d877d7e16c766b7237a9528226510c7cf0d71a3f360a995af133db64867881677b25daa3f4a95386d08bc91c1f5cd7bc62ff8fa51a28b7cc7ca2527a7c828eead8af5bb05818186cf66bf54a17a9dc63f5ffdc22779429e32b2a054dd9e91ba3b283d05963e01623fc580d7970bf67367966abfaca94e4143342cde752c1055442e2f0188269d0d3f774b24cab35f5ce5b24e23a7a0fbca063aa1c42c1107899753c70cb70a57a0e8862a9559bca896a296f57d47337d41ffb03f96ba29e8fbba24fe6d8e1872f414bdc4b1b2bd794c231ce52dc7741e2b94a60a3d313323f0b7be50a5ed7a3e30956104fef108fb2a4b54a730a0443e66a4f5", 0x379) 2018/03/26 17:13:37 executing program 5: 2018/03/26 17:13:37 executing program 7: 2018/03/26 17:13:37 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:37 executing program 5: 2018/03/26 17:13:37 executing program 7: 2018/03/26 17:13:37 executing program 3: 2018/03/26 17:13:37 executing program 7: 2018/03/26 17:13:37 executing program 2: 2018/03/26 17:13:37 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(0xffffffffffffffff, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:37 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:37 executing program 3: [ 65.364002] IPVS: Creating netns size=2552 id=12 2018/03/26 17:13:38 executing program 2: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000000c0)="1f000000160007f2000094ffa4000800000000000000000000000000f30004", 0x1f) 2018/03/26 17:13:38 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(0xffffffffffffffff, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 5: 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 2: 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 5: 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 2: 2018/03/26 17:13:38 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 5: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 2: 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 5: 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 5: 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 2: 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 5: 2018/03/26 17:13:38 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:38 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:38 executing program 2: 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 2: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 5: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 2: 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 5: 2018/03/26 17:13:38 executing program 2: 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:38 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 5: 2018/03/26 17:13:38 executing program 2: 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 0: 2018/03/26 17:13:38 executing program 2: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:38 executing program 5: 2018/03/26 17:13:38 executing program 3: 2018/03/26 17:13:38 executing program 1: 2018/03/26 17:13:38 executing program 7: 2018/03/26 17:13:39 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000), 0x0, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:39 executing program 1: 2018/03/26 17:13:39 executing program 2: 2018/03/26 17:13:39 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x20000000000002ac, &(0x7f0000000140)}) 2018/03/26 17:13:39 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0xffff, 0x4) ftruncate(r0, 0x0) 2018/03/26 17:13:39 executing program 5: 2018/03/26 17:13:39 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x2f}) 2018/03/26 17:13:39 executing program 3: 2018/03/26 17:13:39 executing program 1: 2018/03/26 17:13:39 executing program 5: 2018/03/26 17:13:39 executing program 2: 2018/03/26 17:13:39 executing program 1: 2018/03/26 17:13:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/03/26 17:13:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/26 17:13:39 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@rand_addr, @multicast1}, &(0x7f0000000040)=0xc) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/03/26 17:13:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/03/26 17:13:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) 2018/03/26 17:13:39 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) 2018/03/26 17:13:39 executing program 7: nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000000)) mlockall(0x1) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f000008b000/0x3000)=nil, 0x3000, 0x0) 2018/03/26 17:13:39 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00'}) 2018/03/26 17:13:39 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000), 0x0, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:39 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0xffff, 0x4) ftruncate(r0, 0x0) 2018/03/26 17:13:39 executing program 2: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000079cff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000e70000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) 2018/03/26 17:13:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/03/26 17:13:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 66.961833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 66.979407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 2018/03/26 17:13:39 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000003c0)={'ipvs\x00'}, &(0x7f0000000400)=0x1e) 2018/03/26 17:13:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x1c, 0xa, 0x100000000000006, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1}, 0x0) 2018/03/26 17:13:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00') 2018/03/26 17:13:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_mr_cache\x00') sendfile(r0, r0, &(0x7f0000301ff8), 0xffffffff) 2018/03/26 17:13:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='.', &(0x7f0000000200)='..') 2018/03/26 17:13:39 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x50, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000040)=0x1e) 2018/03/26 17:13:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='btrfs\x00', 0x0, 0x0) 2018/03/26 17:13:39 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x2691d0877f1cca9b}) 2018/03/26 17:13:39 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000), 0x0, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:39 executing program 1: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001300ff10fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/03/26 17:13:39 executing program 7: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)) getgid() lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000003040)) lstat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000031c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffeffffe, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 2018/03/26 17:13:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) 2018/03/26 17:13:39 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe2000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x0, 0x0, 0x20000000002, 0x1}, 0x20) 2018/03/26 17:13:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x8080a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x5452, &(0x7f0000000000)={"65727370616e3000000000000200"}) 2018/03/26 17:13:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001340)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, r1, 0x221, 0x0, 0x0, {0x3}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x18}, 0x1}, 0x0) 2018/03/26 17:13:39 executing program 0: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) sync() accept4$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000000)=0x384, 0x80800) socketpair$inet(0x2, 0x80806, 0x0, &(0x7f0000000200)) 2018/03/26 17:13:39 executing program 1: 2018/03/26 17:13:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0xfffffffffffffffd, 0x0) r1 = memfd_create(&(0x7f0000000000)='%\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/03/26 17:13:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000040)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[], {0x8100}}], {@llc_tr={0x11, {@llc={0x0, 0x0, "ff"}}}}}, &(0x7f0000000100)) 2018/03/26 17:13:39 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6f6f6d5f61646a00aceb048ace6a7fe4299541856162c2caee4ddcec07751e2f54b9cbf0357fa60e7f8e7f6304370006f19190212c4a9e569adb10d57a4df1ac9de547a489ee151288214d250681714c92c72529697f2a774835bb6f09301d08f3c72fbbd90fe9775e40875adddc5c6c9f923b2d5899a66add2811c07319d9ddba60e2b798d5dbc662") setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x4e23, 0x5, @loopback={0x0, 0x1}}}, 0x0, 0x8, [{{0xa, 0x4e20, 0x20, @mcast2={0xff, 0x2, [], 0x1}, 0x2709a7bf}}, {{0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, [], 0x16}, 0x2}}, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}, {{0xa, 0x4e24, 0x3}}, {{0xa, 0x4e21, 0x20, @mcast2={0xff, 0x2, [], 0x1}, 0x40}}, {{0xa, 0x4e22, 0x1}}, {{0xa, 0x4e21, 0x3f, @local={0xfe, 0x80, [], 0xaa}, 0x400}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x5}}]}, 0x490) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd, 0x20011, r1, 0x0) pwrite64(r0, &(0x7f0000000280)='-', 0x1, 0x0) 2018/03/26 17:13:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') pread64(r0, &(0x7f0000002440)=""/4096, 0x1000, 0x0) socket(0x0, 0x0, 0x0) 2018/03/26 17:13:39 executing program 5: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)=@updpolicy={0xb8, 0x1d, 0x11, 0x0, 0x0, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}}, 0xb8}, 0x1}, 0x0) 2018/03/26 17:13:39 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b00)={'erspan0\x00'}) 2018/03/26 17:13:39 executing program 7: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 2018/03/26 17:13:39 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/03/26 17:13:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x2881) 2018/03/26 17:13:39 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:39 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) [ 67.391742] netlink: 168 bytes leftover after parsing attributes in process `syz-executor5'. [ 67.405925] syz-executor4 (8013): /proc/7997/oom_adj is deprecated, please use /proc/7997/oom_score_adj instead. 2018/03/26 17:13:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') [ 67.434109] netlink: 168 bytes leftover after parsing attributes in process `syz-executor5'. 2018/03/26 17:13:39 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='comm\x00') 2018/03/26 17:13:39 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 2018/03/26 17:13:39 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capget(&(0x7f00000016c0)={0x19980330, r0}, &(0x7f0000001700)) 2018/03/26 17:13:39 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000085000)='./control\x00', 0x28042, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000273ff6)='./control\x00', 0x80000c12) readv(r1, &(0x7f0000b25000)=[{&(0x7f0000fb2000)=""/128, 0x80}], 0x1) writev(r0, &(0x7f0000ecc000)=[{&(0x7f00000d9000)="f9", 0x1}], 0x1) 2018/03/26 17:13:39 executing program 4: r0 = socket$inet(0x2, 0x803, 0x5) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000680)={0x11, @multicast2=0xe0000002, 0x0, 0x0, 'lc\x00', 0x0, 0x8, 0x2c}, 0x2c) 2018/03/26 17:13:39 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 2018/03/26 17:13:39 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000074f000)='syscall\x00') pread64(r0, &(0x7f0000157f23)=""/221, 0xdd, 0x0) 2018/03/26 17:13:39 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000deaff6)='numa_maps\x00') readv(r0, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/146, 0x92}], 0x1) 2018/03/26 17:13:39 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000830000)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) preadv(r0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/255, 0xff}], 0x1, 0x0) 2018/03/26 17:13:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e7fcffffffa3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/03/26 17:13:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r0, 0x3, 0x0, 0x5) 2018/03/26 17:13:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ef5000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x30000001, &(0x7f0000b23000)={0xa, 0x2}, 0x1c) sendto(r0, &(0x7f0000fca000), 0xfdbf12558da8f98b, 0x0, &(0x7f0000ec6f80)=@generic={0x0, "8921ef79394a92d7c3e502b2429f21f76f854ff1ff288cddc58d6adfd9b41c0428c73faa536977e8159391da5b5693610a5c3b99a7749776a4fa9fe9256804488862269804a60a2e793127079bcf9b9e7ec52d6fd2b6d28138b24ab90cec254620a715c57ebc136f04080036cfbfea78f5a737fa0892ab39813f23d30a5a"}, 0x80) 2018/03/26 17:13:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/03/26 17:13:39 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r1 = dup(r0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)) tkill(r2, 0x16) 2018/03/26 17:13:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000272ff7)='../file0\x00') mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000400)='ubifs\x00', 0x1004, 0x0) chroot(&(0x7f0000000080)='../file0\x00') [ 67.575717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 67.601112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 2018/03/26 17:13:39 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) [ 67.627081] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 67.643964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 2018/03/26 17:13:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc) 2018/03/26 17:13:39 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000e78fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r0, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14}, 0xfff1}, 0x1}, 0x0) 2018/03/26 17:13:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/03/26 17:13:39 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0x0) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000272ff7)='../file0\x00') mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000400)='ubifs\x00', 0x1004, 0x0) chroot(&(0x7f0000000080)='../file0\x00') 2018/03/26 17:13:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000049000)='/dev/snd/seq\x00', 0x0, 0x100000000008a002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000014d000)={0x0, 0x0, 0x0, "e06594d232d12448b0c30905cebdbd09c0a763e204c2a32152615df55d05092d3c12ddd25bad4d127eb802407bc091842621790b637ae5ed23d8b2adf92fc9dd"}) writev(r0, &(0x7f0000000280)=[{&(0x7f000093b000)="2900000018003109004a0001000c00070a0000000a00ff0680000002", 0x1c}], 0x1) 2018/03/26 17:13:39 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x2', 0x3) 2018/03/26 17:13:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)) 2018/03/26 17:13:39 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/203, 0xcb}, {&(0x7f0000001300)=""/95, 0x5f}, {&(0x7f0000001380)=""/41, 0x29}, {&(0x7f0000001400)=""/160, 0xa0}], 0x4, 0x0) 2018/03/26 17:13:39 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541a, &(0x7f0000062000)) [ 67.781583] IPv4: Oversized IP packet from 127.0.0.1 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20013, r0, 0x0) 2018/03/26 17:13:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000400)=@getlink={0x30, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, [@IFLA_INFO_KIND={0xc, 0x1, 'user{\x00'}]}]}, 0x30}, 0x1}, 0x0) 2018/03/26 17:13:40 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x3, 0xb28, [0x20000200, 0x0, 0x0, 0x20000c08, 0x20000c38], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'bcsf0\x00', 'bond0\x00', 'ip6_vti0\x00', 'ifb0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @link_local={0x1, 0x80, 0xc2}, [], 0x9a0, 0x9a0, 0x9d8, [@among={'among\x00', 0x898, {{0x0, 0x14ac00000, 0x0, {[], 0x3, [{[], @multicast2=0xe0000002}, {[], @rand_addr}, {[], @rand_addr}]}, {[], 0x7, [{[], @dev={0xac, 0x14, 0x14}}, {[], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @dev={0xac, 0x14, 0x14}}, {[], @rand_addr}, {[], @broadcast=0xffffffff}, {[], @multicast2=0xe0000002}, {[], @remote={0xac, 0x14, 0x14, 0xbb}}]}}}}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x7, 0x0, 0x0, 'ip_vti0\x00', 'teql0\x00', 'vlan0\x00', 'gre0\x00', @random="6631168998f8", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}]}, 0xba0) 2018/03/26 17:13:40 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0x0) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:40 executing program 2: 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f00000000c0)="2300000024009115460700000009e001010000c2001000000b40000000000000323853", 0x23}], 0x1}, 0x0) 2018/03/26 17:13:40 executing program 3: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000080)=[{}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) 2018/03/26 17:13:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10, 0xf}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0x0, 0x6, 0x1}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0x0) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 2: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 2: 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 2: 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(0xffffffffffffffff, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 2: 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(0xffffffffffffffff, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(0xffffffffffffffff, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 5: 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 7: 2018/03/26 17:13:40 executing program 4: 2018/03/26 17:13:40 executing program 1: clone(0x200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000280), &(0x7f0000000580)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000653ff3)='attr/current\x00') write(r1, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) 2018/03/26 17:13:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=ANY=[@ANYBLOB="1c00000018002fe0192f8b4cb3a900000a0000f10000000600000000"], 0x1}, 0x1}, 0x0) 2018/03/26 17:13:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000001c0), 0x4) 2018/03/26 17:13:40 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:40 executing program 7: r0 = memfd_create(&(0x7f0000ac5000)='\x00', 0x0) write(r0, &(0x7f0000000000)='H', 0x1) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f000038cff0), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)="2f70726f632f303f76732f73796e635f708072736973747a6d6f646500", 0x2, 0x0) 2018/03/26 17:13:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x400080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) 2018/03/26 17:13:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ab9ff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000f66ffc)=0x80000004) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fdd000)=0x2) 2018/03/26 17:13:40 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:40 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, 0xffffffffffffffff) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000100f8ffff01000000001000"], 0x10}, 0x0) 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:40 executing program 1: 2018/03/26 17:13:40 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x200000000003) dup3(r1, r0, 0x0) 2018/03/26 17:13:40 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)="2f70726f632f303f76732f73796e635f708072736973747a6d6f646500", 0x2, 0x0) 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0, 0xc1a6}], 0x1, 0x0) 2018/03/26 17:13:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280), 0x0) 2018/03/26 17:13:40 executing program 1: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlock(&(0x7f00002c5000/0x1000)=nil, 0x1000) 2018/03/26 17:13:40 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, 0xffffffffffffffff) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:40 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) 2018/03/26 17:13:40 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)="2f70726f632f303f76732f73796e635f708072736973747a6d6f646500", 0x2, 0x0) 2018/03/26 17:13:40 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) 2018/03/26 17:13:40 executing program 3: 2018/03/26 17:13:40 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:40 executing program 0: 2018/03/26 17:13:40 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)="2f70726f632f303f76732f73796e635f708072736973747a6d6f646500", 0x2, 0x0) 2018/03/26 17:13:40 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x200000000003) dup3(r1, r0, 0x0) 2018/03/26 17:13:41 executing program 3: 2018/03/26 17:13:41 executing program 0: 2018/03/26 17:13:41 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) ftruncate(0xffffffffffffffff, 0x40001) sendfile(r0, 0xffffffffffffffff, &(0x7f000000a000), 0x2) 2018/03/26 17:13:41 executing program 7: 2018/03/26 17:13:41 executing program 5: 2018/03/26 17:13:41 executing program 4: 2018/03/26 17:13:41 executing program 1: 2018/03/26 17:13:41 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, 0xffffffffffffffff) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:41 executing program 3: 2018/03/26 17:13:41 executing program 7: 2018/03/26 17:13:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r0, &(0x7f00009fc000), 0x5fa, 0x0, &(0x7f0000357000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/03/26 17:13:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/03/26 17:13:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0), 0x8) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/03/26 17:13:41 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x30) 2018/03/26 17:13:41 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00004fb000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "acf42f48ef6ff65ec6f1b21626c8240b1655eaf512a8d15a16e87caa0f5aec8b04eb3ef9e365c6350f55010e6f736e26332f1443385abcca5c894515b8307a8a", "3ff8000000001a0000015a86d4a42e53e2aa636053b1c18db1bca80a1ae0cb65adcbd3df5de03b96f78b55f6b9a12bbbb783950ee77f25fcde0df5506c142cd3", "e4391ec9e07e01113700010000000080001580d34e9ae8d3b20ac260004ca719"}) 2018/03/26 17:13:41 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) ftruncate(0xffffffffffffffff, 0x40001) sendfile(r0, 0xffffffffffffffff, &(0x7f000000a000), 0x2) 2018/03/26 17:13:41 executing program 3: creat(&(0x7f000009aff8)='./file0\x00', 0x0) acct(&(0x7f0000000180)='./file0\x00') 2018/03/26 17:13:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/03/26 17:13:41 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) ftruncate(0xffffffffffffffff, 0x40001) sendfile(r0, 0xffffffffffffffff, &(0x7f000000a000), 0x2) 2018/03/26 17:13:41 executing program 0: r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x0, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) 2018/03/26 17:13:41 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 2018/03/26 17:13:41 executing program 7: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:41 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) 2018/03/26 17:13:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040005}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000a0bff0)={0x0, 0xebe}, 0x8) 2018/03/26 17:13:41 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:41 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00004fb000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, "acf42f48ef6ff65ec6f1b21626c8240b1655eaf512a8d15a16e87caa0f5aec8b04eb3ef9e365c6350f550e0e6f736e265abe1443385abcca5c894515b8307a8a", "3ff8000000001a0000015a86d4a42e53e2aa636053b1c18db1bca80a1ae0cb65adcbd3df5de03b96f78b55f6b9a12bbbb783950ee77f25fcde0df5506c142cd3", "e4391ec9e07e01113700010000000080001580d34e9ae8d3b20ac260004ca719"}) 2018/03/26 17:13:41 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:41 executing program 7: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000c00)) 2018/03/26 17:13:41 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000300)=0xfffffc, 0x10ff) 2018/03/26 17:13:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/03/26 17:13:41 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000e40fee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/03/26 17:13:41 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:41 executing program 0: r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x19, 0x201, 0x0, 0x0, {0xa, 0x94}}, 0x316}, 0x1}, 0x0) 2018/03/26 17:13:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf1e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x0, @multicast1=0xe0000001, 0x4e22, 0x3, 'sh\x00', 0x6}, {@loopback=0x7f000001}}, 0x44) 2018/03/26 17:13:41 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:41 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000400)) 2018/03/26 17:13:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/03/26 17:13:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, &(0x7f00000003c0)) 2018/03/26 17:13:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = creat(&(0x7f00000005c0)='./file1\x00', 0x0) r2 = dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) pwrite64(r2, &(0x7f0000000c00)="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", 0x600, 0x0) 2018/03/26 17:13:41 executing program 0: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='configfs\x00', 0x1001, &(0x7f0000a06000)) r1 = syz_open_procfs(0x0, &(0x7f00000c3000)="6d6f756e74696e666f00a4") sendfile(r1, r1, &(0x7f0000000040)=0x800000, 0x408) 2018/03/26 17:13:41 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x10, "937187ed09572169d84182634235aec2"}, &(0x7f0000000180)=0x18) 2018/03/26 17:13:41 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000480)}}, {{&(0x7f00000004c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/43, 0x2b}}], 0x2, 0x0, &(0x7f0000000bc0)={0x0, r1+10000000}) 2018/03/26 17:13:41 executing program 5: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 2018/03/26 17:13:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="f650aaf2115a5af2146c319c1588ed96", 0x10, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f0000000140)="5fbfa0dedc36443f2807a3f7b80c5b3f83366cae748f", 0x16) 2018/03/26 17:13:41 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000), 0x2) 2018/03/26 17:13:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000800)=ANY=[], 0x0, &(0x7f0000000040), 0x0, &(0x7f0000003ac0)=""/214, 0x7a}}], 0x1, 0x0, &(0x7f0000003c00)) listen(r0, 0x7) accept4(r0, 0x0, &(0x7f0000000000)=0x31c, 0x0) 2018/03/26 17:13:41 executing program 5: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 2018/03/26 17:13:41 executing program 4: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='configfs\x00', 0x0, &(0x7f0000a06000)) r0 = syz_open_procfs(0x0, &(0x7f00000c3000)="6d6f756e74696e666f00a4") sendfile(r0, r0, &(0x7f0000000040)=0x800000, 0x408) 2018/03/26 17:13:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x4000000004005) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4134e475824fbfaeefb278580e4aedd886c0b629cd32c56ebff94329c3a32a4b8c171676b94083085709923fd77ead8ca0073183b09c62b90673944ded2f276e", "49710f290076931228cd8c92a1b9375555874f087c556b616155647a2732f399"}) 2018/03/26 17:13:41 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r4) tkill(r0, 0x16) 2018/03/26 17:13:41 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000), 0x2) 2018/03/26 17:13:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f00004c1ff4)='./file0/bus\x00', 0x0) lseek(r0, 0x0, 0x2) 2018/03/26 17:13:41 executing program 3: pipe(&(0x7f00005db000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00005e2000)=[{&(0x7f00002ef000)="f8", 0x1}], 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001000)) vmsplice(r1, &(0x7f00005d8000)=[{&(0x7f000021efe9)='3', 0x1}], 0x1, 0x0) 2018/03/26 17:13:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x109, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:41 executing program 5: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 2018/03/26 17:13:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) 2018/03/26 17:13:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x4000000004005) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4134e475824fbfaeefb278580e4aedd886c0b629cd32c56ebff94329c3a32a4b8c171676b94083085709923fd77ead8ca0073183b09c62b90673944ded2f276e", "49710f290076931228cd8c92a1b9375555874f087c556b616155647a2732f399"}) 2018/03/26 17:13:41 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000), 0x2) 2018/03/26 17:13:41 executing program 7: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000032fe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, 0x1c) 2018/03/26 17:13:41 executing program 4: creat(&(0x7f000078dff8)='./file0\x00', 0x0) mount(&(0x7f0000340ff8)='./file0\x00', &(0x7f0000ff8ff8)='./file0\x00', &(0x7f0000426000)='tmpfs\x00', 0x0, &(0x7f0000ece000)) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2018/03/26 17:13:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 2018/03/26 17:13:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) 2018/03/26 17:13:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 2018/03/26 17:13:41 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, 0x0) tkill(r0, 0x16) 2018/03/26 17:13:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000690ffc)=0x77, 0xfc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00007f3ffb)='yeah\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) 2018/03/26 17:13:41 executing program 0: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) [ 70.734051] IPVS: Creating netns size=2552 id=13 2018/03/26 17:13:43 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000bc0)="1e", 0x1, 0x0, &(0x7f00000000c0)={0x2}, 0x10) 2018/03/26 17:13:43 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r0, 0x40001) sendfile(0xffffffffffffffff, r0, &(0x7f000000a000), 0x2) 2018/03/26 17:13:43 executing program 4: unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000c6bff8)='.', &(0x7f000092f000)='./file0\x00', &(0x7f00000003c0)='fusectl\x00', 0x0, &(0x7f000002f000)) poll(&(0x7f00007a7fe8), 0x0, 0x7f) rmdir(&(0x7f0000d19000)='./file0\x00') 2018/03/26 17:13:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 2018/03/26 17:13:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="9673656c696e7578657468315d23656d3000", 0xffffffffffffffff) 2018/03/26 17:13:43 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, 0x0) tkill(r0, 0x16) 2018/03/26 17:13:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x4) 2018/03/26 17:13:43 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x0, 0xffffffffffffffff, r0, 0x0) 2018/03/26 17:13:43 executing program 1: perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b86fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00005ee000/0x800000)=nil, 0x800000, 0x0) munlockall() 2018/03/26 17:13:43 executing program 0: r0 = socket$inet(0x11, 0x40000000000803, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @local}}, 0x20, &(0x7f0000000080)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x107, 0xf, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=[{}, {}, {}]}, 0x108) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000200)=""/201, 0xfffffffffffffc50}], 0x2, &(0x7f00000000c0)=""/34, 0x22}, 0x0) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc_llcp={0x27, 0x9, 0x0, 0x0, 0x0, 0x0, "f0aeec0d840130e5c5485e44a7627f9a8864abed4d4460dd5b1a0182c6c84a143e64f31d1c11349c949054860b9c131950a610e2736612827582530c3c1df9"}, 0x60, &(0x7f0000000380), 0x9c}, 0x0) 2018/03/26 17:13:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:43 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r0, 0x40001) sendfile(0xffffffffffffffff, r0, &(0x7f000000a000), 0x2) 2018/03/26 17:13:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/03/26 17:13:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, r0, 0x0) [ 71.750339] SELinux: unknown mount option [ 71.778203] SELinux: unknown mount option [ 71.789567] binder: 8715:8717 ERROR: BC_REGISTER_LOOPER called without request [ 71.813202] binder: 8715:8717 got transaction with invalid fd, -1 [ 71.819912] binder: 8715:8717 transaction failed 29201/-9, size 546-280 line 3239 [ 71.829288] binder: send failed reply for transaction 23 to 8715:8719 [ 71.848545] binder_alloc: binder_alloc_mmap_handler: 8715 20000000-20002000 already mapped failed -16 [ 71.859140] binder: BINDER_SET_CONTEXT_MGR already set [ 71.859150] binder: 8715:8719 ERROR: BC_REGISTER_LOOPER called without request [ 71.860464] binder: 8715:8719 unknown command 76 2018/03/26 17:13:44 executing program 1: perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b86fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00005ee000/0x800000)=nil, 0x800000, 0x0) munlockall() 2018/03/26 17:13:44 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r0, 0x40001) sendfile(0xffffffffffffffff, r0, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000272ff7)='../file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x0) 2018/03/26 17:13:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:44 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, 0x0) tkill(r0, 0x16) 2018/03/26 17:13:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00004fb000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "acf42f48ef6ff65ec6f1b21626c8240b1655eaf512a8d15a16e87caa0f5aec8b04eb3ef9e365c6350f55010e6f736e26332f1443385abcca5c894515b8307a8a", "3ff800000000000000015a86d4a42e53e2aa636053b1c18db1bca80a1ae0cb65adcbd3df5de03b96f78b55f6b9a12bbbb783950ee77f25fcde0df5506c142cd3", "e4391ec9e07e01113700010000000080001580d34e9ae8d3b20ac260004ca719"}) 2018/03/26 17:13:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/03/26 17:13:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008fa8), &(0x7f0000004000)}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) [ 71.860472] binder: 8715:8719 ioctl c0306201 2000a000 returned -22 [ 71.860530] binder: 8715:8720 got reply transaction with no transaction stack [ 71.860538] binder: 8715:8720 transaction failed 29201/-71, size 546-280 line 2927 [ 71.898496] binder: 8715:8717 ioctl 40046207 0 returned -16 [ 71.906972] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.912501] binder: undelivered TRANSACTION_ERROR: 29190 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) [ 71.930138] binder: undelivered TRANSACTION_COMPLETE [ 71.939901] binder: 8727:8732 ERROR: BC_REGISTER_LOOPER called without request [ 71.944423] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.951279] binder: BINDER_SET_CONTEXT_MGR already set [ 71.951286] binder: 8728:8736 ioctl 40046207 0 returned -16 [ 71.951389] binder: 8728:8736 ERROR: BC_REGISTER_LOOPER called without request 2018/03/26 17:13:44 executing program 1: r0 = socket$inet6(0xa, 0x400000000005, 0x0) sendto$inet6(r0, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/03/26 17:13:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:44 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000040)=""/91) [ 71.977014] SELinux: unknown mount option [ 71.993937] binder: 8728:8741 got reply transaction with bad transaction stack, transaction 27 has target 8727:8732 [ 71.999439] binder_alloc: binder_alloc_mmap_handler: 8727 20000000-20002000 already mapped failed -16 [ 71.999504] binder: BINDER_SET_CONTEXT_MGR already set [ 71.999509] binder: 8727:8732 ioctl 40046207 0 returned -16 2018/03/26 17:13:44 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(0x0, 0x16) 2018/03/26 17:13:44 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) [ 71.999541] binder: 8727:8732 ERROR: BC_REGISTER_LOOPER called without request [ 72.035190] binder: release 8727:8732 transaction 27 in, still active [ 72.052275] binder: send failed reply for transaction 27 to 8728:8741 [ 72.061690] SELinux: unknown mount option [ 72.072014] binder: 8744:8755 ERROR: BC_REGISTER_LOOPER called without request 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000017000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x24, 0x26, 0x301, 0x0, 0x0, {}, [@nested={0x10, 0x0, [@generic="28fdf824473adbe6f7"]}]}, 0x24}, 0x1}, 0x0) 2018/03/26 17:13:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f00000001c0)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000000200)="852baf474f9d844200ff6eaaeb41fa676af5ace451b619450be493fa134c5ead5fc8444f1a04267da95db4e597e8f369008bc3583da51fbd4e2d4c11d59fb91a0721d12d941a8e26931110980ef2d7eafb50367026ac0d85753aa0052113a17b499046929a8f3b02edafb6d9ee07fe103802cb2a77a00299999739544d6aff94fd7924be213405a9747b3c8f92116229244b07596c2887384c07fd3350775183cc10dc51c5932d7e941f5751f75219e2c6dd6186acc66c16f6780d6f1e5fe70cf892ff96e03677b14d805a64ddba6989d126b30a5117d5ade0b506fbf261e41dbe328510e099b0cf97b5ee5d357e85caf0fda73a7f3463b91358035ae14fe0636298bad998e7d1424901823bc4a7daa3aa5576c5b3e3c9f21d062f213d59564d3ed08411d8f95d13f5210b5ce95c113f4d182d497b309f9e13ebfe70a0c4d8bb206d9807a923cbf9d99da40bb6e8658ce3a864817ac02612b147f897c0d099a87ddccbf0d4324e721a4605d347de475ce9010d752536cebce1a354ac36045a6307910dea371f3830bb0db97c197500977181ad406604324f22852f9d72c189cee2f4edfa7d81f2c39f80bbfaad1882088a65ba84f6e13e03c3165989811864d49403a50a034425d80fa59eff0afe1ad755e345bf34074ff222602993c9bf18410caea4bc00b782a697c9e61dff66eca9997c12f8c757692e4d633cad24cf1fc58a9cfc533d8aa24add5fa8e8cb11154106488ff465711d30715dc5e7b0b882f9d41210d4b87bfa56566fbc00a0cc6fdd76bd36b6aac710ab88feb48ccc03e19c02434c3c8d3b841b2c5f08bfe65db4438a1553887c0d8ae13466c6b7709389eab792f0b41ffe02261120f2e3d9ba38049e29c01da7ed775956ad401920a58ca6252e5027794cb378199688eb952a6e5befcbea4a8f57dc875d081e8e1cd39007b943af415bf42bc560321d3e8f4aab841e186414a78b0668fd4086dc0d4f94cb99d0f7541332e42bb27af0489180289dd7602e1cab05ddbf6f49f9eb69099318507aa167f33ab0c36d5eefbba42ce93c8c140711e487efceae95fd379451e9b8b976cdd88bf4d6fe4da5b534003db1e5a3ec22a819aaa099c2ebcfc647b31e0dd305df6f2bdc226bb1cbc1a2a21a41541f871c61ec8e28db0c5d6bae6185e92d10fbce16505b96a861765cea0b51ced299a97dcb71f0f497732fb9ea0fc7c116db44eeeb704d50d3e2b6a18b5f4b37343f2d58a397e8f1202d41412f3d2f0876d5223a991705016d7b610a297632e5d9be5277cb5819ebc664170629b06ee58ec887d2946d5b51b6240213d577826074b01dc429018107dc0c59cade0e29f32861e9093846f5fd20ae0313cdba55ab7ecda6461d8be1eec5cf0626264cece4302fe44a663ce33599cc28c613616aa00599fdbb086b2589d3499cfc627d2efacb317a0f8592d64b8f4e698faa4f1759741e73fac4b9caf79915a72f364c641246e949f626ed3e82b03e60ebd9c4628a74f119c413777ace44cbda5e8b61ba5b4d02c4441d186e34bfa4f37b6b154d2e83a922f3956eba89e40c9e2480b92b16596e95fdbb55143ad2f61b1885fb2409c75f6a39545c8d7ec130a79e5243e1440c465002111e913f488fe941e2fcac0d7f340bd9e56027b0896c2feed62d58cee71c0a8f0406dc3417266cd7ed8764b16fa41c104ea1f73c851cebb98468006d1707a0d1e32803a818fcfe3ca399472d91522107b126be4f54ceee1d337347fbd0ac1dcdc06a3f5a075c58f2bb50ba47d3fb192edabd196a93a1eab7e2e7f2715a48483f16fc96eae90666db8cad29b218e4958fb610993e48cfd5469cf9e4e3f34515c80df69df6a91305efc0b77502e9a61765a12ccafdf2f9384c55e2587adbee9381b84d283e3ca3bb9503b74bf6e8620ad628a5083de354a12a0fbcff06e7f977fa7f8944b8d689c1d224be6a11ba45913e1665f6adfdbdc6e25f391a32dccc3eda64307ff92f8cf24a406c8535649363b1ef9f476c4ba6fb97a367e6da1d7a02222941f6d01200c819fa27fc2a67919ad601f5fb73a847e056e7b5487b8cb49307809cf1cb1e3cbe7719cfa034ad455f4368cc1924d55a3e2e7ad3a1bd03b38cbb1eb6272ccbb6d81893665820ba2324e925d95506be1e6281a22a3549105acdad9b350fcf8f95b5c02e65476621780d7140970473f742d045eab5a0521302edced5ab0ebaed4ce3a201f2a562b0998b3354efe463c5b03a2b3bad9ba531cef17da2856263ca1bbf4caebf835d13d9a99bedddd7fb87d99f1d1231b2162763719069fff0988b4de34c7a261673245af43bb44a81dece7db8f81e89d1b1fa033bb82b55e8a6ec5da99fa7c2c48e24f6915151deffc3c40aeb7dacfac8d33828d880ca5ed407113f2166adf0956984406e9790e3cadadcb02449d2253e5599fd8e552c1530ce6ac45f66520bbe0fdaf7ede7630e1bb3fcc6da10bafb13ac7bfd487062fa0c61b3be9c202a27e020f20e8d721b4667b098fba4af46eb34403dc5b328f0020d6d2c2bf6500806dba5ed2c6b1c4e937195eb7a4f39282fd25f6ec249f199443f1c6ff57f74de31e331a435099ef493fb6288dc69171648ed750ece674b9d9349ecbf1da2f67cf6f56ea04afccc3bbbf0f505b5d2a234a030dda55c18c09884c8c002eeb42ccb3be4cbfabdf327a0023e3967609480465e0909b83a23013252402bf1d36d79af938bbb581169dde4f653daa024aafe82ff3ca07db778499f7a1d3c67809fef35f7f1b13543ff0025d39bb75cb3693122acf77c63fb3bee21d59ca1649d8249073d36f99a2b3ca5bb23c32d8c30a6bf9f6d3e9bdc18d25218e2074b3fee101b7d3f317840deaf3710a9675708af563f871001fd9bf430b6b3121679b161149fd742169cd1d79cb41eec76b5b50c82dd06508268598133ebb8405e90d1a9f16809c8637fa5cd05b2beb3681577ae23fa4780efe7e531f027551bbfc61861f5fd7d6e69a89932b88d24f399080b229f4420b23f05c96ef798014a8a7f8bbb7501077b075255b3cd59579cf7c003d3339fe26b8df7cde88bc8d3aebd2b854b039573ebc1baa3436d77f017b505db2cffa8274b38bc89498f0b62465a1df5607159bd065c507a275265277675a415079eb220e70d1915a6d36800166b26054000e45839201bd75737ef38a3b36a1f1d95a1d3d9ee31fcd6e368fba3c9b08b35d04d8264fb62926d6a243017a6cc552b6cbd1645126aa0185f7a95e4b17996291503301c7a863e0a8cc1997eedf32ad5aae7c51697af9a602dc8ca4ebbe1791573d5e9c4605c5f476897fad4f35b56acbaac641d75df7ded3e68adca151cd313ce4e2128a0e1f572a30c6ebccc58c1bc113be9b1aea66e4c5ba98f3160c6330173a74bfb572d32348a462b73e076f9daf59d30dadb75149fa4679e97b967b5834712d0c69d322dd787805ccf114507ef6219de6161cf880a8f0b0a3a0375237e227b9f1cb9d9068615cac6523c5fd2c802a5faeee302ac93e7eae9f0377793ca3369ee05b208d708ce746b3e4fd38799c146426242d856fb596a4279cea53d8c9745345e94464266b3c75e4e7e6ad53633524dbe04791a0ab70a9e4e530e4cf41aa1b407f748ada018844d309c0d2c005b38b02799dd8279f9ad9636205191ac1fb225fb0f31dbd605e8eb8e7c471120d41242275f3c743299807a021f334a67c837ec9595b5bd2c254e1214221dcb2a53555e23263cd52629571e84367db9d65ce87dff4d807e0a00799506e716d3b5de79f8cd64b1af662043878a03b220eb43fe66945a80431a52621b06ac3015d97d8f92bfad82631dffdc9c1c9529a7fcece0884709fa024098b3ffa4420e98c2c3422ddf218347fe1e171550d2c71a47c90a21024139b57aec3f87e0b03b4ac66915d47cfc80f062d1a2232869d41e8b2e3432031ce51cc4724981f77eaad13d35be906d1b1e90d171160eb86c73ca468ff158a90e7ea06c6fde8013f26915eba73b89c2210def8108189bb857a14d2de4b371d0437135b969325149a03f6f274df28b142c0c07be3e008cb53e077de26d56773d8af1aadf56ca9821ce745fb624de7dffff36cd1ca6bb32c38db947e02e8472d9a9644762e7c3d50b78615363be21fe15afe8e0abd3cbc850e7602b468ac83d582ac3f817fd1b177be55a5eda98a81bdb73d76e8182002c30228044e3279fb832a0a2f507296d99697457e6b838d69136ee77475de928e5606a75100b690f3e850d54b8d2454a8af5c6cca20fe5f9e5fc7756d959e28ad7404866bf92d839dc71ae2a5777e32d71346e71c481a50d9593d3a5f0abcf7d83856da129f3b8d5da4a4622a4a69c37694a183f3bcdeb89df3cacbb12885758ceb88b8633495495403bcaf815bdf57457ea8bdf3a0e732715b4a99a6d8e24abab1feedecc066c82511f5a6f72bb869d4f0a20133db034bb157cb7a4fb61e9f418ec2f1b697a58d9e67547add6e6a1f4eccfd1bab9a219dfab0cb72bde41107ef9f55d090e7315e31d0d478abee694bf594498f981ff58cdef9d959ef69298781d36ae2fc12712843db191300494cf95144e4deeaa983986c2de6f76c91f5e48f2d0e72e2d42a0b6d5dfb76c8247d77f2ecc763d2bee8562dca236bcbad916ccd48da8e7b7e60e4c8d3f7dbb702cbcfd9183715d3f3c216af989f4124856547f49075d156eb1612d549e8ed5e5885ecf22c6940564ec35e6b4fccd8e20c2bdb2883b12328705d80d8b20766135fec7de397ef4d64d9d5f29123dbbbb5be660199cc1bfa96b6943a62b319ac65ee0d8a6a32acabf1b02c4fdef6c3eeb41e3d19455bc7dea59cda28d6524fb57116b3f6a080b55450710b5e19c0782362edfff3cac44701fe79e558bafef7eece5487361c79935cd305b66a1f84a194f49fde72074974c15dbee56d00b7a8f3f7e4c5d3099ecaa0ee6e6058f833de75f4dab500258a20894cfd91cab5f6c43b7d8b0e234546a313b91ec649fcb85c897175512a0d0152da184b6b6c3bb06662fd3b7f42e47bae806c14f8e29280017ec3cf32ce82db404b54067dcda9d9a2cea1971c3eee8be5e44cea787f3644216d533cfb1442f8d3ba411cdfb736bc1508661650d47a84f07b5426cfebd0a037750bb17899e1f81e4b36826d73b9bc16712333e14d14d0b33832b1077d839fed78a712e5d5c2b10ccf3b3d4d79f47368fe291de1b3bdf6dfbb9b8455681ca11df0ddf69c30e239491898e5ba6f61c660097f4245357273824ab2e5bc56a3f5989eb7b09f31f80b67701d39cdeb7c153b98b0acf9a362a95aa8ac610aa6c4cc21f8ba06741751cc90813883ec0ec05cbeabd46ef9f3cd22a5dc136e8b8c8b7179821f8e82fdc29b2733faea7d081ac1310867dab146ce5690eaea1dc83a66051a55cc26b301164f6eaaa2ed4d4ccdab9311b810c8941377ba2ae4d7aee9fb80d11f50a78bab5becfec8c866e5d5cd31bae991d0b4fdf10a5cb67939630d816a27e0a5f7832e1d55036bf9b50b98cfd88bfe77c77141a2290de24f08a90d0c490d3b06987be5dd8ab20a1348c3ecb77c8d4bc13d0fd8022c01630dfe8ba8b9b15c5afa54f", 0xf81, 0x4008000, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendmsg(r0, &(0x7f0000610fc8)={0x0, 0x0, &(0x7f00009f8000)=[{&(0x7f0000554000)="ed871662855a221fd992a577fbdaffdf106d2b390852d708e3222e840a192a958c1dd9e13872fa78e997e80959b7f421f9f0f45b881460485b48774cea67844c41433b0c7e6f62c07f9f79b62bb99aaf316cba5c293deb6d5f8fe4a59ebe0c0dd25823ca180b8ff5dcb1ded36a36676b9d5553d46bac52af6e96770e0fb01c0b3484fbacacc0be7f50a39b335644568536f33a7455b3adb64949d38dc94572a4b38a943bfd48b418e0fca0e0bc17df96fb2f41de06c37f0f563c5ccd8c109a2616bc1f5c5641881caab9bd54882659bb76065ec79ef000ac8d72416744d4b2ffc97fd35e7de5d6b49d29f8c714dc901b707d558953ecf4354331767b86e119595429a7266a4f5c17438969315c96afc010c3c14374da55de64627b1ed4183b5ada1cab6d0e54bb0c9616b73039533d4de08d51e06225b88d26ae693c6136241118db7983163c4cfdd871c770773825e0e99cad55b1230016d60eef7b195b4ce1879b6730c151657a219b8db3e58038b052b9bfd2dfcd0ca1b983ac7942a01f795e466a4bf30230d5216231206d784eba63d52cb00cffbb2914538cd39d47e5a55a379bc8131afa798fc4b8d7361caf048eb4f9ad3c304eaf12a2f24731975ec98b0497301e95bc73e588ab440c1b256f5312a6318a167879274a71ef3e48071f23118bab6fd6d968ce8f992b00d775699dad48884a6cad2829aaa2044e08040d43375fe478a2144ff1231cfb84d4dc27baf6f0d86c5ca3947b20c751cb37673d2af12a34798150e895fcdb118c6a68c9c14feb27a7e46569a0ab52a24f13e8802d19bb80a9ea69b78e0f7abe6798c7ba43fac4a156b81411188ec503f321121268fffe33afd443daa87b86eb55183a5c4eb2d570839859499d501f98cd1015c5cd2c9bf744d946f639a28c053036c2186953a1f260544b8b1e99ae1b88f2c58ffd9ee2ab206fbf3ac88d09b78c38f716111594c505ff885a08746957954229825db17f11b8cb252b60f0765d7d9902fc1edfd903dd71442b095c97bbf528275af44fbe52f24895c81cc27ec73494ce3d125e86e05e1c8d23b1a11d6271737c29f331e945d1fe858d24c98b5f1b2e9e003c841666a8f7b16a8c4df1a80b1efaf2e4d953471af5794d4d39754f7725f2dd4489b9c924792dde5ad7641fe63f69314895ae680c7d9803939872667edf2f58fd83a20f6d9d1fade8058b009f81f21be4eb202ff1b2cf579a82bf2199a2e222d62942730d04b3a83c239a5b0391721479f920e3c53ea4f05f548058ec0b5ef6531e0cfd1cfd666da4a2deee3c5447dbf4e2d6b82ead5224fde6092553aed2ae2babf393cf20859649b8082312d9197eb2794555166a7aa9f596284fd7cef37c3c1c835edfc46ddfaf0c69b8fd9d126142892acc050d46668d3a7d043443e28a302000ca52ad71a91ca9961c0f19392975ae269afb59961ce76a79537e21780addecde257520ad97301611bcf77af72a04d3b435fb656b97f33792fdc4318e4e058a0bdd5d936fa198bf29b3987f4415efcf35289ffee2fb6ef30265f75ba806df911ef8d5b9a6c2ad369cc06e82ec72905d671bb181ec10d104010fd57ba9ac12d5c48d8c95464a7862d38b5800e00d14015ebcf45eec48a4183527c56c5a34646420c8c72aa8459bb1f6cf6cd48b8b0f0f9fb5e886b4f57d1e614686030e8bd5b8842d7143be6ab2c3e9fc4766c13aad2adea36812fa2d11cfa45e3b0336673187eac8ed70b317fa142ff560ed94c1a8d714c83726baa7813b129aefbfb57bb4e47b8a20519965ff3c5606f7f9d2e02812cc203912e83a3726602354062f4b3e09732c9983b39f9051c10e96a8a3d5bc5cfe97f09b4b0d88a7738f56fa771609ddd691a6409075f48af38726eb8b839ec3dcfd25f35b8c6417865d4866bd577475b094452d22939d8b5673d874859b38c8d6eff75a47ca8c3896b8ee0d8328f7a6c3101263ec785ec2ad0c2ecf6e8d86651cde8305e29484edb14bb14bde2497ceca8236213d471f09381b662f9ea3ca13cd2d46602e3bde0d1875ae9b2c890eb21e0c5308349dfb081f01c8791ef276f5e875df409b59ec72e5839f2a899764f09deba81bba3651ab2aa7f0ae61af61516aaf079260126c7a6d1b01bee3e7e0b5d530c59e945f4a60294eee379aa95e8b9daa387275964b0862aab4caa7fe8b1ca69b40bea831f3404973fd6d85e1c5835e8a96132da936b9a198dc8a25dff23fbbde5b5e7afa1af260712c695bb99f34aadc9feda61eb0728f27ca0976bca39e8d2fab979d7735fa339676819032059af8aaeddc4909fe16ded594517f628717ed4b0fa5f278e19df58d33e63888fcacdcbf767efae0b0f1c0723dbd1e731791427a71f2a67b53ada14acaf561cef4ccf66a80181dab3a226e30760e367d34e80ca2e7ec22db727bce86f79b0dbce776cdcf8e401805a2fc18f47c712531c73a83740a268b14bbc0fd3e837f379e98c2ac924a95645f4f86d3f0144be3c613821a32daafd7fcc46349d9ef8c4af3f77f6abdb77a94117daba6b051fdc27062e2b80eeef6dc27593504aa10750555286ac00eae3becb900979f84c033d5b669af4c4bfa4a2b27bd66ae0185704bcdb70608f3051605fb362d8c4f31e2e5109e1bbfca2e3852a65b067887219de99fce70bfc74193d2d59d951e879da6cdce3b78c6a92fa17bda5bbf24757e38263bbf86aedee65bb37b20542c4b87aafd4166d33d820007f3ef6aa479e75ec940bc37f48e686ecd7e0b93da0ae9b1874cd544a4603b97a2acba36919546a4fba96e460ad703fd2eb6ae130833bc947bc404", 0x7d0}], 0x1, &(0x7f0000864bb8)}, 0x0) 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) [ 72.084733] binder: 8728:8741 transaction failed 29201/-71, size 546-280 line 2942 [ 72.112131] binder: 8744:8762 got reply transaction with bad transaction stack, transaction 30 has target 8744:0 2018/03/26 17:13:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/03/26 17:13:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000b2000), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000a92000), 0x0, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x0, 0x7ffffffd, 0x10000007ffffffc}, 0x14) 2018/03/26 17:13:44 executing program 3: syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) [ 72.142174] binder: undelivered TRANSACTION_COMPLETE [ 72.149204] binder: 8744:8762 transaction failed 29201/-71, size 546-280 line 2942 [ 72.150409] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.150412] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.165750] SELinux: unknown mount option [ 72.196456] binder: release 8744:8755 transaction 30 in, still active [ 72.203177] binder: send failed reply for transaction 30 to 8744:8762 [ 72.215374] binder: 8778:8783 ERROR: BC_REGISTER_LOOPER called without request [ 72.233818] binder: undelivered TRANSACTION_COMPLETE [ 72.240744] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.246198] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.255195] binder: 8778:8783 got transaction with invalid fd, -1 [ 72.261517] binder: 8778:8783 transaction failed 29201/-9, size 546-280 line 3239 [ 72.270877] binder: send failed reply for transaction 33 to 8778:8787 2018/03/26 17:13:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/03/26 17:13:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000000)=@nfc={0x27}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 2018/03/26 17:13:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_getmulticast={0x14, 0x3a, 0x711, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:44 executing program 3: syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:44 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(0x0, 0x16) 2018/03/26 17:13:44 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) 2018/03/26 17:13:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) syz_open_dev$tun(&(0x7f0000004440)='/dev/net/tun\x00', 0x0, 0x0) [ 72.291861] binder: undelivered TRANSACTION_ERROR: 29190 [ 72.297714] binder: undelivered TRANSACTION_COMPLETE [ 72.302836] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.341022] binder: 8793:8796 ERROR: BC_REGISTER_LOOPER called without request [ 72.347110] binder: BINDER_SET_CONTEXT_MGR already set [ 72.347118] binder: 8792:8801 ioctl 40046207 0 returned -16 [ 72.347224] binder: 8792:8801 ERROR: BC_REGISTER_LOOPER called without request [ 72.351885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 72.351940] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 2018/03/26 17:13:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e7500000000003b56f7d21943", 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 1: r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x0) fcntl$setstatus(r0, 0x4, 0x42400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r0, 0x0) 2018/03/26 17:13:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="03"]}) 2018/03/26 17:13:44 executing program 5: ioprio_set$pid(0x2, 0x0, 0x4000) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r0, 0x0, 0x0, 0x339) fallocate(r1, 0x3, 0x7fff, 0x1a8) 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) [ 72.352830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 72.352878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 72.400735] binder: 8793:8810 unknown command 76 [ 72.410192] binder: 8793:8815 got reply transaction with no transaction stack [ 72.410866] binder: 8792:8812 unknown command 76 [ 72.410874] binder: 8792:8812 ioctl c0306201 2000a000 returned -22 [ 72.430553] binder: 8792:8818 got reply transaction with no transaction stack 2018/03/26 17:13:44 executing program 3: syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") [ 72.441683] binder: 8793:8810 ioctl c0306201 2000a000 returned -22 [ 72.449708] binder: 8792:8818 transaction failed 29201/-71, size 546-280 line 2927 [ 72.462888] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.462925] binder: 8793:8815 transaction failed 29201/-71, size 546-280 line 2927 [ 72.503211] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/26 17:13:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/03/26 17:13:44 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000013fe4)=@in6={0x2, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000013000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1f000000000000008400000002000000"], 0x10}, 0x0) 2018/03/26 17:13:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e7500000000003b56f7d21943", 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/03/26 17:13:44 executing program 3: readv(0xffffffffffffffff, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "ca296ca9459908585ef630b620e7847f885b8d3f16c148df180a8ef857dae739562ed2504dee8232e09fadc9d5f41c60614749cd3fe0baa0fc7ef20838c05b2e", "2f793a3ff0ccdd7a246d336f4ffeaed342096e9789b8cb6a7a2e6a7a0ea6bf6d5cb82bda101fd792e974035c44a6f408314c62caf4af004f84d70f8158f1119f", "b654955c3982492d2e9ebd6bdc7237836ca4758a7fce021db6c250e8446f81f5"}) 2018/03/26 17:13:44 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x280001, 0x0) ppoll(&(0x7f0000000240)=[{r0}, {r1}], 0x2, &(0x7f0000000280), &(0x7f00000002c0), 0x8) 2018/03/26 17:13:44 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(0x0, 0x16) 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/.et/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) 2018/03/26 17:13:44 executing program 1: 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8), 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 7: [ 72.597437] binder: 8838:8848 ERROR: BC_REGISTER_LOOPER called without request 2018/03/26 17:13:44 executing program 3: readv(0xffffffffffffffff, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:44 executing program 7: 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8), 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 1: [ 72.644500] binder: 8838:8861 got reply transaction with bad transaction stack, transaction 39 has target 8838:0 [ 72.680523] binder: 8838:8861 transaction failed 29201/-71, size 546-280 line 2942 [ 72.702263] binder: release 8838:8848 transaction 39 in, still active [ 72.726891] binder: send failed reply for transaction 39 to 8838:8861 [ 72.738333] binder: undelivered TRANSACTION_COMPLETE [ 72.743607] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/26 17:13:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:44 executing program 1: 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8), 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 3: readv(0xffffffffffffffff, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:44 executing program 0: 2018/03/26 17:13:44 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x0) 2018/03/26 17:13:44 executing program 7: 2018/03/26 17:13:44 executing program 5: 2018/03/26 17:13:44 executing program 5: 2018/03/26 17:13:44 executing program 7: 2018/03/26 17:13:44 executing program 1: 2018/03/26 17:13:44 executing program 0: [ 72.759791] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/26 17:13:44 executing program 0: 2018/03/26 17:13:44 executing program 7: 2018/03/26 17:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(0xffffffffffffffff, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(0xffffffffffffffff, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") [ 72.800564] binder: 8878:8883 ERROR: BC_REGISTER_LOOPER called without request 2018/03/26 17:13:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) 2018/03/26 17:13:45 executing program 7: 2018/03/26 17:13:45 executing program 0: 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(0xffffffffffffffff, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:45 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x0) 2018/03/26 17:13:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(0xffffffffffffffff, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 1: 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 7: [ 72.844725] binder: release 8878:8883 transaction 42 in, still active [ 72.852763] binder: send failed reply for transaction 42 to 8878:8897 [ 72.878874] binder: undelivered TRANSACTION_COMPLETE [ 72.884074] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/26 17:13:45 executing program 1: 2018/03/26 17:13:45 executing program 0: 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(0xffffffffffffffff, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:45 executing program 7: 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 0: [ 72.918045] binder: 8905:8912 ERROR: BC_REGISTER_LOOPER called without request 2018/03/26 17:13:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) 2018/03/26 17:13:45 executing program 1: 2018/03/26 17:13:45 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001bff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000a8bff0)=[{&(0x7f0000748000)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000be0000)=0x5) fcntl$setsig(r1, 0xa, 0x14) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r3, 0x8, r4) tkill(r0, 0x0) 2018/03/26 17:13:45 executing program 0: 2018/03/26 17:13:45 executing program 7: 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x0) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(0xffffffffffffffff, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 1: 2018/03/26 17:13:45 executing program 7: 2018/03/26 17:13:45 executing program 0: 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x0) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:45 executing program 7: 2018/03/26 17:13:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000), 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:45 executing program 1: [ 73.042338] binder: 8929:8938 ERROR: BC_REGISTER_LOOPER called without request 2018/03/26 17:13:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) 2018/03/26 17:13:45 executing program 0: 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 7: 2018/03/26 17:13:45 executing program 6: 2018/03/26 17:13:45 executing program 1: 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x0) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000), 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:45 executing program 1: 2018/03/26 17:13:45 executing program 0: 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 7: 2018/03/26 17:13:45 executing program 6: 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 1: 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(0xffffffffffffffff, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:45 executing program 1: 2018/03/26 17:13:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000), 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(0xffffffffffffffff, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 0: 2018/03/26 17:13:45 executing program 6: 2018/03/26 17:13:45 executing program 7: [ 73.185565] binder: 8952:8958 ERROR: BC_REGISTER_LOOPER called without request 2018/03/26 17:13:45 executing program 0: 2018/03/26 17:13:45 executing program 6: 2018/03/26 17:13:45 executing program 7: 2018/03/26 17:13:45 executing program 1: 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(0xffffffffffffffff, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:45 executing program 7: 2018/03/26 17:13:45 executing program 6: 2018/03/26 17:13:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:45 executing program 0: 2018/03/26 17:13:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)) 2018/03/26 17:13:45 executing program 1: 2018/03/26 17:13:45 executing program 6: 2018/03/26 17:13:45 executing program 7: 2018/03/26 17:13:45 executing program 5: 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, 0xffffffffffffffff, &(0x7f000000a000), 0x2) [ 73.280138] binder: 8972:8979 ERROR: BC_REGISTER_LOOPER called without request [ 73.299832] binder: 8972:8979 transaction failed 29189/-22, size 0-0 line 3011 [ 73.317859] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/26 17:13:45 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_regs={0xf}}) 2018/03/26 17:13:45 executing program 1: add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="9f9f", 0x2, 0xffffffffffffffff) 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, 0xffffffffffffffff, &(0x7f000000a000), 0x2) 2018/03/26 17:13:45 executing program 7: socket$nl_generic(0x2, 0xa, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') 2018/03/26 17:13:45 executing program 5: r0 = perf_event_open(&(0x7f000057e000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a17fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x1, 0x0, [0x0]}) 2018/03/26 17:13:45 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000b61000)={0x0, 0xb}, 0x10) 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, 0xffffffffffffffff, &(0x7f000000a000), 0x2) 2018/03/26 17:13:45 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1d) sendmmsg(r0, &(0x7f0000006780)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000040)}}, {{&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000000)="990db42d", 0x4}], 0x1}}], 0x2, 0x0) [ 73.371965] binder: 8995:9000 ERROR: BC_REGISTER_LOOPER called without request [ 73.408959] binder: 8995:9002 transaction failed 29189/-22, size 0-0 line 3011 [ 73.438779] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/26 17:13:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 2018/03/26 17:13:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)) 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x0) 2018/03/26 17:13:45 executing program 5: mkdir(&(0x7f00000001c0)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) rename(&(0x7f0000000140)='./control/file0\x00', &(0x7f0000000180)='./file0\x00') unlink(&(0x7f00000000c0)='./control\x00') close(r0) 2018/03/26 17:13:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0xffffffffffffffa1, 0x8002) write$evdev(r0, &(0x7f0000000000), 0x9d) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"228e38521bdb4c526aeb66b8"}}], 0x30) 2018/03/26 17:13:45 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000000)="61b5e5ad353106456f9a75498d2c76a821e445c4", 0x14) 2018/03/26 17:13:45 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000f679f4)=0x8, 0x449) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:45 executing program 7: sched_getattr(0x0, &(0x7f0000000040), 0x30, 0x0) 2018/03/26 17:13:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:45 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x800000000000000b, &(0x7f0000013000), &(0x7f0000012000)=0x4) 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x0) 2018/03/26 17:13:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0xffffffffffffffa1, 0x8002) write$evdev(r0, &(0x7f0000000000), 0x9d) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"228e38521bdb4c526aeb66b8"}}], 0x30) 2018/03/26 17:13:45 executing program 1: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 2018/03/26 17:13:45 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40107447, &(0x7f0000e9f000)) 2018/03/26 17:13:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x755}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)) 2018/03/26 17:13:45 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="96", 0x1}], 0x1, &(0x7f0000000400)}, {&(0x7f0000000000)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f000093e000), 0x0, &(0x7f000093ef10)=[@sndinfo={0x20, 0x84, 0x2}], 0x30}], 0x2, 0x8200040c3) 2018/03/26 17:13:45 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 2018/03/26 17:13:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000830000)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x0) 2018/03/26 17:13:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000008fa8), &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x30]}}], 0x0, 0x0, &(0x7f0000008fc7)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:45 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x81}, 0x8) 2018/03/26 17:13:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0xfffffffffffffffd, 0x0) 2018/03/26 17:13:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/03/26 17:13:45 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff000000000000aaaaaaaa0000000000000000000070000000cb000000f80000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaa00000000fcffffff00000000"]}, 0x230) 2018/03/26 17:13:45 executing program 7: modify_ldt$write(0x1, &(0x7f0000000040)={0xd9e}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) 2018/03/26 17:13:45 executing program 2: unshare(0x20000400) 2018/03/26 17:13:45 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f000000bcc0)=0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f000000b9c0)='/dev/rfkill\x00', 0x4100, 0x0) getpeername$packet(r0, &(0x7f000000ba00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f000000ba40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000ba80)={{{@in6=@ipv4={[], [], @multicast2}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f000000bb80)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000bbc0)={{{@in=@rand_addr=0x410, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0x80, 0x80, 0xff, r2, r3}, {0x4, 0x6, 0xfffffffffffff800, 0x800, 0x235, 0x8, 0x3}, {0x1, 0x10001, 0x7fff}}, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x0, @in=@dev={0xac, 0x14, 0x14}}}, 0xe8) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x0, &(0x7f0000000400)=[{&(0x7f0000002940)='u', 0x1}], 0x1, &(0x7f0000000500)}, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bpq0\x00'}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000480)='\x00', 0x1}], 0x1}, 0x80) sendmmsg(r0, &(0x7f000000b880)=[{{&(0x7f00000019c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'authenc(vmac(camellia-asm),ctr-serpent-avx)\x00'}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a40)="ba852f88e1bca42accdd843e98643f9813ca391c236efba44b3f9c03842f0e5a3dbc051f6bb16d7e3532", 0x2a}], 0x1, &(0x7f0000001b80)=[{0xb0, 0x10f, 0x5, "48ea0fd8498bb6d69ebe89b5d7fe4906247313b46b78ee38b19589bfbab8c1e3763f776ca717021f05622263b30a1c13721fc74da8cb70d67e19c0288075acf2740ca78b82151c0853d8f1c4ea9846ac75a8c6064c8cdae55c035568f674de7e2949f0e7136a4f97d4c0988d6836744367a75394e79ad11edab3b61cb5b3d1cc0506360ae81babe3eff30765a232a13babf532fc8598b11d08eea887c870a4"}], 0xb0, 0x40010}, 0x8000}], 0x1, 0x0) 2018/03/26 17:13:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000600)=""/246) 2018/03/26 17:13:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00001aaff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f0000857fff)='\t', 0x0) r2 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r2, r1) write$sndseq(r1, &(0x7f0000d81fd0)=[{0x22, 0x0, 0x0, 0x3fd}], 0x30) 2018/03/26 17:13:45 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000b2000), 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x2, @loopback=0x7f000001}, 0x10) 2018/03/26 17:13:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000002283, &(0x7f0000139000)) 2018/03/26 17:13:45 executing program 2: r0 = socket(0x1e, 0x2, 0x0) connect$ipx(r0, &(0x7f0000000040)={0x4, 0x0, 0x6, "8b4506aadb68"}, 0x10) 2018/03/26 17:13:46 executing program 7: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}, {{&(0x7f00000035c0)=@in={0x2}, 0x80, &(0x7f0000005700), 0x0, &(0x7f0000005740), 0x71}}], 0x2, 0x0) 2018/03/26 17:13:46 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) finit_module(r0, &(0x7f0000000500)='eth0!:[cpusetbdev\x00', 0x0) 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x0) sendto$inet6(r0, &(0x7f0000000040)="d3", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xf}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000180)=0x8) 2018/03/26 17:13:46 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00008e5000)={0x0, 0x0, 0x0, 0x1}, 0x8) [ 73.831539] binder: 9110:9115 ERROR: BC_REGISTER_LOOPER called without request [ 73.869835] binder: 9110:9115 transaction failed 29189/-22, size 0-0 line 3011 2018/03/26 17:13:46 executing program 3: 2018/03/26 17:13:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0x8000000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/03/26 17:13:46 executing program 1: fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') 2018/03/26 17:13:46 executing program 5: r0 = socket$inet(0xa, 0x80005, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x84, 0x9, 0x0, 0x0) 2018/03/26 17:13:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:46 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x87) r1 = accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000918000)=0x9) dup2(r0, r1) 2018/03/26 17:13:46 executing program 6: r0 = fanotify_init(0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000005c0)=""/4096) 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) [ 73.924214] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/26 17:13:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:46 executing program 3: syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) 2018/03/26 17:13:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000830000)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:46 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000013000/0xe000)=nil, 0xe000}, 0x1}) pselect6(0x40, &(0x7f0000011fc0), &(0x7f0000011000), &(0x7f0000003000), &(0x7f0000013000), &(0x7f0000001ff8)={&(0x7f0000012000), 0x8}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000004ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 73.973316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 73.979504] binder: 9155:9163 ERROR: BC_REGISTER_LOOPER called without request [ 73.979582] binder: 9155:9163 transaction failed 29189/-22, size 0-0 line 3011 [ 73.984054] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/26 17:13:46 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8), 0x8, 0x0) r1 = getpid() r2 = gettid() readv(r0, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r1, r2, 0x3) 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) [ 74.024847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 74.045362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 74.054516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 74.057280] FAULT_FLAG_ALLOW_RETRY missing 30 [ 74.057289] CPU: 1 PID: 9172 Comm: syz-executor1 Not tainted 4.4.124-g851fb4d #60 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) [ 74.057293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.057304] 0000000000000000 c168f01ec0e329c9 ffff8801d7dbf970 ffffffff81d0663d [ 74.057314] ffff8800b1d6cc00 1ffff1003afb7f3b ffff8801d7dbfaf8 0000000000000000 [ 74.057323] 0000000000000000 ffff8801d7dbfb20 ffffffff81607b85 ffffffff81237770 [ 74.057325] Call Trace: [ 74.057338] [] dump_stack+0xc1/0x124 [ 74.057348] [] handle_userfault+0x715/0xf50 [ 74.057358] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 74.057368] [] ? userfaultfd_ioctl+0x2040/0x2040 [ 74.057377] [] ? handle_mm_fault+0xb5d/0x3190 [ 74.057384] [] ? handle_mm_fault+0x291e/0x3190 [ 74.057391] [] handle_mm_fault+0x2938/0x3190 [ 74.057399] [] ? copy_page_range+0x1480/0x1480 [ 74.057410] [] ? __do_page_fault+0x780/0xa00 [ 74.057417] [] ? vmacache_find+0x57/0x290 [ 74.057424] [] __do_page_fault+0x35b/0xa00 [ 74.057431] [] do_page_fault+0x27/0x30 [ 74.057438] [] page_fault+0x28/0x30 [ 74.057447] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 74.057456] [] ? SyS_pselect6+0x19a/0x530 [ 74.057462] [] ? SyS_select+0x1d0/0x1d0 [ 74.057470] [] ? SyS_futex+0x210/0x2c0 [ 74.057476] [] ? do_futex+0x15d0/0x15d0 [ 74.057484] [] ? security_file_ioctl+0x89/0xb0 2018/03/26 17:13:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000830000)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000003fe8), 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:46 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x5d, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:46 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockname(r0, &(0x7f0000000080)=@generic, &(0x7f0000000000)=0x80) 2018/03/26 17:13:46 executing program 3: syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) 2018/03/26 17:13:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='gretap0\x00'}) 2018/03/26 17:13:46 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x7e, 0x9) 2018/03/26 17:13:46 executing program 3: r0 = socket$nl_generic(0x2, 0xa, 0x10) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10}, 0xc) [ 74.057491] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 74.057498] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 74.088940] binder: 9184:9186 ERROR: BC_REGISTER_LOOPER called without request 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:46 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'tunl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x891c, &(0x7f0000000000)={'bond0\x00', r1}) 2018/03/26 17:13:46 executing program 6: r0 = socket$inet(0x2, 0x805, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) 2018/03/26 17:13:46 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95), 0x4) close(0xffffffffffffffff) 2018/03/26 17:13:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x400000000e) 2018/03/26 17:13:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000003fe8), 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:46 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:46 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='0x2', 0x3) 2018/03/26 17:13:46 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000003fe8), 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:46 executing program 6: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:46 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) 2018/03/26 17:13:46 executing program 5: perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x1a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:46 executing program 0: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:46 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x3c1, 0x2, 0x280, [0x20000680], 0x0, &(0x7f0000000340), &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'gre0\x00', 'ip6_vti0\x00', 'nr0\x00', '\x00', @link_local={0x1, 0x80, 0xc2}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xe0, 0xe0, 0x110, [@time={'time\x00', 0x18}, @state={'state\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0xf, 0x0, 0x0, 'vcan0\x00', 'sit0\x00', 'lo\x00', 'gretap0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2f8) 2018/03/26 17:13:46 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000000200)=""/36, 0x24) 2018/03/26 17:13:46 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') 2018/03/26 17:13:46 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='%\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 2018/03/26 17:13:46 executing program 6: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0x10000, 0x2) mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x2, 0x11, r0, 0x0) getpeername$ax25(0xffffffffffffffff, &(0x7f0000008140), &(0x7f0000008180)=0x10) r1 = open(&(0x7f0000011ffa)='./bus\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x63, 0x4) 2018/03/26 17:13:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:46 executing program 1: prctl$setmm(0x23, 0x9, &(0x7f0000ffc000/0x4000)=nil) [ 74.478045] binder: 9268:9278 ERROR: BC_REGISTER_LOOPER called without request 2018/03/26 17:13:46 executing program 7: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @loopback=0x7f000001}}}, 0x90) 2018/03/26 17:13:46 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000004000), 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:46 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='0x2', 0x3) 2018/03/26 17:13:46 executing program 1: memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) 2018/03/26 17:13:46 executing program 5: r0 = socket$inet(0x2, 0x803, 0x5) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x3, 0x7fffffffefff, 0x3) 2018/03/26 17:13:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000044d000)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, &(0x7f0000000140)={0x0, r2+10000000}, &(0x7f0000000180), 0x8) 2018/03/26 17:13:46 executing program 1: mkdir(&(0x7f0000d3bff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000b2cff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000050d000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) 2018/03/26 17:13:46 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 2018/03/26 17:13:46 executing program 2: request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', 0x0) 2018/03/26 17:13:46 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f0000000000)) 2018/03/26 17:13:46 executing program 3: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x29, 0x11, &(0x7f0000000000)={0x0, 'ip6_vti0\x00'}, 0x18) [ 74.578571] binder: 9293:9300 ERROR: BC_REGISTER_LOOPER called without request 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:46 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000ab4f8e)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in6=@mcast1}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) r1 = dup(r0) ioctl$sock_bt(r1, 0x8907, &(0x7f0000005d80)) recvfrom(r0, &(0x7f00001b4f1e)=""/226, 0xfffffffffffffe49, 0x0, 0x0, 0x0) 2018/03/26 17:13:46 executing program 7: r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000080), 0x0) [ 74.683286] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/03/26 17:13:46 executing program 2: request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', 0x0) 2018/03/26 17:13:46 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000016000)=@nl=@kern={0x10}, 0x80, &(0x7f0000014000)=[{&(0x7f0000018000)="5500000018007fb1b72d1cb2a4a280a80a06050000a84302a7052369250009000800001c010000000600050002000000000000dc1338d544000a9b84226eb75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff}) fgetxattr(r0, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)=""/52, 0x34) 2018/03/26 17:13:46 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f0000000000)) 2018/03/26 17:13:46 executing program 7: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00001f8000)={0x0, &(0x7f00006b6000)}) sysinfo(&(0x7f0000ba8000)=""/218) 2018/03/26 17:13:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000000d000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f000000c1a8)={0x14, 0x13, 0x21}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000000000)='./0ile0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:46 executing program 5: r0 = socket(0x1f, 0x80003, 0x1) write(r0, &(0x7f0000000140)="3ea56334", 0x4) 2018/03/26 17:13:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000830000)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:46 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000074f000)='syscall\x00') pread64(r0, &(0x7f0000157f23)=""/221, 0xdd, 0x0) 2018/03/26 17:13:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000514fff)='3', 0x1}], 0x1) 2018/03/26 17:13:46 executing program 3: getpgid(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') umount2(&(0x7f0000000040)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 2018/03/26 17:13:46 executing program 4: delete_module(&(0x7f0000000000)='wlan0\'&\x00', 0x0) 2018/03/26 17:13:46 executing program 2: request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', 0x0) [ 74.766005] netlink: 17 bytes leftover after parsing attributes in process `syz-executor1'. 2018/03/26 17:13:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) 2018/03/26 17:13:47 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:47 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:47 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') 2018/03/26 17:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000514fff)='3', 0x1}], 0x1) 2018/03/26 17:13:47 executing program 7: r0 = socket$nl_generic(0x2, 0x3, 0x10) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) connect$netlink(r0, &(0x7f00000002c0)=@unspec, 0xc) 2018/03/26 17:13:47 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:47 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:47 executing program 4: setrlimit(0x40000000000008, &(0x7f00000a3ff0)={0x0, 0x100000000020}) 2018/03/26 17:13:47 executing program 5: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') 2018/03/26 17:13:47 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:47 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000f65000)=[{&(0x7f0000000080)="80fd02002000", 0x6}], 0x1, 0x0) 2018/03/26 17:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000514fff)='3', 0x1}], 0x1) 2018/03/26 17:13:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/26 17:13:47 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4), 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:47 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000514fff)='3', 0x1}], 0x1) 2018/03/26 17:13:47 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f000039c000), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0xfd7c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:47 executing program 7: r0 = socket$inet(0xa, 0x80005, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x84, 0x14, 0x0, 0x0) 2018/03/26 17:13:47 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4), 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:47 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002dfff8)='pagemap\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000830000)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:47 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x4, [0x0, 0x493]}) 2018/03/26 17:13:47 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:47 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000514fff)='3', 0x1}], 0x1) 2018/03/26 17:13:47 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4), 0x516) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/26 17:13:47 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$fuse(r0, &(0x7f000012f000)={0x50, 0x0, 0x0, @fuse_init_out={0x7, 0x1a}}, 0x50) 2018/03/26 17:13:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0605345, &(0x7f0000000240)={{}, 'port1\x00'}) 2018/03/26 17:13:47 executing program 6: mkdir(&(0x7f00002b2000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mqueue\x00', 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) lseek(r0, 0x6, 0x0) 2018/03/26 17:13:47 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000514fff)='3', 0x1}], 0x1) 2018/03/26 17:13:47 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x132) 2018/03/26 17:13:47 executing program 5: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='M', 0x1, 0xffffffffffffffff) keyctl$chown(0x7, r0, 0x0, 0x0) 2018/03/26 17:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040), 0x0) 2018/03/26 17:13:47 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x2, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, 0x1c) 2018/03/26 17:13:47 executing program 3: getpgid(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') umount2(&(0x7f0000000040)='./control/file1\x00', 0x0) close(r0) 2018/03/26 17:13:47 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000040)='user\x00', r0) 2018/03/26 17:13:47 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4)=0x8000010, 0x516) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/03/26 17:13:47 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/03/26 17:13:47 executing program 5: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x4, 0x438, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'sit0\x00', 'lo\x00', 'bpq0\x00', 'syzkaller0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x118, 0x180, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}}}}, @vlan={'vlan\x00', 0x8}]}, [@common=@redirect={'redirect\x00', 0x8}, @common=@dnat={'dnat\x00', 0x10}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'lo\x00', 'yam0\x00', 'vlan0\x00', 'ip6gretap0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x138, 0x180, 0x1f8, [@pkttype={'pkttype\x00', 0x8}, @physdev={'physdev\x00', 0x70, {{'vlan0\x00', {}, 'bridge0\x00'}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "7e688d291dcb3e77e5b1ad9df809d3bd82954ddcf2323ba03fdb515f45b0a01db4531d1ed126f81913c3d3b01debac240809fdb8758f24272e8b2c892e784317"}}}}]}]}, 0x4b0) 2018/03/26 17:13:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x10e, 0xb, &(0x7f0000000500)={{0x0, @multicast1=0xe0000001, 0x0, 0x0, 'sed\x00'}, {@loopback=0x7f000001}}, 0x3) 2018/03/26 17:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040), 0x0) 2018/03/26 17:13:47 executing program 0: pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) writev(r2, &(0x7f0000000440), 0x0) dup2(r0, r1) 2018/03/26 17:13:47 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', 0x0) 2018/03/26 17:13:47 executing program 7: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x30) 2018/03/26 17:13:47 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', 0x0) 2018/03/26 17:13:47 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="84", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000040)='user\x00', 0x0) [ 75.277632] audit: type=1400 audit(1522084427.435:20): avc: denied { setopt } for pid=9487 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/03/26 17:13:47 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x4, [0x0, 0x493]}) 2018/03/26 17:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040), 0x0) 2018/03/26 17:13:47 executing program 6: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040), 0x4) 2018/03/26 17:13:47 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0006bb404feff141c020b5aff6e10b500cc0800030001000000000000", 0x24) 2018/03/26 17:13:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000d18ffc)=0x8001, 0x4) 2018/03/26 17:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000514fff)}], 0x1) 2018/03/26 17:13:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0xffffff75, 0x0, &(0x7f0000ef7000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4a, 0xfffffffffffffdf9, &(0x7f0000dbcfe8)=[@fd={0x66642a85}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/03/26 17:13:47 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/03/26 17:13:47 executing program 5: prctl$intptr(0x2a, 0x0) 2018/03/26 17:13:47 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/03/26 17:13:47 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0x40082406, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a6ddf54c385ba9188568083fb4a3fb652093360507eda"]) 2018/03/26 17:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000514fff)}], 0x1) 2018/03/26 17:13:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) write$sndseq(r0, &(0x7f0000000240)=[{0xffff, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) 2018/03/26 17:13:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000140)={0x20, 0x26, 0x1, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64=0xffff800b}]}, 0x20}, 0x1}, 0x0) 2018/03/26 17:13:47 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1f, 0x80003, 0x1) getsockname$inet(r0, &(0x7f00000000c0)={0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) 2018/03/26 17:13:47 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='0x2\n', 0x4) [ 75.586452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 75.625852] binder: 9533:9538 transaction failed 29189/-22, size -182--519 line 3011 2018/03/26 17:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000514fff)}], 0x1) 2018/03/26 17:13:47 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) 2018/03/26 17:13:47 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000040), 0x0) 2018/03/26 17:13:47 executing program 1: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={&(0x7f0000a7dfff)}, 0x2000000a00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 75.664418] binder_alloc: binder_alloc_mmap_handler: 9533 20000000-20002000 already mapped failed -16 [ 75.721442] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/26 17:13:47 executing program 0: r0 = socket$inet(0xa, 0x6, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10}, 0xc) 2018/03/26 17:13:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000000)="b4", 0x1, 0x0) 2018/03/26 17:13:47 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, &(0x7f0000000080), 0xc) 2018/03/26 17:13:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000000000)="2e2f66696c6530e566696c653000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/03/26 17:13:47 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f0000000040)) 2018/03/26 17:13:47 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00004b1000)='./file0\x00', 0x0) mount(&(0x7f00009eb000)='./file0/file0\x00', &(0x7f0000c1bff8)='./file0\x00', &(0x7f0000a6f000)='nfs4\x00', 0x0, &(0x7f0000dedf2f)='vE') 2018/03/26 17:13:47 executing program 1: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={&(0x7f0000a7dfff)}, 0x2000000a00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/03/26 17:13:47 executing program 3: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/03/26 17:13:47 executing program 7: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2e469d000000cb14b3b4fcab46742945", 0x7ffff, 0x0) 2018/03/26 17:13:48 executing program 5: r0 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0xffffff9e) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/03/26 17:13:48 executing program 6: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000dc1ff8)) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/03/26 17:13:48 executing program 1: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={&(0x7f0000a7dfff)}, 0x2000000a00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/03/26 17:13:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) listen(r0, 0x0) 2018/03/26 17:13:48 executing program 2: nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00001bf000/0x600000)=nil, 0x600000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) 2018/03/26 17:13:48 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000374000), &(0x7f00005ae000)}}, &(0x7f00002f5000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = getpgid(0x0) tkill(r0, 0x1000000000016) 2018/03/26 17:13:48 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)={{0x0, 0x1}}) 2018/03/26 17:13:48 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000affff8)=0x7) dup2(r0, r2) 2018/03/26 17:13:48 executing program 6: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg(r2, &(0x7f00000079c0)=[{{&(0x7f0000000380)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)='\x00', 0x1}], 0x1, &(0x7f0000000b80)}}], 0x1, 0x0) 2018/03/26 17:13:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000006ffc), &(0x7f0000009ffc)=0x4) 2018/03/26 17:13:48 executing program 5: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e26000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/03/26 17:13:48 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x0, 0x5}}], 0x30) 2018/03/26 17:13:48 executing program 2: socketpair$inet6(0xa, 0x3, 0xff, &(0x7f0000000180)) 2018/03/26 17:13:48 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000374000), &(0x7f00005ae000)}}, &(0x7f00002f5000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = getpgid(0x0) tkill(r0, 0x1000000000016) 2018/03/26 17:13:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200, 0x0) 2018/03/26 17:13:48 executing program 2: timer_create(0x8, &(0x7f0000044000)={0x0, 0x0, 0x1}, &(0x7f00000000c0)) 2018/03/26 17:13:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)) 2018/03/26 17:13:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/03/26 17:13:48 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0xd, &(0x7f0000000000)={{0x0, @empty, 0x0, 0x0, 'rr\x00'}, {@dev={0xac, 0x14, 0x14}}}, 0x44) 2018/03/26 17:13:48 executing program 4: r0 = socket$inet(0xa, 0x6, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0d3e3edee0a721c0cc00e259e1991f1addd847b178b5b812b16f56f7456ee5ad5b73324d6818669652175ba50f7471300f08e9084b161281594543a904a77b8a5c749c141bcb4b49c80ce72b8f194717", 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, 'syzkaller0\x00'}, 0x292) 2018/03/26 17:13:48 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x84, 0x76, &(0x7f0000000000), &(0x7f0000000040)=0x30) 2018/03/26 17:13:48 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x0, 0x1, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}]}) 2018/03/26 17:13:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) ioctl$KDGETMODE(r1, 0x541a, &(0x7f0000000040)) 2018/03/26 17:13:48 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x3, &(0x7f0000004240)) 2018/03/26 17:13:48 executing program 1: r0 = socket$inet(0x28, 0x1, 0x0) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) 2018/03/26 17:13:48 executing program 3: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001400ff09fffefd956fa283b70aa6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/03/26 17:13:48 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000d7afa8)={0x0, 0x12, 0x0, @thr={&(0x7f0000572000), &(0x7f0000180000)}}, &(0x7f00002f5000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f00004c2000)) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) tkill(r0, 0x1000000000016) 2018/03/26 17:13:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000223ff7)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x8012, r0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7ff) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) 2018/03/26 17:13:48 executing program 1: r0 = memfd_create(&(0x7f0000001fcd)='wlan0*mime_type-trusted}&wlan0vmnet1.trusted{\\{GPL\x00', 0x0) write(r0, &(0x7f0000001f23)="db42366e", 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0x4011, r0, 0x0) symlink(&(0x7f0000004000)='./file0\x00', &(0x7f0000002ff6)='./control\x00') 2018/03/26 17:13:48 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10, 0xf}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0x0, 0x6, 0x1}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x2bb, &(0x7f0000000040)}}], 0x2, 0x0) 2018/03/26 17:13:48 executing program 3: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000001180)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, &(0x7f0000000040)) 2018/03/26 17:13:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x2bb, &(0x7f0000000040)}}], 0x2, 0x0) 2018/03/26 17:13:48 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x0, 0x1, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}]}) 2018/03/26 17:13:48 executing program 5: keyctl$restrict_keyring(0x12, 0x0, &(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)='\x00') 2018/03/26 17:13:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000003bc0)={&(0x7f0000002740)={0x10}, 0xc, &(0x7f0000003b80)={&(0x7f0000002780)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x400000, 0x10a}, 0x0) 2018/03/26 17:13:48 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) pivot_root(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='./control\x00') close(0xffffffffffffffff) 2018/03/26 17:13:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7ff) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) 2018/03/26 17:13:48 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x2}, 0x90) 2018/03/26 17:13:48 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000d7afa8)={0x0, 0x12, 0x0, @thr={&(0x7f0000572000), &(0x7f0000180000)}}, &(0x7f00002f5000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f00004c2000)) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) tkill(r0, 0x1000000000016) 2018/03/26 17:13:48 executing program 4: request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240)='}selinux]security:eth0,-{\x00', 0xfffffffffffffffd) 2018/03/26 17:13:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000007ff7)='net/icmp\x00') close(r0) 2018/03/26 17:13:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r1, 0x307, 0x0, 0x0, {0xb}}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:48 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_cred(r0, 0x1, 0x35, &(0x7f0000000480), 0xc) 2018/03/26 17:13:48 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) 2018/03/26 17:13:48 executing program 7: getgroups(0x0, &(0x7f0000002b80)) 2018/03/26 17:13:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000007ff7)='net/icmp\x00') close(r0) 2018/03/26 17:13:48 executing program 0: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x29, 0x13, &(0x7f0000000080)={0x803, 'ip6gretap0\x00'}, 0x18) 2018/03/26 17:13:48 executing program 2: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) renameat2(r0, &(0x7f0000036ff6)='./control\x00', r0, &(0x7f0000036000)='./file0\x00', 0x4) 2018/03/26 17:13:48 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, &(0x7f00000001c0)) 2018/03/26 17:13:48 executing program 3: r0 = open(&(0x7f0000085000)='./control\x00', 0x28042, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000273ff6)='./control\x00', 0x80000c12) sched_setaffinity(0x0, 0xfffffffffffffeeb, &(0x7f0000fb8ff8)) writev(r0, &(0x7f0000ecc000)=[{&(0x7f00000d9000)="f9", 0x1}], 0x1) 2018/03/26 17:13:48 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e33ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000b91ffc)=0x7, 0x4) 2018/03/26 17:13:48 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x88, 0x65, &(0x7f0000000100)=""/8, &(0x7f0000000140)=0x8) 2018/03/26 17:13:48 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x7, "c85de82b0401a7"}, &(0x7f0000000080)=0xf) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write(r1, &(0x7f0000000180), 0xff4d) 2018/03/26 17:13:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_cred(r0, 0x1, 0x9, &(0x7f0000000480), 0xc) 2018/03/26 17:13:48 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) 2018/03/26 17:13:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), 0x1) 2018/03/26 17:13:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x1275, &(0x7f0000007000)) 2018/03/26 17:13:48 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20020007, &(0x7f0000e97fcf)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) 2018/03/26 17:13:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00004a1fc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00009c4fa8)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, 0x38}, 0x1}, 0x0) 2018/03/26 17:13:48 executing program 3: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"6966623000faffffffffffffff00", 0x4000000000000302}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x0) 2018/03/26 17:13:48 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@rand_addr, @multicast1}, &(0x7f0000000040)=0xc) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/03/26 17:13:48 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x406000, 0x0) 2018/03/26 17:13:48 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000fd0ff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000dde000)) 2018/03/26 17:13:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) 2018/03/26 17:13:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000030fb4)) 2018/03/26 17:13:48 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) dup2(r0, r1) [ 76.697705] skbuff: bad partial csum: csum=11240/260 len=3712 2018/03/26 17:13:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getspdinfo={0x14, 0x25, 0x405, 0x0, 0x0, 0x9}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:49 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0xfffffffffffffffd, 0x0) r1 = memfd_create(&(0x7f0000000000)='%\x00', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/03/26 17:13:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x87) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0xfffffffffffffe7b, 0x0) 2018/03/26 17:13:49 executing program 7: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x29, 0x48, &(0x7f0000000000)={0xffffffa4, 'ip6_vti0\x00'}, 0x18) 2018/03/26 17:13:49 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40005}) 2018/03/26 17:13:49 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000030fb4)) 2018/03/26 17:13:49 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x7, "c85de82b0401a7"}, &(0x7f0000000080)=0xf) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write(r1, &(0x7f0000000180), 0xff4d) 2018/03/26 17:13:49 executing program 3: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x7, "c85de82b0401a7"}, &(0x7f0000000080)=0xf) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write(r1, &(0x7f0000000180), 0xff4d) 2018/03/26 17:13:49 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe2000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x80000000, 0x0, 0x20000000002, 0x1}, 0x20) 2018/03/26 17:13:49 executing program 1: syz_emit_ethernet(0xc4, &(0x7f0000000100)={@random="781593786d38", @empty, [], {@ipx={0x8137, {0xffff, 0xb6, 0x0, 0x0, {@broadcast=0xffffffff, @current}, {@random, @current}, "b1ad160f57cbfabc8a83248750c70892309b551aa14c21d0aa4b6d0ea4da54f980eef42eb35080d1c2eb7846bd8217b9df7aaa6727b7d140a6ed38527314fac76bfd84803c440888f4786e246bf7ccc1eeb84c9f5e1f7b19508b83a438dacf49bcf08fe7976ca899f4e7aa9d58f88c963805f8fe71601a45a4a2c15ee44edbf9beeb1ccb2376783ae724d7a34362b67cffb4633749cbe6c7"}}}}, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000001c0)=""/246) 2018/03/26 17:13:49 executing program 4: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/03/26 17:13:49 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x77359400}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/03/26 17:13:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000981ff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = epoll_create(0x948) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000984ff4)) 2018/03/26 17:13:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) read(r1, &(0x7f0000000380)=""/178, 0x29) 2018/03/26 17:13:49 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) lseek(r0, 0x0, 0x4) 2018/03/26 17:13:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{0x0, 0x8001}, {0x80}}) 2018/03/26 17:13:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/03/26 17:13:49 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)) 2018/03/26 17:13:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 2018/03/26 17:13:49 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x7, "c85de82b0401a7"}, &(0x7f0000000080)=0xf) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write(r1, &(0x7f0000000180), 0xff4d) 2018/03/26 17:13:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/03/26 17:13:49 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) lseek(r0, 0x0, 0x4) 2018/03/26 17:13:49 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) socket$packet(0x11, 0xa, 0x300) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000bfe4)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f0000016fa0), 0x0, &(0x7f000000d000)}, 0x0) 2018/03/26 17:13:49 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="3078320a6a64f9744aecc9fd1aba3e037d88ad50c260", 0x16) 2018/03/26 17:13:49 executing program 5: process_vm_writev(0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000740), 0x0, 0x0) 2018/03/26 17:13:49 executing program 7: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00', 0x1, r2) r4 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r2) keyctl$update(0x2, r4, &(0x7f0000000480)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000000000)={'poly1305-generic\x00'}}) 2018/03/26 17:13:49 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40086303, 0x0, 0x40406301}], 0x0, 0x0, &(0x7f0000002000)}) 2018/03/26 17:13:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{0x0, 0x8001}, {0x80}}) 2018/03/26 17:13:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x3}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2}}, 0x9}, 0x90) 2018/03/26 17:13:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000800000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xffff}, 0x1c) [ 77.327605] skbuff: bad partial csum: csum=11240/260 len=3712 [ 77.416983] binder: 9957:9963 BC_FREE_BUFFER u0000000000000000 no match [ 77.424592] binder: 9957:9963 got reply transaction with no transaction stack [ 77.439659] binder: 9957:9963 transaction failed 29201/-71, size 0-0 line 2927 [ 77.476272] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/26 17:13:49 executing program 5: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x6, 0x4) 2018/03/26 17:13:49 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)={[0x30]}, 0x1) 2018/03/26 17:13:49 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d9c000)='/dev/sequencer\x00', 0x842, 0x0) writev(r0, &(0x7f0000a2cf90)=[{&(0x7f000068c000)="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", 0x129}], 0x1) 2018/03/26 17:13:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x400000000e) ioctl$TCSETS(r0, 0x80047456, &(0x7f0000000080)) 2018/03/26 17:13:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001e80)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)=@mpls_delroute={0x1c, 0x19, 0x3, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) 2018/03/26 17:13:49 executing program 0: r0 = socket$inet(0x28, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x28, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 2018/03/26 17:13:49 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) read(r0, &(0x7f00000001c0)=""/241, 0xf1) 2018/03/26 17:13:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000001c0)=""/178) 2018/03/26 17:13:49 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1, 0x138, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, &(0x7f0000000000), &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x19, 0x0, 0x0, 'yam0\x00', 'bcsf0\x00', 'ipddp0\x00', 'sit0\x00', @random="73a7666b83b4", [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}}]}]}, 0x1b0) 2018/03/26 17:13:49 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000000), 0xff) 2018/03/26 17:13:49 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000140)={0x20, 0x26, 0x1, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64=0xfffffffffffff000}]}, 0x20}, 0x1}, 0x0) 2018/03/26 17:13:49 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) 2018/03/26 17:13:49 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x14117e) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 2018/03/26 17:13:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'lo\x00', @ifru_names='bridge0\x00'}}) 2018/03/26 17:13:49 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x0, 0x2}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/03/26 17:13:49 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/03/26 17:13:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000140)={0x20, 0x26, 0x1, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64=0x6}]}, 0x20}, 0x1}, 0x0) 2018/03/26 17:13:49 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f000042a000)='/dev/sequencer2\x00', 0x2, 0x0) 2018/03/26 17:13:49 executing program 0: socket$netlink(0x10, 0x3, 0x1f) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000dbcfc8)={0x0, 0x0, &(0x7f0000fa3ff0), 0x0, &(0x7f00000000c0)=ANY=[]}, 0x0) 2018/03/26 17:13:49 executing program 2: pipe2(&(0x7f0000fb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$evdev(r1, &(0x7f00005d7fa0)=[{{0x77359400}}], 0x18) vmsplice(r1, &(0x7f0000fccff0)=[{&(0x7f0000011fff)}], 0x1, 0x0) vmsplice(r0, &(0x7f00004c0fd0)=[{&(0x7f0000165f90)="927d66e5e381cf4097f8000000feb41473dfde5668e10b0a", 0x18}], 0x1, 0x0) 2018/03/26 17:13:49 executing program 6: r0 = socket$inet(0x2, 0x803, 0x5) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x30, 0x0, 0x0) 2018/03/26 17:13:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x49, &(0x7f00000000c0)="1efc4568", 0x4) 2018/03/26 17:13:49 executing program 3: syz_open_procfs(0x0, &(0x7f0000834ff3)='net/if_inet6\x00') 2018/03/26 17:13:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000004ec0)={&(0x7f0000004e00)={0x10}, 0xc, &(0x7f0000004e80)={&(0x7f0000004e40)={0x14, 0x0, 0x0, 0x0, 0x0, {0x10}}, 0x14}, 0x10, 0xfffffffffffff000, 0x7fffefec}, 0x0) 2018/03/26 17:13:49 executing program 4: kexec_load(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x3e0000) 2018/03/26 17:13:49 executing program 7: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x29, 0x4e, &(0x7f0000000000)={0x0, 'ip6_vti0\x00'}, 0x3) 2018/03/26 17:13:49 executing program 5: add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) 2018/03/26 17:13:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000002b80)) 2018/03/26 17:13:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000004ffb)='task\x00') getdents64(r0, &(0x7f0000002000)=""/72, 0x48) 2018/03/26 17:13:49 executing program 4: nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) mlockall(0x1) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f000008b000/0x3000)=nil, 0x3000, 0x0) 2018/03/26 17:13:49 executing program 1: getegid() 2018/03/26 17:13:49 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000272ff7)='../file0\x00') mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000400)='ubifs\x00', 0x1004, 0x0) 2018/03/26 17:13:49 executing program 0: r0 = socket$inet(0x2, 0x803, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x2, 0x280, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000940], 0x0, &(0x7f0000000900), &(0x7f0000000940)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x3, 0x0, 0x0, 'gre0\x00', 'bcsf0\x00', 'ip6tnl0\x00', 'bcsf0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x108, 0x138}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x3, 0x0, 0x0, 'bcsh0\x00', 'ip6gre0\x00', 'gretap0\x00', 'ipddp0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @random="ee067bca9f8d", [], 0x70, 0x70, 0xb8}}, @common=@ERROR={'ERROR\x00', 0x20, {"364c0eb3bb262ad19cd13b05ba6ef2182ea1e01a5d5910d480e2dc4b87cd"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x2f8) 2018/03/26 17:13:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x2b, 0xaff, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary='\bTT'}]}]}, 0x20}, 0x1}, 0x0) 2018/03/26 17:13:50 executing program 7: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x84, 0x7d, &(0x7f0000000000), &(0x7f0000000040)=0x30) 2018/03/26 17:13:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') sendfile(r0, r0, &(0x7f0000301ff8)=0x9, 0xffffffff) 2018/03/26 17:13:50 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/03/26 17:13:50 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='\x00', 0x1, r1) request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) 2018/03/26 17:13:50 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/03/26 17:13:50 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x2691d0877f1cca9b}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) 2018/03/26 17:13:50 executing program 3: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x5, 0x0) vmsplice(r0, &(0x7f0000002200)=[{&(0x7f00000021c0)=']', 0x1}], 0x1, 0x0) 2018/03/26 17:13:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x1c) getpeername(r0, &(0x7f0000000080)=@ipx, &(0x7f0000000100)=0x80) 2018/03/26 17:13:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x63, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/03/26 17:13:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/03/26 17:13:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20013, r0, 0x0) 2018/03/26 17:13:50 executing program 3: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff10fffefd956fa283b70aa6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 77.953761] binder: 10094:10103 transaction failed 29189/-22, size 0-0 line 3011 [ 77.973737] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 2018/03/26 17:13:50 executing program 7: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) 2018/03/26 17:13:50 executing program 0: r0 = socket$packet(0x11, 0x10000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000001200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) sendmmsg(r0, &(0x7f0000003080)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000002940), 0x0, &(0x7f0000002980)}}], 0x2, 0x0) [ 78.002130] binder: 10094:10103 transaction failed 29189/-22, size 0-0 line 3011 [ 78.019647] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.028451] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/26 17:13:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x1c) getpeername(r0, &(0x7f0000000080)=@ipx, &(0x7f0000000100)=0x80) 2018/03/26 17:13:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/03/26 17:13:50 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) 2018/03/26 17:13:50 executing program 3: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) 2018/03/26 17:13:50 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000600)=0xfffffffffffffff9, 0x4) 2018/03/26 17:13:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fc3ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$nl_route(r2, &(0x7f0000cc1000)={&(0x7f0000fc2ff4)={0x10}, 0x3, &(0x7f0000fc2000)={&(0x7f000009d000)=@setlink={0x20, 0x13}, 0xfff7}, 0x1}, 0x0) 2018/03/26 17:13:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) 2018/03/26 17:13:50 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') read(r0, &(0x7f0000000180)=""/241, 0xf1) 2018/03/26 17:13:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x1c) getpeername(r0, &(0x7f0000000080)=@ipx, &(0x7f0000000100)=0x80) 2018/03/26 17:13:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000300)) 2018/03/26 17:13:50 executing program 4: socketpair$inet(0x1e, 0x1, 0x0, &(0x7f00001b6ff8)={0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$key(r1, &(0x7f0000d4c000)={0x0, 0x0, &(0x7f000089c000)={&(0x7f0000e6ce08)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xffffffa3}, 0x1}, 0x0) 2018/03/26 17:13:50 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000cfbff8)=0x1) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000e0b000)=[{r0, 0x6100}], 0x1, 0x0) 2018/03/26 17:13:50 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000300)=""/232, 0x744) 2018/03/26 17:13:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x1c) getpeername(r0, &(0x7f0000000080)=@ipx, &(0x7f0000000100)=0x80) 2018/03/26 17:13:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f000010afb0)=[{&(0x7f00007f3fe6)=""/26, 0x1a}], 0x1) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/03/26 17:13:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000b72ffb)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000a92000), 0x0, 0x800000020000000, &(0x7f0000303000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/26 17:13:50 executing program 5: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007d000/0x2000)=nil, 0x2000, 0x1000000000008) 2018/03/26 17:13:50 executing program 1: r0 = socket$inet(0x2, 0x200000000000006, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/03/26 17:13:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r1, 0x307, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) accept$packet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x14) 2018/03/26 17:13:50 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) 2018/03/26 17:13:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r1, 0x307, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:50 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x8100, 'yam0\x00', 'bcsf0\x00', 'ipddp0\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xe0, 0x168, 0x1a0, [@time={'time\x00', 0x18}, @vlan={'vlan\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffc}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}}]}]}, 0x2a8) 2018/03/26 17:13:50 executing program 3: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x17, r0, 0x0) 2018/03/26 17:13:50 executing program 7: r0 = socket$inet(0x2, 0x803, 0x5) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000680)={0x11, @multicast2=0xe0000002, 0x0, 0x0, 'lc\x00', 0x2a, 0x8, 0x2c}, 0x2c) 2018/03/26 17:13:50 executing program 6: ioprio_set$pid(0x0, 0x0, 0x23ee) 2018/03/26 17:13:50 executing program 0: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000003c0)}, {&(0x7f0000000580)="1c21e455675d8e243ddb0b82c64b3da4ea57beafcfd714d7c094e3af6858a50607cb373935002315b68e94d7de7bb6359d95405c55618f5040260cbca86114f5d54bc15f940f9802b3c0e1b619484fd9891a6f8c0ea024936760fc1db6afc46a0b30218ddddef38de38087b5988828a5fb2a2ef04d0ec42b2535c5a5c83836c835a003d216e210d44275a9eb0250f8a562b60c3c434a", 0x96}], 0x2, 0x0) 2018/03/26 17:13:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000003bc0)={&(0x7f0000002740)={0x10}, 0xc, &(0x7f0000003b80)={&(0x7f0000002780)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x10a}, 0x0) 2018/03/26 17:13:50 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) 2018/03/26 17:13:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5412, &(0x7f00000000c0)={0x13}) 2018/03/26 17:13:50 executing program 3: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2018/03/26 17:13:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) preadv(r0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/255, 0xff}], 0x1, 0x0) 2018/03/26 17:13:50 executing program 2: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x76, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) 2018/03/26 17:13:50 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f000060cff8)='/', 0x0, 0x0) getdents(r0, &(0x7f000056a000)=""/210, 0xd2) close(r0) 2018/03/26 17:13:50 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, r0, 0x0, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:50 executing program 6: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8b0c, &(0x7f0000000240)) 2018/03/26 17:13:50 executing program 1: r0 = socket$inet(0x11, 0x40000000000803, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x107, 0xf, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[]}, 0x78) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000000c0)=""/34, 0x22}, 0x0) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@in6={0xa, 0x0, 0x2, @local={0xfe, 0x80, [], 0xaa}}, 0x80, &(0x7f0000000380), 0x3c5}, 0x0) 2018/03/26 17:13:50 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)='<', 0x1, 0xfffffffffffffffd) 2018/03/26 17:13:50 executing program 0: mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2001, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000000c0)) 2018/03/26 17:13:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffc3, 0x20020007, &(0x7f0000e97fcf)={0x2, 0x1, @loopback=0x7f000001}, 0x10) 2018/03/26 17:13:50 executing program 7: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000fffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3b4c1b4e2bf501fb101040000000000004d9f04005e66cd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa16603000d"], 0x83}, 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) 2018/03/26 17:13:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000740)=0x2) ioctl$TCSETA(r0, 0x5406, &(0x7f0000003740)) 2018/03/26 17:13:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) 2018/03/26 17:13:50 executing program 0: r0 = socket(0x1f, 0x2000000000000005, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x80, {}, 0x1}, 0xe) 2018/03/26 17:13:50 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x4, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x290) 2018/03/26 17:13:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x10e, 0x3, &(0x7f0000000500)={{0x0, @multicast1=0xe0000001, 0x0, 0x0, 'sed\x00'}, {@loopback=0x7f000001}}, 0x3) 2018/03/26 17:13:50 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) setpgid(0x0, r1) 2018/03/26 17:13:50 executing program 5: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') close(r1) 2018/03/26 17:13:50 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x4, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x290) 2018/03/26 17:13:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=';', 0x1}], 0x1, 0x0) 2018/03/26 17:13:50 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="240000001200030207fffd946fa283bc0aeee6d87986c497271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/03/26 17:13:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffc3, 0x20020007, &(0x7f0000e97fcf)={0x2, 0x1, @loopback=0x7f000001}, 0x10) 2018/03/26 17:13:50 executing program 1: r0 = socket(0x1f, 0x2000000000000005, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x0, 0x1}, 0xe) 2018/03/26 17:13:50 executing program 4: r0 = socket$inet(0xa, 0x5, 0x0) bind$netlink(r0, &(0x7f0000000040)={0xa}, 0x10) 2018/03/26 17:13:50 executing program 0: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x29, 0x1a, &(0x7f0000000000)={0x0, 'ip6_vti0\x00'}, 0x3) 2018/03/26 17:13:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5412, &(0x7f00000000c0)={0x17}) 2018/03/26 17:13:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000830000)=""/4096, 0x1000}], 0x1, 0x2) 2018/03/26 17:13:50 executing program 2: r0 = syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 2018/03/26 17:13:50 executing program 7: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000080)=""/224, 0xe0) [ 78.755784] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 2018/03/26 17:13:51 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000100)='n', 0x1}], 0x1, &(0x7f0000000380)=[@init={0x18, 0x84, 0x0, {0xffffffffffffffc0, 0x1, 0x41f0, 0x7fff}}], 0x30}, {&(0x7f0000957ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f000093e000), 0x0, &(0x7f000093ef10)=[@sndinfo={0x20, 0x84, 0x2}], 0x30}], 0x2, 0x0) 2018/03/26 17:13:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000abd000), 0x4) 2018/03/26 17:13:51 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)=@updpolicy={0xb8, 0x1d, 0x11, 0x0, 0x0, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}}, 0xb8}, 0x1}, 0x0) 2018/03/26 17:13:51 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000e78fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) 2018/03/26 17:13:51 executing program 7: ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 2018/03/26 17:13:51 executing program 5: r0 = socket$inet(0x2, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x23, &(0x7f0000000000)={0x0, @loopback=0x7f000001, 0x0, 0x0, 'ovf\x00'}, 0x2c) 2018/03/26 17:13:51 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x11}, &(0x7f0000000100)) 2018/03/26 17:13:51 executing program 0: syz_open_procfs(0x0, &(0x7f000078e000)='net/dev\x00') 2018/03/26 17:13:51 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x840, 0x0) 2018/03/26 17:13:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) sendmsg$key(r0, &(0x7f0000006fc8)={0x20480, 0x0, &(0x7f0000006000)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/03/26 17:13:51 executing program 6: timer_create(0x0, &(0x7f00000012c0)={0x0, 0x0, 0x1, @thr={&(0x7f00000011c0), &(0x7f0000001240)}}, &(0x7f0000001300)) timer_settime(0x0, 0x0, &(0x7f0000001380), &(0x7f00000013c0)) 2018/03/26 17:13:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x1f, 0xaff, 0x0, 0x0, {0x2}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) [ 78.909536] netlink: 168 bytes leftover after parsing attributes in process `syz-executor1'. [ 78.931010] netlink: 168 bytes leftover after parsing attributes in process `syz-executor1'. 2018/03/26 17:13:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x1c, 0x18, 0x501, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1}, 0x0) 2018/03/26 17:13:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000510ffc)=0x1b) 2018/03/26 17:13:51 executing program 4: r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fcntl$addseals(r0, 0x409, 0xa) 2018/03/26 17:13:51 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff), 0x0, 0x0) 2018/03/26 17:13:51 executing program 6: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='devtmpfs\x00', 0x200001, &(0x7f0000000000)="e996e7891844de7c2c") 2018/03/26 17:13:51 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x3, 0x14d0, [0x20000200, 0x0, 0x0, 0x20000c08, 0x20000c38], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'bcsf0\x00', 'bond0\x00', 'ip6_vti0\x00', 'ifb0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @link_local={0x1, 0x80, 0xc2}, [], 0x9a0, 0x9a0, 0x9d8, [@among={'among\x00', 0x898, {{0x0, 0x14ac00000, 0x0, {[], 0x3, [{[], @multicast2=0xe0000002}, {[], @rand_addr}, {[], @rand_addr}]}, {[], 0x7, [{[], @dev={0xac, 0x14, 0x14}}, {[], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @dev={0xac, 0x14, 0x14}}, {[], @rand_addr}, {[], @broadcast=0xffffffff}, {[], @multicast2=0xe0000002}, {[], @remote={0xac, 0x14, 0x14, 0xbb}}]}}}}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x7, 0x0, 0x0, 'ip_vti0\x00', 'teql0\x00', 'vlan0\x00', 'gre0\x00', @random="6631168998f8", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}, {{{0x7, 0x0, 0x0, 'gre0\x00', 'gretap0\x00', 'sit0\x00', 'syzkaller1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x8f0, 0x970, 0x9a8, [@among={'among\x00', 0x858, {{0x0, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x4, [{}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {}, {[], @loopback=0x7f000001}]}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [{[], @loopback=0x7f000001}]}}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}, @common=@redirect={'redirect\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1548) 2018/03/26 17:13:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x79, &(0x7f0000908000), 0xc) 2018/03/26 17:13:51 executing program 0: r0 = socket(0x1f, 0x2000000000000005, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xa, &(0x7f00000001c0), 0x4) 2018/03/26 17:13:51 executing program 5: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) 2018/03/26 17:13:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) 2018/03/26 17:13:51 executing program 3: socket$inet(0x2, 0x2, 0x88) 2018/03/26 17:13:51 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$bt_hci(r0, 0x107, 0xb, &(0x7f0000000000)=""/25, &(0x7f0000000240)=0x4) 2018/03/26 17:13:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x48200}, 0xc) bind$netlink(r0, &(0x7f0000001000)={0x10}, 0xc) 2018/03/26 17:13:51 executing program 4: clone(0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000080)) wait4(0x0, &(0x7f0000000100), 0x40000002, 0x0) 2018/03/26 17:13:51 executing program 5: r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)) 2018/03/26 17:13:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x10e, 0x5, &(0x7f0000000500)={{0x0, @multicast1=0xe0000001, 0x0, 0x0, 'sed\x00'}, {@loopback=0x7f000001}}, 0x44) 2018/03/26 17:13:51 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x10d, 0xc0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 2018/03/26 17:13:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x48200}, 0xc) bind$netlink(r0, &(0x7f0000001000)={0x10}, 0xc) 2018/03/26 17:13:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x48200}, 0xc) bind$netlink(r0, &(0x7f0000001000)={0x10}, 0xc) 2018/03/26 17:13:51 executing program 6: socket$inet6(0xa, 0x803, 0x4000000000000001) 2018/03/26 17:13:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x8, 0xf, @dev={0xac, 0x14, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/03/26 17:13:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000010) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00002daff0)={&(0x7f000062d000)={0x14, 0x20, 0x80afb, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:51 executing program 5: r0 = socket$inet(0x2, 0x801, 0x0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10}, 0xc) 2018/03/26 17:13:51 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={"d208d7f6300000ae000000880000e710", 0x101}) 2018/03/26 17:13:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) sendto$unix(r1, &(0x7f00004b9000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/03/26 17:13:51 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$bt_hci(r0, 0x107, 0xb, &(0x7f0000000000)=""/25, &(0x7f0000000240)=0x4) 2018/03/26 17:13:51 executing program 3: getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x14) 2018/03/26 17:13:51 executing program 4: mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) chroot(&(0x7f00008b4000)='./file0\x00') mount(&(0x7f0000451ff8)='./file0\x00', &(0x7f000069cff8)='./file1\x00', &(0x7f0000847000)="07e372f2", 0x0, &(0x7f000012c000)) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) pivot_root(&(0x7f0000857ff8)='./file0\x00', &(0x7f0000a96ff8)='./file0\x00') 2018/03/26 17:13:51 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001f88)={0x200000000000001, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, r0, 0x0) 2018/03/26 17:13:51 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl(r0, 0x8b2b, &(0x7f0000000240)) 2018/03/26 17:13:51 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x84, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x3) 2018/03/26 17:13:51 executing program 2: r0 = socket$inet(0xa, 0x5, 0x0) bind$netlink(r0, &(0x7f0000000040)={0xa}, 0x1c) bind$netlink(r0, &(0x7f0000000000)={0x10}, 0xc) 2018/03/26 17:13:51 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2}}, 0x2e) close(r0) 2018/03/26 17:13:51 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={"d208d7f6300000ae000000880000e710", 0x101}) 2018/03/26 17:13:51 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000042a000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5402, &(0x7f0000bd2000)) 2018/03/26 17:13:51 executing program 7: stat(&(0x7f0000000400)='./control/file1\x00', &(0x7f0000000440)) close(0xffffffffffffffff) 2018/03/26 17:13:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000045cffd)='ns\x00') getdents(r0, &(0x7f0000000fd6)=""/24, 0x18) 2018/03/26 17:13:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000f96000)={0x9}, 0xfe53) close(r0) 2018/03/26 17:13:51 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x12, r0, 0x0) 2018/03/26 17:13:51 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x6000)=nil, 0x6000, 0x0, 0x11, r0, 0x0) 2018/03/26 17:13:51 executing program 5: r0 = syz_open_dev$urandom(&(0x7f0000c4f000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c01) r1 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000ca9ff8)=0xffffffffffff8001) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x6}) 2018/03/26 17:13:51 executing program 1: ioprio_get$pid(0x1, 0xffffffffffffffff) 2018/03/26 17:13:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, r0, &(0x7f000003cff4)) 2018/03/26 17:13:51 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000004180), 0x0, &(0x7f0000004240)=""/86, 0x56}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/03/26 17:13:51 executing program 2: r0 = socket$inet(0xa, 0x803, 0xb7) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x29, 0x1a, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) 2018/03/26 17:13:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) 2018/03/26 17:13:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0)=ANY=[], 0x68) write(0xffffffffffffffff, &(0x7f0000000240)="f3", 0x1) 2018/03/26 17:13:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x8001, 0x20000000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') [ 79.566679] binder_alloc: binder_alloc_mmap_handler: 10468 20ffb000-21000000 already mapped failed -16 2018/03/26 17:13:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000000d000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f000000c1a8)={0x20, 0x14, 0x21, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x6, @ipv4=@loopback=0x7f000001}]}]}, 0x20}, 0x1}, 0x0) 2018/03/26 17:13:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x401, 0x0, 0x0, {0xd}}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000062000)={0xfffffdfd}) 2018/03/26 17:13:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0)=ANY=[], 0x68) write(0xffffffffffffffff, &(0x7f0000000240)="f3", 0x1) 2018/03/26 17:13:51 executing program 7: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f000000c000)='tmpfs\x00', 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000080)='./file0/control\x00', 0x0) [ 79.610732] binder_alloc: binder_alloc_mmap_handler: 10468 20ffb000-20ffd000 already mapped failed -16 2018/03/26 17:13:51 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(0x0) 2018/03/26 17:13:51 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000004180), 0x0, &(0x7f0000004240)=""/86, 0x56}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/03/26 17:13:51 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000004180), 0x0, &(0x7f0000004240)=""/86, 0x56}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/03/26 17:13:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5412, &(0x7f00000000c0)={0x1c}) 2018/03/26 17:13:51 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000004180), 0x0, &(0x7f0000004240)=""/86, 0x56}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/03/26 17:13:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0)=ANY=[], 0x68) write(0xffffffffffffffff, &(0x7f0000000240)="f3", 0x1) 2018/03/26 17:13:51 executing program 2: clock_getres(0x6, &(0x7f0000000180)) 2018/03/26 17:13:51 executing program 7: r0 = socket(0x15, 0x80005, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x114, 0x2710, &(0x7f0000000040), &(0x7f0000000ff8)=0x4) 2018/03/26 17:13:51 executing program 0: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "6328c5cd4b601a16b0b29a339cbdd8c76492d94405e86ee297ced571bf12e001a8e0edee037b4a15e43b711c1bf34419bdb00c3342326a7c0a24104b57647bf0"}}}}, &(0x7f0000000080)) 2018/03/26 17:13:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_names\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:51 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000003640)={&(0x7f0000003300)={0x10}, 0xc, &(0x7f0000003600)={&(0x7f0000003340)={0x50, r0, 0x401, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x50}, 0x1}, 0x0) 2018/03/26 17:13:51 executing program 6: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_fuse_mount(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/03/26 17:13:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x10e, 0xa, &(0x7f00000001c0)={{0x1003, @broadcast=0xffffffff, 0x0, 0x0, "738bf7fcb3e76b0000000000000000f8"}, {@broadcast=0xffffffff}}, 0x44) 2018/03/26 17:13:51 executing program 2: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="6c9eee2d7bec", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @multicast2=0xe0000002, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=0xffffffff}}}}, &(0x7f0000000140)) 2018/03/26 17:13:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0xf, 0x0, &(0x7f0000000000)="62d6e104000000d4327af178305d6f"}) 2018/03/26 17:13:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0)=ANY=[], 0x68) write(0xffffffffffffffff, &(0x7f0000000240)="f3", 0x1) 2018/03/26 17:13:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_names\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x6042, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/03/26 17:13:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) 2018/03/26 17:13:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0)=ANY=[], 0x68) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{&(0x7f0000000000)="390000001100094700bb61e1c30500800700001702000000450000000000800019001a00000000000000000ff4000000fd17e9ffff06060400", 0x39}], 0x1) [ 79.879351] binder: 10555:10559 ioctl c0306201 20000000 returned -14 2018/03/26 17:13:52 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup3(r0, r1, 0x0) 2018/03/26 17:13:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000003600)='net/protocols\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000f5c000)=[{&(0x7f0000979000)=""/4096, 0x1000}], 0x1) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{&(0x7f0000000000)="390000001100094700bb61e1c30500800700001702000000450000000000800019001a00000000000000000ff4000000fd17e9ffff06060400", 0x39}], 0x1) 2018/03/26 17:13:52 executing program 7: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') lstat(&(0x7f0000003180)='./file1\x00', &(0x7f00000031c0)) dup2(r0, r1) 2018/03/26 17:13:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000080)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000240)=[@init={0x18, 0x84, 0xf}], 0x30}, 0x0) 2018/03/26 17:13:52 executing program 1: write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x68) 2018/03/26 17:13:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) 2018/03/26 17:13:52 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f6e65742f697076342f76732f73796e635f7468726573686f6c6400bf7956050224b756c63bfc477378350232509b7b38b3adffa319e718e9db27a59ed4e8720bc4cdfb78", 0x2, 0x0) write(r0, &(0x7f00000000c0)='\t8\t\x00', 0x4) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{&(0x7f0000000000)="390000001100094700bb61e1c30500800700001702000000450000000000800019001a00000000000000000ff4000000fd17e9ffff06060400", 0x39}], 0x1) 2018/03/26 17:13:52 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) 2018/03/26 17:13:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) 2018/03/26 17:13:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x68) 2018/03/26 17:13:52 executing program 0: add_key(&(0x7f00000012c0)='pkcs7_test\x00', &(0x7f0000001300)={0x73, 0x79, 0x7a}, &(0x7f0000001340), 0x0, 0xfffffffffffffffc) 2018/03/26 17:13:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) 2018/03/26 17:13:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000ee4ff0)={0x77359400}, 0x10) 2018/03/26 17:13:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000966ffc)=0x3, 0x4) listen(0xffffffffffffffff, 0x0) 2018/03/26 17:13:52 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') ftruncate(r1, 0x0) close(r0) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{&(0x7f0000000000)="390000001100094700bb61e1c30500800700001702000000450000000000800019001a00000000000000000ff4000000fd17e9ffff06060400", 0x39}], 0x1) [ 80.018140] audit: type=1326 audit(1522084432.175:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10591 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=202 compat=0 ip=0x454879 code=0x0 2018/03/26 17:13:52 executing program 4: r0 = memfd_create(&(0x7f000001afe5)="7d7d9574686f5e707230630100000400001e0070ff6f630ff8", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000042000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000036000)=[{0x0, 0x3, 0x0, 0x0, @tick, {}, {}, @connect}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000027fb0)={0x0, @time={0x77359400}}) 2018/03/26 17:13:52 executing program 7: clock_adjtime(0x0, &(0x7f0000000980)={0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001}) [ 80.071333] binder: 10603:10608 transaction failed 29189/-22, size 0-0 line 3011 2018/03/26 17:13:52 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mount(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='./control\x00', &(0x7f0000000100)='xfs\x00', 0x21000, &(0x7f00000001c0)) rmdir(&(0x7f000015dff6)='./control\x00') close(0xffffffffffffffff) 2018/03/26 17:13:52 executing program 6: writev(0xffffffffffffffff, &(0x7f0000664ff0)=[{&(0x7f0000000000)="390000001100094700bb61e1c30500800700001702000000450000000000800019001a00000000000000000ff4000000fd17e9ffff06060400", 0x39}], 0x1) 2018/03/26 17:13:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f000061af66), 0xfffffffffffffd8f, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000000)="93", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/03/26 17:13:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40086310}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/26 17:13:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000830000)=""/4096, 0x1000}], 0x1, 0x0) 2018/03/26 17:13:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='task\x00') getdents64(r0, &(0x7f0000000000)=""/249, 0xffffffff00000018) 2018/03/26 17:13:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000910000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5428, &(0x7f0000000000)) 2018/03/26 17:13:52 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) [ 80.125931] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/26 17:13:52 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000664ff0)=[{&(0x7f0000000000)="390000001100094700bb61e1c30500800700001702000000450000000000800019001a00000000000000000ff4000000fd17e9ffff06060400", 0x39}], 0x1) 2018/03/26 17:13:52 executing program 2: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) mincore(&(0x7f0000002000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/4096) 2018/03/26 17:13:52 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCINQ(r0, 0x5452, &(0x7f0000000000)) 2018/03/26 17:13:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) 2018/03/26 17:13:52 executing program 7: r0 = memfd_create(&(0x7f0000000180)='port1\x00', 0x0) writev(r0, &(0x7f0000002300)=[{&(0x7f0000000240)}], 0x1) 2018/03/26 17:13:52 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x1002}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8943, &(0x7f0000000180)={'bcsh0\x00'}) 2018/03/26 17:13:52 executing program 3: mount(&(0x7f0000000040)='.', &(0x7f0000000080)='.', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000280)) [ 80.204719] binder: 10633:10639 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/03/26 17:13:52 executing program 1: syz_emit_ethernet(0x7ffff, &(0x7f00000000c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0), 0x0) 2018/03/26 17:13:52 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) 2018/03/26 17:13:52 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./control/file0\x00') dup2(0xffffffffffffffff, r0) 2018/03/26 17:13:52 executing program 2: mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) mount(&(0x7f00000002c0)='./control\x00', &(0x7f0000039ff6)='./control\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000040000)) open(&(0x7f0000035000)='./control\x00', 0x87fc, 0x0) 2018/03/26 17:13:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e7fcffffffa3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0), 0x0) 2018/03/26 17:13:52 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf7ff4)) 2018/03/26 17:13:52 executing program 7: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f9eff4)) 2018/03/26 17:13:52 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f000000a000), 0x2) 2018/03/26 17:13:52 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') dup3(r0, r1, 0x0) 2018/03/26 17:13:52 executing program 1: mkdir(&(0x7f0000bdb000)='./file0\x00', 0x0) r0 = open(&(0x7f0000002000)='./file0/bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000aef000), 0xffffffff) 2018/03/26 17:13:52 executing program 4: r0 = socket$inet(0xa, 0x1, 0x0) connect$netlink(r0, &(0x7f0000000200)=@unspec, 0xc) 2018/03/26 17:13:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2275, &(0x7f0000791ffe)="0080") 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{}], 0x1) 2018/03/26 17:13:52 executing program 5: r0 = socket$inet(0xa, 0x803, 0xb7) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x29, 0x3e, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) [ 80.344560] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 80.370709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 80.402807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 2018/03/26 17:13:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e7fcffffffa3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/03/26 17:13:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f000082e000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000ea8000), 0x3) 2018/03/26 17:13:52 executing program 5: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_bp, 0x200000400, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000683000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000bd2ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/03/26 17:13:52 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x0) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{}], 0x1) 2018/03/26 17:13:52 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'lo\x00', @ifru_names='bridge0\x00'}}) 2018/03/26 17:13:52 executing program 2: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)) 2018/03/26 17:13:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0x35b, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x307, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2018/03/26 17:13:52 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') unlink(&(0x7f0000000140)='./control/file0\x00') close(0xffffffffffffffff) 2018/03/26 17:13:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000003600)='net/protocols\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{}], 0x1) 2018/03/26 17:13:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xc, &(0x7f0000999000)=""/4, &(0x7f0000000000)=0x4) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{&(0x7f0000000000)="390000001100094700bb61e1c305008007000017020000004500000000", 0x1d}], 0x1) [ 80.510198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 80.535730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 2018/03/26 17:13:52 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/03/26 17:13:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e7fcffffffa3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/03/26 17:13:52 executing program 0: personality(0xa000008) uname(&(0x7f0000d38ff1)=""/15) 2018/03/26 17:13:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000003600)='net/protocols\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{&(0x7f0000000000)="390000001100094700bb61e1c305008007000017020000004500000000", 0x1d}], 0x1) 2018/03/26 17:13:52 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/131, 0x83, 0x160, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="e9a3d4df9dd4"}, 0x14) 2018/03/26 17:13:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000000280)=[@acquire={0x40046305}, @dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000000140)}) 2018/03/26 17:13:52 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f00001d5000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000800)=ANY=[], 0x0, &(0x7f0000000040), 0x0, &(0x7f0000003ac0)=""/214, 0x7a}}], 0x1, 0x0, &(0x7f0000003c00)) listen(r0, 0x7) accept4(r0, 0x0, &(0x7f0000000000)=0x31c, 0x0) 2018/03/26 17:13:52 executing program 0: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000036ff6)='//control\x00', r0, &(0x7f0000036000)='./file0\x00', 0x0) 2018/03/26 17:13:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x400000002f, &(0x7f000000f000)=0xfffffffffffffffe, 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{&(0x7f0000000000)="390000001100094700bb61e1c305008007000017020000004500000000", 0x1d}], 0x1) 2018/03/26 17:13:52 executing program 7: userfaultfd(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/03/26 17:13:52 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'eql\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'sit0\x00'}, 0x18) 2018/03/26 17:13:52 executing program 4: keyctl$get_security(0x11, 0x0, &(0x7f00001a7f91)=""/111, 0x6f) [ 80.645852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 80.645968] binder: 10760:10769 Acquire 1 refcount change on invalid ref 0 ret -22 [ 80.645975] binder: 10760:10769 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 80.680355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 2018/03/26 17:13:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000910000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x540f, &(0x7f0000000000)) 2018/03/26 17:13:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000664ff0)=[{&(0x7f0000000000)="390000001100094700bb61e1c30500800700001702000000450000000000800019001a0000000000000000", 0x2b}], 0x1) 2018/03/26 17:13:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f00003c4ff0)={&(0x7f00002a0e50)={0x18, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) [ 80.751595] IPVS: stopping backup sync thread 10798 ... [ 80.757462] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes [ 242.086399] INFO: task kworker/1:0:15 blocked for more than 120 seconds. [ 242.093252] Not tainted 4.4.124-g851fb4d #60 [ 242.098178] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 242.106116] kworker/1:0 D ffff8801d9b97a28 27096 15 2 0x00000000 [ 242.113636] Workqueue: events_power_efficient reg_check_chans_work [ 242.120218] ffff8801d9b97a28 ffff8801d9b88000 0000000000000002 0000000000000007 [ 242.128219] ffff8801d9b88000 ffff8801db31fdb8 ffff8801db31fde0 ffff8801db31f4d8 [ 242.136207] ffff8801db31f4c0 ffff8801d9b49800 ffff8801d9b88000 0000000000000000 [ 242.144225] Call Trace: [ 242.146841] [] schedule+0x7a/0x1b0 [ 242.152013] [] schedule_preempt_disabled+0x13/0x20 [ 242.158585] [] mutex_lock_nested+0x306/0x850 [ 242.164641] [] ? rtnl_lock+0x17/0x20 [ 242.170002] [] ? __ww_mutex_lock+0x14f0/0x14f0 [ 242.176230] [] ? debug_object_deactivate+0x26d/0x3c0 [ 242.182994] [] rtnl_lock+0x17/0x20 [ 242.188172] [] reg_check_chans_work+0x74/0xf30 [ 242.194376] [] ? regdom_changes+0x140/0x140 [ 242.200388] [] process_one_work+0x7d7/0x16e0 [ 242.206437] [] ? process_one_work+0x6f7/0x16e0 [ 242.212640] [] ? pwq_dec_nr_in_flight+0x280/0x280 [ 242.219153] [] ? worker_thread+0x288/0xfc0 [ 242.225006] [] worker_thread+0xd9/0xfc0 [ 242.230623] [] kthread+0x268/0x300 [ 242.235785] [] ? process_one_work+0x16e0/0x16e0 [ 242.242100] [] ? kthread_create_on_node+0x400/0x400 [ 242.248755] [] ? kthread_create_on_node+0x400/0x400 [ 242.255393] [] ret_from_fork+0x55/0x80 [ 242.260928] [] ? kthread_create_on_node+0x400/0x400 [ 242.267631] 3 locks held by kworker/1:0/15: [ 242.271947] #0: ("events_power_efficient"){.+.+.+}, at: [] process_one_work+0x6bd/0x16e0 [ 242.282523] #1: ((reg_check_chans).work){+.+...}, at: [] process_one_work+0x6f7/0x16e0 [ 242.292914] #2: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 242.301375] Sending NMI to all CPUs: [ 242.306329] NMI backtrace for cpu 0 [ 242.309930] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.4.124-g851fb4d #60 [ 242.316937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.326262] task: ffffffff84217840 task.stack: ffffffff84200000 [ 242.332314] RIP: 0010:[] [] native_safe_halt+0x6/0x10 [ 242.340707] RSP: 0018:ffffffff84207dc0 EFLAGS: 00000246 [ 242.346125] RAX: 0000000000000007 RBX: ffffffff847deac8 RCX: 0000000000000000 [ 242.353386] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8421811c [ 242.360664] RBP: ffffffff84207dc0 R08: 0000000000000000 R09: 0000000000000000 [ 242.367921] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 242.375163] R13: fffffbfff07088c0 R14: ffffffff847ece38 R15: 0000000000000000 [ 242.382437] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 242.390654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.396526] CR2: 00007f1d368b4000 CR3: 00000000b0fb8000 CR4: 0000000000160670 [ 242.403765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.411022] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.418275] Stack: [ 242.420392] ffffffff84207df8 ffffffff81027e85 ffffffff84208000 ffffffff847deac8 [ 242.427907] fffffbfff07088c0 ffffffff847ece38 0000000000000000 ffffffff84207e08 [ 242.435407] ffffffff810293fa ffffffff84207e20 ffffffff812217c8 dffffc0000000000 [ 242.442933] Call Trace: [ 242.445484] [] default_idle+0x55/0x3c0 [ 242.451012] [] arch_cpu_idle+0xa/0x10 [ 242.456449] [] default_idle_call+0x48/0x70 [ 242.462302] [] cpu_startup_entry+0x5fd/0x8f0 [ 242.468369] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 242.475261] [] ? call_cpuidle+0xe0/0xe0 [ 242.480872] [] rest_init+0x189/0x190 [ 242.486199] [] start_kernel+0x6b9/0x6ee [ 242.491805] [] ? thread_stack_cache_init+0xb/0xb [ 242.498197] [] ? early_idt_handler_array+0x120/0x120 [ 242.504915] [] ? early_idt_handler_array+0x120/0x120 [ 242.511655] [] x86_64_start_reservations+0x2a/0x2c [ 242.518217] [] x86_64_start_kernel+0x140/0x163 [ 242.524419] Code: 00 00 00 00 00 55 48 89 e5 fa 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 66 0f 1f 84 [ 242.543405] NMI backtrace for cpu 1 [ 242.547019] CPU: 1 PID: 487 Comm: khungtaskd Not tainted 4.4.124-g851fb4d #60 [ 242.554266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.563617] task: ffff8801d8d60000 task.stack: ffff8801d8d20000 [ 242.569659] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1a0 [ 242.578397] RSP: 0018:ffff8801d8d27cb8 EFLAGS: 00000046 [ 242.583813] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 242.591078] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300 [ 242.598345] RBP: ffff8801d8d27ce0 R08: 0000000000000001 R09: 0000000000000000 [ 242.605596] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 242.612863] R13: 0000000000000003 R14: ffffffff8426f5a0 R15: 0000000000000002 [ 242.620125] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 242.628345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.634198] CR2: 00007f098d25b000 CR3: 00000000b0fb8000 CR4: 0000000000160670 [ 242.641468] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.648732] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.655983] Stack: [ 242.658134] ffffffff8426f5a0 ffffffff847f09c0 fffffbfff08fdbec dffffc0000000000 [ 242.665635] ffff8801db31bca0 ffff8801d8d27d00 ffffffff810b9adb ffffffff839f6e40 [ 242.673168] 0000000000000003 ffff8801d8d27d60 ffffffff81d115a4 ffffffff8141b803 [ 242.680699] Call Trace: [ 242.683255] [] nmi_raise_cpu_backtrace+0x5b/0x70 [ 242.689659] [] nmi_trigger_all_cpu_backtrace+0x4a4/0x550 [ 242.696749] [] ? print_lock+0xab/0xae [ 242.702173] [] ? irq_force_complete_move+0x3b0/0x3b0 [ 242.708922] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 242.715905] [] watchdog+0x6fa/0xae0 [ 242.721176] [] ? watchdog+0xc3/0xae0 [ 242.726539] [] kthread+0x268/0x300 [ 242.731695] [] ? reset_hung_task_detector+0x20/0x20 [ 242.738358] [] ? kthread_create_on_node+0x400/0x400 [ 242.744991] [] ? kthread_create_on_node+0x400/0x400 [ 242.751655] [] ret_from_fork+0x55/0x80 [ 242.757181] [] ? kthread_create_on_node+0x400/0x400 [ 242.763820] Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 8b 31 17 00 4c 89 e7 57 9d 0f 1f [ 242.783192] Kernel panic - not syncing: hung_task: blocked tasks [ 242.789324] CPU: 1 PID: 487 Comm: khungtaskd Not tainted 4.4.124-g851fb4d #60 [ 242.796567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.805890] 0000000000000000 c5706a0f27e58a0a ffff8801d8d27ca8 ffffffff81d0663d [ 242.813849] ffffffff838831a0 ffff8801d8d27d80 dffffc0000000000 7fffffffffffffff [ 242.821811] ffff8801d9b88448 ffff8801d8d27d70 ffffffff8141b2da 0000000041b58ab3 [ 242.829768] Call Trace: [ 242.832364] [] dump_stack+0xc1/0x124 [ 242.837697] [] panic+0x1aa/0x388 [ 242.842690] [] ? percpu_up_read.constprop.45+0xe1/0xe1 [ 242.849581] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 242.856820] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 242.864060] [] watchdog+0x70b/0xae0 [ 242.869302] [] ? watchdog+0xc3/0xae0 [ 242.874632] [] kthread+0x268/0x300 [ 242.879793] [] ? reset_hung_task_detector+0x20/0x20 [ 242.886425] [] ? kthread_create_on_node+0x400/0x400 [ 242.893058] [] ? kthread_create_on_node+0x400/0x400 [ 242.899689] [] ret_from_fork+0x55/0x80 [ 242.905206] [] ? kthread_create_on_node+0x400/0x400 [ 242.912309] Dumping ftrace buffer: [ 242.915874] (ftrace buffer empty) [ 242.919568] Kernel Offset: disabled [ 242.923243] Rebooting in 86400 seconds..