0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000097a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f000060c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x7387, 0x0) r3 = dup2(r1, r2) r4 = dup2(r2, r1) ppoll(&(0x7f0000c11000)=[{r2}], 0x1, &(0x7f00005f6000-0x10)={0x77359400}, &(0x7f0000f50000), 0x8) ioctl$int_in(r4, 0x5452, &(0x7f00005bd000-0x8)=0x41) r5 = getpgrp(0x0) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000e0b000), &(0x7f0000e7f000)) fcntl$setown(r3, 0x8, r5) fcntl$setsig(r1, 0xa, 0x12) r6 = gettid() tkill(r6, 0x100000000000016) 2018/02/10 10:55:11 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) clone(0x0, &(0x7f000000c000-0x1), &(0x7f000000c000-0x4), &(0x7f0000004000), &(0x7f0000008000-0x1000)) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil) 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) clone(0x0, &(0x7f000000c000-0x1), &(0x7f000000c000-0x4), &(0x7f0000004000), &(0x7f0000008000-0x1000)) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil) 2018/02/10 10:55:11 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) clone(0x0, &(0x7f000000c000-0x1), &(0x7f000000c000-0x4), &(0x7f0000004000), &(0x7f0000008000-0x1000)) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil) 2018/02/10 10:55:11 executing program 2: mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000fe5000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) dup(r0) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) read(r2, &(0x7f00004d8000)=""/141, 0x8d) 2018/02/10 10:55:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000097a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f000060c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x7387, 0x0) r3 = dup2(r1, r2) r4 = dup2(r2, r1) ppoll(&(0x7f0000c11000)=[{r2}], 0x1, &(0x7f00005f6000-0x10)={0x77359400}, &(0x7f0000f50000), 0x8) ioctl$int_in(r4, 0x5452, &(0x7f00005bd000-0x8)=0x41) r5 = getpgrp(0x0) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000e0b000), &(0x7f0000e7f000)) fcntl$setown(r3, 0x8, r5) fcntl$setsig(r1, 0xa, 0x12) r6 = gettid() tkill(r6, 0x100000000000016) 2018/02/10 10:55:11 executing program 4: mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000fe5000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) dup(r0) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) read(r2, &(0x7f00004d8000)=""/141, 0x8d) 2018/02/10 10:55:11 executing program 1: mmap(&(0x7f0000000000/0x939000)=nil, 0x939000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000939000/0x1000)=nil, 0x1000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00007e5000)={@common="6c6f000000000000000000000000d612", &(0x7f0000939000-0x5)=@ethtool_sfeatures={0x3b, 0x0, []}}) 2018/02/10 10:55:11 executing program 2: mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000fe5000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) dup(r0) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) read(r2, &(0x7f00004d8000)=""/141, 0x8d) 2018/02/10 10:55:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007d1000-0x8), 0x8) clock_gettime(0x0, &(0x7f0000e86000)={0x0, 0x0}) ppoll(&(0x7f0000e06000)=[{r0}], 0x1, &(0x7f0000b41000-0x10)={0x0, r1+10000000}, &(0x7f00008dc000-0x8), 0x8) unshare(0x400) signalfd(r0, &(0x7f0000659000), 0x8) 2018/02/10 10:55:11 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) clone(0x0, &(0x7f000000c000-0x1), &(0x7f000000c000-0x4), &(0x7f0000004000), &(0x7f0000008000-0x1000)) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil) 2018/02/10 10:55:11 executing program 4: unshare(0x800) 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) clone(0x0, &(0x7f000000c000-0x1), &(0x7f000000c000-0x4), &(0x7f0000004000), &(0x7f0000008000-0x1000)) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil) 2018/02/10 10:55:11 executing program 4: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x5411, &(0x7f0000006000-0x28)={@syzn={0x73, 0x79, 0x7a}}) 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) clone(0x0, &(0x7f000000c000-0x1), &(0x7f000000c000-0x4), &(0x7f0000004000), &(0x7f0000008000-0x1000)) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil) 2018/02/10 10:55:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000097a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f000060c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x7387, 0x0) r3 = dup2(r1, r2) r4 = dup2(r2, r1) ppoll(&(0x7f0000c11000)=[{r2}], 0x1, &(0x7f00005f6000-0x10)={0x77359400}, &(0x7f0000f50000), 0x8) ioctl$int_in(r4, 0x5452, &(0x7f00005bd000-0x8)=0x41) r5 = getpgrp(0x0) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000e0b000), &(0x7f0000e7f000)) fcntl$setown(r3, 0x8, r5) fcntl$setsig(r1, 0xa, 0x12) r6 = gettid() tkill(r6, 0x100000000000016) 2018/02/10 10:55:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000097a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f000060c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x7387, 0x0) r3 = dup2(r1, r2) r4 = dup2(r2, r1) ppoll(&(0x7f0000c11000)=[{r2}], 0x1, &(0x7f00005f6000-0x10)={0x77359400}, &(0x7f0000f50000), 0x8) ioctl$int_in(r4, 0x5452, &(0x7f00005bd000-0x8)=0x41) r5 = getpgrp(0x0) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000e0b000), &(0x7f0000e7f000)) fcntl$setown(r3, 0x8, r5) fcntl$setsig(r1, 0xa, 0x12) r6 = gettid() tkill(r6, 0x100000000000016) 2018/02/10 10:55:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000fb000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000369000-0x20)=[{&(0x7f00002bc000-0x44)="a4", 0x1}], 0x1, 0x0) close(r1) 2018/02/10 10:55:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00002b2000)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000e79000)={0x0}) utimes(&(0x7f000074c000-0x8)='./file0\x00', &(0x7f0000689000-0x20)={{r0}}) r1 = open(&(0x7f0000f05000-0x8)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000167000), 0x0) 2018/02/10 10:55:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000bc1000-0x8)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000acf000)='./file1\x00', &(0x7f0000f6f000)='./file0\x00', &(0x7f0000568000-0x7)='hostfs\x00', 0x1002000, &(0x7f00008d8000)) 2018/02/10 10:55:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000d6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r0, &(0x7f0000aac000-0x10)=[{&(0x7f0000aa2000-0x7)="0bf5430f00032f", 0x7}], 0x1) 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f0000005000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001f000-0x3)='./file0/file0\x00', r0, &(0x7f0000013000-0x8)='./file0\x00') renameat(r0, &(0x7f0000014000)='./file0/file0/bus\x00', 0xffffffffffffffff, &(0x7f000001f000)='./control\x00') 2018/02/10 10:55:11 executing program 6: socketpair(0xf, 0x0, 0x0, &(0x7f0000002000-0x8)) 2018/02/10 10:55:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000069000)=[], 0x0, 0x0, &(0x7f00000f9000-0x10)) 2018/02/10 10:55:11 executing program 7: mmap(&(0x7f0000000000/0xf19000)=nil, 0xf19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000f19000-0x5), &(0x7f0000cd1000-0x4)=0x8) 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0x5d000)=nil, 0x5d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101002) ioctl$int_out(r0, 0x1, &(0x7f000005c000-0x8)) 2018/02/10 10:55:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000d2f000-0x1)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) write$tun(r2, &(0x7f0000e92000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "a8068d", 0xfffffffffffffe17, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "3490a4", 0x0, 0x0, 0x0, @empty, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, []}}}}}, 0x62) 2018/02/10 10:55:11 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, r0/1000+10000}}, 0x0) setitimer(0x1, &(0x7f0000001000-0x20)={{0x0, 0xd30}}, 0x0) 2018/02/10 10:55:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000dc5000-0xa)='./control\x00', 0x83000000) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000045000-0xa)='./control\x00', 0x0) mkdirat(r1, &(0x7f00008b9000-0xa)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000037000-0xa)='./control\x00', r1, &(0x7f0000036000)='./file0\x00', 0x2) 2018/02/10 10:55:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f0000001000)={0x77359400}, &(0x7f000054f000-0x4), 0x0) futex(&(0x7f000000d000-0x4), 0x3, 0xcbc6, &(0x7f00006bb000-0x10)={0x0, 0x989680}, &(0x7f0000072000), 0x0) 2018/02/10 10:55:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f000040d000)='id_legacy\x00', &(0x7f0000f89000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000faa000-0x9)='!]vmnet0\x00', 0xfffffffffffffffe) add_key(&(0x7f0000fa9000-0x8)='keyring\x00', &(0x7f0000d0b000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00006eb000-0xe9), 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000959000-0x8)='keyring\x00', &(0x7f0000fab000-0x5)={0x73, 0x79, 0x7a, 0x0}, r0) 2018/02/10 10:55:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00001f4000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x1266, &(0x7f0000bcf000)) 2018/02/10 10:55:11 executing program 7: mmap(&(0x7f0000000000/0xf9c000)=nil, 0xf9c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000c000-0x1c)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004000)=[], 0x0, &(0x7f0000009000)=[{0x718, 0x29, 0x4, "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"}], 0x718}, 0x0) 2018/02/10 10:55:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000097a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f000060c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x7387, 0x0) r3 = dup2(r1, r2) r4 = dup2(r2, r1) ppoll(&(0x7f0000c11000)=[{r2}], 0x1, &(0x7f00005f6000-0x10)={0x77359400}, &(0x7f0000f50000), 0x8) ioctl$int_in(r4, 0x5452, &(0x7f00005bd000-0x8)=0x41) r5 = getpgrp(0x0) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000e0b000), &(0x7f0000e7f000)) fcntl$setown(r3, 0x8, r5) fcntl$setsig(r1, 0xa, 0x12) r6 = gettid() tkill(r6, 0x100000000000016) 2018/02/10 10:55:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00001f4000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x1266, &(0x7f0000bcf000)) 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0x5d000)=nil, 0x5d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101002) ioctl$int_out(r0, 0x1, &(0x7f000005c000-0x8)) 2018/02/10 10:55:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000f91000-0xc)) epoll_pwait(r0, &(0x7f0000644000-0x48)=[{}], 0x1, 0xfffffffffffffffb, &(0x7f000006c000-0x8), 0x8) epoll_wait(r0, &(0x7f0000b70000)=[{}], 0x1, 0x800) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 2018/02/10 10:55:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000dc5000-0xa)='./control\x00', 0x83000000) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000045000-0xa)='./control\x00', 0x0) mkdirat(r1, &(0x7f00008b9000-0xa)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000037000-0xa)='./control\x00', r1, &(0x7f0000036000)='./file0\x00', 0x2) 2018/02/10 10:55:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000278000), &(0x7f000061b000)=0x4) 2018/02/10 10:55:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000d91000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f0000408000)='./file0/bus\x00', 0x0) mq_timedsend(r0, &(0x7f0000863000), 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000478000-0x60)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000cf3000)}}) mq_timedsend(r0, &(0x7f00004d5000-0x4b), 0x0, 0x0, &(0x7f0000bfc000-0x10)={0x0, 0x1c9c380}) 2018/02/10 10:55:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000dc5000-0xa)='./control\x00', 0x83000000) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000045000-0xa)='./control\x00', 0x0) mkdirat(r1, &(0x7f00008b9000-0xa)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000037000-0xa)='./control\x00', r1, &(0x7f0000036000)='./file0\x00', 0x2) 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0x5d000)=nil, 0x5d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101002) ioctl$int_out(r0, 0x1, &(0x7f000005c000-0x8)) 2018/02/10 10:55:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000dc5000-0xa)='./control\x00', 0x83000000) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000045000-0xa)='./control\x00', 0x0) mkdirat(r1, &(0x7f00008b9000-0xa)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000037000-0xa)='./control\x00', r1, &(0x7f0000036000)='./file0\x00', 0x2) 2018/02/10 10:55:11 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000001000-0x1000)="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", 0x5c9, 0x0, &(0x7f0000001000)={0xa, 0xffffffffffffffff, 0x2, @dev={0xfe, 0x80}}, 0x1c) 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0x5d000)=nil, 0x5d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101002) ioctl$int_out(r0, 0x1, &(0x7f000005c000-0x8)) 2018/02/10 10:55:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000001000-0x14)="120000003200e7e50005000000149b000ae9", 0x12, 0x0, 0x0, 0x0) 2018/02/10 10:55:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000a09000)=0x573, 0x4) 2018/02/10 10:55:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00001f4000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x1266, &(0x7f0000bcf000)) 2018/02/10 10:55:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dff000-0xc)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f000020f000)=@newlink={0x40, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0xc, 0x16, [{0x8, 0x1, [@nested={0x4, 0x3, []}]}]}]}, 0x40}, 0x1}, 0x0) 2018/02/10 10:55:11 executing program 3: mmap(&(0x7f0000000000/0xf9e000)=nil, 0xf9e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000f9c000)='keyring\x00', &(0x7f00003f1000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, r0) 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000e73000+0xd64)="290000002000190700003fffffffda060200000622e80002040000140d0004000000000000d200019c", 0x29}], 0x1) 2018/02/10 10:55:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000d37000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x4}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000970000-0x4)) getsockopt$inet6_buf(r0, 0x29, 0x50, &(0x7f0000954000)=""/185, &(0x7f0000b55000)=0xb9) 2018/02/10 10:55:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000a09000)=0x573, 0x4) 2018/02/10 10:55:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f000008b000-0x60)={0x0, 0x21, 0x0, @thr={&(0x7f00007e4000-0x8), &(0x7f0000c21000)}}, &(0x7f0000aef000)) seccomp(0x1, 0x0, &(0x7f0000e8c000)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00004b0000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f000019f000-0x8)={0x98, &(0x7f000094c000-0x98)=""/152}) openat$ppp(0xffffffffffffff9c, &(0x7f0000200000)='/dev/ppp\x00', 0x80000, 0x0) timer_delete(0x0) [ 36.046141] tc_dump_action: action bad kind 2018/02/10 10:55:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00001f4000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x1266, &(0x7f0000bcf000)) 2018/02/10 10:55:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00001d2000-0x6)='veno\x00', 0xff16) sendto$inet(r0, &(0x7f0000f54000-0x1), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0xffffffffffffffff, @empty}, 0x73) 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000e73000+0xd64)="290000002000190700003fffffffda060200000622e80002040000140d0004000000000000d200019c", 0x29}], 0x1) 2018/02/10 10:55:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000736000)='/selinux/load\x00', 0x2, 0x0) getresgid(&(0x7f0000c08000), &(0x7f00004fd000), &(0x7f0000b38000-0x4)) write$selinux_load(r0, &(0x7f0000167000-0x17)={0xf97cff8c, 0x8, 'SE\vLinux'}, 0x10) 2018/02/10 10:55:11 executing program 2: mmap(&(0x7f0000000000/0xce0000)=nil, 0xce0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd9000-0xc)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000007000)={0xffffffffc0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cda000)) epoll_wait(r3, &(0x7f000029c000-0x24)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd9000-0xc)=[{}], 0x1, 0x0) poll(&(0x7f000000f000)=[{r3}], 0x1, 0x0) [ 36.077850] audit: type=1326 audit(1518260111.861:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=5373 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7789ba9 code=0x0 [ 36.092176] tc_dump_action: action bad kind 2018/02/10 10:55:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000e73000+0xd64)="290000002000190700003fffffffda060200000622e80002040000140d0004000000000000d200019c", 0x29}], 0x1) 2018/02/10 10:55:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f000002a000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000bd4000-0x34)={{0x100000001, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/10 10:55:11 executing program 2: mmap(&(0x7f0000000000/0xce0000)=nil, 0xce0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd9000-0xc)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000007000)={0xffffffffc0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cda000)) epoll_wait(r3, &(0x7f000029c000-0x24)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd9000-0xc)=[{}], 0x1, 0x0) poll(&(0x7f000000f000)=[{r3}], 0x1, 0x0) 2018/02/10 10:55:11 executing program 6: mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000016000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f000000f000-0x2)) 2018/02/10 10:55:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000f97000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000499000-0xc)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, @multicast1=0xe0000001}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') readv(r1, &(0x7f0000055000-0x20)=[{&(0x7f0000707000-0x4f)=""/79, 0x4f}, {&(0x7f0000688000)=""/82, 0x52}], 0x2) 2018/02/10 10:55:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f000008b000-0x60)={0x0, 0x21, 0x0, @thr={&(0x7f00007e4000-0x8), &(0x7f0000c21000)}}, &(0x7f0000aef000)) seccomp(0x1, 0x0, &(0x7f0000e8c000)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00004b0000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f000019f000-0x8)={0x98, &(0x7f000094c000-0x98)=""/152}) openat$ppp(0xffffffffffffff9c, &(0x7f0000200000)='/dev/ppp\x00', 0x80000, 0x0) timer_delete(0x0) 2018/02/10 10:55:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000ea5000-0x4), 0x5, 0x0, &(0x7f000023b000), &(0x7f00003c2000-0x4), 0xfffffffffffffffd) 2018/02/10 10:55:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000a09000)=0x573, 0x4) [ 36.129113] SELinux: policydb string SE Linux does not match my string SE Linux [ 36.146549] audit: type=1326 audit(1518260111.931:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=5373 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7789ba9 code=0x0 2018/02/10 10:55:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f00000ce000)=[{r0}], 0x1, &(0x7f00006ab000), &(0x7f0000ee1000-0x8), 0x8) 2018/02/10 10:55:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f000002a000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000bd4000-0x34)={{0x100000001, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/10 10:55:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000a09000)=0x573, 0x4) 2018/02/10 10:55:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000410000-0x4)=0x104) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000bae000-0x15)='/dev/pktcdvd/control\x00', 0x151000, 0x0) r1 = socket(0x11, 0x8020400000000802, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000c26000)={0x0, 0x3, 0x19, "fdf0910bb79481e9ce470332319955e2f1ab5e5d5148af38c8"}, 0x21) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000f1c000), &(0x7f0000969000-0x4)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000855000), 0x8) dup3(r1, r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00006bc000-0x4)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f000030f000)) 2018/02/10 10:55:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000e73000+0xd64)="290000002000190700003fffffffda060200000622e80002040000140d0004000000000000d200019c", 0x29}], 0x1) 2018/02/10 10:55:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000f97000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000499000-0xc)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, @multicast1=0xe0000001}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') readv(r1, &(0x7f0000055000-0x20)=[{&(0x7f0000707000-0x4f)=""/79, 0x4f}, {&(0x7f0000688000)=""/82, 0x52}], 0x2) 2018/02/10 10:55:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f000002a000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000bd4000-0x34)={{0x100000001, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/10 10:55:12 executing program 2: mmap(&(0x7f0000000000/0xce0000)=nil, 0xce0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd9000-0xc)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000007000)={0xffffffffc0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cda000)) epoll_wait(r3, &(0x7f000029c000-0x24)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd9000-0xc)=[{}], 0x1, 0x0) poll(&(0x7f000000f000)=[{r3}], 0x1, 0x0) 2018/02/10 10:55:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00008a4000)="2400000058001f0014b2f407000904000200071008000100ffffffff08000200000000f1", 0x24) 2018/02/10 10:55:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f00000ce000)=[{r0}], 0x1, &(0x7f00006ab000), &(0x7f0000ee1000-0x8), 0x8) 2018/02/10 10:55:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffffff7fffffff}, {0xffffffb4}}) 2018/02/10 10:55:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f000008b000-0x60)={0x0, 0x21, 0x0, @thr={&(0x7f00007e4000-0x8), &(0x7f0000c21000)}}, &(0x7f0000aef000)) seccomp(0x1, 0x0, &(0x7f0000e8c000)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00004b0000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f000019f000-0x8)={0x98, &(0x7f000094c000-0x98)=""/152}) openat$ppp(0xffffffffffffff9c, &(0x7f0000200000)='/dev/ppp\x00', 0x80000, 0x0) timer_delete(0x0) 2018/02/10 10:55:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f000002a000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000bd4000-0x34)={{0x100000001, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/10 10:55:12 executing program 2: mmap(&(0x7f0000000000/0xce0000)=nil, 0xce0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd9000-0xc)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000007000)={0xffffffffc0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cda000)) epoll_wait(r3, &(0x7f000029c000-0x24)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd9000-0xc)=[{}], 0x1, 0x0) poll(&(0x7f000000f000)=[{r3}], 0x1, 0x0) 2018/02/10 10:55:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000f97000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000499000-0xc)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, @multicast1=0xe0000001}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') readv(r1, &(0x7f0000055000-0x20)=[{&(0x7f0000707000-0x4f)=""/79, 0x4f}, {&(0x7f0000688000)=""/82, 0x52}], 0x2) 2018/02/10 10:55:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f82000)='clear_refs\x00') mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write$fuse(r0, &(0x7f0000142000)={0x28, 0x0, 0x0, @fuse_notify_delete_out}, 0x28) 2018/02/10 10:55:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}}, 0x90) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x5c) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000001000-0x4), 0x4) 2018/02/10 10:55:12 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000f2b000), 0xffffff90) 2018/02/10 10:55:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000f41000-0x8)={0x0, 0x0}) close(r1) vmsplice(r0, &(0x7f0000a92000)=[{&(0x7f000048c000-0x8d)='g', 0x1}], 0x1, 0x0) 2018/02/10 10:55:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f00000ce000)=[{r0}], 0x1, &(0x7f00006ab000), &(0x7f0000ee1000-0x8), 0x8) 2018/02/10 10:55:12 executing program 6: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2d000)=nil, 0x2d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000f3e000-0x7)={0x0, &(0x7f00007b5000)=[]}, 0x10) 2018/02/10 10:55:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f000008b000-0x60)={0x0, 0x21, 0x0, @thr={&(0x7f00007e4000-0x8), &(0x7f0000c21000)}}, &(0x7f0000aef000)) seccomp(0x1, 0x0, &(0x7f0000e8c000)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00004b0000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f000019f000-0x8)={0x98, &(0x7f000094c000-0x98)=""/152}) openat$ppp(0xffffffffffffff9c, &(0x7f0000200000)='/dev/ppp\x00', 0x80000, 0x0) timer_delete(0x0) 2018/02/10 10:55:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f00000ce000)=[{r0}], 0x1, &(0x7f00006ab000), &(0x7f0000ee1000-0x8), 0x8) 2018/02/10 10:55:12 executing program 2: mmap(&(0x7f0000000000/0x8ae000)=nil, 0x8ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006ce000-0x5)="8907040000", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00004d2000)=""/140, &(0x7f00008ad000)=0x8c) 2018/02/10 10:55:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000c7d000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000bf9000)={@broadcast=0xffffffff, @loopback=0x7f000001}, 0x8) 2018/02/10 10:55:12 executing program 0: mmap(&(0x7f0000000000/0xfe5000)=nil, 0xfe5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) 2018/02/10 10:55:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000f97000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000499000-0xc)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, @multicast1=0xe0000001}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') readv(r1, &(0x7f0000055000-0x20)=[{&(0x7f0000707000-0x4f)=""/79, 0x4f}, {&(0x7f0000688000)=""/82, 0x52}], 0x2) 2018/02/10 10:55:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000e80000-0x12)='/dev/loop-control\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000002f000-0xa)='/dev/ptmx\x00', 0x2400, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00007c7000-0x4), &(0x7f0000321000)=0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 2018/02/10 10:55:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, &(0x7f000075d000-0xad), &(0x7f000015e000-0x4), &(0x7f0000b26000-0x4), &(0x7f0000923000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ec000-0x8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) wait4(0x0, 0x0, 0x80000000, &(0x7f000005b000-0x90)) wait4(0x0, 0x0, 0x60000002, &(0x7f0000a95000-0x90)) 2018/02/10 10:55:12 executing program 6: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2d000)=nil, 0x2d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000f3e000-0x7)={0x0, &(0x7f00007b5000)=[]}, 0x10) 2018/02/10 10:55:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rename(&(0x7f0000547000)='./file0\x00', &(0x7f0000fa4000-0x1)='.') 2018/02/10 10:55:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) poll(&(0x7f0000499000-0x18)=[{r0}], 0x1, 0x299b) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/02/10 10:55:12 executing program 0: mmap(&(0x7f0000000000/0xfe5000)=nil, 0xfe5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) 2018/02/10 10:55:12 executing program 6: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2d000)=nil, 0x2d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000f3e000-0x7)={0x0, &(0x7f00007b5000)=[]}, 0x10) 2018/02/10 10:55:13 executing program 7: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0xa972, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1000006) mprotect(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x5) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000782000-0x7)='fdinfo\x00') renameat(r0, &(0x7f0000004000-0x2)='./file0\x00', r0, &(0x7f0000004000-0x8)='./file0\x00') 2018/02/10 10:55:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd1000-0x38)={0x0, 0x0, &(0x7f0000859000-0x10)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_lifetime={0x4, 0x4, 0x3}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}]}, 0xc0}, 0x1}, 0x0) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfe5000)=nil, 0xfe5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2d000)=nil, 0x2d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000f3e000-0x7)={0x0, &(0x7f00007b5000)=[]}, 0x10) 2018/02/10 10:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000e80000-0x12)='/dev/loop-control\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000002f000-0xa)='/dev/ptmx\x00', 0x2400, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00007c7000-0x4), &(0x7f0000321000)=0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, &(0x7f000075d000-0xad), &(0x7f000015e000-0x4), &(0x7f0000b26000-0x4), &(0x7f0000923000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ec000-0x8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) wait4(0x0, 0x0, 0x80000000, &(0x7f000005b000-0x90)) wait4(0x0, 0x0, 0x60000002, &(0x7f0000a95000-0x90)) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002000)="0d576aa5b72ceb3f97738795af87125e", 0x10) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r0, &(0x7f00004d3000-0x80)=[{{&(0x7f00001e4000)=@in={0x2, 0x3, @multicast2=0xe0000002}, 0x10, &(0x7f000050d000)=[], 0x0, &(0x7f0000b12000-0x1300)=[]}}, {{&(0x7f0000237000-0x10)=@in={0x2, 0x3, @multicast2=0xe0000002}, 0x10, &(0x7f0000623000-0x28)=[]}}], 0x2, 0x0) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x39, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfe5000)=nil, 0xfe5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0x93f000)=nil, 0x93f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000540000-0x28)={@common='lo\x00', &(0x7f00001e3000)=@ethtool_stats={0x1d, 0x0, []}}) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x39, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/10 10:55:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000040d000-0x24)="2400000058001f0014b2f407000904000200071008000100ffffffff0800030000000000", 0x24) 2018/02/10 10:55:13 executing program 3: r0 = socket$unix(0x1, 0x80000000000005, 0x0) recvfrom$unix(r0, &(0x7f0000b24000)=""/211, 0xd3, 0x0, &(0x7f000024d000-0x8)=@abs, 0x8) 2018/02/10 10:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000e80000-0x12)='/dev/loop-control\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000002f000-0xa)='/dev/ptmx\x00', 0x2400, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00007c7000-0x4), &(0x7f0000321000)=0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 2018/02/10 10:55:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00009e7000-0x24)="240000002e001d003200000800417700fbffffff0100000000000000ffffffff0100ff10", 0x24) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, &(0x7f000075d000-0xad), &(0x7f000015e000-0x4), &(0x7f0000b26000-0x4), &(0x7f0000923000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ec000-0x8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) wait4(0x0, 0x0, 0x80000000, &(0x7f000005b000-0x90)) wait4(0x0, 0x0, 0x60000002, &(0x7f0000a95000-0x90)) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x39, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00004a2000-0x4)=0x18000000000004, 0x4) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000fac000-0x4)={0x0, 0x0, 0x3ffffc}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f000083c000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000012000)={0x0, 0x0, 0x0, @thr={&(0x7f0000d05000), &(0x7f00005a7000-0x70)}}) execveat(0xffffffffffffffff, &(0x7f0000358000-0xc)='./file0/bus\x00', &(0x7f00003fa000-0x10)=[], &(0x7f0000f3b000)=[], 0x0) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000ae1000)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) clock_gettime(0x1, &(0x7f0000b81000-0x8)) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x39, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/10 10:55:13 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000113000), &(0x7f000027e000-0x1)) socket(0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x7eb0) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000813000-0x8)='net/raw\x00') readv(r0, &(0x7f000066e000-0x10)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) 2018/02/10 10:55:13 executing program 7: futex(&(0x7f000000d000-0x4), 0x800000000008, 0x0, &(0x7f00008df000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) 2018/02/10 10:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000e80000-0x12)='/dev/loop-control\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000002f000-0xa)='/dev/ptmx\x00', 0x2400, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00007c7000-0x4), &(0x7f0000321000)=0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f00006dc000-0x8), 0x401) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[&(0x7f0000ffa000)='\\proc\'cgroup*vboxnet0em0&em1selinux[[}bdevmd5sumGPL(loproc\x00'], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) [ 37.381958] IPv4: Oversized IP packet from 127.0.0.1 [ 37.387288] IPv4: Oversized IP packet from 127.0.0.1 [ 37.431255] IPv4: Oversized IP packet from 127.0.0.1 [ 37.436550] IPv4: Oversized IP packet from 127.0.0.1 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f000083c000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000012000)={0x0, 0x0, 0x0, @thr={&(0x7f0000d05000), &(0x7f00005a7000-0x70)}}) execveat(0xffffffffffffffff, &(0x7f0000358000-0xc)='./file0/bus\x00', &(0x7f00003fa000-0x10)=[], &(0x7f0000f3b000)=[], 0x0) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f000065a000-0x2), &(0x7f00003c7000-0x4), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, &(0x7f000075d000-0xad), &(0x7f000015e000-0x4), &(0x7f0000b26000-0x4), &(0x7f0000923000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ec000-0x8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095d000-0x38)={&(0x7f0000894000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) wait4(0x0, 0x0, 0x80000000, &(0x7f000005b000-0x90)) wait4(0x0, 0x0, 0x60000002, &(0x7f0000a95000-0x90)) 2018/02/10 10:55:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000fa2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}}) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000d05000), 0x628, 0x8040, &(0x7f0000030000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendmsg(r0, &(0x7f0000d47000)={&(0x7f0000cd4000-0x10)=@nfc={0x27}, 0x10, &(0x7f0000b72000-0x50)=[{&(0x7f0000b00000-0x1000)="be71683f2691691f494f9a23210047cc6ebceec7b3d2a5dcb31653fa69fd253d0f59a2bba81adbff42319bd9ab5ccf6d04591cb38f35a67e0416229e5626428c21eed488b96017df34c2cef84b789ff013bbe5da3dae39056d31c6788c0cf04a17582686663bde6f65da83288fe90ec560b6b0d41e7e61a7c4acc808eb94cce500943db78ca17fab7dadcabbd4d9c3fad7f4591fa34b45b58933907afd60458710d554a17859c3951c1917ab9675898ed8f92ecd7598cb762b2b281937c951a0e0508644ed3210618f834deb5653d85d4e8b11d4427a2c55cbe10bcb3cfd3aa04389a1f431e2f2d50c5170bc73de8e34a62b628d599d5336ef486fc97826033ff66de64878310dfaeda495deecfcd5d3aeff5159d5ad772f24ae2d3bdf7885025b529e634fd66318e45867c4a500f51b3705c39ac77b4c8f72b3115a2bc551fd3a80b5cd0afd7f9848685884f11943e8e504c3ac24ee18743c0b5d86b5e7da18901ef202a05d2ecfefcbc83c2b54ba6fe806529b254938c85f1c0e78afa161f71da315643deead324150e19412943510a909ff9a1e4cc910017c436d32da936d4fb9b685d1b655e8c63b67eb4dea02aa556d0313bd0a6173edcada84064c7714420ee48750317f40f9cc40b519a1347234d747cd36d15ba171aa095d462dd0421f98434a829043cf23d9ffddecb2b21dbc5f08f670964c69bcc1a9e9b9a71df4142fef7e229b55d4177625c182ac93c6c81898ca5c5cb9cd71a768aec6fad9a1d1e519b50316c6131e7163b58443eb6fb71111eb0007986f2bb88610e1dfff6cfe974a2a9ffb2322043958eaf4359738a42488ec4c88963427f324d9cabb80015a4e43ea3e8d0d61c4d72f7e86fdb348d47fe6a5d44539e1e643c632395091cac88bc1fbb601487afafaf5b9d47e0e65513957a499e36cb24863ef38bb552156fe7e91b8fb362cfed3d0748fe6d2caa6283594f3330abcc3198cb3f3f83e3419027bf3694e9b7ac64e71f26a6d1412d7caf3e20205b1d843edc2d42c4ae6863507728ed36fb57dd94e3c65dd370928a83679b7e695c846cc02b353fd3d3139c3f310008150342c6982d46c405f4335f6ed42fc6417ee1280ff408f5c8ad34d74164f5c86fc6dbd4850be92be019e57272ce3b95c30306b91f42a3c9fb2bfe32ff9580643cdf2dda4c09b74f9ee7013a5986024a3c7f232136a7302d010f8758da58a6d001d5a8384d8bcd110d69f8e2f01aba81997b5bd3110f2120ff70cff0f9a73e2367b385d1e3a4e076b322f6cc9cf8c2588760290ba2d0b55217f267c48e6060761a2197cb41aa0e8e051fe3d065bc22ab6a714ab680a30562976c0ea5bc51b38345062daac8ee2c8de48b3ad1d1f541719b28764d9e35ceaa20ccf0c2f7bdf5720f1b3e41993ce56e6c180f6303e060dad2039c67f5692aa97b8cb777762edfe889debb00c076a9fa1e840dc8f30f624bd8cb2a719345d58738cd6577804d2ca4c95962e0c4c40f5a9febf45824b5e1c9358580e2ff35a1cd8ecd2e177bf6f2d3bed74ff8e6bf407295165dca08e014f77da1a5b9a666a852ea00b6427d587de473f1dc64a899034847da3be3da53e55ca5dd627f42b416b970bb04160141b61ab2f5dc8dba273a79652e27bb721ac5ee33e14a789d6c05ee94b329c6a611ab6c4849a2594f486f54a57165e206d6ef254ea384da3a83e7ab29cd20097559fac6844b476703f39afdd262a08bfdaacc10c798a44c1ef5514022fda7d76a9e04fcd1afb015ed4d916be211a345d69d384f1035d652c7d8206113ce2d7f5aed0bf09e44d37994fca2190698272a0adf6e0329259aeca99bb5e97e01d59de0b246073590679f68b27c8c6879eae226ce6d4d0fe6ed91bcf216d409084f44cf5da318c48d5325d6b583854e2147b17f07756c30433400241bff2455a8b29d0b0", 0x561}], 0x1}, 0x0) 2018/02/10 10:55:13 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000113000), &(0x7f000027e000-0x1)) socket(0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x7eb0) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000813000-0x8)='net/raw\x00') readv(r0, &(0x7f000066e000-0x10)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000d04000-0x10), 0x10) modify_ldt$read(0x0, &(0x7f00009fe000-0x29)=""/41, 0x29) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000f75000-0x68)={0xffffffff8050fcf3}) 2018/02/10 10:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00003cc000-0x28)={@common='lo\x00', &(0x7f0000943000-0x16)=@ethtool_gstrings={0x1b, 0x6}}) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f000083c000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000012000)={0x0, 0x0, 0x0, @thr={&(0x7f0000d05000), &(0x7f00005a7000-0x70)}}) execveat(0xffffffffffffffff, &(0x7f0000358000-0xc)='./file0/bus\x00', &(0x7f00003fa000-0x10)=[], &(0x7f0000f3b000)=[], 0x0) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setrlimit(0x7, &(0x7f0000bed000-0x10)={0x16, 0x88}) syz_open_procfs(0x0, &(0x7f0000457000-0x6)='smaps\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f000003d000)) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000813000-0x8)='net/raw\x00') readv(r0, &(0x7f000066e000-0x10)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000599000-0x8)='./file0\x00', 0x26103, 0x0) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f000083c000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000012000)={0x0, 0x0, 0x0, @thr={&(0x7f0000d05000), &(0x7f00005a7000-0x70)}}) execveat(0xffffffffffffffff, &(0x7f0000358000-0xc)='./file0/bus\x00', &(0x7f00003fa000-0x10)=[], &(0x7f0000f3b000)=[], 0x0) 2018/02/10 10:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000dde000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f0000b71000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000f23000)='./file0\x00', 0x0) lseek(r0, 0x3, 0x0) 2018/02/10 10:55:13 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000113000), &(0x7f000027e000-0x1)) socket(0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x7eb0) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000064e000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbfffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xac3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000813000-0x8)='net/raw\x00') readv(r0, &(0x7f000066e000-0x10)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x3, &(0x7f0000663000), &(0x7f000082d000-0x8), 0x8) 2018/02/10 10:55:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000fa2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}}) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000d05000), 0x628, 0x8040, &(0x7f0000030000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendmsg(r0, &(0x7f0000d47000)={&(0x7f0000cd4000-0x10)=@nfc={0x27}, 0x10, &(0x7f0000b72000-0x50)=[{&(0x7f0000b00000-0x1000)="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", 0x561}], 0x1}, 0x0) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000002000)='/dev/input/mice\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00005b1000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000fc3000-0x4)) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfd7000)=nil, 0xfd7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) fcntl$getownex(r1, 0x10, &(0x7f0000ae1000-0x8)) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000034000-0xd)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000028000-0xd)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x0, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000039000-0x2)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000033000)={0xfb, @time}) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000e3a000-0x9)='/dev/sg#\x00', 0x0, 0x142) write(r0, &(0x7f000023b000)="ddc1c992757ba20660367e97d8d9ad86f4b78974721e09ead46d4ccccfd6b790014ff2bd2ca43e7c50a9", 0x2a) r1 = fcntl$dupfd(r0, 0x0, r0) ppoll(&(0x7f0000d63000)=[{r1}], 0x1, &(0x7f0000676000)={0x77359400}, &(0x7f000011e000-0x8), 0x8) 2018/02/10 10:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x1}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:13 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000113000), &(0x7f000027e000-0x1)) socket(0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x7eb0) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d44000)='net/fib_triestat\x00') sendfile(r0, r0, &(0x7f0000802000-0x4), 0xfffffffffffffffd) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000093a000)='./file0\x00', 0x0) open(&(0x7f00003d5000-0x8)='./file0\x00', 0x79e2fcc200c77106, 0x0) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd1000-0x38)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_lifetime={0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}]}, 0xc0}, 0x1}, 0x0) 2018/02/10 10:55:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) poll(&(0x7f00004f2000)=[{r0}], 0x1, 0x1) [ 37.760473] IPv4: Oversized IP packet from 127.0.0.1 2018/02/10 10:55:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000fa2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}}) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000d05000), 0x628, 0x8040, &(0x7f0000030000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendmsg(r0, &(0x7f0000d47000)={&(0x7f0000cd4000-0x10)=@nfc={0x27}, 0x10, &(0x7f0000b72000-0x50)=[{&(0x7f0000b00000-0x1000)="be71683f2691691f494f9a23210047cc6ebceec7b3d2a5dcb31653fa69fd253d0f59a2bba81adbff42319bd9ab5ccf6d04591cb38f35a67e0416229e5626428c21eed488b96017df34c2cef84b789ff013bbe5da3dae39056d31c6788c0cf04a17582686663bde6f65da83288fe90ec560b6b0d41e7e61a7c4acc808eb94cce500943db78ca17fab7dadcabbd4d9c3fad7f4591fa34b45b58933907afd60458710d554a17859c3951c1917ab9675898ed8f92ecd7598cb762b2b281937c951a0e0508644ed3210618f834deb5653d85d4e8b11d4427a2c55cbe10bcb3cfd3aa04389a1f431e2f2d50c5170bc73de8e34a62b628d599d5336ef486fc97826033ff66de64878310dfaeda495deecfcd5d3aeff5159d5ad772f24ae2d3bdf7885025b529e634fd66318e45867c4a500f51b3705c39ac77b4c8f72b3115a2bc551fd3a80b5cd0afd7f9848685884f11943e8e504c3ac24ee18743c0b5d86b5e7da18901ef202a05d2ecfefcbc83c2b54ba6fe806529b254938c85f1c0e78afa161f71da315643deead324150e19412943510a909ff9a1e4cc910017c436d32da936d4fb9b685d1b655e8c63b67eb4dea02aa556d0313bd0a6173edcada84064c7714420ee48750317f40f9cc40b519a1347234d747cd36d15ba171aa095d462dd0421f98434a829043cf23d9ffddecb2b21dbc5f08f670964c69bcc1a9e9b9a71df4142fef7e229b55d4177625c182ac93c6c81898ca5c5cb9cd71a768aec6fad9a1d1e519b50316c6131e7163b58443eb6fb71111eb0007986f2bb88610e1dfff6cfe974a2a9ffb2322043958eaf4359738a42488ec4c88963427f324d9cabb80015a4e43ea3e8d0d61c4d72f7e86fdb348d47fe6a5d44539e1e643c632395091cac88bc1fbb601487afafaf5b9d47e0e65513957a499e36cb24863ef38bb552156fe7e91b8fb362cfed3d0748fe6d2caa6283594f3330abcc3198cb3f3f83e3419027bf3694e9b7ac64e71f26a6d1412d7caf3e20205b1d843edc2d42c4ae6863507728ed36fb57dd94e3c65dd370928a83679b7e695c846cc02b353fd3d3139c3f310008150342c6982d46c405f4335f6ed42fc6417ee1280ff408f5c8ad34d74164f5c86fc6dbd4850be92be019e57272ce3b95c30306b91f42a3c9fb2bfe32ff9580643cdf2dda4c09b74f9ee7013a5986024a3c7f232136a7302d010f8758da58a6d001d5a8384d8bcd110d69f8e2f01aba81997b5bd3110f2120ff70cff0f9a73e2367b385d1e3a4e076b322f6cc9cf8c2588760290ba2d0b55217f267c48e6060761a2197cb41aa0e8e051fe3d065bc22ab6a714ab680a30562976c0ea5bc51b38345062daac8ee2c8de48b3ad1d1f541719b28764d9e35ceaa20ccf0c2f7bdf5720f1b3e41993ce56e6c180f6303e060dad2039c67f5692aa97b8cb777762edfe889debb00c076a9fa1e840dc8f30f624bd8cb2a719345d58738cd6577804d2ca4c95962e0c4c40f5a9febf45824b5e1c9358580e2ff35a1cd8ecd2e177bf6f2d3bed74ff8e6bf407295165dca08e014f77da1a5b9a666a852ea00b6427d587de473f1dc64a899034847da3be3da53e55ca5dd627f42b416b970bb04160141b61ab2f5dc8dba273a79652e27bb721ac5ee33e14a789d6c05ee94b329c6a611ab6c4849a2594f486f54a57165e206d6ef254ea384da3a83e7ab29cd20097559fac6844b476703f39afdd262a08bfdaacc10c798a44c1ef5514022fda7d76a9e04fcd1afb015ed4d916be211a345d69d384f1035d652c7d8206113ce2d7f5aed0bf09e44d37994fca2190698272a0adf6e0329259aeca99bb5e97e01d59de0b246073590679f68b27c8c6879eae226ce6d4d0fe6ed91bcf216d409084f44cf5da318c48d5325d6b583854e2147b17f07756c30433400241bff2455a8b29d0b0", 0x561}], 0x1}, 0x0) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000002000)='/dev/input/mice\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000340000/0xc00000)=nil, 0xc00000, 0x1000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@common='lo\x00', &(0x7f0000939000-0x5)=@ethtool_gfeatures={0x3a, 0x0, []}}) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000f000-0xc)) listen(r0, 0x0) epoll_wait(r1, &(0x7f00005bf000-0xc)=[{}], 0x1, 0x0) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000f000-0xc)) listen(r0, 0x0) epoll_wait(r1, &(0x7f00005bf000-0xc)=[{}], 0x1, 0x0) 2018/02/10 10:55:13 executing program 6: futex(&(0x7f00003ed000), 0x8000000200000085, 0x0, &(0x7f0000000000), &(0x7f0000003000-0x4), 0xbffffffd) 2018/02/10 10:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x1}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000958000)='./file0\x00', 0x0) mount(&(0x7f0000a7b000-0x8)='./file0\x00', &(0x7f00009ba000-0x8)='./file0\x00', &(0x7f0000e53000)='mqueue\x00', 0x0, &(0x7f0000fcf000-0x1)) mkdir(&(0x7f00000bc000-0xe)='./file0/file0\x00', 0x0) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xdf7000)=nil, 0xdf7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000de9000-0x18)=@add_del={0x2, &(0x7f000092e000)=@common='ip6_vti0\x00'}) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000f000-0xc)) listen(r0, 0x0) epoll_wait(r1, &(0x7f00005bf000-0xc)=[{}], 0x1, 0x0) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000684000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000c26000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x16}, @broadcast=0xffffffff}, 0xc) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000002000)='/dev/input/mice\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 10:55:13 executing program 3: ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x18c2500, &(0x7f000052d000-0x97), &(0x7f0000851000-0x4), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/02/10 10:55:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000fa2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_map={0x2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}}) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000d05000), 0x628, 0x8040, &(0x7f0000030000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendmsg(r0, &(0x7f0000d47000)={&(0x7f0000cd4000-0x10)=@nfc={0x27}, 0x10, &(0x7f0000b72000-0x50)=[{&(0x7f0000b00000-0x1000)="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", 0x561}], 0x1}, 0x0) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000002000-0x4), &(0x7f0000000000)=0x4) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000f000-0xc)) listen(r0, 0x0) epoll_wait(r1, &(0x7f00005bf000-0xc)=[{}], 0x1, 0x0) 2018/02/10 10:55:13 executing program 2: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x1, 0x0, 0x109, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_spirange={0x2, 0x10, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000675000-0x10), &(0x7f0000319000-0x4)=0x10) [ 37.936052] IPv4: Oversized IP packet from 127.0.0.1 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000020000-0xc)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000022000-0x2c)=@ipv6_newroute={0x1c, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, []}, 0x1c}, 0x1}, 0x0) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0xfe8000)=nil, 0xfe8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3c000-0xc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b9000-0x4)=0x51) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000062000)) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006e0000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00005a0000)) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000-0x33)='wlan0*mime_type-trusted}&wlan0vmnet1.trusted{\\{GPL\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b21000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0x4011, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000001000-0xfa)="a80ba16834999b76d9d617c4dd48de412426cac954c992b6d397a6920ebb8c519a69145cd077da752ca53ada81670ce99e8e2823f6bfbc5fb574d9c51127f9392d24b9e3b750b7fd79448de3a37f26ecb7070c2d89a1699179fdf69408e1534e3fb28442fb862424149ab32deb6415f96eff7eda4485f40425373a464c45a33ff4ae0639036e783234137a636cf0e86a9e14510ce850db4512ffbbf09942d9f557be681b", 0xa4) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000007000)=[{&(0x7f0000b24000-0x1000)="82aaabfc6c5b1c7a6718badabd246d62c80270e00d637af19152d09e59a695e5ecb4b013dea5c5ab0458f38fca8bbf1404fe615f1e536e0f35664718a2924ec5c7a2a5ad9437fb40bd0a30d415ba5353d805afd0082932ef6de0c993", 0x5c}], 0x1) symlink(&(0x7f0000004000)='./file0\x00', &(0x7f0000003000-0xa)='./control\x00') rename(&(0x7f0000b22000)='./control\x00', &(0x7f0000004000)='./control\x00') 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000002000)='/dev/input/mice\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2018/02/10 10:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x1}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000064e000-0xd)='/dev/snd/seq\x00', 0x0, 0x48000000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbfffffffffffffff, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ppoll(&(0x7f000086d000-0x28)=[{r0}], 0x1, &(0x7f0000875000), &(0x7f00004b0000-0x8), 0x8) 2018/02/10 10:55:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000f72000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000dea000)={0x0, 0x0, 0x40}) 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a95000/0x2000)=nil, 0x2000, 0xe000, 0x0, &(0x7f0000b18000/0xe000)=nil) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0xfe8000)=nil, 0xfe8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3c000-0xc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b9000-0x4)=0x51) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000062000)) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006e0000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00005a0000)) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006e0000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00005a0000)) 2018/02/10 10:55:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000400000-0xc)={0x0}, &(0x7f0000727000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000759000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x6) ptrace$setopts(0x4204, r2, 0x0, 0x0) 2018/02/10 10:55:13 executing program 2: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x894a, &(0x7f000000b000-0x28)={@common='ip6gre0\x00'}) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000aa8000)="070a0722084fff00b1", 0x9) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000650000)=""/238, &(0x7f0000a6e000-0x4)=0xee) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006e0000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00005a0000)) [ 38.066427] IPv4: Oversized IP packet from 127.0.0.1 [ 38.067066] IPv6: Can't replace route, no match found [ 38.071257] IPv6: Can't replace route, no match found 2018/02/10 10:55:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000d09000), 0x4) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006e0000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00005a0000)) 2018/02/10 10:55:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff6000-0x4)={0x0, 0x1}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:13 executing program 3: mmap(&(0x7f0000000000/0xfe8000)=nil, 0xfe8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3c000-0xc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b9000-0x4)=0x51) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000062000)) 2018/02/10 10:55:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000d81000-0x30)=[{&(0x7f00008bc000-0x1000)="82", 0x1}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) r2 = creat(&(0x7f00001d4000-0xc)='./file0/bus\x00', 0x0) dup2(r2, r0) 2018/02/10 10:55:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000da6000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00001f9000-0x24)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00005d3000-0x4)=0x6) ioctl$TCSETSF(r0, 0x5404, &(0x7f00003af000-0x24)={0x0, 0x0, 0x0, 0xfffffffffffffffb}) 2018/02/10 10:55:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006e0000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00005a0000)) 2018/02/10 10:55:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000163000)={@common='lo\x00', &(0x7f0000bc4000)=@ethtool_cmd={0x21}}) 2018/02/10 10:55:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006e0000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00005a0000)) 2018/02/10 10:55:14 executing program 3: mmap(&(0x7f0000000000/0xfe8000)=nil, 0xfe8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3c000-0xc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b9000-0x4)=0x51) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000062000)) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023b000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fe000-0xb)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0x2a000)=nil, 0x2a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000012000-0xc)={0x10}, 0xc, &(0x7f0000013000-0x10)={&(0x7f0000013000)={0x14, 0x12, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000a37000-0x1c)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000328000-0x98)={0x2, 0x400000000000003, 0x0, 0x0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_address={0x5, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) [ 38.186450] IPv4: Oversized IP packet from 127.0.0.1 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8009) write(r0, &(0x7f0000eb0000-0x59)="dbef803e3d9f6de1e52055bb7c8a326fe46092b668269ad789c5d7acad0e771f13ffcb59029b011ded54a09c41c6cfcfbcd743cc665c33af223d42438b496a0304891c88697ae700a70f330e6fe3a1c9c76f315019b32968", 0x58) write$tun(r0, &(0x7f0000253000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @loopback=0x7f000001, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) write(r0, &(0x7f00004b4000)="ee000000080000000000ec676c6d0000230000e200057362569a446008265e3e0000970000ff04000000e0915e5e1da5ec66dbf8d9d4d87be597297349e99b0efa885d012176f3b120f199d5d47e4b774c91d9f7a555", 0x56) 2018/02/10 10:55:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@generic="4b75e7a9609746c4b43577a3f3921060", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, &(0x7f0000291000+0xdff)) 2018/02/10 10:55:14 executing program 1: futex(&(0x7f00005e3000-0x4), 0x400000085, 0x0, &(0x7f0000fed000), &(0x7f0000455000-0x4), 0x401ffffffc) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f5f000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000f5f000-0x8)) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023b000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fe000-0xb)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000feb000)=0xa90d, 0x4) recvfrom$inet6(r0, &(0x7f0000fbf000-0x93)=""/185, 0xfffffffffffffeba, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005db000-0x1c)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)=[]}, 0x0) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000001000-0xa)='syzkaller\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000000)='.', 0x1, 0xfffffffffffffff8) 2018/02/10 10:55:14 executing program 3: mmap(&(0x7f0000000000/0x39e000)=nil, 0x39e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000000f000-0x10)={0x2, 0x1, @empty}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r1, &(0x7f00001cc000-0x10)={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f000039d000), &(0x7f000039d000)=0x14) accept4$inet(r0, 0x0, &(0x7f0000399000-0x4)=0xfffffff2, 0x80800) 2018/02/10 10:55:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000002000-0x4)=0x3a6) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000c4e000-0x23)="2200000016000700010024cd090105000a08000031000409050001000000080000e7", 0x22) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023b000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fe000-0xb)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/10 10:55:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f0000090000)='./file0\x00', &(0x7f0000830000-0x8)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000a4d000-0x4)=0xffffffffffffffff) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000028000-0x4)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000016000-0xbf), 0x0, 0x0, &(0x7f0000016000-0x14)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="901170f3a1da"}, 0x14) recvfrom$packet(r0, &(0x7f0000026000-0x1000)=""/4096, 0x1000, 0x1000000002000, &(0x7f0000026000-0x14)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) 2018/02/10 10:55:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="116dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f000022a000-0x10)={0x0, &(0x7f0000c70000)=[]}) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f5f000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000f5f000-0x8)) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023b000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fe000-0xb)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/10 10:55:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@generic="4b75e7a9609746c4b43577a3f3921060", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, &(0x7f0000291000+0xdff)) 2018/02/10 10:55:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@generic="4b75e7a9609746c4b43577a3f3921060", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, &(0x7f0000291000+0xdff)) 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ff1000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000600000-0x5c)) 2018/02/10 10:55:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) write$tun(r0, &(0x7f0000955000)=@hdr={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14}, @broadcast=0xffffffff, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000b29000-0x8)='./file0\x00', &(0x7f0000767000-0x8)='./file0\x00', &(0x7f00005aa000-0x7)='mqueue\x00', 0x8800, 0x0) r0 = open$dir(&(0x7f000001c000-0xc)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000386000)=""/1840, 0x730) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ed3000-0x2a)='ns/net\x00') setns(r0, 0x0) 2018/02/10 10:55:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="116dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f000022a000-0x10)={0x0, &(0x7f0000c70000)=[]}) 2018/02/10 10:55:14 executing program 4: uname(&(0x7f00003b4000-0xf2)=""/242) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f5f000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000f5f000-0x8)) 2018/02/10 10:55:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000509000)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000197000)={&(0x7f0000744000)=@ipv4_delroute={0x24, 0x19, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x0}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f5f000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000f5f000-0x8)) 2018/02/10 10:55:14 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f000065a000-0x2), &(0x7f0000504000), &(0x7f0000a2f000-0x4), &(0x7f00007c4000)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000000)) clone(0x4000104, &(0x7f0000001000), &(0x7f000094b000), &(0x7f0000a3d000-0x4), &(0x7f0000000000)) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ed3000-0x2a)='ns/net\x00') setns(r0, 0x0) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f000014e000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) sendto(r0, &(0x7f0000f1e000-0xdd), 0xffffffffffffff02, 0x0, &(0x7f0000ffb000-0x10)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f000002a000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000bd4000-0x34)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000328000)) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ed3000-0x2a)='ns/net\x00') setns(r0, 0x0) 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a4a000-0xd)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f94000)={@common='gre0\x00', @ifru_names=@generic="160000000000000005f524a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="677265300000e400", @ifru_flags=0x2fd}) read(r1, &(0x7f00008cd000-0x3e)=""/62, 0x3e) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ed3000-0x2a)='ns/net\x00') setns(r0, 0x0) 2018/02/10 10:55:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000aba000-0x10)={0x2, &(0x7f0000f31000-0x10)=[{0x20}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000ade000-0x38)=[{&(0x7f0000302000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000954000)=[], 0x0, &(0x7f00003f5000-0x30)=[]}], 0x1, 0x0) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xf78000)=nil, 0xf78000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x40000000000b, &(0x7f0000712000-0x4)=0xffffffffffffffff, 0x4) 2018/02/10 10:55:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000091a000)='./file0\x00', 0x0) unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000e24000)=""/248, &(0x7f000062a000-0x4)=0xf8) 2018/02/10 10:55:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000434000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@generic="4b75e7a9609746c4b43577a3f3921060", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, &(0x7f0000291000+0xdff)) 2018/02/10 10:55:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="116dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f000022a000-0x10)={0x0, &(0x7f0000c70000)=[]}) [ 38.593118] TCP: request_sock_TCP: Possible SYN flooding on port 20026. Sending cookies. Check SNMP counters. 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfc0000)=nil, 0xfc0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000001000-0x10)=[{0x30, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) sendto(r0, &(0x7f000002b000-0xd8), 0xfd09, 0x0, 0x0, 0x0) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xf78000)=nil, 0xf78000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x40000000000b, &(0x7f0000712000-0x4)=0xffffffffffffffff, 0x4) 2018/02/10 10:55:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000701000)={0x1, &(0x7f000004a000-0x8)=[{0x6, 0x0, 0x0, 0x5003e}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000127000)='/dev/rfkill\x00', 0x0, 0x0) 2018/02/10 10:55:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000a3c000-0x28)={@common='lo\x00', &(0x7f0000595000-0xc4)=@ethtool_channels={0x3d}}) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000636000-0x8)={@empty, @broadcast=0xffffffff}, 0x8) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000e4b000-0x12)) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xf78000)=nil, 0xf78000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x40000000000b, &(0x7f0000712000-0x4)=0xffffffffffffffff, 0x4) 2018/02/10 10:55:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="116dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f000022a000-0x10)={0x0, &(0x7f0000c70000)=[]}) 2018/02/10 10:55:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff6000-0x4), 0x4) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00006ca000), &(0x7f0000389000)=0x4) 2018/02/10 10:55:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000ae9000-0x8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000975000-0x12)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000038000-0x18)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000eb7000)={0x0, 0x0, &(0x7f0000ecb000-0xe0)}) sendfile(r1, r0, &(0x7f0000fc2000-0x8), 0x80000001) 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c6000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2285, &(0x7f0000007000)) poll(&(0x7f00003d9000)=[{r0}], 0x1, 0x7) 2018/02/10 10:55:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x801) r2 = dup3(r1, r0, 0x0) writev(r2, &(0x7f0000689000)=[{&(0x7f0000ba4000-0x27)="d5", 0x1}], 0x1) 2018/02/10 10:55:14 executing program 6: clock_gettime(0xfffffffffffffff6, &(0x7f00003f2000)) 2018/02/10 10:55:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000973000)='net/fib_trie\x00') fchmod(r0, 0x0) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) fstat(r0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xf78000)=nil, 0xf78000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x40000000000b, &(0x7f0000712000-0x4)=0xffffffffffffffff, 0x4) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1e7000)=nil, 0x1e7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x487, &(0x7f0000490000-0x18)=""/24, &(0x7f00001e6000)=0x5d1c08922993ce8d) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000d4c000/0x1000)=nil, 0x1000, 0x0, 0xda6e641d54866db5, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000973000)='net/fib_trie\x00') fchmod(r0, 0x0) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in=@loopback=0x7f000001}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000049000-0xe8)={{{@in6=@dev={0xfe, 0x80}, @in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0xe8) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000ecd000+0x4f6)={0x19980330}, &(0x7f0000033000-0x18)) getsockopt(r0, 0x0, 0x41, &(0x7f0000695000-0x11)=""/17, &(0x7f0000dff000-0x4)=0x19e) 2018/02/10 10:55:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000973000)='net/fib_trie\x00') fchmod(r0, 0x0) 2018/02/10 10:55:14 executing program 4: fchownat(0xffffffffffffff9c, &(0x7f00008a6000-0x8)='./file0\x00', 0x0, 0x0, 0x800) 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000249000-0x88)="2400000058001f0014b2f407000904000200000005000100ffffffff08000200000000f1", 0x24) [ 38.952875] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f000015b000-0x8)='./file0\x00', &(0x7f0000e61000-0x19)=@known='system.posix_acl_default\x00', &(0x7f00000f9000-0x11)='/selinux/enforce\x00', 0x11, 0x0) chmod(&(0x7f000087c000-0x8)='./file0\x00', 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/10 10:55:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00005b6000)) chdir(&(0x7f00003f7000)='./file0\x00') umount2(&(0x7f00003bb000-0x1)='.', 0x2) pivot_root(&(0x7f0000672000)='.', &(0x7f00008a6000-0x8)='.') 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) sendto$inet6(r1, &(0x7f00003ad000)="e1", 0x1, 0x0, &(0x7f0000f98000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x0, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00009f3000), 0x4) 2018/02/10 10:55:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000d50000-0x98)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xff, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) 2018/02/10 10:55:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000973000)='net/fib_trie\x00') fchmod(r0, 0x0) 2018/02/10 10:55:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000fce000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000493000)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu}) recvmmsg(0xffffffffffffff9c, &(0x7f00004bc000)=[], 0x0, 0x0, &(0x7f00008d5000)) close(r0) recvmsg(0xffffffffffffff9c, &(0x7f0000784000)={&(0x7f0000cea000-0x32)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @local}}}, 0x32, &(0x7f00004d6000)=[{&(0x7f000072b000-0x4e)=""/78, 0x4e}, {&(0x7f0000b55000)}, {&(0x7f0000054000-0x50)=""/80, 0x50}], 0x3, &(0x7f00004d4000-0x6d)=""/109, 0x6d, 0x9}, 0x10000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000dd7000), &(0x7f0000762000-0x4)=0x14) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000dcd000-0x10)='/selinux/policy\x00', 0x0, 0x0) 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000d74000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f64000-0x4)=0x20) 2018/02/10 10:55:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000003000)='.s/ \x00\x00\x00\x00') 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000003000)='.s/ \x00\x00\x00\x00') 2018/02/10 10:55:14 executing program 0: getrandom(&(0x7f0000011000)=""/153, 0x99, 0x3) 2018/02/10 10:55:14 executing program 7: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) process_vm_writev(r1, &(0x7f0000002000-0x18)=[{&(0x7f0000001000-0x1000)=""/4096, 0x1000}], 0x1, &(0x7f0000003000-0x20)=[{&(0x7f000029a000)=""/41, 0x29}], 0x1, 0x0) 2018/02/10 10:55:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000003000)='.s/ \x00\x00\x00\x00') 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000224000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2275, &(0x7f00000c4000)="46ff92") mmap$binder(&(0x7f0000d4d000/0xb000)=nil, 0xb000, 0x0, 0x12, r0, 0x0) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f00008c4000)) fcntl$lock(r0, 0x7, &(0x7f0000155000)) 2018/02/10 10:55:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001000-0x1000)=""/4096) 2018/02/10 10:55:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f0000644000-0xa8)={{0x80}, 'port0\x00'}) 2018/02/10 10:55:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00002aa000)='veno\x00', 0xfffffffffffffe25) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) sendto(r0, &(0x7f0000eaf000-0x11), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001000), 0x4) 2018/02/10 10:55:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000003000)='.s/ \x00\x00\x00\x00') 2018/02/10 10:55:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000224000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2275, &(0x7f00000c4000)="46ff92") mmap$binder(&(0x7f0000d4d000/0xb000)=nil, 0xb000, 0x0, 0x12, r0, 0x0) 2018/02/10 10:55:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f00009f9000-0xa)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000024000-0x8)='./control\x00', r0, &(0x7f0000013000-0xa)='./file0\x00') renameat2(r0, &(0x7f0000aea000-0xa)='./file0\x00', r0, &(0x7f0000f5b000)='./control\x00', 0x2) 2018/02/10 10:55:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000000)=""/87, 0x57}], 0x1) 2018/02/10 10:55:14 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001000-0xdf)=""/223, 0xdf}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000011000)='/selinux/policy\x00', 0x0, 0x0) 2018/02/10 10:55:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f00008c4000)) fcntl$lock(r0, 0x7, &(0x7f0000155000)) 2018/02/10 10:55:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0x44}, {0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00002aa000)='veno\x00', 0xfffffffffffffe25) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xefd000)=nil, 0xefd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000efb000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000efa000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000efb000)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r0) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f00008c4000)) fcntl$lock(r0, 0x7, &(0x7f0000155000)) 2018/02/10 10:55:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000224000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2275, &(0x7f00000c4000)="46ff92") mmap$binder(&(0x7f0000d4d000/0xb000)=nil, 0xb000, 0x0, 0x12, r0, 0x0) 2018/02/10 10:55:15 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000b42000/0x3000)=nil) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000a92000-0x12)='setgroups\x00') close(r0) 2018/02/10 10:55:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00002aa000)='veno\x00', 0xfffffffffffffe25) 2018/02/10 10:55:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000224000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2275, &(0x7f00000c4000)="46ff92") mmap$binder(&(0x7f0000d4d000/0xb000)=nil, 0xb000, 0x0, 0x12, r0, 0x0) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000691000-0x4), 0x4) 2018/02/10 10:55:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000992000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x1fffffffffffe) flock(r0, 0x1) flock(r0, 0x2) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000000000/0xf6d000)=nil, 0xf6d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f64000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000f6c000-0x10)=@ethtool_rxfh_indir={0x2, 0x0, []}}) 2018/02/10 10:55:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000eba000-0x1), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4(r1, &(0x7f00003ad000)=@l2, &(0x7f00008f2000-0x4)=0xe, 0x0) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f00008c4000)) fcntl$lock(r0, 0x7, &(0x7f0000155000)) 2018/02/10 10:55:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00002aa000)='veno\x00', 0xfffffffffffffe25) 2018/02/10 10:55:15 executing program 3: r0 = gettid() getpriority(0x2, r0) 2018/02/10 10:55:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}]}, 0x60}, 0x1}, 0x0) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000dbe000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000486000)=0x10, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f00009fc000)=""/4096, 0x800, 0x0, &(0x7f000003c000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x4000000002283, &(0x7f0000139000)='4') write$evdev(r0, &(0x7f0000b5e000-0x78)=[{}, {}, {}, {{0x77359400}}], 0x60) 2018/02/10 10:55:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000dda000-0x12)='/dev/input/event#\x00', 0x200, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00009d4000)={0x0, 0x0, 0x0, 0x0, "f24929d550c69ba4e740cd8d07c86adffbb9567a489a3743739d580259ed37de"}) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4d000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000b0d000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f0000c84000-0x10)=[{&(0x7f00004d4000-0x40)=""/8, 0x3}], 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000c5000)) dup3(r1, r0, 0x0) 2018/02/10 10:55:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000eba000-0x1), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4(r1, &(0x7f00003ad000)=@l2, &(0x7f00008f2000-0x4)=0xe, 0x0) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mremap(&(0x7f00000f3000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000192000/0x4000)=nil) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000002000-0x4), &(0x7f0000013000)=0x4) 2018/02/10 10:55:15 executing program 2: clock_getres(0x6, &(0x7f00008ac000)) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='./file0\x00', 0x0) creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x2794) r0 = open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x200000000003, 0xa012, r0, 0x0) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mremap(&(0x7f00000f3000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000192000/0x4000)=nil) 2018/02/10 10:55:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000eba000-0x1), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4(r1, &(0x7f00003ad000)=@l2, &(0x7f00008f2000-0x4)=0xe, 0x0) 2018/02/10 10:55:15 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x22, &(0x7f0000000000)={@empty, @empty}, 0x0) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000002000-0x4), &(0x7f0000013000)=0x4) 2018/02/10 10:55:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000eba000-0x1), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) accept4(r1, &(0x7f00003ad000)=@l2, &(0x7f00008f2000-0x4)=0xe, 0x0) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mremap(&(0x7f00000f3000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000192000/0x4000)=nil) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000002000-0x4), &(0x7f0000013000)=0x4) 2018/02/10 10:55:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000fd4000), 0x5, 0x0, &(0x7f00001f3000), &(0x7f0000000000), 0x41000000) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='./file0\x00', 0x0) creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x2794) r0 = open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x200000000003, 0xa012, r0, 0x0) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mremap(&(0x7f00000f3000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000192000/0x4000)=nil) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil) 2018/02/10 10:55:15 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00007ed000-0x20)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000005000-0x4)=0x20) 2018/02/10 10:55:15 executing program 1: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/arp\x00') read(r0, &(0x7f0000020000-0x42)=""/174, 0xae) read$eventfd(r0, &(0x7f0000009000-0x8), 0x57a) 2018/02/10 10:55:15 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000001000-0x65), 0x0, 0x0, &(0x7f0000001000-0x1c)={0xa, 0xffffffffffffffff, 0x3, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00003b7000-0x8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdc000-0x8)='./file0\x00', &(0x7f0000888000-0x8)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000fe5000-0x10), &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) creat(&(0x7f0000fdf000-0x8)='./file1\x00', 0x0) fcntl$getflags(r0, 0x401) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a2c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000910000)=0xb4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='./file0\x00', 0x0) creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x2794) r0 = open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x200000000003, 0xa012, r0, 0x0) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000002000-0x4), &(0x7f0000013000)=0x4) 2018/02/10 10:55:15 executing program 1: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/arp\x00') read(r0, &(0x7f0000020000-0x42)=""/174, 0xae) read$eventfd(r0, &(0x7f0000009000-0x8), 0x57a) 2018/02/10 10:55:15 executing program 6: mmap(&(0x7f0000000000/0x32000)=nil, 0x32000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f000002c000-0x454)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x1f0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f000002f000-0x40), {[{{@uncond, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@random="b9a6315b8a3c", @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @dev={0xac, 0x14}, @empty}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xfffffffffffffda2}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000c86000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x125d, &(0x7f00001df000)) 2018/02/10 10:55:15 executing program 1: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/arp\x00') read(r0, &(0x7f0000020000-0x42)=""/174, 0xae) read$eventfd(r0, &(0x7f0000009000-0x8), 0x57a) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) write$evdev(r0, &(0x7f0000bf5000)=[{{0x77359400}}], 0x10) pwritev(r0, &(0x7f0000f51000-0x70)=[{&(0x7f00001b3000)="93", 0x1}], 0x1, 0x83003) sendfile(r0, r0, &(0x7f0000633000), 0x8001) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='./file0\x00', 0x0) creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x2794) r0 = open$dir(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x200000000003, 0xa012, r0, 0x0) 2018/02/10 10:55:15 executing program 1: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/arp\x00') read(r0, &(0x7f0000020000-0x42)=""/174, 0xae) read$eventfd(r0, &(0x7f0000009000-0x8), 0x57a) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000458000-0xe)='net/protocols\x00') preadv(r0, &(0x7f0000e74000)=[{&(0x7f0000b2d000)=""/244, 0xf4}, {&(0x7f0000e99000-0x99)=""/153, 0x99}], 0x2, 0x0) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000d38000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000c06000-0x100)=[], 0x28, 0x0, 0x0) shutdown(r0, 0x0) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00001e2000-0x20)="1f0000002104fffffd3b54c007111a00f30501000b000500000423ca0a00cf17", 0x20) 2018/02/10 10:55:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00003ad000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00008e9000)=""/129, &(0x7f0000e0a000-0x4)=0x81) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x25a58451dfbf5580, &(0x7f0000f68000)={{0x0, 0x989680}}, &(0x7f0000e67000)) 2018/02/10 10:55:15 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000ee9000), &(0x7f0000000000)=0x4) 2018/02/10 10:55:15 executing program 4: r0 = getpgrp(0xffffffffffffffff) setpriority(0x0, r0, 0x0) 2018/02/10 10:55:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f000070b000)=0x1, 0x657) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f00008e5000-0xd1)="2400000026007f000000000000097701000000ff0100000000000300ffffffff0100ff10", 0x24) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000d38000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000c06000-0x100)=[], 0x28, 0x0, 0x0) shutdown(r0, 0x0) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000c000-0x1c)=@in6={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004000)=[], 0x0, &(0x7f00004fe000-0x720)=[{0x71c, 0x29, 0x3, "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"}], 0x71c}, 0x0) 2018/02/10 10:55:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @dccp={{0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @dccp={{0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) recvmsg(r0, &(0x7f0000049000)={&(0x7f00004fb000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @multicast2}}}, 0x26, &(0x7f0000bc5000-0x80)=[{&(0x7f0000776000)=""/198, 0xc6}, {&(0x7f0000720000-0x62)=""/98, 0x62}, {&(0x7f0000260000-0xea)=""/234, 0xea}, {&(0x7f0000f0a000)=""/237, 0xed}, {&(0x7f0000bee000)=""/255, 0x315}], 0x5}, 0x400063) 2018/02/10 10:55:15 executing program 0: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000a000)="240000002e00030207fffd946fa283b70a0000000300000000000000000001ff00000000", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f00008e5000-0xd1)="2400000026007f000000000000097701000000ff0100000000000300ffffffff0100ff10", 0x24) 2018/02/10 10:55:15 executing program 1: mlockall(0x6) 2018/02/10 10:55:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000006000)='/dev/snd/seq\x00', 0x0, 0x8400000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$tun(r2, &(0x7f0000086000)=@hdr={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "bb7bb9", 0x10, 0x0, 0x0, @empty, @loopback={0x0, 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}, 0x42) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000b0e000-0xbc)) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000c000-0x1c)=@in6={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004000)=[], 0x0, &(0x7f00004fe000-0x720)=[{0x71c, 0x29, 0x3, "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"}], 0x71c}, 0x0) 2018/02/10 10:55:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00003ad000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00008e9000)=""/129, &(0x7f0000e0a000-0x4)=0x81) 2018/02/10 10:55:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xe, &(0x7f0000226000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@generic={0x88ca}}}, &(0x7f0000249000-0xc)={0x0, 0x1, [0x0]}) 2018/02/10 10:55:15 executing program 1: keyctl$get_keyring_id(0x0, 0x0, 0x0) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f00008e5000-0xd1)="2400000026007f000000000000097701000000ff0100000000000300ffffffff0100ff10", 0x24) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000440000-0x8)={0x19980330}, &(0x7f0000be5000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000473000)='setgroups\x00') 2018/02/10 10:55:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x7fffffff) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000199000-0x4)=0x0) prlimit64(r0, 0xf, &(0x7f0000090000)={0x9}, &(0x7f00008d9000)) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) connect$inet6(r1, &(0x7f0000e2a000-0x1c)={0xa, 0x2, 0x9, @local={0xfe, 0x80, [], 0x0, 0xaa}, 0x1}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000402000-0x88)={0x5, {{0xa, 0x2, 0x7f, @mcast2={0xff, 0x2, [], 0x1}, 0xe61}}}, 0x88) setsockopt$inet6_int(r1, 0x29, 0x2f, &(0x7f00002c6000)=0x3f73, 0x0) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00005c0000)=[{0xf, 0x3ff7be70}, {0xe}], 0x2) r2 = syz_open_dev$sg(&(0x7f0000d75000-0x9)='/dev/sg#\x00', 0x7ba1c4b0000, 0x800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000c21000-0xf7)={0x0, 0xef, "b254e194a9185818f3a3daa2bc48b826020faddbb84f55a9b39ef64bcde8580ccb5f76465aeef503c1ea9f10d3bb275d24355f5389386416ee4aecab538132b6055cc356a483e5ba0cbbc0150eaa42873896ebde88de73561d2c408d574190d59bb0274ddac52b1c8a93e303e24c3a1c6c54e3c21bae4d20e30f80a3efec5083a39049521f26653f5b69021913e52d16057fcdd85f85c05d2a7605dc009bfcf93c88310a02d2ee465a28bcea86193006e7e448332bfb898937dc02782c9961275b2bbbaebccdd2279bc9308f234a049731f0fe27e4521e18454115d5f0fafe1081cb816f8be2df57b590c7202f4a7d"}, &(0x7f0000cf4000)=0xf7) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00006ce000)={r3, 0x2}, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000061000)={@empty}, 0x20) socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r1, &(0x7f00007a9000-0x1), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000b43000)=[], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00007d3000), 0x1f0) sendto$inet6(r1, &(0x7f0000fa3000)="2160616d2f698f6c7795c074cd3c8b6439bc7e8847fd34367b110ce2f08faa56c377075cfd5e445ec6491fe07a8922b92f279ff4fe699f38afbd235c8c320ecfbcb1d2511b9a78d982fb530833ef57b58f8d821701e404bd2b9b17c2f834bf6644aca462cae011f3178ed09f8fd162d3564c070f1d2796391840480df077340703fa20a296c63ebce63a4bbb9c48826949f5a521d704c008127095fa9acc63f2edc024dd32cc330a54ef12874bfefa3478dac9694ee9f2aba4", 0xb9, 0xc000, 0x0, 0x0) close(r1) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000d38000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000c06000-0x100)=[], 0x28, 0x0, 0x0) shutdown(r0, 0x0) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f00008e5000-0xd1)="2400000026007f000000000000097701000000ff0100000000000300ffffffff0100ff10", 0x24) 2018/02/10 10:55:15 executing program 0: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002000)='/dev/hwrng\x00', 0x0, 0x0) fstat(r0, &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r1, 0x0) 2018/02/10 10:55:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00003ad000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00008e9000)=""/129, &(0x7f0000e0a000-0x4)=0x81) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000c000-0x1c)=@in6={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004000)=[], 0x0, &(0x7f00004fe000-0x720)=[{0x71c, 0x29, 0x3, "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"}], 0x71c}, 0x0) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000cd7000-0x4)=0x57, 0x4) recvmmsg(r0, &(0x7f0000294000-0x20)=[{{&(0x7f000033e000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @remote}}}, 0x26, &(0x7f0000815000)=[{&(0x7f0000c7e000-0xeb)=""/235, 0xeb}], 0x1, &(0x7f0000cba000-0xc6)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000594000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000443000)={@common='lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000e26000)="2d01000000e6000000005ca73d9f", 0xe, 0x0, &(0x7f0000dc9000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x14) 2018/02/10 10:55:15 executing program 1: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) bind(r0, &(0x7f000000b000)=@nl=@proc={0x10}, 0xc) connect(r0, &(0x7f0000009000)=@nl=@kern={0x10}, 0xc) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000bf3000), 0x0, 0x20000004, &(0x7f0000cc8000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r0) r2 = accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000716000-0x4)=0x58, 0x0) recvfrom$llc(r2, &(0x7f00000cb000)=""/247, 0xf7, 0x2, &(0x7f0000ae9000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb]}}, 0x10) 2018/02/10 10:55:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00003ad000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00008e9000)=""/129, &(0x7f0000e0a000-0x4)=0x81) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000d38000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000c06000-0x100)=[], 0x28, 0x0, 0x0) shutdown(r0, 0x0) [ 40.037689] TCP: request_sock_TCPv6: Possible SYN flooding on port 20022. Sending cookies. Check SNMP counters. 2018/02/10 10:55:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000010000-0x20)=[{&(0x7f0000037000-0x16)=""/8, 0x8}], 0x7f) read(r0, &(0x7f000038b000)=""/1, 0xffda) writev(r0, &(0x7f0000001000)=[{&(0x7f0000021000)='u8\x00\x00\x00\x00\x00\x00', 0x8}], 0x1) 2018/02/10 10:55:15 executing program 4: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="130000004300030007fffd946fa283bc04eee6", 0x13}], 0x1}, 0x0) 2018/02/10 10:55:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000002000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000001000)) 2018/02/10 10:55:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000c000-0x1c)=@in6={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004000)=[], 0x0, &(0x7f00004fe000-0x720)=[{0x71c, 0x29, 0x3, "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"}], 0x71c}, 0x0) 2018/02/10 10:55:15 executing program 1: clock_getres(0x9, &(0x7f0000001000-0x10)) 2018/02/10 10:55:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000bf3000), 0x0, 0x20000004, &(0x7f0000cc8000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r0) r2 = accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000716000-0x4)=0x58, 0x0) recvfrom$llc(r2, &(0x7f00000cb000)=""/247, 0xf7, 0x2, &(0x7f0000ae9000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb]}}, 0x10) 2018/02/10 10:55:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000832000-0x55)="240000002600070032ff0300000000000001ffff0100000000000000ff02000000000800", 0x24) 2018/02/10 10:55:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000bf3000), 0x0, 0x20000004, &(0x7f0000cc8000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r0) r2 = accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000716000-0x4)=0x58, 0x0) recvfrom$llc(r2, &(0x7f00000cb000)=""/247, 0xf7, 0x2, &(0x7f0000ae9000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb]}}, 0x10) 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000952000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_map}) 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xf97000)=nil, 0xf97000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000f9000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, @broadcast=0xffffffff}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000487000)={@multicast2=0xe0000002, @loopback=0x7f000001, @broadcast=0xffffffff}, 0xc) 2018/02/10 10:55:16 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000001000-0x2), 0x586) 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000bf3000), 0x0, 0x20000004, &(0x7f0000cc8000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r0) r2 = accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000716000-0x4)=0x58, 0x0) recvfrom$llc(r2, &(0x7f00000cb000)=""/247, 0xf7, 0x2, &(0x7f0000ae9000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb]}}, 0x10) 2018/02/10 10:55:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003b000-0x6)='posix_acl_access{Y\x00', 0x0) pwrite64(r0, &(0x7f0000bb7000-0x2)="02", 0x1, 0x20000) lseek(r0, 0x0, 0x3) [ 40.198767] TCP: request_sock_TCPv6: Possible SYN flooding on port 20022. Sending cookies. Check SNMP counters. 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000198000-0x4)=0xfffffffdfffffffb, 0xffffffffffffff07) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000e72000-0x4)=0x7fffffff, 0x4) sendto$inet6(r0, &(0x7f0000f58000), 0x0, 0x0, &(0x7f00005ba000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f0000f73000)=""/246, 0xf6, 0x2000, 0x0, 0xe5) 2018/02/10 10:55:16 executing program 3: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000001000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000002000)={0x0, 0x0, 0x0, 'queue0\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000002000-0x5c)) 2018/02/10 10:55:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f5, 0x0, &(0x7f0000aec000-0x40)={0x0, 0x1, 0x2}) mq_getsetattr(r0, &(0x7f0000dc1000-0x40)={0x800}, &(0x7f0000356000)) 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000f2b000-0x10)={0x77359400}, &(0x7f0000956000)) 2018/02/10 10:55:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000991000)='net/igmp6\x00') sendfile(r0, r0, &(0x7f000054f000), 0xfffffffffffffffe) 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000bf3000), 0x0, 0x20000004, &(0x7f0000cc8000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r0) r2 = accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000716000-0x4)=0x58, 0x0) recvfrom$llc(r2, &(0x7f00000cb000)=""/247, 0xf7, 0x2, &(0x7f0000ae9000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb]}}, 0x10) 2018/02/10 10:55:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000329000), &(0x7f0000006000)=0x4) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/10 10:55:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000bf3000), 0x0, 0x20000004, &(0x7f0000cc8000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r0) r2 = accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000716000-0x4)=0x58, 0x0) recvfrom$llc(r2, &(0x7f00000cb000)=""/247, 0xf7, 0x2, &(0x7f0000ae9000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb]}}, 0x10) [ 40.259645] TCP: request_sock_TCPv6: Possible SYN flooding on port 20022. Sending cookies. Check SNMP counters. 2018/02/10 10:55:16 executing program 6: tgkill(0x0, 0x0, 0x0) 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_settime(0x84f07f8e92977307, &(0x7f00006a4000)) 2018/02/10 10:55:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x800000002) read(r0, &(0x7f0000ea5000)=""/24, 0xe1) write$evdev(r0, &(0x7f0000058000-0x60)=[{{}, 0x0, 0x100000001}, {}], 0x30) 2018/02/10 10:55:16 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000648000)) [ 40.306350] ALSA: seq fatal error: cannot create timer (-22) [ 40.318218] TCP: request_sock_TCPv6: Possible SYN flooding on port 20022. Sending cookies. Check SNMP counters. [ 40.322377] binder: 6330:6339 got transaction with invalid offsets ptr [ 40.322721] binder: 6330:6339 transaction failed 29201/-14, size 0-4 line 3156 [ 40.327019] binder: BINDER_SET_CONTEXT_MGR already set [ 40.327026] binder: 6330:6342 ioctl 40046207 0 returned -16 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ebe000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000471000)={{}, 0x40}) 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00009f2000-0xb)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) [ 40.345794] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.366449] ALSA: seq fatal error: cannot create timer (-22) 2018/02/10 10:55:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f00009ae000)={0x0, 0x0, &(0x7f00002fe000)=[], &(0x7f00004db000)=[0x0], 0x0, 0x0, 0x0, &(0x7f0000c25000)=[], &(0x7f0000974000)=[]}) getsockopt$inet_buf(r0, 0x0, 0x487, &(0x7f0000490000-0x18)=""/24, &(0x7f00001e6000)=0x5d1c08922993ce8d) 2018/02/10 10:55:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76), 0x1}], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x54, 0x0, &(0x7f00009d5000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28, 0x0, &(0x7f0000a0a000-0x50)=[], &(0x7f0000711000)=[]}}}, @release={0x40046306}], 0x90, 0x0, &(0x7f0000f98000-0x22)}) 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000d74000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00001e1000-0x4)=0x6, 0x4) connect$inet6(r0, &(0x7f0000f03000)={0xa, 0xffffffffffffffff, 0x10001, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 2018/02/10 10:55:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000867000)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000d000-0x1c)={0xa, 0xffffffffffffffff, 0x807, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f000037b000-0x8)=@fragment, 0x8) sendmmsg(r0, &(0x7f0000ad9000)=[{{0x0, 0x0, &(0x7f0000bff000)=[], 0x0, &(0x7f0000cc4000-0x18)=[{0x10}], 0x10}}], 0x1, 0x0) 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ebe000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000471000)={{}, 0x40}) 2018/02/10 10:55:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f000016c000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@syzn={0x73, 0x79, 0x7a}, @ifru_addrs=@rc={0x1f}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00003c7000-0x44)={{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, {0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb]}}, 0x4, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, @syzn={0x73, 0x79, 0x7a}}) 2018/02/10 10:55:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000bf3000), 0x0, 0x20000004, &(0x7f0000cc8000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) close(r0) r2 = accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000716000-0x4)=0x58, 0x0) recvfrom$llc(r2, &(0x7f00000cb000)=""/247, 0xf7, 0x2, &(0x7f0000ae9000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb]}}, 0x10) 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ebe000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000471000)={{}, 0x40}) 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000478000-0x60)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000cf3000)}}) mq_notify(r0, &(0x7f0000fec000)={0x0, 0x0, 0x0, @thr={&(0x7f0000a1b000-0x9c), &(0x7f0000833000)}}) 2018/02/10 10:55:16 executing program 0: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000013000-0x39)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000e000-0x8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) [ 40.527528] audit_printk_skb: 9 callbacks suppressed [ 40.546246] audit: type=1400 audit(1518260116.311:17): avc: denied { transfer } for pid=6370 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 40.563429] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x1, 0x2}) mq_timedsend(r0, &(0x7f0000a5c000), 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f000066c000), 0x0, 0x0, &(0x7f000058f000-0x10)) 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ebe000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000471000)={{}, 0x40}) 2018/02/10 10:55:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000763000-0x1), 0x0, 0x20007ffe, &(0x7f000082d000-0x10)={0x2, 0x0, @empty}, 0x10) 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000478000-0x60)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000cf3000)}}) mq_notify(r0, &(0x7f0000fec000)={0x0, 0x0, 0x0, @thr={&(0x7f0000a1b000-0x9c), &(0x7f0000833000)}}) 2018/02/10 10:55:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000a40000-0xd)='[', 0x1) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000084f000)=""/4096, &(0x7f000093d000-0x4)=0x1269) [ 40.563434] binder: 6387:6388 ioctl 40046207 0 returned -16 [ 40.587368] binder: 6370:6392 Release 1 refcount change on invalid ref 0 ret -22 [ 40.596121] binder: 6387:6393 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 40.618042] binder_alloc: binder_alloc_mmap_handler: 6370 20000000-20002000 already mapped failed -16 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = memfd_create(&(0x7f0000002000-0xb)='self$eth0:\x00', 0x0) renameat2(r1, &(0x7f0000002000-0x8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0) fcntl$notify(r0, 0x0, 0x282) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) [ 40.625493] binder: BINDER_SET_CONTEXT_MGR already set [ 40.625506] binder: 6387:6403 ioctl 40046207 0 returned -16 [ 40.637091] binder: 6387:6403 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 40.638463] binder: 6387:6403 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 40.646197] binder: BINDER_SET_CONTEXT_MGR already set [ 40.646204] binder: 6370:6377 ioctl 40046207 0 returned -16 [ 40.670283] binder_alloc: 6370: binder_alloc_buf, no vma 2018/02/10 10:55:16 executing program 3: mmap(&(0x7f0000000000/0xf70000)=nil, 0xf70000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000f62000-0x4), &(0x7f00009e0000-0x4)=0x4) 2018/02/10 10:55:16 executing program 0: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000013000-0x39)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000e000-0x8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/10 10:55:16 executing program 2: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000013000-0x39)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000e000-0x8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000478000-0x60)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000cf3000)}}) mq_notify(r0, &(0x7f0000fec000)={0x0, 0x0, 0x0, @thr={&(0x7f0000a1b000-0x9c), &(0x7f0000833000)}}) 2018/02/10 10:55:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f000058d000-0x4), &(0x7f00004b5000-0x4)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000067f000-0xc)={0x0}, &(0x7f00002cb000-0x4)=0x1b) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000004b000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x40, &(0x7f000004c000)={0x0, 0x0, 0xfffffffffffffffc}) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000661000)={&(0x7f000043a000-0xf0)=""/120, 0x78}) 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = memfd_create(&(0x7f0000002000-0xb)='self$eth0:\x00', 0x0) renameat2(r1, &(0x7f0000002000-0x8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0) fcntl$notify(r0, 0x0, 0x282) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x1, 0x2}) mq_timedsend(r0, &(0x7f0000a5c000), 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f000066c000), 0x0, 0x0, &(0x7f000058f000-0x10)) 2018/02/10 10:55:16 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = memfd_create(&(0x7f0000002000-0xb)='self$eth0:\x00', 0x0) renameat2(r1, &(0x7f0000002000-0x8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0) fcntl$notify(r0, 0x0, 0x282) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) [ 40.675771] binder: 6370:6377 transaction failed 29189/-3, size 40-8 line 3128 [ 40.685778] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.691333] binder: release 6370:6377 transaction 9 out, still active [ 40.699035] binder: unexpected work type, 4, not freed [ 40.704521] binder: undelivered TRANSACTION_COMPLETE [ 40.709637] binder: undelivered transaction 12, process died. [ 40.716288] binder: send failed reply for transaction 9, target dead 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000478000-0x60)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000cf3000)}}) mq_notify(r0, &(0x7f0000fec000)={0x0, 0x0, 0x0, @thr={&(0x7f0000a1b000-0x9c), &(0x7f0000833000)}}) 2018/02/10 10:55:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) write$tun(r0, &(0x7f0000fe4000-0x13c)=@hdr={0x1, 0x0, 0x0, 0x1, 0x0, 0x0, @ipv6={0x0, 0x6, "3f1700", 0x30, 0x0, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "ce0541", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @loopback={0x0, 0x1}, []}}}}}, 0x62) 2018/02/10 10:55:16 executing program 0: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000013000-0x39)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000e000-0x8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/10 10:55:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f000058d000-0x4), &(0x7f00004b5000-0x4)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000067f000-0xc)={0x0}, &(0x7f00002cb000-0x4)=0x1b) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000004b000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x40, &(0x7f000004c000)={0x0, 0x0, 0xfffffffffffffffc}) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000661000)={&(0x7f000043a000-0xf0)=""/120, 0x78}) 2018/02/10 10:55:16 executing program 2: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000013000-0x39)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000e000-0x8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/10 10:55:16 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = memfd_create(&(0x7f0000002000-0xb)='self$eth0:\x00', 0x0) renameat2(r1, &(0x7f0000002000-0x8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0) fcntl$notify(r0, 0x0, 0x282) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x1, 0x2}) mq_timedsend(r0, &(0x7f0000a5c000), 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f000066c000), 0x0, 0x0, &(0x7f000058f000-0x10)) 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = memfd_create(&(0x7f0000002000-0xb)='self$eth0:\x00', 0x0) renameat2(r1, &(0x7f0000002000-0x8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0) fcntl$notify(r0, 0x0, 0x282) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) [ 40.744258] binder: 6420:6425 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 40.756599] binder: 6421:6427 BC_DEAD_BINDER_DONE 0000000000000003 not found 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0x8d9000)=nil, 0x8d9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000822000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x800000040004581, &(0x7f00008d8000-0x48)) 2018/02/10 10:55:16 executing program 0: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000013000-0x39)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000e000-0x8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/10 10:55:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f000058d000-0x4), &(0x7f00004b5000-0x4)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000067f000-0xc)={0x0}, &(0x7f00002cb000-0x4)=0x1b) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000004b000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x40, &(0x7f000004c000)={0x0, 0x0, 0xfffffffffffffffc}) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000661000)={&(0x7f000043a000-0xf0)=""/120, 0x78}) [ 40.807910] keychord: unsupported version 0 [ 40.808125] binder: 6437:6441 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 40.820448] binder: 6438:6446 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 40.834441] binder: 6451:6452 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 40.856644] keychord: unsupported version 0 2018/02/10 10:55:16 executing program 2: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000013000-0x39)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000e000-0x8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000001000-0xb3)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00006f5000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) write$selinux_context(r0, &(0x7f0000d25000-0x25)='system_u:object_r:memory_device_t:s0\x00', 0x25) sendto(r0, &(0x7f0000f1e000-0xdd), 0xffffffffffffff02, 0x0, &(0x7f0000ffb000-0x10)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/10 10:55:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f000058d000-0x4), &(0x7f00004b5000-0x4)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000067f000-0xc)={0x0}, &(0x7f00002cb000-0x4)=0x1b) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000004b000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x40, &(0x7f000004c000)={0x0, 0x0, 0xfffffffffffffffc}) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000661000)={&(0x7f000043a000-0xf0)=""/120, 0x78}) 2018/02/10 10:55:16 executing program 0: mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00004ad000-0xc), 0xc) 2018/02/10 10:55:16 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = memfd_create(&(0x7f0000002000-0xb)='self$eth0:\x00', 0x0) renameat2(r1, &(0x7f0000002000-0x8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0) fcntl$notify(r0, 0x0, 0x282) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) 2018/02/10 10:55:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000000000001a, &(0x7f000082b000-0x4)=0x2, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) listen(r0, 0x0) 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x1, 0x2}) mq_timedsend(r0, &(0x7f0000a5c000), 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f000066c000), 0x0, 0x0, &(0x7f000058f000-0x10)) 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = memfd_create(&(0x7f0000002000-0xb)='self$eth0:\x00', 0x0) renameat2(r1, &(0x7f0000002000-0x8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0) fcntl$notify(r0, 0x0, 0x282) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) 2018/02/10 10:55:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x802) write$tun(r0, &(0x7f00006bf000-0x13b)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @ipv6={0x0, 0x6, "739e3f", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "83d4b5", 0x0, "ff00a4"}}}}}, 0x42) 2018/02/10 10:55:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000000000001a, &(0x7f000082b000-0x4)=0x2, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) listen(r0, 0x0) 2018/02/10 10:55:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000000000001a, &(0x7f000082b000-0x4)=0x2, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) listen(r0, 0x0) 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:16 executing program 0: mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00004ad000-0xc), 0xc) 2018/02/10 10:55:16 executing program 1: mmap(&(0x7f0000000000/0xd22000)=nil, 0xd22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000d18000-0x4)=0x8, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f00001dd000-0x4), &(0x7f0000d22000-0x4)=0x4) [ 40.997030] binder: 6461:6468 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 40.998769] TCP: request_sock_TCPv6: Possible SYN flooding on port 20026. Sending cookies. Check SNMP counters. 2018/02/10 10:55:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000000000001a, &(0x7f000082b000-0x4)=0x2, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) listen(r0, 0x0) 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023b000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@multicast1=0xe0000001, @empty]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000033000)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xa00000000002, 0x0, &(0x7f0000887000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000010000)={0x0, 0x0, 0x0, 0x4}) 2018/02/10 10:55:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000000000001a, &(0x7f000082b000-0x4)=0x2, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) listen(r0, 0x0) 2018/02/10 10:55:16 executing program 0: mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00004ad000-0xc), 0xc) 2018/02/10 10:55:16 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8902, &(0x7f0000001000)={@generic="a30e6ac2320158ff2dbf137547b7eae1"}) 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0xb, &(0x7f00002e0000)={@dev={0xfe, 0x80}}, 0x1) [ 41.055570] sg_write: data in/out 524252/24 bytes for SCSI command 0x0-- guessing data in; [ 41.055570] program syz-executor4 not setting count and/or reply_len properly 2018/02/10 10:55:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000000000001a, &(0x7f000082b000-0x4)=0x2, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) listen(r0, 0x0) 2018/02/10 10:55:16 executing program 0: mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00004ad000-0xc), 0xc) 2018/02/10 10:55:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000000000001a, &(0x7f000082b000-0x4)=0x2, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) listen(r0, 0x0) 2018/02/10 10:55:16 executing program 4: mmap(&(0x7f0000000000/0xf7d000)=nil, 0xf7d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f74000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000f72000-0x1e)=""/53, 0x35, 0x0, &(0x7f0000205000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}, 0x15) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000f75000-0x4)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000f7c000), 0x0, 0x0, &(0x7f000064b000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:16 executing program 2: mmap(&(0x7f0000000000/0x8ad000)=nil, 0x8ad000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00008ab000), 0x4) 2018/02/10 10:55:16 executing program 1: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000005000-0xd)) 2018/02/10 10:55:16 executing program 6: mmap(&(0x7f0000000000/0xf09000)=nil, 0xf09000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f000087a000)=0xffffffffffffffff, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000dc7000-0x2), &(0x7f0000904000)=0x4) 2018/02/10 10:55:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:17 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0xb, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00005cb000-0x20)={0x7fffffff, 0x6, 0x0, 0xa731, 0x8, 0xc8d, 0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000906000)={0x0, 0x7ff, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x7, {r1, @in={{0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0xffffffffffffffff, 0x13}}}}}, &(0x7f0000001000-0x4)=0xb8) r2 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) open(&(0x7f0000a01000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) close(r2) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000dcc000)) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00001d7000-0x5)='user\x00', &(0x7f00007de000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000349000-0xc3), 0x0, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000c9b000-0x5)='user\x00', &(0x7f0000771000-0x5)={0x73, 0x79, 0x7a}, &(0x7f00003b1000)=',', 0x1, 0xfffffffffffffffb) keyctl$link(0x8, r0, r1) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000f97000), 0x4) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0xf7d000)=nil, 0xf7d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f74000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000f72000-0x1e)=""/53, 0x35, 0x0, &(0x7f0000205000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}, 0x15) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000f75000-0x4)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000f7c000), 0x0, 0x0, &(0x7f000064b000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f000056c000)={&(0x7f000044a000)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f0000f1e000-0x40)=[], 0x0, &(0x7f0000214000-0x60)=[{0x10, 0x0, 0x1}], 0x10}, 0x0) 2018/02/10 10:55:17 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v+Y', 0x8, 0x2c, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_reply={0x81}}}}}}, 0x0) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0xc, 0x1, 0x1, []}], 0xc}, 0x0) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x7, 0x2}) mq_timedsend(r0, &(0x7f000066c000), 0x0, 0x0, &(0x7f000066d000-0x10)) r1 = dup2(r0, r0) mq_timedreceive(r1, &(0x7f00006b1000-0x83)=""/131, 0x83, 0xfffffffffffffffe, &(0x7f00005c4000-0x10)) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0x9bf000)=nil, 0x9bf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000002000-0x10)) mlockall(0x3) 2018/02/10 10:55:17 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x2)='$\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write(r0, &(0x7f0000002000)='O', 0x1) renameat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00') 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0xf7d000)=nil, 0xf7d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f74000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000f72000-0x1e)=""/53, 0x35, 0x0, &(0x7f0000205000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}, 0x15) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000f75000-0x4)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000f7c000), 0x0, 0x0, &(0x7f000064b000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000f97000), 0x4) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000f97000), 0x4) 2018/02/10 10:55:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000a08000)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f00007ae000-0x8)='./file0\x00', r0, &(0x7f0000a31000-0xa)='./control\x00') r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f00000df000)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000b40000-0xa)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') utimensat(r0, &(0x7f0000e03000-0x10)='./control/file0\x00', &(0x7f00003e7000-0x10)={{}, {0x0, 0x2710}}, 0x0) 2018/02/10 10:55:17 executing program 3: mmap(&(0x7f0000000000/0xf2e000)=nil, 0xf2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f000000e000)=0x4, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000f2a000), &(0x7f0000f2d000)=0x38) 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0xf7d000)=nil, 0xf7d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f74000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000f72000-0x1e)=""/53, 0x35, 0x0, &(0x7f0000205000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}, 0x15) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000f75000-0x4)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000f7c000), 0x0, 0x0, &(0x7f000064b000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000f97000), 0x4) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/02/10 10:55:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00005cb000-0x20)={0x7fffffff, 0x6, 0x0, 0xa731, 0x8, 0xc8d, 0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000906000)={0x0, 0x7ff, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x7, {r1, @in={{0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0xffffffffffffffff, 0x13}}}}}, &(0x7f0000001000-0x4)=0xb8) r2 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) open(&(0x7f0000a01000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) close(r2) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000dcc000)) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000f97000), 0x4) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xff9000)=nil, 0xff9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000ff4000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x0, 0x0, 0x20000000002, 0x1}, 0x20) close(r0) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000756000-0x3)=',&\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000fc3000-0x20), &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) 2018/02/10 10:55:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) waitid(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00001f4000)={{0x0, 0x0}}) setitimer(0x0, &(0x7f0000b2b000-0x20)={{0x0, r0}}, &(0x7f0000872000)) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) quotactl(0x80000801, &(0x7f0000001000)='./file0\x00', 0x0, &(0x7f0000000000)) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000d77000), &(0x7f0000c1c000)=0x4) 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f000081c000-0x1)=""/1, &(0x7f0000001000-0x4)=0x1) 2018/02/10 10:55:17 executing program 3: mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000010000)='net/icmp\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000c000-0xc)={0x5}) epoll_wait(r1, &(0x7f0000004000-0xc)=[{}], 0x1, 0x0) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000f97000), 0x4) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000f97000), 0x4) 2018/02/10 10:55:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000a08000)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f00007ae000-0x8)='./file0\x00', r0, &(0x7f0000a31000-0xa)='./control\x00') r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f00000df000)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000b40000-0xa)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') utimensat(r0, &(0x7f0000e03000-0x10)='./control/file0\x00', &(0x7f00003e7000-0x10)={{}, {0x0, 0x2710}}, 0x0) 2018/02/10 10:55:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00005cb000-0x20)={0x7fffffff, 0x6, 0x0, 0xa731, 0x8, 0xc8d, 0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000906000)={0x0, 0x7ff, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x7, {r1, @in={{0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0xffffffffffffffff, 0x13}}}}}, &(0x7f0000001000-0x4)=0xb8) r2 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) open(&(0x7f0000a01000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) close(r2) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000dcc000)) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}) 2018/02/10 10:55:17 executing program 4: futex(&(0x7f000000d000-0x4), 0x4, 0xffffffff80000001, &(0x7f0000cc4000-0x10), &(0x7f000044b000), 0x0) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c67000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/10 10:55:17 executing program 1: futex(&(0x7f0000006000), 0xc, 0x0, &(0x7f0000006000)={0x0, 0x1c9c380}, &(0x7f0000006000), 0x0) 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000c18000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000075c000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x7003) dup3(r0, r1, 0x0) 2018/02/10 10:55:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') sendfile64(r0, r0, 0x0, 0x0) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd1000-0x38)={0x0, 0x0, &(0x7f0000859000-0x10)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}]}, 0xa0}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f000025a000-0x38)={0x0, 0x0, &(0x7f0000656000-0x10)={&(0x7f0000750000-0x60)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/10 10:55:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000a08000)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f00007ae000-0x8)='./file0\x00', r0, &(0x7f0000a31000-0xa)='./control\x00') r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f00000df000)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000b40000-0xa)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') utimensat(r0, &(0x7f0000e03000-0x10)='./control/file0\x00', &(0x7f00003e7000-0x10)={{}, {0x0, 0x2710}}, 0x0) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000140000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) close(r0) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c67000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/10 10:55:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x16, &(0x7f0000b7d000-0x14), 0x0) 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0x5d000)=nil, 0x5d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101002) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f000002f000), &(0x7f000005c000)=0xc) ioctl$int_out(r0, 0x1, &(0x7f000005c000-0x8)) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000f82000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000198000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/10 10:55:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00005cb000-0x20)={0x7fffffff, 0x6, 0x0, 0xa731, 0x8, 0xc8d, 0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000906000)={0x0, 0x7ff, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x7, {r1, @in={{0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0xffffffffffffffff, 0x13}}}}}, &(0x7f0000001000-0x4)=0xb8) r2 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) open(&(0x7f0000a01000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) close(r2) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000dcc000)) 2018/02/10 10:55:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000515000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000ced000-0x4), 0x4) sendmsg$nl_generic(r1, &(0x7f0000fc3000-0x1c)={&(0x7f0000fe3000-0xc)={0x10}, 0xc, &(0x7f000008a000-0x8)={&(0x7f0000390000-0x1230)={0x614, 0x11, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x5ac, 0x0, [@generic="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", @typed={0x8, 0x58}]}, @nested={0xc, 0x4c, [@typed={0x8, 0x3a}]}, @typed={0xc, 0xd, @uid}, @generic="bb6de4b210c1b8fe4fedcc863dc1b7995348630e5984fdb4bcf67505a066e5e29e277fa49fd8a71234327c8fc7fe29a7203aaaf6692c0fee9b78"]}, 0x614}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket(0x200000000010, 0x2, 0x0) write(r2, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) writev(r0, &(0x7f0000fea000)=[{&(0x7f00008c3000-0x10b)="290000002000190001063524e02200ff020000168000e718f20000040d000f00000000f20d00088f1f", 0x29}], 0x1) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c67000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001e1000-0x9)='pagemap\x00') lseek(r0, 0xfffffffffffffffe, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000d33000)={0x0, 0x1}) 2018/02/10 10:55:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000a08000)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f00007ae000-0x8)='./file0\x00', r0, &(0x7f0000a31000-0xa)='./control\x00') r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f00000df000)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000b40000-0xa)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') utimensat(r0, &(0x7f0000e03000-0x10)='./control/file0\x00', &(0x7f00003e7000-0x10)={{}, {0x0, 0x2710}}, 0x0) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000717000-0x10)=[{&(0x7f00005a5000)="580000001400192340a14b80040d8c560a0600000000e0e2000543d8d8fe5800000024ca7f4f643e8900050028635a000510f5100002ff0000000000001c04ed5dfffff500002f000d00010004040800e5fcff0000000005", 0x58}], 0x1) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c67000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)) creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001e1000-0x9)='pagemap\x00') lseek(r0, 0xfffffffffffffffe, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000d33000)={0x0, 0x1}) 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000d000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000022000-0x38)={0x0, 0x0, &(0x7f0000001000-0x10)=[{&(0x7f0000013000)="8093958bca19ef5f839c2d988e80163d294835b196955ffacc24b7c09680a604f087ba79f9a5018cf9c341c7ef58e4a80210456641960cf37a14533fa28f808f47a654d6", 0x44}], 0x1, &(0x7f0000005000)=[]}, 0xc100) sendmsg(r0, &(0x7f0000013000)={0x0, 0x0, &(0x7f0000003000-0x10)=[{&(0x7f000000c000)="bc", 0x1}], 0x1, &(0x7f000000c000-0x1180)=[]}, 0x0) recvmsg(r0, &(0x7f0000019000-0x38)={&(0x7f000000a000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x2e, &(0x7f0000026000)=[{&(0x7f0000027000-0x1b)=""/27, 0x387}, {&(0x7f0000026000)=""/7, 0x7}, {&(0x7f0000002000)}, {&(0x7f0000026000)=""/78, 0x4e}], 0x4, &(0x7f0000022000)=""/12, 0xc}, 0x0) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x801) ioctl(r0, 0x0, &(0x7f0000004000)) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f0000f81000)={0x10}, 0xc, &(0x7f00002ca000-0x10)={&(0x7f0000f83000)=@ipv4_newaddr={0x11, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001e1000-0x9)='pagemap\x00') lseek(r0, 0xfffffffffffffffe, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000d33000)={0x0, 0x1}) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001e1000-0x9)='pagemap\x00') lseek(r0, 0xfffffffffffffffe, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000d33000)={0x0, 0x1}) [ 41.772941] netlink: 1524 bytes leftover after parsing attributes in process `syz-executor3'. 2018/02/10 10:55:17 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) unshare(0x40600) splice(r0, &(0x7f0000003000-0x8), r0, &(0x7f0000002000), 0xef1, 0x0) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000d7b000)={'system_u:object_r:ld_so_cache_t:s0', 0x20, '/usr/sbin/ntpd', 0x20}, 0x35) 2018/02/10 10:55:17 executing program 3: linkat(0xffffffffffffffff, &(0x7f00004c0000)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00008ae000)='./file0\x00', 0x400) [ 41.827855] netlink: 1524 bytes leftover after parsing attributes in process `syz-executor3'. 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0xf72000)=nil, 0xf72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f000015a000-0x4)=0x18, 0x4) 2018/02/10 10:55:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000bb4000-0x5)='yeah\x00', 0x1c8) shutdown(r0, 0x1) 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004000-0xc)={0x4}) epoll_pwait(r1, &(0x7f0000ea0000)=[{}], 0x1, 0x0, &(0x7f0000941000), 0x8) 2018/02/10 10:55:17 executing program 3: mmap(&(0x7f0000000000/0xdcb000)=nil, 0xdcb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000163000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000823000-0xee)=""/238) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}}, 0x8c) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x0, 0x0, []}, 0x98) 2018/02/10 10:55:17 executing program 0: r0 = epoll_create(0xfff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000e2f000)={0x0, 0x0}, &(0x7f000028e000-0x4)=0xc) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000455000), &(0x7f0000caa000)) fchown(r0, r1, r2) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00004bc000)={@generic="5d93e02c36d98c8e6eec2c5ec3338c81", @ifru_flags=0x2400}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000eac000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000281000)={0x0, 0x0, &(0x7f00000c5000)=[], 0x0, 0x0, &(0x7f0000281000)}) 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x34, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9}, {}]}, @RTA_METRICS={0x4, 0x8}]}, 0x34}, 0x1}, 0x0) 2018/02/10 10:55:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f000024e000-0x10)={&(0x7f0000dea000-0x18)={0x14, 0x1, 0x5, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000bb4000-0x5)='yeah\x00', 0x1c8) shutdown(r0, 0x1) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000bb4000-0x5)='yeah\x00', 0x1c8) shutdown(r0, 0x1) 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000bb4000-0x5)='yeah\x00', 0x1c8) shutdown(r0, 0x1) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}}, 0x8c) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x0, 0x0, []}, 0x98) [ 41.912272] audit: type=1400 audit(1518260117.701:18): avc: denied { setopt } for pid=6746 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.948426] device gre0 entered promiscuous mode 2018/02/10 10:55:17 executing program 1: mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) execveat(r1, &(0x7f0000014000-0x8)='./file0\x00', &(0x7f0000012000-0x8)=[], &(0x7f0000001000)=[], 0x1000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000001000)=0x400, 0x4) timer_create(0x0, &(0x7f000030c000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000265000-0x4)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = gettid() tkill(r2, 0x16) close(r0) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}}, 0x8c) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x0, 0x0, []}, 0x98) 2018/02/10 10:55:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000f3000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000bfc000)=0xc01d) 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000bb4000-0x5)='yeah\x00', 0x1c8) shutdown(r0, 0x1) 2018/02/10 10:55:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000bb4000-0x5)='yeah\x00', 0x1c8) shutdown(r0, 0x1) 2018/02/10 10:55:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000bb4000-0x5)='yeah\x00', 0x1c8) shutdown(r0, 0x1) 2018/02/10 10:55:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00004bc000)={@generic="5d93e02c36d98c8e6eec2c5ec3338c81", @ifru_flags=0x2400}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000eac000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000281000)={0x0, 0x0, &(0x7f00000c5000)=[], 0x0, 0x0, &(0x7f0000281000)}) 2018/02/10 10:55:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000938000-0x8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000713000-0x8)='./file0\x00', &(0x7f0000fb0000-0x19)=@known='system.posix_acl_default\x00', &(0x7f000054b000-0x14)="0200000001000000000000010400000000000000", 0x14, 0x0) 2018/02/10 10:55:17 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}}, 0x8c) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x0, 0x0, []}, 0x98) 2018/02/10 10:55:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000bb4000-0x5)='yeah\x00', 0x1c8) shutdown(r0, 0x1) 2018/02/10 10:55:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000bb4000-0x5)='yeah\x00', 0x1c8) shutdown(r0, 0x1) 2018/02/10 10:55:18 executing program 6: mmap(&(0x7f0000000000/0xfe7000)=nil, 0xfe7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000081e000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000371000-0x14)={0x0, 0x0, 0xb5}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x8000000006) writev(r1, &(0x7f00009ca000-0x70)=[{&(0x7f0000a8c000-0x1000)="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", 0xc18}], 0x1) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000005000+0xfb6)) [ 42.353783] device gre0 entered promiscuous mode 2018/02/10 10:55:18 executing program 6: mmap(&(0x7f0000000000/0xfe7000)=nil, 0xfe7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000081e000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000371000-0x14)={0x0, 0x0, 0xb5}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x8000000006) writev(r1, &(0x7f00009ca000-0x70)=[{&(0x7f0000a8c000-0x1000)="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", 0xc18}], 0x1) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9c000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000bb4000-0x5)='yeah\x00', 0x1c8) shutdown(r0, 0x1) 2018/02/10 10:55:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00008e8000)=@generic={0x0, 0x0, 0x7}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000781000)={@common='tunl0\x00', @ifru_data=&(0x7f00008e8000-0x20)="00000000000002000003ffffff15e30000000000000005000449faf5238f7e23"}) 2018/02/10 10:55:18 executing program 1: ustat(0x100000000d, &(0x7f0000001000-0x14)) 2018/02/10 10:55:18 executing program 2: r0 = gettid() ioprio_set$pid(0x2, r0, 0x0) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xfa4000)=nil, 0xfa4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000098000-0xa)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000024000-0x8)='./control\x00', r1, &(0x7f0000013000-0xa)='./control\x00') renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000fa4000-0xa)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000577000-0x8)='./file0\x00', r2, &(0x7f0000d39000-0xa)='./control\x00', 0x2) 2018/02/10 10:55:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00004bc000)={@generic="5d93e02c36d98c8e6eec2c5ec3338c81", @ifru_flags=0x2400}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000eac000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000281000)={0x0, 0x0, &(0x7f00000c5000)=[], 0x0, 0x0, &(0x7f0000281000)}) 2018/02/10 10:55:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000016e000)='comm\x00') mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write$fuse(r0, &(0x7f0000142000)={0x28, 0x0, 0x0, @fuse_notify_delete_out}, 0x28) 2018/02/10 10:55:18 executing program 2: mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000fd7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000dec000-0xa)=@file={0x1, './file0\x00'}, 0xa) write(r1, &(0x7f000034d000), 0x0) recvfrom(r0, &(0x7f0000812000-0x72)=""/114, 0x72, 0x0, &(0x7f0000deb000-0x10)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xbb, 0xbb, 0xbb, 0xbb]}}, 0x10) 2018/02/10 10:55:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000eb3000-0x6)='logon\x00', &(0x7f00002e2000)={0x73, 0x79, 0x7a}, &(0x7f000027b000-0x19)='\\.wlan0)posix_acl_access\x00', 0x0) 2018/02/10 10:55:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000d29000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000fec000+0x727)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00006eb000)={r3, 0x3}) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000030e000-0x10)='/selinux/policy\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000aad000)=[{}, {}], 0x2, 0x7) listen(r1, 0x19) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r4, &(0x7f00008bf000), 0x200041c) 2018/02/10 10:55:18 executing program 3: unshare(0x40600) syz_extract_tcp_res(&(0x7f0000012000+0xd0), 0x0, 0x0) 2018/02/10 10:55:18 executing program 6: mmap(&(0x7f0000000000/0xfe7000)=nil, 0xfe7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000081e000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000371000-0x14)={0x0, 0x0, 0xb5}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x8000000006) writev(r1, &(0x7f00009ca000-0x70)=[{&(0x7f0000a8c000-0x1000)="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", 0xc18}], 0x1) 2018/02/10 10:55:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c04000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000a45000-0x4)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/02/10 10:55:18 executing program 1: r0 = getpgid(0x0) ptrace$setopts(0x4206, r0, 0x6, 0x0) 2018/02/10 10:55:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00004bc000)={@generic="5d93e02c36d98c8e6eec2c5ec3338c81", @ifru_flags=0x2400}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000eac000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000281000)={0x0, 0x0, &(0x7f00000c5000)=[], 0x0, 0x0, &(0x7f0000281000)}) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xfa4000)=nil, 0xfa4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000098000-0xa)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000024000-0x8)='./control\x00', r1, &(0x7f0000013000-0xa)='./control\x00') renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000fa4000-0xa)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000577000-0x8)='./file0\x00', r2, &(0x7f0000d39000-0xa)='./control\x00', 0x2) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f0000750000)=[{0x20, 0x0, 0x0, 0xfffffffffffff02c}, {0x200000000000006}]}, 0x8) [ 42.560033] device gre0 entered promiscuous mode 2018/02/10 10:55:18 executing program 6: mmap(&(0x7f0000000000/0xfe7000)=nil, 0xfe7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000081e000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000371000-0x14)={0x0, 0x0, 0xb5}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x8000000006) writev(r1, &(0x7f00009ca000-0x70)=[{&(0x7f0000a8c000-0x1000)="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", 0xc18}], 0x1) 2018/02/10 10:55:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000d29000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000fec000+0x727)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00006eb000)={r3, 0x3}) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000030e000-0x10)='/selinux/policy\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000aad000)=[{}, {}], 0x2, 0x7) listen(r1, 0x19) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r4, &(0x7f00008bf000), 0x200041c) 2018/02/10 10:55:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000d29000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000fec000+0x727)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00006eb000)={r3, 0x3}) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000030e000-0x10)='/selinux/policy\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000aad000)=[{}, {}], 0x2, 0x7) listen(r1, 0x19) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r4, &(0x7f00008bf000), 0x200041c) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000012000-0x55)="240000001800030207f7fd946ff183a50a0800000086c497271d8568060014000300737e", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000dc1000-0x4), 0x4) 2018/02/10 10:55:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x21, &(0x7f0000000000)={@multicast2=0xe0000002, @broadcast=0xffffffff}, 0xc) 2018/02/10 10:55:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000818000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r0, &(0x7f0000998000-0x20)=[{&(0x7f0000f5e000)='z', 0x1}], 0x1, 0x0) dup2(r0, r2) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xfa4000)=nil, 0xfa4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000098000-0xa)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000024000-0x8)='./control\x00', r1, &(0x7f0000013000-0xa)='./control\x00') renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000fa4000-0xa)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000577000-0x8)='./file0\x00', r2, &(0x7f0000d39000-0xa)='./control\x00', 0x2) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xfa4000)=nil, 0xfa4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000098000-0xa)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000017000-0x8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000024000-0x8)='./control\x00', r1, &(0x7f0000013000-0xa)='./control\x00') renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000fa4000-0xa)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000577000-0x8)='./file0\x00', r2, &(0x7f0000d39000-0xa)='./control\x00', 0x2) 2018/02/10 10:55:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000d29000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000fec000+0x727)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00006eb000)={r3, 0x3}) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000030e000-0x10)='/selinux/policy\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000aad000)=[{}, {}], 0x2, 0x7) listen(r1, 0x19) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r4, &(0x7f00008bf000), 0x200041c) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0xf1b000)=nil, 0xf1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000e7b000)="dc", 0x1, 0xfffffffffffffffc, &(0x7f0000e82000-0x10)={0x2, 0x0, @empty}, 0x10) 2018/02/10 10:55:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000d29000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000fec000+0x727)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00006eb000)={r3, 0x3}) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000030e000-0x10)='/selinux/policy\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000aad000)=[{}, {}], 0x2, 0x7) listen(r1, 0x19) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r4, &(0x7f00008bf000), 0x200041c) 2018/02/10 10:55:18 executing program 1: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) request_key(&(0x7f000000d000-0x12)='.request_key_auth\x00', &(0x7f0000005000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000001000-0x40)=')}md5sum:-vmnet0posix_acl_access^ppp1mime_type+keyringmime_type\x00', 0x0) 2018/02/10 10:55:18 executing program 6: mmap(&(0x7f0000000000/0xb09000)=nil, 0xb09000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000b08000), 0x0, 0x0, &(0x7f0000b08000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xffffffffffffffff, 0xa}, 0x50}, 0x1c) 2018/02/10 10:55:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000d29000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000fec000+0x727)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00006eb000)={r3, 0x3}) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000030e000-0x10)='/selinux/policy\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000aad000)=[{}, {}], 0x2, 0x7) listen(r1, 0x19) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r4, &(0x7f00008bf000), 0x200041c) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xd28000)=nil, 0xd28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000d26000-0x1a)) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f000000c000-0x4), 0x555) 2018/02/10 10:55:18 executing program 6: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000005000-0x25)="240000001300fffffffefd956fa283b70a00008000000000000000683540000004000300", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0xeb5000)=nil, 0xeb5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000004000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2018/02/10 10:55:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000d29000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000fec000+0x727)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00006eb000)={r3, 0x3}) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000030e000-0x10)='/selinux/policy\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000aad000)=[{}, {}], 0x2, 0x7) listen(r1, 0x19) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r4, &(0x7f00008bf000), 0x200041c) 2018/02/10 10:55:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0, 0x0, 0x8001}}, 0xe8) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00009fb000-0x1c)=@in6={0xa, 0x3, 0x0, @empty}, 0x1c, &(0x7f0000fc6000-0x40)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000066000), 0x0, 0x0, &(0x7f00000dd000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/10 10:55:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000d29000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000fec000+0x727)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00006eb000)={r3, 0x3}) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000030e000-0x10)='/selinux/policy\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000aad000)=[{}, {}], 0x2, 0x7) listen(r1, 0x19) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r4, &(0x7f00008bf000), 0x200041c) 2018/02/10 10:55:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00001af000)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f0000f74000)={0x20, 0xa, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, [@typed={0xc, 0x1, @ipv4=@multicast2=0xe0000002}]}, 0x20}, 0x1}, 0x0) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000036d000-0x8)='./file0\x00', 0x0) mount(&(0x7f00001a5000-0xe)='./file0/file0\x00', &(0x7f0000b57000)='./file0\x00', &(0x7f00008fe000-0x3)='\x00v\t', 0x1007, &(0x7f000073b000-0x1)) unlinkat(r0, &(0x7f000048f000-0x8)='./file0\x00', 0x200) umount2(&(0x7f0000f9f000)='./file0/file0\x00', 0x0) 2018/02/10 10:55:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000d29000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000fec000+0x727)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00006eb000)={r3, 0x3}) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000030e000-0x10)='/selinux/policy\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000aad000)=[{}, {}], 0x2, 0x7) listen(r1, 0x19) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r4, &(0x7f00008bf000), 0x200041c) 2018/02/10 10:55:18 executing program 6: mmap(&(0x7f0000000000/0xadf000)=nil, 0xadf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acc000-0x8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098e000-0x4)=0x6, 0x4) bind$inet6(r0, &(0x7f0000808000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00002a1000-0x4ec), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f00001bc000-0xc4)="9a", 0x1) sendto$inet6(r0, &(0x7f0000ad7000-0x53)="1d", 0x1, 0x811, &(0x7f00000e5000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0xeb5000)=nil, 0xeb5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000004000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2018/02/10 10:55:18 executing program 3: mmap(&(0x7f0000000000/0xf73000)=nil, 0xf73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f73000-0x18)={@mcast2={0xff, 0x2, [], 0x1}}, 0x20) 2018/02/10 10:55:18 executing program 1: r0 = socket(0x18, 0x0, 0x4) recvfrom(r0, &(0x7f000043c000)=""/240, 0xf0, 0x0, 0x0, 0x0) 2018/02/10 10:55:18 executing program 7: clone(0x8000, &(0x7f00005e7000-0x1), &(0x7f0000654000), &(0x7f0000bc1000-0x4), &(0x7f0000418000)) 2018/02/10 10:55:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002000-0x9)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f000029b000-0x8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0xeb5000)=nil, 0xeb5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000004000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x20)=':em0!posix_acl_access/vboxnet0@\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2012, r0, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0) 2018/02/10 10:55:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) 2018/02/10 10:55:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0xbb, &(0x7f0000cc9000-0x40), &(0x7f0000cc9000-0x40), &(0x7f00000de000-0x40), &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8), 0x8}) 2018/02/10 10:55:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000), 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb3000-0x4)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005c000-0x20)={{}, {r3}}, &(0x7f0000046000)) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/10 10:55:18 executing program 7: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000001000-0x35)=""/53) 2018/02/10 10:55:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f00005ab000-0x44)=""/68, 0xffffffffffffff76) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000ee3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@hci={0x1f}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000207000-0xc)=@sack_info, &(0x7f00001a2000-0x4)=0xc) close(r1) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/02/10 10:55:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000d29000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000fec000+0x727)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00006eb000)={r3, 0x3}) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000030e000-0x10)='/selinux/policy\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000aad000)=[{}, {}], 0x2, 0x7) listen(r1, 0x19) sendto$inet6(r0, &(0x7f0000298000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000589000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r4, &(0x7f00008bf000), 0x200041c) 2018/02/10 10:55:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000948000)={0x14, 0x1, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0xeb5000)=nil, 0xeb5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000004000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2018/02/10 10:55:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) 2018/02/10 10:55:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c13000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000d92000), &(0x7f0000134000-0x4)=0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000314000)="2200000016000700010004cd090105000a080000310004000000000005ffb2e7d92def0eaf4eb3b52d96cf63c52b21b5c0b22845d67dcd1ba9b617afdff02116f654121346e7163affcea3cf1959acb1a4b12490aa70c7f3c54c6036c845312e3d4915399efae23c4ca4351d7346f0574f10d4a2557f8decd2ac204f5476c58af2dec77338b8b2be634c715a01032155250a2f233c913a02279b631e2e9aae7b93b9730cdbdf99a99ebc8f4950d463da8b5957dbef9b29f4d2e9e496f0683c132b0026fb62fa48e3755eaf4c7b29", 0xce) rt_sigpending(&(0x7f0000243000), 0x8) socket$inet6(0xa, 0x80007, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000df7000-0xc)='/dev/autofs\x00', 0x40, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000538000-0xb)='/dev/hwrng\x00', 0x20100, 0x0) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000035e000-0x4)=0x288, 0x4) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f000094d000)) 2018/02/10 10:55:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) 2018/02/10 10:55:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000948000)={0x14, 0x1, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000), 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb3000-0x4)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005c000-0x20)={{}, {r3}}, &(0x7f0000046000)) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/10 10:55:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000948000)={0x14, 0x1, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x20)=':em0!posix_acl_access/vboxnet0@\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2012, r0, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0) 2018/02/10 10:55:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d3000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x20)=':em0!posix_acl_access/vboxnet0@\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2012, r0, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0) 2018/02/10 10:55:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f00002e0000-0xc)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000948000)={0x14, 0x1, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x20)=':em0!posix_acl_access/vboxnet0@\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2012, r0, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0) [ 42.982099] netlink: 10 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/10 10:55:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) open(&(0x7f0000611000)='./file0\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) execve(&(0x7f00003f0000-0x8)='./file0\x00', &(0x7f000045f000)=[], &(0x7f0000612000-0xc)=[]) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) creat(&(0x7f000036a000-0x8)='./file0\x00', 0x0) 2018/02/10 10:55:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f00007cf000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f00009d3000-0x8)={0x0, 0x0}) timer_create(0x0, &(0x7f0000ae9000)={0x0, 0x0, 0x7, @tid=r2}, &(0x7f0000961000)) 2018/02/10 10:55:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000032a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f000046b000-0x30)=[{&(0x7f0000ac7000)="9c", 0x1}], 0x1) r1 = memfd_create(&(0x7f0000d7e000-0x32)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0) ftruncate(r1, 0x40001) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4f000-0x4)=0x4, 0x4) sendfile(r0, r1, &(0x7f000000a000), 0x7ffff) 2018/02/10 10:55:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000), 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb3000-0x4)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005c000-0x20)={{}, {r3}}, &(0x7f0000046000)) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/10 10:55:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x20)=':em0!posix_acl_access/vboxnet0@\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2012, r0, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0) [ 43.080149] netlink: 10 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/10 10:55:19 executing program 3: mmap(&(0x7f0000000000/0xffc000)=nil, 0xffc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000ffb000-0x50)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @loopback={0x0, 0x1}, 0x0, 0xd0}) 2018/02/10 10:55:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000), 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb3000-0x4)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005c000-0x20)={{}, {r3}}, &(0x7f0000046000)) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/10 10:55:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f00008dd000-0x8)='./file0\x00', 0x0) mount(&(0x7f00005f1000-0x8)='./file0\x00', &(0x7f00008cd000-0x8)='./file0\x00', &(0x7f0000bcb000-0x6)='sysfs\x00', 0x41000, &(0x7f0000ecd000)) rename(&(0x7f00007ac000)='./file0\x00', &(0x7f0000a43000-0x8)='./file1\x00') 2018/02/10 10:55:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x20)=':em0!posix_acl_access/vboxnet0@\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2012, r0, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0) 2018/02/10 10:55:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c13000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000d92000), &(0x7f0000134000-0x4)=0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000314000)="2200000016000700010004cd090105000a080000310004000000000005ffb2e7d92def0eaf4eb3b52d96cf63c52b21b5c0b22845d67dcd1ba9b617afdff02116f654121346e7163affcea3cf1959acb1a4b12490aa70c7f3c54c6036c845312e3d4915399efae23c4ca4351d7346f0574f10d4a2557f8decd2ac204f5476c58af2dec77338b8b2be634c715a01032155250a2f233c913a02279b631e2e9aae7b93b9730cdbdf99a99ebc8f4950d463da8b5957dbef9b29f4d2e9e496f0683c132b0026fb62fa48e3755eaf4c7b29", 0xce) rt_sigpending(&(0x7f0000243000), 0x8) socket$inet6(0xa, 0x80007, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000df7000-0xc)='/dev/autofs\x00', 0x40, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000538000-0xb)='/dev/hwrng\x00', 0x20100, 0x0) 2018/02/10 10:55:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x20)=':em0!posix_acl_access/vboxnet0@\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2012, r0, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0) 2018/02/10 10:55:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000159000-0x4)=0x1000, 0x4) bind$inet6(r0, &(0x7f00004ad000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, 0x1c) 2018/02/10 10:55:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) open(&(0x7f0000611000)='./file0\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) execve(&(0x7f00003f0000-0x8)='./file0\x00', &(0x7f000045f000)=[], &(0x7f0000612000-0xc)=[]) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) creat(&(0x7f000036a000-0x8)='./file0\x00', 0x0) 2018/02/10 10:55:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000065c000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f000075e000)) 2018/02/10 10:55:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000d2c000-0x8)='./file0\x00', 0x0, 0x0) process_vm_writev(r0, &(0x7f00006fd000)=[{&(0x7f0000865000-0xe)=""/14, 0xe}, {&(0x7f0000e40000-0x2f)=""/47, 0x2f}, {&(0x7f0000d63000)=""/202, 0xca}, {&(0x7f0000b68000-0x1000)=""/4096, 0x1000}], 0x4, &(0x7f0000116000)=[{&(0x7f00005e9000)=""/4096, 0x1000}], 0x1, 0x0) 2018/02/10 10:55:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000008000-0x9)='net/raw6\x00') unshare(0x8000400) pselect6(0x40, &(0x7f00000ac000-0x40), &(0x7f0000768000), &(0x7f00007fc000-0x40)={0x7}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) [ 43.790326] netlink: 10 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/10 10:55:19 executing program 3: mmap(&(0x7f0000000000/0xffc000)=nil, 0xffc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000ffb000-0x50)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @loopback={0x0, 0x1}, 0x0, 0xd0}) 2018/02/10 10:55:19 executing program 0: r0 = socket(0x10, 0x80000000802, 0x0) unshare(0x20000400) lseek(r0, 0x0, 0x0) 2018/02/10 10:55:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000301000-0x40)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/02/10 10:55:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0xa0}, 0x1}, 0x0) 2018/02/10 10:55:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c13000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000d92000), &(0x7f0000134000-0x4)=0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000314000)="2200000016000700010004cd090105000a080000310004000000000005ffb2e7d92def0eaf4eb3b52d96cf63c52b21b5c0b22845d67dcd1ba9b617afdff02116f654121346e7163affcea3cf1959acb1a4b12490aa70c7f3c54c6036c845312e3d4915399efae23c4ca4351d7346f0574f10d4a2557f8decd2ac204f5476c58af2dec77338b8b2be634c715a01032155250a2f233c913a02279b631e2e9aae7b93b9730cdbdf99a99ebc8f4950d463da8b5957dbef9b29f4d2e9e496f0683c132b0026fb62fa48e3755eaf4c7b29", 0xce) rt_sigpending(&(0x7f0000243000), 0x8) socket$inet6(0xa, 0x80007, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000df7000-0xc)='/dev/autofs\x00', 0x40, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000538000-0xb)='/dev/hwrng\x00', 0x20100, 0x0) 2018/02/10 10:55:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00009e9000), &(0x7f00002e5000)=0x8) r0 = syz_open_dev$evdev(&(0x7f0000a5e000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00003a5000-0x3a)=""/58) 2018/02/10 10:55:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) open(&(0x7f0000611000)='./file0\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) execve(&(0x7f00003f0000-0x8)='./file0\x00', &(0x7f000045f000)=[], &(0x7f0000612000-0xc)=[]) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) creat(&(0x7f000036a000-0x8)='./file0\x00', 0x0) 2018/02/10 10:55:19 executing program 7: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001100030007fffd946fa283bc07eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/10 10:55:19 executing program 3: mmap(&(0x7f0000000000/0xffc000)=nil, 0xffc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000ffb000-0x50)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @loopback={0x0, 0x1}, 0x0, 0xd0}) 2018/02/10 10:55:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) r0 = syz_open_procfs(0x0, &(0x7f000042d000-0xc)='io\x00') pread64(r0, &(0x7f00009f4000-0x1000), 0x0, 0x0) lseek(r0, 0x0, 0x4) open$dir(&(0x7f00003e9000-0x8)='./file0\x00', 0x26102, 0x0) 2018/02/10 10:55:19 executing program 7: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000003000-0x9)="68c3ef00000000c795", 0x9) 2018/02/10 10:55:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c13000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000d92000), &(0x7f0000134000-0x4)=0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000314000)="2200000016000700010004cd090105000a080000310004000000000005ffb2e7d92def0eaf4eb3b52d96cf63c52b21b5c0b22845d67dcd1ba9b617afdff02116f654121346e7163affcea3cf1959acb1a4b12490aa70c7f3c54c6036c845312e3d4915399efae23c4ca4351d7346f0574f10d4a2557f8decd2ac204f5476c58af2dec77338b8b2be634c715a01032155250a2f233c913a02279b631e2e9aae7b93b9730cdbdf99a99ebc8f4950d463da8b5957dbef9b29f4d2e9e496f0683c132b0026fb62fa48e3755eaf4c7b29", 0xce) rt_sigpending(&(0x7f0000243000), 0x8) socket$inet6(0xa, 0x80007, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000df7000-0xc)='/dev/autofs\x00', 0x40, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000538000-0xb)='/dev/hwrng\x00', 0x20100, 0x0) 2018/02/10 10:55:19 executing program 3: mmap(&(0x7f0000000000/0xffc000)=nil, 0xffc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000ffb000-0x50)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @loopback={0x0, 0x1}, 0x0, 0xd0}) 2018/02/10 10:55:19 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) [ 43.963692] netlink: 10 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/10 10:55:19 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f0000001000-0x1)=[{&(0x7f0000006000)}], 0x1) 2018/02/10 10:55:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00002b9000-0xa)="940a0ed3084f8823a7", 0x9) 2018/02/10 10:55:19 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) quotactl(0x80000201, &(0x7f00000ef000-0x8)='./file0\x00', 0x0, &(0x7f0000000000)) [ 44.017887] netlink: 10 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/10 10:55:19 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) 2018/02/10 10:55:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) open(&(0x7f0000611000)='./file0\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) execve(&(0x7f00003f0000-0x8)='./file0\x00', &(0x7f000045f000)=[], &(0x7f0000612000-0xc)=[]) r3 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x16) creat(&(0x7f000036a000-0x8)='./file0\x00', 0x0) 2018/02/10 10:55:19 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) 2018/02/10 10:55:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:19 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) quotactl(0x80000201, &(0x7f00000ef000-0x8)='./file0\x00', 0x0, &(0x7f0000000000)) 2018/02/10 10:55:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) quotactl(0x80000201, &(0x7f00000ef000-0x8)='./file0\x00', 0x0, &(0x7f0000000000)) 2018/02/10 10:55:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:20 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) 2018/02/10 10:55:20 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) 2018/02/10 10:55:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) quotactl(0x80000201, &(0x7f00000ef000-0x8)='./file0\x00', 0x0, &(0x7f0000000000)) 2018/02/10 10:55:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00008ff000-0x8)='net/udp\x00') sendfile(r0, r1, &(0x7f0000c76000)=0x9, 0x3265ac94) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000c83000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f0000009000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1a) 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0) 2018/02/10 10:55:20 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) 2018/02/10 10:55:20 executing program 4: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000004800030207fffd946fa283bc0aeee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000cc2000)='user\x00', &(0x7f0000280000)={0x73, 0x79, 0x7a}, &(0x7f0000ccc000-0x47)="d8", 0x1, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) keyctl$get_security(0x11, r0, &(0x7f0000223000)=""/144, 0x90) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000852000), 0x0, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000fff000-0x48)=[], 0x203) 2018/02/10 10:55:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000726000-0xd)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f0000f12000)=0x2, 0x400000ff) 2018/02/10 10:55:20 executing program 2: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000005000-0x10)={0x3, &(0x7f0000003000-0x18)=[{0x1d, 0x1, 0x401}, {}, {0x6}]}, 0x10) 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000204000)="6e65742f6970365f6d725f63616368650004228fb9d0097f884eadaa6a1c0b57121f15ac8163c81688026ed029d8f49b5c598cebc13eab300174b9b1ffced30b1178b8a72d260fc5956bba3859ba7406d6c140c53a7809466d799e860e36bdfbd1089959960607ed5a5ebc43049641829399d10edda1c5243583d804fbfa94c1cacdac19012f376466b2ff80409b09f1c0790e83584e3b3bb8f399ded3cd6d6da1") sendfile(r0, r0, &(0x7f0000d02000)=0x3000000, 0x7ff) 2018/02/10 10:55:20 executing program 0: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x800000000000000a, 0x0) bind$inet(r0, &(0x7f0000010000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xd) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000081a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000b1d000)=[{0x28, 0x0, 0x0, 0xffffffffffeff024}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001b000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000013000-0x60)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000c000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925000800040010000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/10 10:55:20 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) 2018/02/10 10:55:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000e37000)=0x156) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000000+0xca6)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, &(0x7f0000acc000-0x91)=""/145) 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4000000000031, &(0x7f0000a03000)=0xa, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x1000000000000006, &(0x7f0000fa2000-0x2)=""/72, &(0x7f0000fa2000-0x4)=0x48) [ 44.558220] syz-executor0 uses obsolete (PF_INET,SOCK_PACKET) 2018/02/10 10:55:20 executing program 6: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000001c000-0x38)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f0000013000-0x10)={&(0x7f0000006000)={0x14, 0x32, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001ee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000aa8000)="010001a000000000b1", 0x9) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000c96000-0x3), 0x0, 0x8000, &(0x7f000057c000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000e77000-0x1000)="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", 0x5b5, 0x0, &(0x7f0000bc9000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000027a000-0x1c)={&(0x7f000010b000-0xc)={0x10}, 0xc, &(0x7f000011b000)={&(0x7f0000023000)={0x14, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000002c000-0x8)='./file0\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) prlimit64(0x0, 0xb, &(0x7f0000030000-0x10), 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) fcntl$notify(r0, 0xa, 0x34) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r0, r2) 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00001fb000-0x4)=0xa) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000373000-0xc)) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000cdf000)) epoll_pwait(r1, &(0x7f00006f7000-0x24)=[{}], 0x1, 0x0, &(0x7f00003d7000-0x8), 0x8) 2018/02/10 10:55:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000b81000-0x6)='ramfs\x00', 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) ftruncate(r0, 0x1) sendfile(r0, r0, &(0x7f0000890000-0x4), 0xe91) 2018/02/10 10:55:20 executing program 3: r0 = gettid() sched_getparam(r0, &(0x7f00008b8000-0x4)) 2018/02/10 10:55:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000e51000)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000582000)='./file0\x00', &(0x7f00009e2000-0x8)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x901d, &(0x7f0000ce1000-0x19)) mount(&(0x7f0000647000-0x8)='./file0\x00', &(0x7f00006af000)='./file0\x00', &(0x7f0000310000-0x8)='qnx6\x00', 0x203ffb, 0x0) truncate(&(0x7f0000a43000)='./file0\x00', 0x0) 2018/02/10 10:55:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000001000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f3e98caf662368c9ad09e57392fc66b70629824a949857a88e1df7fd5857474720a22802aabcc18f0576d6874ff0bea4fc71898a414eb07015c3a493ec55db"}, 0x58, &(0x7f0000002000-0x18)=[], 0x0, &(0x7f0000002000-0x100c)={0x10c, 0x0, 0x0, "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"}, 0x10c}], 0x1, 0x0) memfd_create(&(0x7f0000001000-0x1)="02", 0x0) [ 44.676535] tc_ctl_action: received NO action attribs 2018/02/10 10:55:20 executing program 0: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x20000801) ioctl(r0, 0x440000000000127e, &(0x7f0000005000)) 2018/02/10 10:55:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x4b, 0x0, 0x0) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0xe, &(0x7f000000a000-0x2)) 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000027a000-0x1c)={&(0x7f000010b000-0xc)={0x10}, 0xc, &(0x7f000011b000)={&(0x7f0000023000)={0x14, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000007000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}}) 2018/02/10 10:55:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000799000)='net/ptype\x00') sendfile(r0, r0, &(0x7f00006fb000-0x8)=0x1026, 0x400000fc) 2018/02/10 10:55:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00005ce000)={@common='tunl0\x00\x00\x00\x00\x00\x00\b\x00', @ifru_names=@generic="a426fe9b323ecc7f883be5f2f8d6d8d5"}) 2018/02/10 10:55:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f000087f000)='oom_adj\x00') fcntl$setlease(r0, 0x400, 0x3) [ 44.712654] tc_ctl_action: received NO action attribs 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000027a000-0x1c)={&(0x7f000010b000-0xc)={0x10}, 0xc, &(0x7f000011b000)={&(0x7f0000023000)={0x14, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004ef000-0xf7)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000849000-0x10)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e1000-0xbf)="7fa9a43b93cd6603d1ae2f2f3458ce2cf6d2785e6d54c8282de42fd8e2505053e0ba6c762640ff29af5ffab45bb5a44fda0877c42a6bbdc45ccab6c6dec4074fbed4698fd2122ef15338a9e89d20bc3f1733bc3fbe90a2c41a1e0cc7595eb5d498", 0x61}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000387000-0x60)="000ed4833d4a7da7eefc86a6ff1f35dc3d8f134aca46ff59cbd74142a6d65bead84e70bbc62307a2c417cb73f3946cc6c0d01d4fa2fc73e6d57dadcd152a41a42ad46353f0809fee82a16c7df3fa1e0651e9ba5e754564506b934707b509213e", 0x60, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7000+0x99)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000277000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000027a000-0x1c)={&(0x7f000010b000-0xc)={0x10}, 0xc, &(0x7f000011b000)={&(0x7f0000023000)={0x14, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0xe, &(0x7f000000a000-0x2)) 2018/02/10 10:55:20 executing program 0: mmap(&(0x7f0000000000/0x103000)=nil, 0x103000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000f5000-0x38)={&(0x7f0000005000)={0x10}, 0xc, &(0x7f00000ee000-0x10)={&(0x7f0000067000-0x3590)=@bridge_getneigh={0x28, 0x1e, 0xa21, 0xffffffffffffffff, 0xffffffffffffffff, {0x7}, [@IFLA_MASTER={0x8, 0xa, 0x3}]}, 0x28}, 0x1}, 0x0) 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef3000)=0x100, 0x4) sendto$inet(r0, &(0x7f0000efb000-0x12a), 0x0, 0x0, &(0x7f0000bef000)={0x2, 0x0, @empty}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000ef0000-0x73)=""/115, 0x73, 0x12041, &(0x7f0000899000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/10 10:55:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f000001d000)='-', 0x1) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f000081c000)=@fragment, 0x8) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0xe, &(0x7f000000a000-0x2)) 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f000087a000-0xe)='/dev/keychord\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00008b4000-0xc)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000846000-0xc)) 2018/02/10 10:55:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b6000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000002a000-0x34)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/10 10:55:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f000087f000)='oom_adj\x00') fcntl$setlease(r0, 0x400, 0x3) 2018/02/10 10:55:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000799000)='net/ptype\x00') sendfile(r0, r0, &(0x7f00006fb000-0x8)=0x1026, 0x400000fc) 2018/02/10 10:55:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00002d1000-0x8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 2018/02/10 10:55:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f000087f000)='oom_adj\x00') fcntl$setlease(r0, 0x400, 0x3) 2018/02/10 10:55:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f000030d000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f000026c000)=[@flat={0x73622a85, 0x0, r1}], &(0x7f00003a6000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00006b0000)={0x8, 0x0, &(0x7f0000a4e000)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, &(0x7f0000ea5000)}) [ 44.963046] binder: 7307 invalid dec weak, ref 30 desc 1 s 1 w 0 [ 44.971341] binder_alloc: binder_alloc_mmap_handler: 7307 20000000-20002000 already mapped failed -16 [ 44.982606] binder: BINDER_SET_CONTEXT_MGR already set [ 44.988101] binder: 7307:7310 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 44.988150] binder: 7307:7308 ioctl 40046207 0 returned -16 [ 44.989117] binder_alloc: 7307: binder_alloc_buf, no vma 2018/02/10 10:55:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00002d1000-0x8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0xe, &(0x7f000000a000-0x2)) 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000237000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000ebf000)=""/4096, 0xff39, 0x0) 2018/02/10 10:55:20 executing program 0: personality(0x10fffffc) mprotect(&(0x7f000036f000/0x4000)=nil, 0x4000, 0x100000d) 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000004000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, &(0x7f0000001000)=""/18, 0x12) 2018/02/10 10:55:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f000087f000)='oom_adj\x00') fcntl$setlease(r0, 0x400, 0x3) 2018/02/10 10:55:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f000030d000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f000026c000)=[@flat={0x73622a85, 0x0, r1}], &(0x7f00003a6000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00006b0000)={0x8, 0x0, &(0x7f0000a4e000)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, &(0x7f0000ea5000)}) 2018/02/10 10:55:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000799000)='net/ptype\x00') sendfile(r0, r0, &(0x7f00006fb000-0x8)=0x1026, 0x400000fc) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f000052a000)={&(0x7f00000a5000-0xc)={0x10}, 0xc, &(0x7f00002ca000-0x10)={&(0x7f00000fd000)=@ipv4_newroute={0x24, 0x18, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x0}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 10:55:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000763000-0x4), 0x4) [ 44.989151] binder: 7307:7309 transaction failed 29189/-3, size 24-8 line 3128 [ 45.025758] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.045008] binder: release 7307:7308 transaction 28 out, still active 2018/02/10 10:55:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f000099b000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000e6b000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f000005d000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000e1b000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, []}, 0x10) 2018/02/10 10:55:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00002d1000-0x8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00006a8000)='/proc/self/net//fkey\x00', 0x0, 0x0) 2018/02/10 10:55:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000799000)='net/ptype\x00') sendfile(r0, r0, &(0x7f00006fb000-0x8)=0x1026, 0x400000fc) 2018/02/10 10:55:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20000000000004a, &(0x7f0000bc6000-0xcc), 0x0) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000001000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000448000-0x8c)={0x0, 0x0, 0x0, 'queue1\x00'}) 2018/02/10 10:55:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f00002d1000-0x8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 2018/02/10 10:55:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000986000-0x8)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000219000-0x17)='net/ip6_tables_matches\x00') sendfile(r0, r1, &(0x7f0000023000), 0x26a950b) 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000237000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000ebf000)=""/4096, 0xff39, 0x0) [ 45.061857] binder: 7321 invalid dec weak, ref 35 desc 1 s 1 w 0 [ 45.063575] binder: unexpected work type, 4, not freed [ 45.063577] binder: undelivered TRANSACTION_COMPLETE [ 45.063660] binder: send failed reply for transaction 28, target dead 2018/02/10 10:55:20 executing program 3: mmap(&(0x7f0000000000/0x47000)=nil, 0x47000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f000003d000-0xa)='id_legacy\x00', &(0x7f0000044000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000044000-0x18)='security#%GPLppp1vmnet0\x00', 0x0) r1 = add_key$keyring(&(0x7f0000014000-0x8)='keyring\x00', &(0x7f0000006000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000016000)='keyring\x00', &(0x7f0000009000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r1) keyctl$search(0xa, r0, &(0x7f0000047000-0x8)='keyring\x00', &(0x7f0000046000)={0x73, 0x79, 0x7a, 0x1}, r2) 2018/02/10 10:55:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000036f000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f000030d000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f000026c000)=[@flat={0x73622a85, 0x0, r1}], &(0x7f00003a6000-0x8)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00006b0000)={0x8, 0x0, &(0x7f0000a4e000)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, &(0x7f0000ea5000)}) 2018/02/10 10:55:20 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f000022f000-0x50)) 2018/02/10 10:55:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x800000000001, 0x0, &(0x7f0000001000-0x10)={0x2, &(0x7f00000f8000-0x10)=[{0x20, 0x0, 0x0, 0x100}, {0x6}]}) 2018/02/10 10:55:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000237000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000ebf000)=""/4096, 0xff39, 0x0) 2018/02/10 10:55:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f0000ad3000-0x8)='./file0\x00', &(0x7f0000ab9000-0x8)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_fuseblk_mount(&(0x7f0000250000)='./file0\x00', &(0x7f00007f0000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00009b1000-0x4)=r1) 2018/02/10 10:55:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) bind$inet(r0, &(0x7f0000887000-0x10)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000d5a000-0x73), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f00007d7000-0x50)=[{&(0x7f0000b7e000)=""/4096, 0x1000}], 0x1) recvmmsg(r0, &(0x7f00005cf000-0xa0)=[{{&(0x7f0000b69000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @loopback}}}, 0x2e, &(0x7f000084c000-0x8)=[], 0x0, &(0x7f0000180000-0xd3)=""/211, 0xd3}}], 0x1, 0x0, &(0x7f000000c000)) [ 45.134379] binder: release 7321:7328 transaction 33 out, still active [ 45.143450] binder: unexpected work type, 4, not freed [ 45.152710] binder: undelivered TRANSACTION_COMPLETE [ 45.165416] binder: 7351 invalid dec weak, ref 39 desc 1 s 1 w 0 [ 45.172428] binder: send failed reply for transaction 33, target dead 2018/02/10 10:55:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000002000)=@random={'btrfs.\x00', '\x00'}, &(0x7f0000013000)='\x00', 0x1, 0x0) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x40000000000003, 0x0) setrlimit(0x7, &(0x7f0000a06000)) accept4$packet(r0, &(0x7f0000a37000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000c2b000)=0x14, 0x0) 2018/02/10 10:55:21 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f000022f000-0x50)) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f0000ad3000-0x8)='./file0\x00', &(0x7f0000ab9000-0x8)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_fuseblk_mount(&(0x7f0000250000)='./file0\x00', &(0x7f00007f0000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00009b1000-0x4)=r1) 2018/02/10 10:55:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) bind$inet(r0, &(0x7f0000887000-0x10)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000d5a000-0x73), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f00007d7000-0x50)=[{&(0x7f0000b7e000)=""/4096, 0x1000}], 0x1) recvmmsg(r0, &(0x7f00005cf000-0xa0)=[{{&(0x7f0000b69000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @loopback}}}, 0x2e, &(0x7f000084c000-0x8)=[], 0x0, &(0x7f0000180000-0xd3)=""/211, 0xd3}}], 0x1, 0x0, &(0x7f000000c000)) 2018/02/10 10:55:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f000099b000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000e6b000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f000005d000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000e1b000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, []}, 0x10) 2018/02/10 10:55:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000237000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000ebf000)=""/4096, 0xff39, 0x0) [ 45.205858] binder: release 7351:7358 transaction 37 out, still active [ 45.216008] binder: unexpected work type, 4, not freed [ 45.226559] binder: undelivered TRANSACTION_COMPLETE [ 45.245070] binder: send failed reply for transaction 37, target dead 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) bind$inet(r0, &(0x7f0000887000-0x10)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000d5a000-0x73), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f00007d7000-0x50)=[{&(0x7f0000b7e000)=""/4096, 0x1000}], 0x1) recvmmsg(r0, &(0x7f00005cf000-0xa0)=[{{&(0x7f0000b69000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @loopback}}}, 0x2e, &(0x7f000084c000-0x8)=[], 0x0, &(0x7f0000180000-0xd3)=""/211, 0xd3}}], 0x1, 0x0, &(0x7f000000c000)) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f0000ad3000-0x8)='./file0\x00', &(0x7f0000ab9000-0x8)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_fuseblk_mount(&(0x7f0000250000)='./file0\x00', &(0x7f00007f0000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00009b1000-0x4)=r1) 2018/02/10 10:55:21 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000004000), 0xffffffffffffff59) 2018/02/10 10:55:21 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f000022f000-0x50)) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000f7e000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000de5000)) 2018/02/10 10:55:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000783000-0x5)='comm\x00') writev(r0, &(0x7f0000f49000)=[{&(0x7f000062f000-0x3d)="a5", 0x1}], 0x1) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) bind$inet(r0, &(0x7f0000887000-0x10)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000d5a000-0x73), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f00007d7000-0x50)=[{&(0x7f0000b7e000)=""/4096, 0x1000}], 0x1) recvmmsg(r0, &(0x7f00005cf000-0xa0)=[{{&(0x7f0000b69000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @loopback}}}, 0x2e, &(0x7f000084c000-0x8)=[], 0x0, &(0x7f0000180000-0xd3)=""/211, 0xd3}}], 0x1, 0x0, &(0x7f000000c000)) 2018/02/10 10:55:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f000099b000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000e6b000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f000005d000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000e1b000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, []}, 0x10) 2018/02/10 10:55:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) bind$inet(r0, &(0x7f0000887000-0x10)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000d5a000-0x73), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f00007d7000-0x50)=[{&(0x7f0000b7e000)=""/4096, 0x1000}], 0x1) recvmmsg(r0, &(0x7f00005cf000-0xa0)=[{{&(0x7f0000b69000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @loopback}}}, 0x2e, &(0x7f000084c000-0x8)=[], 0x0, &(0x7f0000180000-0xd3)=""/211, 0xd3}}], 0x1, 0x0, &(0x7f000000c000)) 2018/02/10 10:55:21 executing program 6: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0xa972, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x1000005) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000a96000-0x3d)=""/4, &(0x7f0000a94000)=0x4) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f0000ad3000-0x8)='./file0\x00', &(0x7f0000ab9000-0x8)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_fuseblk_mount(&(0x7f0000250000)='./file0\x00', &(0x7f00007f0000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00009b1000-0x4)=r1) 2018/02/10 10:55:21 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f000022f000-0x50)) 2018/02/10 10:55:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ca1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) dup3(r1, r0, 0x0) 2018/02/10 10:55:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f91000-0x8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000892000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd8}) 2018/02/10 10:55:21 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000a000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000079d000)='net/icmp\x00') exit(0x0) fstat(r1, &(0x7f0000998000-0x44)) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000fc2000-0x8)={0x4000019980330}, &(0x7f0000002000-0x18)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000d09000)=[{&(0x7f000029a000-0xc2)="580000001400192340834b800b0d8c560a0603ffec04810000000000000058000b4824ca944f64009400050028825aa8000000000000008000f0ffff001009000000fff5dd00000010000104000c09e6fbff0000040e05a5", 0x58}], 0x1) 2018/02/10 10:55:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000623000-0x4)=0x3) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00003a2000)) 2018/02/10 10:55:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) bind$inet(r0, &(0x7f0000887000-0x10)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000d5a000-0x73), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f00007d7000-0x50)=[{&(0x7f0000b7e000)=""/4096, 0x1000}], 0x1) recvmmsg(r0, &(0x7f00005cf000-0xa0)=[{{&(0x7f0000b69000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @loopback}}}, 0x2e, &(0x7f000084c000-0x8)=[], 0x0, &(0x7f0000180000-0xd3)=""/211, 0xd3}}], 0x1, 0x0, &(0x7f000000c000)) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000005000/0x3000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x77, 0x4) bind$inet(r0, &(0x7f0000887000-0x10)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000d5a000-0x73), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f00007d7000-0x50)=[{&(0x7f0000b7e000)=""/4096, 0x1000}], 0x1) recvmmsg(r0, &(0x7f00005cf000-0xa0)=[{{&(0x7f0000b69000-0x2e)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @loopback}}}, 0x2e, &(0x7f000084c000-0x8)=[], 0x0, &(0x7f0000180000-0xd3)=""/211, 0xd3}}], 0x1, 0x0, &(0x7f000000c000)) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000003000), &(0x7f0000008000)=0x4) 2018/02/10 10:55:21 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000cd8000-0x8)={0x0}) setitimer(0x0, &(0x7f0000001000-0x10)={{}, {r0}}, &(0x7f00007de000-0x10)) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003b8000-0xc)={0x2004}) ppoll(&(0x7f0000bc1000-0x30)=[{r1}], 0x1, &(0x7f0000c04000-0x10), &(0x7f0000a1c000-0x8), 0x8) 2018/02/10 10:55:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ca1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) dup3(r1, r0, 0x0) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:traceroute_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:-0.c1023', 0x20, 0x35}, 0x3ae) 2018/02/10 10:55:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x100000000e, &(0x7f0000005000-0x4), 0xfd8d) 2018/02/10 10:55:21 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000a000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000079d000)='net/icmp\x00') exit(0x0) fstat(r1, &(0x7f0000998000-0x44)) 2018/02/10 10:55:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f000099b000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000e6b000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f000005d000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000e1b000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, []}, 0x10) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ca1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) dup3(r1, r0, 0x0) 2018/02/10 10:55:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f77000)='net/protocols\x00') sendfile(r0, r0, &(0x7f00004db000)=0x8000003, 0x5) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)=',', 0x1}], 0x1) tee(r2, r1, 0x2, 0x0) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ca1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) dup3(r1, r0, 0x0) 2018/02/10 10:55:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ca1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) dup3(r1, r0, 0x0) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000001f000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f0000020000)='ramfs\x00', 0x0, &(0x7f0000002000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001f000-0x3)='./file0\x00', r0, &(0x7f000098e000)='./file0\x00') umount2(&(0x7f0000020000-0xe)='./file0/file0\x00', 0x0) 2018/02/10 10:55:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x100000001, &(0x7f0000b75000)="ba") 2018/02/10 10:55:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x2, &(0x7f0000443000-0x18)=[{0x10004c}, {0x6}]}, 0x8) writev(r1, &(0x7f00000a6000)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000af000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000543000-0x28)={@syzn={0x73, 0x79, 0x7a}, @ifru_settings={0x265, 0x0, @cisco=&(0x7f0000542000)}}) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ca1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) dup3(r1, r0, 0x0) 2018/02/10 10:55:21 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000a000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000079d000)='net/icmp\x00') exit(0x0) fstat(r1, &(0x7f0000998000-0x44)) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)=',', 0x1}], 0x1) tee(r2, r1, 0x2, 0x0) 2018/02/10 10:55:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ca1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) dup3(r1, r0, 0x0) 2018/02/10 10:55:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2283, 0x0) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000bba000-0x29)="2900000020001907ff033fffffffda060200000622e80002040000140d0004000006020000d200019c", 0x29}], 0x1) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)=',', 0x1}], 0x1) tee(r2, r1, 0x2, 0x0) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="240000001600030207fffd946fa283bc02eee6d87986c497271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) readv(r0, &(0x7f0000013000-0x30)=[{&(0x7f000000a000)=""/183, 0xb7}], 0x1) 2018/02/10 10:55:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f00000ce000)=[{r0}], 0x1, &(0x7f00006ab000), &(0x7f0000ee1000-0x8), 0x8) 2018/02/10 10:55:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000982000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000985000-0xc)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000aaf000)={0x20000004}) 2018/02/10 10:55:21 executing program 5: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000002000-0xa)={0x0, 0x0, 0x0, @tid}, &(0x7f0000000000)) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000bba000-0x29)="2900000020001907ff033fffffffda060200000622e80002040000140d0004000006020000d200019c", 0x29}], 0x1) 2018/02/10 10:55:21 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000a000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000079d000)='net/icmp\x00') exit(0x0) fstat(r1, &(0x7f0000998000-0x44)) 2018/02/10 10:55:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000711000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) connect$inet6(r0, &(0x7f0000c40000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/10 10:55:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000025000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0/control\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') rmdir(&(0x7f0000921000)='./file0/control\x00') 2018/02/10 10:55:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000b6d000-0x10)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f00001af000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000067000-0x1000)=',', 0x1}], 0x1) tee(r2, r1, 0x2, 0x0) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000bba000-0x29)="2900000020001907ff033fffffffda060200000622e80002040000140d0004000006020000d200019c", 0x29}], 0x1) 2018/02/10 10:55:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, &(0x7f0000001000-0x20)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1) 2018/02/10 10:55:21 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000b04000-0xc)={0x0}, &(0x7f000067b000+0xa27)=0xc) getpriority(0x1, r0) 2018/02/10 10:55:21 executing program 1: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000008000-0x11)='/selinux/enforce\x00', 0x80001, 0x0) writev(r0, &(0x7f0000001000-0x50)=[{&(0x7f0000009000-0x1000)='0', 0x1}], 0x1) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000bba000-0x29)="2900000020001907ff033fffffffda060200000622e80002040000140d0004000006020000d200019c", 0x29}], 0x1) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a34000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000ed8000)) 2018/02/10 10:55:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x16, &(0x7f0000001000-0xcd)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@generic={0x8864, "2f0f6f3c3d350021"}}}, 0x0) 2018/02/10 10:55:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eee000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000111000), 0x0, 0x0, &(0x7f000010e000-0x10)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000dd0000-0x2), 0x0, 0x0, &(0x7f0000515000-0x10)={0x2, 0x0, @empty}, 0x10) close(r0) 2018/02/10 10:55:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000e8c000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000b59000)={0x51, 0x0, 0x0, {}, {}, @const}) 2018/02/10 10:55:21 executing program 4: mmap(&(0x7f0000000000/0x49000)=nil, 0x49000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000028000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfc6000)=nil, 0xfc6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001000)={0x0, 0x0, 0xac1b, 'queue1\x00'}) ioctl(r0, 0x1, &(0x7f0000001000)) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000304000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000d93000)) 2018/02/10 10:55:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f3a000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000fd6000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 10:55:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f00000f6000-0x20)=[{0x60}, {0x6}]}, 0x10) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a34000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000ed8000)) 2018/02/10 10:55:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eee000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000111000), 0x0, 0x0, &(0x7f000010e000-0x10)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000dd0000-0x2), 0x0, 0x0, &(0x7f0000515000-0x10)={0x2, 0x0, @empty}, 0x10) close(r0) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') lseek(r0, 0x19, 0x0) getdents(r0, &(0x7f0000001000-0x30)=""/48, 0xbd) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a34000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000ed8000)) 2018/02/10 10:55:21 executing program 3: mmap(&(0x7f0000000000/0xefc000)=nil, 0xefc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000396000)="3900001402", 0x5) 2018/02/10 10:55:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00008c0000)="26000000130047060701c1b00e0000000000000001ffffffe8ef18ffff00f13a050003006e35", 0x26) 2018/02/10 10:55:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000a34000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000ed8000)) 2018/02/10 10:55:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000865000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009b000-0x8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3c000-0x8)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') ftruncate(r2, 0x0) dup2(r0, r1) 2018/02/10 10:55:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) sendmsg(r0, &(0x7f0000f04000-0x38)={&(0x7f000075a000-0x1c)=@in6={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000d8e000)=[], 0x0, &(0x7f000056d000-0x260)=[{0xc, 0x29, 0x2}], 0xc}, 0x0) 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000030000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f000000a000)) removexattr(&(0x7f0000024000-0x8)='./file0\x00', &(0x7f00000e7000-0x15)=@known='com.apple.FinderInfo\x00') 2018/02/10 10:55:22 executing program 3: getrlimit(0x81c691ae9b48fea1, &(0x7f0000ed6000)) 2018/02/10 10:55:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eee000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000111000), 0x0, 0x0, &(0x7f000010e000-0x10)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000dd0000-0x2), 0x0, 0x0, &(0x7f0000515000-0x10)={0x2, 0x0, @empty}, 0x10) close(r0) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000765000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffffffffffc0}}) 2018/02/10 10:55:22 executing program 6: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000903000+0x681)='net/raw\x00') getdents64(r0, &(0x7f0000004000-0x93)=""/147, 0x1011f) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000865000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009b000-0x8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3c000-0x8)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') ftruncate(r2, 0x0) dup2(r0, r1) 2018/02/10 10:55:22 executing program 1: mmap(&(0x7f0000000000/0x3e000)=nil, 0x3e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000018000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f000003e000-0xa)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000009000-0xa)='./control\x00', 0x1, 0x0) execveat(r0, &(0x7f0000010000)='./control\x00', &(0x7f0000041000-0x30)=[], &(0x7f000000f000-0x18)=[], 0x0) 2018/02/10 10:55:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7ff9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeb000-0xa)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d1000-0x8), 0x8000fffffffe) ioctl$TCSETAF(r1, 0x5408, &(0x7f00003b3000)={0x0, 0xc4, 0x0, 0x0, 0xffffffff}) preadv(0xffffffffffffffff, &(0x7f0000e6a000)=[], 0x0, 0x0) 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000030000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f000000a000)) removexattr(&(0x7f0000024000-0x8)='./file0\x00', &(0x7f00000e7000-0x15)=@known='com.apple.FinderInfo\x00') 2018/02/10 10:55:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eee000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000111000), 0x0, 0x0, &(0x7f000010e000-0x10)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000dd0000-0x2), 0x0, 0x0, &(0x7f0000515000-0x10)={0x2, 0x0, @empty}, 0x10) close(r0) 2018/02/10 10:55:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000f1000)={0x10, 0x0, 0xffffffffffffffff, 0x8003f9}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000982000-0x4)=""/4, &(0x7f0000901000-0x4)=0x4) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0xdcb000)=nil, 0xdcb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x1, 0x0, 0x41, 0x1, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/10 10:55:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000f36000)=@file={0x1, './file0\x00'}, 0xa) r2 = request_key(&(0x7f000091a000-0x5)='ceph\x00', &(0x7f0000e08000)={0x73, 0x79, 0x7a}, &(0x7f00007ff000)='/dev/sg#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000bbb000-0x8)='trusted\x00', &(0x7f0000c34000-0x5)={0x73, 0x79, 0x7a}, &(0x7f00000d6000), 0x0, r2) listen(r1, 0x0) add_key(&(0x7f0000eff000-0x6)='logon\x00', &(0x7f0000acd000-0x5)={0x73, 0x79, 0x7a}, &(0x7f00008ce000-0x89), 0x0, 0xfffffffffffffffe) dup2(r0, r1) 2018/02/10 10:55:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7ff9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeb000-0xa)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d1000-0x8), 0x8000fffffffe) ioctl$TCSETAF(r1, 0x5408, &(0x7f00003b3000)={0x0, 0xc4, 0x0, 0x0, 0xffffffff}) preadv(0xffffffffffffffff, &(0x7f0000e6a000)=[], 0x0, 0x0) 2018/02/10 10:55:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000f03000)="260000002200470105000700ff80e8fe06006d20002b1f00c0e989094a5100000005033500b0", 0x26) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00002a6000-0x4)=0x20, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000093d000-0x4), 0x4) sendto(r0, &(0x7f0000cff000-0x12)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) 2018/02/10 10:55:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00002c4000-0xe8)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@broadcast=0xffffffff}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f000021a000-0x1c)={0x0, 0x0, &(0x7f0000416000-0x8)={&(0x7f0000edc000)={0x2, 0x7, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) connect$inet6(r0, &(0x7f00005da000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/10 10:55:22 executing program 1: mmap(&(0x7f0000000000/0xfa8000)=nil, 0xfa8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000040e000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000fa8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000fa8000)={0x0}) mmap(&(0x7f0000fa8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$unix(r3, &(0x7f0000fa8000)=@file={0x0, ""/108}, &(0x7f0000634000)=0x6e) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000adb000)={&(0x7f0000000000), 0xffffffffffffffe4}) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f000002e000-0x50)={@common='ifb0\x00', @ifru_names=@generic="9c6565e7496395b842294282ead6415a"}) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000865000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009b000-0x8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3c000-0x8)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') ftruncate(r2, 0x0) dup2(r0, r1) 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000030000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f000000a000)) removexattr(&(0x7f0000024000-0x8)='./file0\x00', &(0x7f00000e7000-0x15)=@known='com.apple.FinderInfo\x00') 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000030000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000b000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f000000a000)) removexattr(&(0x7f0000024000-0x8)='./file0\x00', &(0x7f00000e7000-0x15)=@known='com.apple.FinderInfo\x00') 2018/02/10 10:55:22 executing program 7: wait4(0x0, 0x0, 0x80000004, &(0x7f0000004000-0x48)) 2018/02/10 10:55:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7ff9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeb000-0xa)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d1000-0x8), 0x8000fffffffe) ioctl$TCSETAF(r1, 0x5408, &(0x7f00003b3000)={0x0, 0xc4, 0x0, 0x0, 0xffffffff}) preadv(0xffffffffffffffff, &(0x7f0000e6a000)=[], 0x0, 0x0) 2018/02/10 10:55:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ae1000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00002ca000)={{}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700"}) 2018/02/10 10:55:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000011000)='mountinfo\x00') readv(r0, &(0x7f0000009000-0xa0)=[{&(0x7f0000004000-0x1000)=""/1353, 0x549}], 0x1) pread64(r0, &(0x7f00002a1000-0x94)=""/148, 0x94, 0x0) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0x37000)=nil, 0x37000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000026000)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000007000)='./file0\x00', &(0x7f000000e000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000021000-0x1c)={&(0x7f000001d000)=@abs, 0x8, &(0x7f000000a000-0x10)=[], 0x0, &(0x7f0000037000-0x78)=[@cred={0x18, 0x1, 0x2, 0x0, 0x0, r1}], 0x18}, 0x0) 2018/02/10 10:55:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7ff9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeb000-0xa)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d1000-0x8), 0x8000fffffffe) ioctl$TCSETAF(r1, 0x5408, &(0x7f00003b3000)={0x0, 0xc4, 0x0, 0x0, 0xffffffff}) preadv(0xffffffffffffffff, &(0x7f0000e6a000)=[], 0x0, 0x0) 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4) mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000007000/0x4000)=nil) 2018/02/10 10:55:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000f02000)="4402", 0x2) 2018/02/10 10:55:22 executing program 1: mmap(&(0x7f0000000000/0xdcd000)=nil, 0xdcd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x800000000007ffc, 0x41, 0x80000000000001, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000865000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009b000-0x8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3c000-0x8)='./file0\x00', &(0x7f00006b4000-0x10)='./control/file0\x00') ftruncate(r2, 0x0) dup2(r0, r1) 2018/02/10 10:55:22 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000001000-0x3b)) 2018/02/10 10:55:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000b37000)='/dev/loop#\x00', 0x0, 0x4080) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000477000)='net/rt_acct\x00') r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f00007aa000-0x8), 0xf563) 2018/02/10 10:55:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) poll(&(0x7f0000085000-0x10)=[{r1, 0xc1a6}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000551000)=[{{&(0x7f00009c5000-0x60)=@nfc_llcp, 0x60, &(0x7f0000a65000-0x5)=[], 0x0, &(0x7f00008da000)=""/32, 0x20}}], 0x1, 0x0, &(0x7f0000510000-0x10)={0x0, 0x1c9c380}) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 2018/02/10 10:55:22 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000001000-0x60)={0x0, 0x0, 0x6, @tid=r0}, &(0x7f00002a1000-0x4)) 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00001e5000)='/dev/vga_arbiter\x00', 0x80, 0x0) getpeername$netrom(r0, &(0x7f0000a4d000-0x10)=@ax25, &(0x7f000018b000)=0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000197000-0x1c)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000328000-0x98)={0x2, 0x400000000000003, 0x0, 0x2, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_address={0x3, 0x8, 0x2, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}]}, 0x88}, 0x1}, 0x0) 2018/02/10 10:55:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00009e9000-0xa)='encrypted\x00', 0x840, 0x0, &(0x7f0000642000-0x40)={0x0, 0x5, 0x10000}) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000002a000-0xa)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) readv(r0, &(0x7f00009a4000)=[{&(0x7f000022c000)=""/32, 0x20}], 0x1) mkdir(&(0x7f0000aa3000)='./control/file0\x00', 0x0) 2018/02/10 10:55:22 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000001000-0x3b)) 2018/02/10 10:55:22 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00002f5000-0x4), 0xac) 2018/02/10 10:55:22 executing program 5: mmap(&(0x7f0000000000/0xff2000)=nil, 0xff2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000a2d000-0x4)=0x8001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000070f000)={@common='tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f0000aa7000), 0x0, 0x0, &(0x7f0000fef000)={0x11, 0x10000000000800, r1, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0xdc) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) dup3(r0, r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000fc6000-0x40)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000ebd000-0x5b), 0xfe21, 0x0, &(0x7f00000dd000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x76) 2018/02/10 10:55:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000391000-0x160)={{{{0x2, 0xffffffffffffffff, @empty}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x0, 0x0, 0x0, "c4894c5ffdc2e5fdaf848a8c727e37faa506dd8e46692db30d14cfd35b211d9d4985da36dc5bcf975798e517c053ab025e94035a15e1710d5e472e33853c90a65787abecaf51e10effb0ceb5e7263017"}, 0x160) close(r0) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000001000-0xf)) 2018/02/10 10:55:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f000036b000), &(0x7f00005b4000-0x4)=0x4) 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000dbb000)="440d0500ae17000000000002da", 0xd) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000d10000), &(0x7f000011d000)) 2018/02/10 10:55:22 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000001000-0x3b)) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0xdc) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) dup3(r0, r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000fc6000-0x40)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000ebd000-0x5b), 0xfe21, 0x0, &(0x7f00000dd000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x76) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000018000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f000003e000-0xa)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000009000-0xa)='./control\x00', 0xc003, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xffc000)=nil, 0xffc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:22 executing program 1: prctl$seccomp(0x2f, 0x4, &(0x7f0000001000-0x10)={0x0, &(0x7f0000001000-0x30)=[]}) 2018/02/10 10:55:22 executing program 3: mmap(&(0x7f0000000000/0x2c000)=nil, 0x2c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0x4a) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x401054d5, &(0x7f0000025000-0x4)) 2018/02/10 10:55:22 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000001000-0x3b)) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0xdc) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) dup3(r0, r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000fc6000-0x40)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000ebd000-0x5b), 0xfe21, 0x0, &(0x7f00000dd000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x76) 2018/02/10 10:55:22 executing program 1: mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/rfkill\x00', 0x40880, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 2018/02/10 10:55:22 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f000000e000)=""/84, &(0x7f000000d000-0x4)=0x54) 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000bcd000-0xc)={0x0}, &(0x7f0000fc0000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000fc1000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00002c1000)='/selinux/mls\x00', 0x0, 0x0) ptrace(0x4207, r2) ptrace$getsig(0x4202, r2, 0x0, &(0x7f00002ab000-0x10)) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000018000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f000003e000-0xa)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000009000-0xa)='./control\x00', 0xc003, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 2018/02/10 10:55:22 executing program 5: r0 = request_key(&(0x7f00004e8000-0x8)='syzkaller\x00', &(0x7f00005b4000-0x5)={0x73, 0x79, 0x7a}, &(0x7f000053d000-0x17)='vmnet1]mime_typeGPL&lo\x00', 0xffffffffffffffff) getgroups(0x1, &(0x7f0000bef000-0x10)=[0xffffffffffffffff]) keyctl$chown(0x4, r0, 0x0, r1) 2018/02/10 10:55:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dff000-0xc)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f0000080000-0x430)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_PORT_SELF={0x8, 0x19, [@nested={0x4, 0x2, []}]}]}, 0x3c}, 0x1}, 0x0) 2018/02/10 10:55:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00004c0000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x80000000) sendto$inet(r0, &(0x7f00009aa000-0x88), 0x0, 0x20008045, &(0x7f00000b0000)={0x2, 0x2, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00001cd000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) close(r1) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000018000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f000003e000-0xa)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000009000-0xa)='./control\x00', 0xc003, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0xdc) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) dup3(r0, r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000fc6000-0x40)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000ebd000-0x5b), 0xfe21, 0x0, &(0x7f00000dd000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x76) 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="116dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00008e4000-0x50)={@common='ip6_vti0\x00', @ifru_flags=0x2000000202}) 2018/02/10 10:55:22 executing program 1: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000002f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002000-0xb4)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000001a000-0x4e)=""/78, 0x4e}], 0x1, &(0x7f000002f000)=""/7, 0x7}}, {{&(0x7f0000003000-0x58)=@alg, 0x58, &(0x7f000001c000)=[], 0x0, &(0x7f0000030000-0x57)=""/87, 0x57}}], 0x2, 0x2, 0x0) sendto(r1, &(0x7f0000018000)="f8", 0x1, 0x0, 0x0, 0x0) 2018/02/10 10:55:22 executing program 5: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000012000-0x9c)="240000001100fffffffefd956fa283b70a00003808000005031e85683540000004002700", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000009000-0x10)={r1, 0x1, 0x6, @random="117aff0d71b9"}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) pause() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00007a8000)={@dev={0xfe, 0x80}}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000d67000)={@dev={0xfe, 0x80, [], 0x0, 0xf}, 0xffffffff, 0x0, 0x0, 0x1, 0x90b6, 0x401, 0x1}, 0x20) dup3(r2, r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000774000)={{{@in=@broadcast, @in6=@remote}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f00005ba000)=0xe8) 2018/02/10 10:55:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mkdir(&(0x7f0000043000-0xa)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0xa0) creat(&(0x7f0000ddb000)='./control/file0\x00', 0x0) creat(&(0x7f0000fcc000)='./control/file0\x00', 0x0) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000018000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f000003e000-0xa)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000009000-0xa)='./control\x00', 0xc003, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 2018/02/10 10:55:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00004c0000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x80000000) sendto$inet(r0, &(0x7f00009aa000-0x88), 0x0, 0x20008045, &(0x7f00000b0000)={0x2, 0x2, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00001cd000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) close(r1) [ 46.968039] audit: type=1400 audit(1518260122.751:19): avc: denied { attach_queue } for pid=7903 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tun_socket permissive=1 [ 47.035264] device syz3 entered promiscuous mode [ 47.060407] device syz3 left promiscuous mode 2018/02/10 10:55:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="116dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00008e4000-0x50)={@common='ip6_vti0\x00', @ifru_flags=0x2000000202}) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00004c0000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x80000000) sendto$inet(r0, &(0x7f00009aa000-0x88), 0x0, 0x20008045, &(0x7f00000b0000)={0x2, 0x2, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00001cd000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) close(r1) 2018/02/10 10:55:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x40600) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/10 10:55:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00004c0000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x80000000) sendto$inet(r0, &(0x7f00009aa000-0x88), 0x0, 0x20008045, &(0x7f00000b0000)={0x2, 0x2, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00001cd000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) close(r1) 2018/02/10 10:55:22 executing program 5: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000012000-0x9c)="240000001100fffffffefd956fa283b70a00003808000005031e85683540000004002700", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:22 executing program 1: socket$inet(0x2, 0x1, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000a8d000)={0x2, 0xffffffffffffffff, @empty}, 0x20) 2018/02/10 10:55:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000fb4000), 0x0, 0x20000004, &(0x7f00007aa000)={0xa, 0x2, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f00003ae000-0x38)={&(0x7f00006e9000-0x20)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000ba1000-0x70)=[], 0x0, &(0x7f0000636000-0x30)=""/101, 0x65}, 0x0) r2 = accept4(r1, &(0x7f0000219000-0x58)=@alg, &(0x7f0000db5000-0x4)=0x58, 0x0) shutdown(r0, 0x1) sendmsg$nl_crypto(r2, &(0x7f0000485000-0x38)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, []}, 0x10176}, 0x1}, 0x0) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000069f000), 0x0) clone(0x0, &(0x7f0000b22000), &(0x7f00005e5000-0x4), &(0x7f0000962000-0x4), &(0x7f000041a000)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000da9000-0x44)={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {0x0, @random="ef1e43c879ac"}, 0x0, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, @generic="3a5a221d3fa80a9446e08b8c0f3054fa"}) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000a54000/0x1000)=nil) mlock2(&(0x7f0000c25000/0x3000)=nil, 0x3000, 0x0) 2018/02/10 10:55:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00004c0000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x80000000) sendto$inet(r0, &(0x7f00009aa000-0x88), 0x0, 0x20008045, &(0x7f00000b0000)={0x2, 0x2, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00001cd000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) close(r1) 2018/02/10 10:55:22 executing program 5: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000012000-0x9c)="240000001100fffffffefd956fa283b70a00003808000005031e85683540000004002700", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:22 executing program 5: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000012000-0x9c)="240000001100fffffffefd956fa283b70a00003808000005031e85683540000004002700", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:22 executing program 1: socket$inet(0x2, 0x1, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000a8d000)={0x2, 0xffffffffffffffff, @empty}, 0x20) 2018/02/10 10:55:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x40600) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/10 10:55:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00004c0000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x80000000) sendto$inet(r0, &(0x7f00009aa000-0x88), 0x0, 0x20008045, &(0x7f00000b0000)={0x2, 0x2, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00001cd000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) close(r1) 2018/02/10 10:55:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000069f000), 0x0) clone(0x0, &(0x7f0000b22000), &(0x7f00005e5000-0x4), &(0x7f0000962000-0x4), &(0x7f000041a000)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000da9000-0x44)={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {0x0, @random="ef1e43c879ac"}, 0x0, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, @generic="3a5a221d3fa80a9446e08b8c0f3054fa"}) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000a54000/0x1000)=nil) mlock2(&(0x7f0000c25000/0x3000)=nil, 0x3000, 0x0) 2018/02/10 10:55:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000b8e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000e52000-0xc0)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @tcp_ip4_spec={@loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {"9477", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, @sctp_ip6_spec={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {"0bb0", @random="d85ee5e4df50"}}, 0x0, []}}) 2018/02/10 10:55:23 executing program 1: socket$inet(0x2, 0x1, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000a8d000)={0x2, 0xffffffffffffffff, @empty}, 0x20) 2018/02/10 10:55:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00004c0000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x80000000) sendto$inet(r0, &(0x7f00009aa000-0x88), 0x0, 0x20008045, &(0x7f00000b0000)={0x2, 0x2, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00001cd000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) close(r1) 2018/02/10 10:55:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="116dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00008e4000-0x50)={@common='ip6_vti0\x00', @ifru_flags=0x2000000202}) 2018/02/10 10:55:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000069f000), 0x0) clone(0x0, &(0x7f0000b22000), &(0x7f00005e5000-0x4), &(0x7f0000962000-0x4), &(0x7f000041a000)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000da9000-0x44)={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {0x0, @random="ef1e43c879ac"}, 0x0, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, @generic="3a5a221d3fa80a9446e08b8c0f3054fa"}) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000a54000/0x1000)=nil) mlock2(&(0x7f0000c25000/0x3000)=nil, 0x3000, 0x0) 2018/02/10 10:55:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000ebb000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000056f000)={0x2, &(0x7f0000001000-0x10)=[{0x25, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x8) sendto(r0, &(0x7f0000c67000-0x5f), 0x0, 0x0, 0x0, 0x0) 2018/02/10 10:55:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x40600) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/10 10:55:23 executing program 3: getpriority(0x200000000003, 0x0) 2018/02/10 10:55:23 executing program 6: mmap(&(0x7f0000000000/0xd3e000)=nil, 0xd3e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f0000610000-0x1), 0x0, 0x48081, &(0x7f00006b1000)={0xa, 0x0, 0x0, @empty}, 0x1c) close(r0) 2018/02/10 10:55:23 executing program 3: mmap(&(0x7f0000000000/0xb46000)=nil, 0xb46000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r0, 0x0) poll(&(0x7f0000b46000-0x38)=[{r0}], 0x1, 0x0) 2018/02/10 10:55:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000069f000), 0x0) clone(0x0, &(0x7f0000b22000), &(0x7f00005e5000-0x4), &(0x7f0000962000-0x4), &(0x7f000041a000)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000da9000-0x44)={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {0x0, @random="ef1e43c879ac"}, 0x0, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, @generic="3a5a221d3fa80a9446e08b8c0f3054fa"}) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000a54000/0x1000)=nil) mlock2(&(0x7f0000c25000/0x3000)=nil, 0x3000, 0x0) 2018/02/10 10:55:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x40600) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/10 10:55:23 executing program 1: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000031e000-0x8)='./file0\x00', &(0x7f0000fe7000-0x6)='ramfs\x00', 0x0, &(0x7f0000232000)) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000fe6000), &(0x7f0000fe7000-0x4)=0x58, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x8ff8c, &(0x7f000002f000)) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/10 10:55:23 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mlock2(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2018/02/10 10:55:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0xb, 0x4, &(0x7f0000fda000-0x10)={0x100}, &(0x7f0000049000-0x4), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 2018/02/10 10:55:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00006f5000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendto(r0, &(0x7f0000f1e000-0xdd), 0xffffffffffffff02, 0x0, &(0x7f0000ffb000-0x10)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/10 10:55:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000fd6000-0xf1)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd1000-0x4)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000bde000-0x14)) [ 47.374077] binder_alloc: binder_alloc_mmap_handler: 8002 20000000-20002000 already mapped failed -16 [ 47.399843] TCP: request_sock_TCPv6: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. 2018/02/10 10:55:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f000065d000-0x9)='/dev/rtc\x00', 0x4100000027fff9, 0x0) 2018/02/10 10:55:23 executing program 7: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000003000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000b9e000-0x8c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "931701f18e041c297305bd5884889b9aa4d1b9b55cb4773c83bba5637e1f3e89c428b32b49c3299a6816cdb31bc467207abd193ddc2f0a079f65f07945c1aca8", "3a375874c6f5c8221da6cf9002f11271c9bacacf1a856038ac4ea3afaeb04e72"}) 2018/02/10 10:55:23 executing program 4: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f000000c000)={&(0x7f0000002000)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @dev}}}, 0x26, &(0x7f000000d000)=[], 0x0, &(0x7f000000a000)=""/19, 0x13}, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="240000002200030207fffd946fa2830800eee6d87986c497271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:23 executing program 6: clock_getres(0x746624aec8175bfc, &(0x7f000062e000)) 2018/02/10 10:55:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="116dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00008e4000-0x50)={@common='ip6_vti0\x00', @ifru_flags=0x2000000202}) 2018/02/10 10:55:23 executing program 1: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000031e000-0x8)='./file0\x00', &(0x7f0000fe7000-0x6)='ramfs\x00', 0x0, &(0x7f0000232000)) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000fe6000), &(0x7f0000fe7000-0x4)=0x58, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x8ff8c, &(0x7f000002f000)) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/10 10:55:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b60000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 2018/02/10 10:55:23 executing program 5: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000031e000-0x8)='./file0\x00', &(0x7f0000fe7000-0x6)='ramfs\x00', 0x0, &(0x7f0000232000)) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000fe6000), &(0x7f0000fe7000-0x4)=0x58, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x8ff8c, &(0x7f000002f000)) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/10 10:55:23 executing program 6: mmap(&(0x7f0000000000/0x36000)=nil, 0x36000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000026000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000007000)={0x2, &(0x7f0000006000)=[{0x34, 0x0, 0x0, 0xfffffffffdeff010}, {0x6}]}, 0x10) sendto(r0, &(0x7f0000023000), 0x0, 0x0, 0x0, 0x0) 2018/02/10 10:55:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000490000)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f00002ca000-0x10)={&(0x7f000083f000-0x68)=@ipv4_newroute={0x68, 0x18, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0x44, 0x9, [{0x40}, {}, {}, {}, {}, {}, {}, {}]}, @RTA_FLOW={0x8, 0xb, 0x9016}]}, 0x68}, 0x1}, 0x0) 2018/02/10 10:55:23 executing program 2: mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001000-0xb)='/dev/loop#\x00', 0x0, 0x801) ioctl(r0, 0x440000000000127d, &(0x7f0000012000)="9fe036fba4561faac04a03a082752d22989ed504b0b72ae7e9e95e906c99a0c40fd9f047a33af4ce206f614b23cac63c9a2fa8bc31cf7bc7c2a0c54f98238e3995a82528a08b6de1b855c426e6a8e7553f83ad036d5bafcf0365fc57aae4e30f70b3f738e9d318da41b1e2db189f0d739227f7068697f0e56f62177b84bfd92dedb82f79dc9c") 2018/02/10 10:55:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039d000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000f9e000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x26d) sendmsg(r0, &(0x7f0000fc8000)={&(0x7f0000459000-0x8)=@un=@abs, 0x8, &(0x7f0000461000-0x60)=[{&(0x7f00006c2000-0x1)='G', 0x1}], 0x1, &(0x7f0000658000)=[]}, 0x0) mmap(&(0x7f0000000000/0xefa000)=nil, 0xefa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000344000)='Y', 0x1, 0x0, 0x0, 0x0) [ 47.558980] TCP: request_sock_TCPv6: Possible SYN flooding on port 20030. Sending cookies. Check SNMP counters. 2018/02/10 10:55:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r0, &(0x7f0000bae000)={&(0x7f0000aee000-0x1c)=@in6={0xa, 0x1, 0x0, @empty}, 0x1c, &(0x7f00008d5000-0x60)=[], 0x0, &(0x7f000067b000-0x10)=[{0xc, 0x29, 0x5}], 0xc}, 0x0) 2018/02/10 10:55:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000557000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x8004510b) 2018/02/10 10:55:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x16, &(0x7f0000446000), 0x0) 2018/02/10 10:55:23 executing program 5: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000031e000-0x8)='./file0\x00', &(0x7f0000fe7000-0x6)='ramfs\x00', 0x0, &(0x7f0000232000)) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000fe6000), &(0x7f0000fe7000-0x4)=0x58, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x8ff8c, &(0x7f000002f000)) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/10 10:55:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r0, &(0x7f0000bae000)={&(0x7f0000d44000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000ad8000)=[], 0x0, &(0x7f0000730000)=[{0x10, 0x29, 0x3e, "8a"}], 0x10}, 0x0) 2018/02/10 10:55:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00000b9000-0x14)={0xfffffffffffffc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1f5}) 2018/02/10 10:55:23 executing program 1: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000031e000-0x8)='./file0\x00', &(0x7f0000fe7000-0x6)='ramfs\x00', 0x0, &(0x7f0000232000)) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000fe6000), &(0x7f0000fe7000-0x4)=0x58, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x8ff8c, &(0x7f000002f000)) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/10 10:55:23 executing program 7: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000d000)="2f0000001d00030000000000000000000add00d800000000000000c9080001000000737e0beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/02/10 10:55:23 executing program 4: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000002000-0x8)='./file0\x00', 0x0) lgetxattr(&(0x7f0000005000-0x8)='./file0\x00', &(0x7f0000002000-0x8)=@random={'system.', '\x00'}, &(0x7f0000004000-0x79)=""/121, 0x79) 2018/02/10 10:55:23 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000002000-0x10)={r1, 0x1, 0x6, @empty}, 0x10) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) 2018/02/10 10:55:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000785000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00006fb000)={0xa0000013}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00006cc000-0xc)) epoll_wait(r0, &(0x7f0000586000)=[{}], 0x1, 0x0) 2018/02/10 10:55:23 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x2, 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, &(0x7f0000001000-0x28)={@generic="0200654307637decf46cc162b27a217a"}) 2018/02/10 10:55:23 executing program 6: mmap(&(0x7f0000000000/0x2d000)=nil, 0x2d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000018000)={&(0x7f0000014000-0x1c)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000013000)=[], 0x0, &(0x7f0000006000)=[{0x10, 0x29, 0x8, 'z$'}], 0x10}, 0x0) 2018/02/10 10:55:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d63000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r0, &(0x7f0000de4000)=[{&(0x7f0000663000)='F', 0x1}], 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 2018/02/10 10:55:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000402000-0x44)={{0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x68, {0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, @syzn={0x73, 0x79, 0x7a, 0x0}}) [ 48.113305] device syz2 entered promiscuous mode [ 48.160198] device syz2 left promiscuous mode 2018/02/10 10:55:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000691000-0x4)=0x79, 0x4) bind$inet(r0, &(0x7f0000887000-0x10)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cd5000-0x4), 0x4) sendto$inet(r0, &(0x7f0000d5a000-0x73), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f00007d7000-0x50)=[{&(0x7f0000b7e000)=""/4096, 0x1000}], 0x1) 2018/02/10 10:55:24 executing program 3: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d9a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x8, 0x0, 0x0, "00000707c89d"}}) 2018/02/10 10:55:24 executing program 7: mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000bc000-0x11b)="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", 0x0) mmap(&(0x7f0000fb3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000fb4000-0x97)="99", 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2012, r0, 0x0) mincore(&(0x7f0000001000/0x3000)=nil, 0x3000, &(0x7f0000fb2000)) 2018/02/10 10:55:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f00006b9000-0xa)='./control\x00', &(0x7f00003d2000)=[], &(0x7f000052f000)=[], 0x1100) 2018/02/10 10:55:24 executing program 5: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000031e000-0x8)='./file0\x00', &(0x7f0000fe7000-0x6)='ramfs\x00', 0x0, &(0x7f0000232000)) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000fe6000), &(0x7f0000fe7000-0x4)=0x58, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x8ff8c, &(0x7f000002f000)) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/10 10:55:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x7, 0x0) read(r0, &(0x7f0000da2000)=""/8, 0x8) timerfd_settime(r0, 0x0, &(0x7f0000715000-0x20)={{0x0, 0x989680}, {0x0, 0x6}}, &(0x7f0000001000-0x20)) 2018/02/10 10:55:24 executing program 1: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000031e000-0x8)='./file0\x00', &(0x7f0000fe7000-0x6)='ramfs\x00', 0x0, &(0x7f0000232000)) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000fe6000), &(0x7f0000fe7000-0x4)=0x58, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c50000-0x8)='./file0\x00', &(0x7f000002f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fd000-0x1)='.', &(0x7f00003a3000-0x6)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6c000-0x8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x8ff8c, &(0x7f000002f000)) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:24 executing program 4: mmap(&(0x7f0000000000/0xf84000)=nil, 0xf84000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f73000-0x4)=0x621c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000f81000)=0x8000000000000009, 0x4) sendto$inet6(r0, &(0x7f0000f73000-0x31), 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/10 10:55:24 executing program 4: timerfd_create(0x0, 0x1fd) 2018/02/10 10:55:24 executing program 3: mmap(&(0x7f0000000000/0x32000)=nil, 0x32000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000004000)={0x2, &(0x7f0000028000-0x10)=[{0x6c}, {0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) truncate(&(0x7f0000031000)='./bus\x00', 0x0) 2018/02/10 10:55:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00009b1000)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) mount(&(0x7f00009f8000)='./file0\x00', &(0x7f0000b5d000)='./file0\x00', &(0x7f000088f000-0x4)='afs\x00', 0x0, &(0x7f0000c28000)) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:24 executing program 4: mmap(&(0x7f0000000000/0x31000)=nil, 0x31000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f000001e000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_mtu}) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000731000-0xc)={@broadcast=0xffffffff, @empty}, 0xc) 2018/02/10 10:55:24 executing program 3: mmap(&(0x7f0000000000/0xfec000)=nil, 0xfec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000feb000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x541f, &(0x7f0000fec000-0x8)) 2018/02/10 10:55:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000c04000)=0x7b, 0x15) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000618000-0x37), 0x0, 0x20000000, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3", 0xe1, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a79000)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x290, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="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"]}, 0x290}, 0x1}, 0x0) 2018/02/10 10:55:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000182000-0x4)) 2018/02/10 10:55:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000272000)) 2018/02/10 10:55:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f0000c03000-0x36)="6e732f6d6e7400c552c5ba9e2c33e308163dd83bbbef1a23efb866ab2c1b66c09db90000000000000006f4d0e9ae0e19c79a35b158ae") setns(r0, 0x0) clone(0x0, &(0x7f0000c75000), &(0x7f0000695000), &(0x7f000014e000), &(0x7f0000d59000-0x45)) 2018/02/10 10:55:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000307000-0x8)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000027d000)='./file0\x00', 0x20000000) inotify_add_watch(r0, &(0x7f0000bba000-0x8)='./file0\x00', 0x40) 2018/02/10 10:55:24 executing program 3: mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 2018/02/10 10:55:24 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) lgetxattr(&(0x7f0000001000)='./file0\x00', &(0x7f0000002000)=@known="73797374656d2e706f7369785f61636c5f61636365737301", &(0x7f0000001000-0x39)=""/57, 0x39) 2018/02/10 10:55:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00002a5000-0x8)=@abs={0x1}, 0x8) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000272000)) 2018/02/10 10:55:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) bind$inet(r0, &(0x7f0000dec000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000df1000)=0x6, 0x4) r2 = dup(r0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000f7a000)) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xffffffffffffffe6, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r3 = accept4(r0, 0x0, &(0x7f0000214000-0x4), 0x800) getpeername$unix(r3, &(0x7f000062f000-0x15)=@file={0x0, ""/19}, &(0x7f0000d0a000)=0x15) read(r0, &(0x7f000007b000-0x1000)=""/4096, 0x1000) openat$selinux_member(0xffffffffffffff9c, &(0x7f00006a2000)='/selinux/member\x00', 0x2, 0x0) r4 = fcntl$getown(r3, 0x9) getpeername$unix(r2, &(0x7f0000c7c000-0x6e)=@file={0x0, ""/108}, &(0x7f0000e7e000-0x4)=0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000aa7000)='coredump_filter\x00') write(r5, &(0x7f000000a000-0x7)="9a", 0x1) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000cbc000-0x4), &(0x7f0000998000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f000049d000-0xc)={0x0, 0xb7, 0x30}, &(0x7f0000c45000-0x4)=0xc) rt_tgsigqueueinfo(r1, r4, 0x40, &(0x7f0000fda000-0x10)={0x5, 0x4, 0x7, 0x6}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000fad000)={r6, 0x100}, 0x8) sendto$inet(r0, &(0x7f000058c000-0x1000)="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", 0x1000, 0x4, 0x0, 0x0) 2018/02/10 10:55:24 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getpeername(r0, &(0x7f00000ac000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000773000-0x4)=0x10) 2018/02/10 10:55:24 executing program 2: mmap(&(0x7f0000000000/0xe7b000)=nil, 0xe7b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000e7a000)='ceph\x00', &(0x7f000052d000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000e7a000)='bdev/\x00', 0xffffffffffffffff) r1 = request_key(&(0x7f0000aa3000-0xa)='blacklist\x00', &(0x7f0000e7b000-0x5)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000822000-0x1)='\x00', 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, &(0x7f0000b7e000-0xe9)="c4ba5b9264d1832edcf5879e691845e49b233dae59613165808ecb85cb9a1939a3a0d19cf570aa9764860f1d6051d8d72aba70d578fb690e05ae1b152ed62b6f22efdf718ac9699998f4a9f168d7640d3df86f89f1195dd3e06606c2b21543f8e4b7c277faf2579025fd8024a0dcefdaa6e70f1aefa31d68f33f7027ad775aca699e181032ba5400a0acffb10dafa3509415437a41cc376cef978b0c01ea8160e38a95b7a16abc41e19537a2039a248096176878c744814cafd2966d72adb6047d4a830a14ebec2f9552d7c6e19768ffc19d8c407c862095ba0b5136ca5a0234af2c2a29679c3a8ba9", 0xe9, r1) r2 = memfd_create(&(0x7f0000663000)='GPL*bdevself{GPL-user\'/trustedtrusted%\x00', 0x2) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x3, 0x0, {0xa, 0x2, 0x3, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x4}}}, 0x32) r6 = socket$l2tp(0x18, 0x1, 0x1) close(r4) dup2(r6, r5) 2018/02/10 10:55:24 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000008000-0x2), 0x0) 2018/02/10 10:55:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000272000)) 2018/02/10 10:55:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000011c000-0x1c)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x3, @multicast1=0xe0000001}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @rand_addr}}]}, 0x80}, 0x1}, 0x0) 2018/02/10 10:55:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000272000)) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000499000)='user\x00', &(0x7f0000a1e000)={0x73, 0x79, 0x7a}, &(0x7f0000889000)="3257fa", 0x3, 0xfffffffffffffff8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f4000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000889000-0x1)) 2018/02/10 10:55:24 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x7f, 0x4) 2018/02/10 10:55:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000f90000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_settings={0x53, 0x0, @fr_pvc=&(0x7f0000bea000)}}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000f82000-0x28)={@common='gre0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f0000488000)}}) 2018/02/10 10:55:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000efe000)='/dev/input/mice\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000028000)={0x6}) epoll_pwait(r1, &(0x7f0000007000)=[{}], 0x1, 0x0, &(0x7f000002f000-0x8), 0x8) 2018/02/10 10:55:24 executing program 5: mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000041000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000f74000)=@pptp={0x0, 0x0, {0x0, @empty}}, &(0x7f00006ce000-0x4)=0x20) 2018/02/10 10:55:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)={0xa0000014}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000020d000)) ppoll(&(0x7f00003b0000-0x18)=[{r1}], 0x1, &(0x7f000074e000-0x10)={0x0, 0x989680}, &(0x7f0000039000-0x5), 0x8) 2018/02/10 10:55:24 executing program 6: mmap(&(0x7f0000000000/0x2a000)=nil, 0x2a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000-0x38)={&(0x7f0000015000)=@in={0x2, 0x1, @multicast2=0xe0000002}, 0x10, &(0x7f0000002000-0x10)=[], 0x0, &(0x7f0000020000)=[{0xc, 0x0, 0x1}], 0xc}, 0x0) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00005f7000)='smaps\x00') mlockall(0x2) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x10001) 2018/02/10 10:55:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000003b000)='./file0\x00', &(0x7f00005df000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800, &(0x7f0000b7a000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') open(&(0x7f000003c000)='./file0/control/file0\x00', 0x0, 0x0) 2018/02/10 10:55:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) bind$inet(r0, &(0x7f0000dec000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000df1000)=0x6, 0x4) r2 = dup(r0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000f7a000)) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xffffffffffffffe6, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r3 = accept4(r0, 0x0, &(0x7f0000214000-0x4), 0x800) getpeername$unix(r3, &(0x7f000062f000-0x15)=@file={0x0, ""/19}, &(0x7f0000d0a000)=0x15) read(r0, &(0x7f000007b000-0x1000)=""/4096, 0x1000) openat$selinux_member(0xffffffffffffff9c, &(0x7f00006a2000)='/selinux/member\x00', 0x2, 0x0) r4 = fcntl$getown(r3, 0x9) getpeername$unix(r2, &(0x7f0000c7c000-0x6e)=@file={0x0, ""/108}, &(0x7f0000e7e000-0x4)=0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000aa7000)='coredump_filter\x00') write(r5, &(0x7f000000a000-0x7)="9a", 0x1) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000cbc000-0x4), &(0x7f0000998000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f000049d000-0xc)={0x0, 0xb7, 0x30}, &(0x7f0000c45000-0x4)=0xc) rt_tgsigqueueinfo(r1, r4, 0x40, &(0x7f0000fda000-0x10)={0x5, 0x4, 0x7, 0x6}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000fad000)={r6, 0x100}, 0x8) sendto$inet(r0, &(0x7f000058c000-0x1000)="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", 0x1000, 0x4, 0x0, 0x0) 2018/02/10 10:55:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00009e7000)={&(0x7f000077a000)={0x10}, 0xc, &(0x7f0000ad1000-0x10)={&(0x7f000036a000-0x58)=@newneigh={0x24, 0x1c, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@NDA_DST_IPV4={0x8, 0x1, @loopback=0x7f000001}]}, 0xfea4}, 0x1}, 0x0) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00006f4000-0x3)='ns\x00') getdents(r0, &(0x7f00000b2000)=""/24, 0x18) getdents64(r0, &(0x7f000041c000)=""/129, 0x81) 2018/02/10 10:55:24 executing program 1: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000027000-0xe8)={{{@in=@remote, @in6=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000023000)=0xe8) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x38, 0x18, 0x781a251d, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x1c, 0x9, [{0x9}, {0x0, 0x0, 0x0, r1}, {}]}]}, 0x373}, 0x1}, 0x0) 2018/02/10 10:55:24 executing program 5: mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) sendmsg$netlink(r1, &(0x7f0000029000-0x38)={0x0, 0x0, &(0x7f0000019000)=[], 0x0, &(0x7f000002c000-0x28)=[@rights={0x10, 0x1, 0x1, [r0]}], 0x10}, 0x0) 2018/02/10 10:55:24 executing program 1: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000027000-0xe8)={{{@in=@remote, @in6=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000023000)=0xe8) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x38, 0x18, 0x781a251d, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x1c, 0x9, [{0x9}, {0x0, 0x0, 0x0, r1}, {}]}]}, 0x373}, 0x1}, 0x0) 2018/02/10 10:55:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) bind$inet(r0, &(0x7f0000dec000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000df1000)=0x6, 0x4) r2 = dup(r0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000f7a000)) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xffffffffffffffe6, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r3 = accept4(r0, 0x0, &(0x7f0000214000-0x4), 0x800) getpeername$unix(r3, &(0x7f000062f000-0x15)=@file={0x0, ""/19}, &(0x7f0000d0a000)=0x15) read(r0, &(0x7f000007b000-0x1000)=""/4096, 0x1000) openat$selinux_member(0xffffffffffffff9c, &(0x7f00006a2000)='/selinux/member\x00', 0x2, 0x0) r4 = fcntl$getown(r3, 0x9) getpeername$unix(r2, &(0x7f0000c7c000-0x6e)=@file={0x0, ""/108}, &(0x7f0000e7e000-0x4)=0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000aa7000)='coredump_filter\x00') write(r5, &(0x7f000000a000-0x7)="9a", 0x1) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000cbc000-0x4), &(0x7f0000998000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f000049d000-0xc)={0x0, 0xb7, 0x30}, &(0x7f0000c45000-0x4)=0xc) rt_tgsigqueueinfo(r1, r4, 0x40, &(0x7f0000fda000-0x10)={0x5, 0x4, 0x7, 0x6}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000fad000)={r6, 0x100}, 0x8) sendto$inet(r0, &(0x7f000058c000-0x1000)="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", 0x1000, 0x4, 0x0, 0x0) 2018/02/10 10:55:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000003b000)='./file0\x00', &(0x7f00005df000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800, &(0x7f0000b7a000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') open(&(0x7f000003c000)='./file0/control/file0\x00', 0x0, 0x0) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0x34000)=nil, 0x34000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f000002c000)) 2018/02/10 10:55:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create(0x401) dup2(r2, r0) close(r1) 2018/02/10 10:55:24 executing program 1: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000027000-0xe8)={{{@in=@remote, @in6=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000023000)=0xe8) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x38, 0x18, 0x781a251d, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x1c, 0x9, [{0x9}, {0x0, 0x0, 0x0, r1}, {}]}]}, 0x373}, 0x1}, 0x0) 2018/02/10 10:55:24 executing program 7: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) read(r0, &(0x7f0000004000)=""/4096, 0x1000) write$tun(r0, &(0x7f0000000000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @loopback=0x7f000001, {[]}}, @icmp=@address_reply={0x12}}}, 0x26) 2018/02/10 10:55:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000f90000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_settings={0x53, 0x0, @fr_pvc=&(0x7f0000bea000)}}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000f82000-0x28)={@common='gre0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f0000488000)}}) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0x8, 0x0, &(0x7f0000e6f000-0x8)={0x77359400}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000319000-0x60)={0x0, 0x12, 0x0, @thr={&(0x7f0000d00000), &(0x7f0000e6c000-0x5c)}}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/02/10 10:55:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000003b000)='./file0\x00', &(0x7f00005df000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800, &(0x7f0000b7a000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') open(&(0x7f000003c000)='./file0/control/file0\x00', 0x0, 0x0) 2018/02/10 10:55:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) bind$inet(r0, &(0x7f0000dec000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000df1000)=0x6, 0x4) r2 = dup(r0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000f7a000)) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xffffffffffffffe6, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r3 = accept4(r0, 0x0, &(0x7f0000214000-0x4), 0x800) getpeername$unix(r3, &(0x7f000062f000-0x15)=@file={0x0, ""/19}, &(0x7f0000d0a000)=0x15) read(r0, &(0x7f000007b000-0x1000)=""/4096, 0x1000) openat$selinux_member(0xffffffffffffff9c, &(0x7f00006a2000)='/selinux/member\x00', 0x2, 0x0) r4 = fcntl$getown(r3, 0x9) getpeername$unix(r2, &(0x7f0000c7c000-0x6e)=@file={0x0, ""/108}, &(0x7f0000e7e000-0x4)=0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000aa7000)='coredump_filter\x00') write(r5, &(0x7f000000a000-0x7)="9a", 0x1) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000cbc000-0x4), &(0x7f0000998000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f000049d000-0xc)={0x0, 0xb7, 0x30}, &(0x7f0000c45000-0x4)=0xc) rt_tgsigqueueinfo(r1, r4, 0x40, &(0x7f0000fda000-0x10)={0x5, 0x4, 0x7, 0x6}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000fad000)={r6, 0x100}, 0x8) sendto$inet(r0, &(0x7f000058c000-0x1000)="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", 0x1000, 0x4, 0x0, 0x0) 2018/02/10 10:55:24 executing program 5: mmap(&(0x7f0000000000/0x5fb000)=nil, 0x5fb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40000000040, &(0x7f00004bd000)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/10 10:55:24 executing program 1: mmap(&(0x7f0000000000/0x28000)=nil, 0x28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000027000-0xe8)={{{@in=@remote, @in6=@dev, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000023000)=0xe8) sendmsg$nl_route(r0, &(0x7f000001c000-0x38)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x38, 0x18, 0x781a251d, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x1c, 0x9, [{0x9}, {0x0, 0x0, 0x0, r1}, {}]}]}, 0x373}, 0x1}, 0x0) 2018/02/10 10:55:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 2018/02/10 10:55:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='15', 0x2}], 0x1) sendfile(r0, r0, &(0x7f00008e9000)=0x1, 0x9) 2018/02/10 10:55:24 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0xfffffdbd}, {&(0x7f0000b8c000-0xb1)=""/177, 0xb1}], 0x20000000000002e8) [ 49.083990] syz-executor6 (8277): /proc/8276/oom_adj is deprecated, please use /proc/8276/oom_score_adj instead. 2018/02/10 10:55:24 executing program 6: mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000008000-0x4)=0xb1c2, 0x4) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendto(r1, &(0x7f0000de8000-0x1000)="14bb51cbae96989a56ab573c5576378aada7a73d03609ce495cd123638c99bec2942ca7b4451d606fd47f24fe2f48715e02a59ba565d73b3e12f22a4cb94b4de60331a033aaa93594b58750f369df4ab5a9c23f280fc35d09e2a43490303979473932b8a856b0da02897ddec4b51a91da035a9a0b03d897a5a3a3f9073b1f9bacbc2dea981f3730d766a05d5ecbde7c7c94e2ba55ed6dcdd2885c938e4bd3850806fd1cb59b4fc246187137e3e414212a0f5a56d2919af6c47b38143ca253f76aabed95277e8b815979acbb9a2507da61b0f752646fcb597e812afacc03498316b6159de1b8e30704e5780376247487c56ac41c371584117c264a764f46f5996c7cc2c6c388c80d66cac9b7533c7e46de7b30ec2faa2b558a9ffad2f3a8d4c75ede8072535514afa56075288fc3451e0f81bdea58c0252ddbb652ebf39306798fc448f7beea7987c93ab295cacd0c60eade7b31d9fbbc38b995c1771aa20d6f3766bc0456b428f22c3f927c1532e2a7465dd5af1fc515c07d6f23365b6c44cf3f1f549150633238d976e6a1fc1cccbf4e99ee208eb665cd6b4c051a344450c65d48c8989213308b8bea4608e32f274974fc044e39fcbd2077a68cc7a0c13c857ceac396fdd95c8d1d11a8d5a2bb56113bd00eeacc85fac88cb56b1d4087c4f49d774706002443ae9f6bf190c4b24560877749759c52a5197dc82287c4d81117a7ee528b004c5b7484b580a69039f69ff787e9497a9887c9d8719ae4345a9f85c788de2446a8d2f3c527ec407cf3697260af6dc9e08878308ec5aeac114b689274a23ed8497f30863c2c9559bd607ee0fd48fd980995b2681deac303ce4de67dac9ffb361b438551a36f1996de8e1ab839b1ea9c3a6072625f0d52f608aee1b54b730589e43d2585a4ec84115593eda2d274aafa0727ae605bdb91336b375aa2c2703a11cb37ebfa72e2ad0884038f16701f77e09855703a6e301ed6391c987e72b7a4bc94fad6cfa9f575418cbb630688d774ce9ad660f220c11ab010c24702cd59baa6fa03c6d22f3d12c9d91f0441897021ace36df21636fc0f7fdca8375d6784940ef0ec24fb21ef00166be9094b26f235251c9b332fefbcc9bd58e421514bd51d10b80619e133852d25194c34f136ceeb329412025174f022a853c6868028763d4f72d38f7d25f6c914d095c33e0d38ce65eddd90acbc7692e4afa2f9eb5db01fc120c1a31922e7a226303c84c4e8ed8c1ad0469910e1ae320d3fb3457996ba243de14f1017c2d435e2c95dccf136f95d6e5a095b013bf7c877a46c1d6d671b6c69e470af77ab1e716bf067a835813db2141d777095804469c7aa8f72c67d2c13dea4b1579c79f0ac24192bc3eedc5856c471babb442ecd2bd0bdc18b3225dd78c531dd0f3a79177306ccdd8195acbb8a496d5fc1321e2457470e29e5518a5208b3c023f98df07cf4e2af03e1bc497bc2de0bbe0c9ca1beb6a0e7a86e7635ea89330e6918503198927c68af056d215abfe996a2cea6a6ae926dbcde30c2787dc4fb66d7b0a1bd7690e75a99271df771fbd9a227ecfd45488e9dfcf1bd7b1c5fb3ceb2494215623d2d331e9642e16346f99a59b89b8b8abdcbe680cfb25c5dc701d2c3b33a6e48ddeeaf00a925b618f47414b6598f9eed7180472e31e041a365c1a6dd9a9f972dd15185e8234d0aa664b3760fa6e8cd527e123fb9e6e554d57c73dd57a2d9140499db4845c5599c7857c85e3f2723b6a9ccf6b4d30ad10f51d1e24af1a7305030b2ee81749b745db6d0d77ffcd04d6b061a4ade4e17804415d6cd4571495a4424bb2cdb5a9d305570f242a119306e57be1f533e0f37726463ee2867c8d28db6921700336c4abee75daab924096f6b49115c48b34ebfb1c2c6ebf1b9ed6d74edd3b9687b7cb11fca429a2ab85958fdf79dccf66d8f91e68e929b80fcb5c7131eec556eea76f64cd46d5184c059e56931d23bfa76274fe78eb68057b1907399df00a7e2d522b5c0e91b38f995e4c604bf6e6b76326587295e3c5643e6e845d6a595a69660ecf16fed7a61dbbf746e475c0db0b5f128d20e9acac625d447a2b01ba50494426c3eabce3261974423f0b3cab236a71afb9b4ef046ac95b9ad5f3ef68adfafc002900c07f8bf303c445ca87c58092a82ed81f8db79233acbf09c47e87977864b45e65d1181d7faeacce1eeda888e82d77cbd53bd8194d0e76260dcd8586a336c59c3264ebccab29a128416ac83bdf7be04e78ce4c4c66feaf118a9d46084530580c0555e7e41355f19ae9f93122b0076a56202aa2c5b5deadc52e6fe6492bf9561714e3ffa65798caac253b4cd92f64692d57c72cef68483397245aaca74a863252cbd18e97669fe646f1a407da3159fb363783966d024607da567c235ff52d0db9c9520d0282fe61ec5432bfe144483629a6c7c4d3e208e08c683a9993ae3d4877bc371e1c4508f8ce32e3ad970eb25121e8af99544445b076e6f0c9890e5b7b4214167e4cab14c133cee2c680b26ddf1e2d1af7dca560dd6e3e3c65da98f12a62a9caf403c993a62d969aa569bb730322b4b329df5a5528da605f37463d6c8acd659cc1549f3100e861776a55f1f06773ac27810af05a44152e4575f624f6c59794533b59c365ccb3e83bfeeab62a12d01046b354b96b6a863e2b45e4f065b03e5b7839c6efc671b4aba950dc7d0cedce3d5b22e12cd426f2878f5dbddc6529141ccca1d781a9df294cb66f70327e722d6ff7404db30575be95cfe09e61e9250d32dbac381988dc96bad058f2c6ce272c21b37bc5114d5bd31e42f715d0ebb89af7ec9ddc20e8a73720865d593b10b247f0a89f23985e10326b22ee2bc561ddad2f796328eea29110c2dcd681ed35b3eed7f8dbe38b1a991e9d273c2fe7c03cf61d05c114989da7c1e3ff18713aaa7f4b4c567657610e0dd12e51eaefaee136eedf97da42549d9434160b83a2b7ec263fbc69068aaf3a06f4d8ca246451f11a67342cb3750eb5a00e9dfdc5089f52cfe5244ce56f05836f90326fd3774f6a8978a228643202663a8974e7b42d126830857a339187d566ed7f813030f41342a81f332928cd0bcefc685d4fcb3d39bcb4a1e2681908d631ba69c692bfb5a18b8a778256dc53a3a4a05eb7c7f190a5cc3f4637d4a16116c64d0a06a11a84eb1de53c0f2159d25edcf9810f6b1b277a39190f6223dc06255380cb92cd2ea8df6d637d187e4006c27ea502d772fd2085c1971431c5e7656ff57de88de53cccaffbee7d40e5fa5ee2ec07ed515d0981781deae3bee2d8a41d782a0ffb7d92c7ae82223b826b73bb6059dc40b5dce8f9a1ff021e9d78ec1e8704137a24df9591fd332e3b553bb6b29f706dd5d79f4bd7d2311007822b0858d6eb24de4b02ce5df9cab579af194faf02acb0062bd8d98eea528d3d2bcb08bf872b409ae8ac2df1999d3595223c8830b8d64f4ef6ec8622e47ab65546b43318284fe42aadd346ef34fe5348f51ec1dd6ea2e5a2a5c57d75dfb35c9bbe35ab95bf0d2bdf8afcabe2f5550a9abe719b9128887bf8b4567d9790d9eb2297320386a685cf81106c28f88da34e35dc04fb5daf047ccd82013e6027529ad27559ccf30b373c3ad1b7105e09aacecaf0defe00ee4b8c37b9e5d7029ad6271031bcaa0cac3dbf252f4972d96c30b8e1cf5bbef98cc4b04a9559d6cdd861c913e4228e0b1a708c4762a407ad5a7ead329801a1dac11914d557fb6183c7b10633311e41cc388f0bfc13ce32970e272d4c4340a0f67dac08dd64730807791502cf2670b0be107ddf5716c7886f21406cd5060d5c5c1b5f56a56b4ee5dec0dcf2ff29c7386abecb27191b51d713fee2ea82fa2a41cec85e811e72dce54203e37895db8dc760dd331712783ccde0682bfec42368aefcf9979fc63e29be4a26da84ce50f870f71507fc29e44b90da39f81e4cbfff0f55a3ed2cd1dbaa61b54145309df50cd28e696e435f41b7dfecb2ca1d2951ad6f97ac96f301c348b62b49f0069f913f15c73b5592d8d36ac3207f1237318b8f09e8a6bece904b70ed1285401a05ab61e44d0d904217c301b63b3cdfe29124285189bf7263ba5fc48c6ff293dff87f6610cf3f02a2ba93c7107eb52e61eb2d90012dd326e1680694474f82f1e50f25e75d19208da8856f2c228a2ab4986d42e2d00a9b5033bb400f69877240dee4c12595616f9684363afd4b180dfb322db5db66a9d894a2c664f22309244664158a53002df2a6aa84eccfd5aff87d9392e48b907311e45eefeb0727206ea657cacce2efd93c937f4bf42fc35b80bcfcc05781b0474664fee9af062f0a908e3fd37fd8285e39ce9aff17cade60098a3a4f5fd37b74740b1408ddb79793484d8953d4e76c7dc28b20f0ada53e0b35e4ae773b22689d423409e9566bfa9c0ba2aa6a3511368eb727ce3bb943fd9060bb1c1f010910e9c9da124455242808d50e553b5e183489c6fa431bcbbece373dbd84bdf77f555b5c76bb87929561e6a6c6601e96393c3eedf9552adbdf01780764c141ce1f7422c96b23015b3d0484543d99bafc4dfc4196e3b3d8c3ee6ae835a5d8df869ce6af7644ed7f97bdc4fc3a132e644cf7a89f38e391b695978a31305293a7562b497dd9fa840ef8f4d74fc5fa4cb9039449a1f1f13b74b773774860da7b5dd7293e0b399339eb9ada0d833772bc26878fec6f126e7d193a871a2eec7a1039fdc1a6f0bdbbec0ddbfc0ce244811f16dc273359a78b1e8d45aa98ffbe4711acbb83e3661462515f1a6bf065e6bab2ff70ac1a7da53f5dee35e64533952aee6a6a4467d97ce4f8a9e51bf83fd59158122bd3987a580c3a54fb3511dad2f337a6e8cdafe01fbafc076381ea1727435d16fc0c4690b1ef4f8ff256b6e1f9ddf7ebad9f22e2fcbc89a19ac8f287b8226a6da3b36c81b20b83e6031278416337cfbee34dd7bcb3fa9d139d505d5d7c149e5746966b25b118ff8046a73c7a2b9cff5cf44d247bc51a4c974bdde60d231662b88eb3456a0a817ff43a1b7f02035d688f9bd39fe4f225ad7c8321fbea893fbf3d826d8aaea1beca74e8e5f21b7e6aa07201ee38c403b435e20c5d903f7550909b8cfeee9997673fd8dcb1ac055fd71404a16d9a453d067b0a946cca06a61611de8eaa5d20f994ae468eddc67021e37b098021f361e1a4280cf564f1d5c2d4fe6e4292a3a0a716e41074c47b01ca10e0b8e5a7480c866c15170b92c859285b460c8e554a726b40aaa9ada18c1ffbd6bb983965aa88c4bbd9a5faecf3c284a3482dfde42ed909cbf743e498595342d5416b77b49c365bc44fd80b2c1a4e4fb8722dd617d69db7f71569d26b879b1a01d195d79bf2c89c6da09116a88ee2408bba9595308c12741b4428764c55ee71e55831d802d50ed52d83db313f9fd43f9d1865dd981535c8a5fd706aee0a318f611f46d9691d00f38e3d6231ade22d2eadceec69a98e71a8946acb79968fc19108f8e6c7d57bc8931b7637cdb40071ffac911799eb0e8c36797a327e0bb52be12174e908cdb597b3337f48209c61fee3de0903996c9005cf5fbd62931093dd50d30dfc30e983615b9324c00d81a6bf83ea26bddf1900ef98a4f95bc2a39287a03a07019072bb5fd5bda0c4159d0673daaed52b4453e24fc722aa0e8c402088ec730eb27265bdaabd0274dd5eddd82ee49ae76d3e0f2ef44395184b0e1c07ed42875f5bfb86f7f657b3ff79eabc83aede7717cea11e2ca4b7ecfd92e8cc8a87c038776835b71289cefebcdef168d30d11db53fbe444", 0xfff, 0xc3fe68eda9554f8b, &(0x7f000064f000-0x10)=@ipx={0x4, 0x0, 0x800, "86462eb966dc", 0x8}, 0x10) 2018/02/10 10:55:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4f000-0x8)='./file0\x00', 0x0) mount(&(0x7f000003b000)='./file0\x00', &(0x7f00005df000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800, &(0x7f0000b7a000)) mkdir(&(0x7f0000915000-0x10)='./file0/control\x00', 0x0) symlink(&(0x7f0000747000)='./file0\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') open(&(0x7f000003c000)='./file0/control/file0\x00', 0x0, 0x0) 2018/02/10 10:55:24 executing program 5: mmap(&(0x7f0000000000/0x5fb000)=nil, 0x5fb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40000000040, &(0x7f00004bd000)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/10 10:55:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000f90000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_settings={0x53, 0x0, @fr_pvc=&(0x7f0000bea000)}}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000f82000-0x28)={@common='gre0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f0000488000)}}) 2018/02/10 10:55:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x0, 0x0) creat(&(0x7f0000cdf000-0x8)='./file0\x00', 0x0) syz_open_dev$binder(&(0x7f0000618000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sync() msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/10 10:55:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000821000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000d62000-0x50)={{}, {0x12}}) 2018/02/10 10:55:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x7, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:24 executing program 1: mmap(&(0x7f0000000000/0xffd000)=nil, 0xffd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000476000-0x6)='cubic\x00', 0x6) 2018/02/10 10:55:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000e22000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000fcd000-0x10)=[{&(0x7f0000097000)=""/8, 0x8}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom(r3, &(0x7f0000013000-0x8d), 0x0, 0x0, &(0x7f0000cd8000-0x1c)=@in6={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) r4 = getpgid(0x0) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) fcntl$setown(r2, 0x8, r4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x13) 2018/02/10 10:55:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000cd2000)='auxv\x00') pread64(r0, &(0x7f0000698000), 0x0, 0x0) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, {0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0xa0}, 0x1}, 0x0) 2018/02/10 10:55:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000821000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000d62000-0x50)={{}, {0x12}}) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0x5fb000)=nil, 0x5fb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40000000040, &(0x7f00004bd000)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/10 10:55:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000920000)={0x10, 0x0, 0xffffffffffffffff, 0x130202}, 0x2a) getsockname(r1, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f0000cc9000)=0x3a) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000e6000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000026000)={0x4}) ppoll(&(0x7f000000f000-0x18)=[{r3}], 0x1, &(0x7f0000e69000-0x10), &(0x7f0000aa4000-0x8), 0x8) 2018/02/10 10:55:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000821000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000d62000-0x50)={{}, {0x12}}) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0x5fb000)=nil, 0x5fb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x40000000040, &(0x7f00004bd000)=""/84, &(0x7f0000002000-0x4)=0x54) 2018/02/10 10:55:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x822000)=nil, 0x822000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000822000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000633000-0x7)=""/122) 2018/02/10 10:55:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000f90000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_settings={0x53, 0x0, @fr_pvc=&(0x7f0000bea000)}}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000f82000-0x28)={@common='gre0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f0000488000)}}) 2018/02/10 10:55:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000821000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000d62000-0x50)={{}, {0x12}}) 2018/02/10 10:55:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000048, &(0x7f00009eb000-0x4)=0x6, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00000a8000)=0x4) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000053000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000054000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000026000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) 2018/02/10 10:55:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c67000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mice(&(0x7f00002a1000)='/dev/input/mice\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/10 10:55:25 executing program 2: mmap(&(0x7f0000000000/0x57000)=nil, 0x57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000018000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, []}, 0x3dc5) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000000005, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000012000-0x10)=[{0x28, 0x0, 0x0, 0xfffffffffbfff000}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001b000-0xa)=@abs, 0x8, &(0x7f0000bb4000-0x70)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/10 10:55:25 executing program 4: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)='./file0\x00', 0x10442, 0x0) execve(&(0x7f0000002000)='./file0\x00', &(0x7f0000002000)=[], &(0x7f0000002000)=[&(0x7f0000001000)='nodevppp1securityuser.self-(].keyring)[cgroup-mime_typeuserwlan0:-md5sum[eth0\x00']) ioctl$TIOCLINUX2(r0, 0x40305828, &(0x7f0000001000-0xc)={0x2}) 2018/02/10 10:55:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000410000-0x4)=0x104) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000bae000-0x15)='/dev/pktcdvd/control\x00', 0x151000, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000715000-0x10)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) r1 = socket(0x11, 0x8020400000000802, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000c26000)={0x0, 0x3, 0x1f, "fdf0910bb79481e9ce470332319955e2f1ab5e5d5148af38c8af082cee4be6"}, 0x27) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000855000)={0x0, 0x3}, 0x8) dup3(r1, r0, 0x0) 2018/02/10 10:55:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023b000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x0, []}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fe000-0xb)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f000008f000)=[{&(0x7f000005a000-0xf7)="8a87d8a659b9ea9c582dc97a1d61f85e38c7b8bd30cd337c941dbef5e0f7e75d6ec5ebf57a794ab06da4c4a7aa5f51a4f0ce298a514a7c8f2aba9d113918dc670261df78464cbccc69f8970b6f5cf999bd85c357a145e9f1b7941b647d865dcf664d53dd3f288bac2af421c517920f43b7fe1cc7cbc369278d535a9692042928e508d460a6c64b8c6b7c5d3dbb9d1a02e003337f32dc54673cda415c1e1f6842620d41cb113b336c569b35f81172a4e71abb60a9de3932e830f5e8ab13e9413ae2cf3a5b35e1c2371920be8553798d171fa1fd601b6fc5d7f0812bc5292b4e9254798c648df0cc2d4466e504", 0xec}], 0x1) getsockopt$inet_buf(r0, 0x0, 0x2000000000484, &(0x7f000005a000-0x18)=""/24, &(0x7f0000aed000)=0x18) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000001000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000002000)={0x943}) 2018/02/10 10:55:25 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f000000a000)='auxv\x00') sendfile(r1, r1, &(0x7f0000002000), 0x1) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0x61000)=nil, 0x61000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x101042) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000000f000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000049000-0x1c)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000005c000)={0x12, @time={0x0, 0x989680}}) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x800000000041, &(0x7f000024c000+0x994)=""/192, &(0x7f000062a000-0x4)=0x23) 2018/02/10 10:55:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10002000000011, 0x8000000080003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000ea0000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) connect$unix(0xffffffffffffffff, &(0x7f00008fa000-0x8)=@abs, 0x8) bind$packet(r1, &(0x7f00008b7000-0x14)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @empty}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x301}) 2018/02/10 10:55:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000665000-0x40)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6e000-0xe0)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000727000-0x1)="cb", 0x1, 0x0, &(0x7f000066d000-0x10)) 2018/02/10 10:55:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023b000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x0, []}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fe000-0xb)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0x61000)=nil, 0x61000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x101042) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000000f000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000049000-0x1c)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000005c000)={0x12, @time={0x0, 0x989680}}) 2018/02/10 10:55:25 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000), &(0x7f0000718000)}}, &(0x7f0000d36000)) 2018/02/10 10:55:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000410000-0x4)=0x104) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000bae000-0x15)='/dev/pktcdvd/control\x00', 0x151000, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000715000-0x10)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) r1 = socket(0x11, 0x8020400000000802, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000c26000)={0x0, 0x3, 0x1f, "fdf0910bb79481e9ce470332319955e2f1ab5e5d5148af38c8af082cee4be6"}, 0x27) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000855000)={0x0, 0x3}, 0x8) dup3(r1, r0, 0x0) 2018/02/10 10:55:25 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000001000-0xc0)="d9f88ee9f38be38f937fa964df48ae7e507d46985022ac30d95dbae8e9219810f459c9617980fa7a846c58e8", 0x2c) 2018/02/10 10:55:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000312000-0xc)='/dev/rfkill\x00', 0x206, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000518000-0x7)="0bf5430f080319", 0x7}], 0x1) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0x61000)=nil, 0x61000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x101042) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000000f000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000049000-0x1c)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000005c000)={0x12, @time={0x0, 0x989680}}) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x800000000041, &(0x7f000024c000+0x994)=""/192, &(0x7f000062a000-0x4)=0x23) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0x61000)=nil, 0x61000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x101042) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000000f000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000049000-0x1c)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000005c000)={0x12, @time={0x0, 0x989680}}) 2018/02/10 10:55:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0xb, &(0x7f000003a000)) timer_create(0x0, &(0x7f0000b98000)={0x0, 0x0, 0x0, @thr={&(0x7f000015f000), &(0x7f0000611000)}}, &(0x7f00006c7000)) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x1, 0x0) write(r0, &(0x7f0000a13000-0x47)="4f7ad0c9edffe9486f1748144523c0c253773e00d4bba29028eac32e8de58f5930fd4c8ebb78dcf50bbc54c9270e987b4763dde61a04000000b3837564025833540000000013", 0x46) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000a5b000)={0x0, 0x81}) 2018/02/10 10:55:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000f0d000-0x8)={0xfffffffffffffffb}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000dd8000-0x10), &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) r1 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f00008e5000-0x8)='./file0\x00', 0x200020041, 0x0) close(r0) fcntl$setlease(r1, 0x400, 0x2) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x800000000041, &(0x7f000024c000+0x994)=""/192, &(0x7f000062a000-0x4)=0x23) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x800000000041, &(0x7f000024c000+0x994)=""/192, &(0x7f000062a000-0x4)=0x23) [ 49.708915] device syz3 entered promiscuous mode [ 49.736587] device syz3 left promiscuous mode 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x1, 0x0) write(r0, &(0x7f0000a13000-0x47)="4f7ad0c9edffe9486f1748144523c0c253773e00d4bba29028eac32e8de58f5930fd4c8ebb78dcf50bbc54c9270e987b4763dde61a04000000b3837564025833540000000013", 0x46) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000a5b000)={0x0, 0x81}) 2018/02/10 10:55:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000410000-0x4)=0x104) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000bae000-0x15)='/dev/pktcdvd/control\x00', 0x151000, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000715000-0x10)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) r1 = socket(0x11, 0x8020400000000802, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000c26000)={0x0, 0x3, 0x1f, "fdf0910bb79481e9ce470332319955e2f1ab5e5d5148af38c8af082cee4be6"}, 0x27) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000855000)={0x0, 0x3}, 0x8) dup3(r1, r0, 0x0) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0xf7a000)=nil, 0xf7a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0x0) dup3(r0, r1, 0x0) write(r1, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) 2018/02/10 10:55:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023b000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x0, []}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fe000-0xb)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/10 10:55:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10002000000011, 0x8000000080003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000ea0000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) connect$unix(0xffffffffffffffff, &(0x7f00008fa000-0x8)=@abs, 0x8) bind$packet(r1, &(0x7f00008b7000-0x14)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @empty}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x301}) 2018/02/10 10:55:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000582000-0x8)={0x19980330}, &(0x7f00005cd000-0x18)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000a71000-0x5c)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, 0x5c) 2018/02/10 10:55:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) sendmmsg(0xffffffffffffffff, &(0x7f0000012000)=[{{&(0x7f0000003000)=@nfc={0x27}, 0x10, &(0x7f0000003000-0x20)=[{&(0x7f0000001000-0x1000)="cbfbcf333b", 0x5}], 0x1}}], 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/10 10:55:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() setrlimit(0xb, &(0x7f000003a000)) rt_sigprocmask(0x0, &(0x7f0000038000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigqueueinfo(r0, 0x20, &(0x7f0000035000)) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x1, 0x0) write(r0, &(0x7f0000a13000-0x47)="4f7ad0c9edffe9486f1748144523c0c253773e00d4bba29028eac32e8de58f5930fd4c8ebb78dcf50bbc54c9270e987b4763dde61a04000000b3837564025833540000000013", 0x46) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000a5b000)={0x0, 0x81}) 2018/02/10 10:55:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10002000000011, 0x8000000080003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000ea0000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) connect$unix(0xffffffffffffffff, &(0x7f00008fa000-0x8)=@abs, 0x8) bind$packet(r1, &(0x7f00008b7000-0x14)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @empty}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x301}) 2018/02/10 10:55:25 executing program 6: mmap(&(0x7f0000000000/0x5e000)=nil, 0x5e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x101042) poll(&(0x7f000005c000)=[{r0}], 0x1, 0x9) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bc0000-0xa)='/dev/ptmx\x00', 0x1, 0x0) write(r0, &(0x7f0000a13000-0x47)="4f7ad0c9edffe9486f1748144523c0c253773e00d4bba29028eac32e8de58f5930fd4c8ebb78dcf50bbc54c9270e987b4763dde61a04000000b3837564025833540000000013", 0x46) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000a5b000)={0x0, 0x81}) 2018/02/10 10:55:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000092000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000012e000-0xc), &(0x7f0000483000-0x4)=0x275) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0xf7a000)=nil, 0xf7a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0x0) dup3(r0, r1, 0x0) write(r1, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000009b000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) mmap$binder(&(0x7f0000332000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x44, 0x0, &(0x7f0000005000-0x68)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000fb3000-0x70)=[@ptr={0x70742a85, 0x0, &(0x7f0000c7e000), 0x1}], &(0x7f00002c8000-0x18)=[0x0]}}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000539000-0x4)) [ 49.899351] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 49.913972] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 49.928282] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 49.967957] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 49.981859] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 49.996247] binder: 8457:8458 got transaction with too large buffer [ 50.003208] binder: 8457:8458 transaction failed 29201/-22, size 40-8 line 3287 [ 50.011324] binder: send failed reply for transaction 41 to 8457:8463 [ 50.014475] device syz3 entered promiscuous mode [ 50.016037] device syz4 entered promiscuous mode [ 50.037117] binder: BINDER_SET_CONTEXT_MGR already set [ 50.042970] binder: 8457:8463 ioctl 40046207 0 returned -16 [ 50.051097] binder_alloc: 8457: binder_alloc_buf, no vma [ 50.051664] binder: 8457:8465 got reply transaction with no transaction stack 2018/02/10 10:55:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00004b8000)={0x10, 0x0, 0xffffffffffffffff, 0xffff}, 0xc) r1 = syz_open_dev$tun(&(0x7f0000516000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000fea000+0x815)=0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00004a0000)={@generic="9d7891c1b1e27d492a623232cb8fe68c", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc22207302"}) read(r0, &(0x7f0000edc000-0x2f)=""/47, 0xfffffffffffffe98) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0xf7a000)=nil, 0xf7a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0x0) dup3(r0, r1, 0x0) write(r1, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) 2018/02/10 10:55:25 executing program 6: mmap(&(0x7f0000000000/0x5e000)=nil, 0x5e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x101042) poll(&(0x7f000005c000)=[{r0}], 0x1, 0x9) 2018/02/10 10:55:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023b000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x0, []}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fe000-0xb)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/10 10:55:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008a6000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000410000-0x4)=0x104) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000bae000-0x15)='/dev/pktcdvd/control\x00', 0x151000, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000715000-0x10)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) r1 = socket(0x11, 0x8020400000000802, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000c26000)={0x0, 0x3, 0x1f, "fdf0910bb79481e9ce470332319955e2f1ab5e5d5148af38c8af082cee4be6"}, 0x27) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000855000)={0x0, 0x3}, 0x8) dup3(r1, r0, 0x0) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000111000)='/dev/input/mice\x00', 0x0, 0x200000) unshare(0x40600) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000d9c000)) 2018/02/10 10:55:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10002000000011, 0x8000000080003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000ea0000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) connect$unix(0xffffffffffffffff, &(0x7f00008fa000-0x8)=@abs, 0x8) bind$packet(r1, &(0x7f00008b7000-0x14)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @empty}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x301}) 2018/02/10 10:55:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10002000000011, 0x8000000080003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000ea0000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) connect$unix(0xffffffffffffffff, &(0x7f00008fa000-0x8)=@abs, 0x8) bind$packet(r1, &(0x7f00008b7000-0x14)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @empty}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x301}) [ 50.051671] binder: 8457:8465 transaction failed 29201/-71, size 40-8 line 2921 [ 50.071681] binder: 8457:8463 transaction failed 29189/-3, size 0-0 line 3128 [ 50.080842] binder: undelivered TRANSACTION_ERROR: 29189 [ 50.086340] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.095439] binder: undelivered TRANSACTION_ERROR: 29190 [ 50.100989] binder: undelivered TRANSACTION_COMPLETE [ 50.106081] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/10 10:55:25 executing program 6: mmap(&(0x7f0000000000/0x5e000)=nil, 0x5e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x101042) poll(&(0x7f000005c000)=[{r0}], 0x1, 0x9) 2018/02/10 10:55:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000a75000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125f, &(0x7f00002ce000)) 2018/02/10 10:55:25 executing program 6: mmap(&(0x7f0000000000/0x5e000)=nil, 0x5e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x101042) poll(&(0x7f000005c000)=[{r0}], 0x1, 0x9) 2018/02/10 10:55:25 executing program 0: mmap(&(0x7f0000000000/0xf7a000)=nil, 0xf7a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0x0) dup3(r0, r1, 0x0) write(r1, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) [ 50.126929] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 50.140666] device syz4 left promiscuous mode [ 50.152362] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 2018/02/10 10:55:25 executing program 6: mmap(&(0x7f0000000000/0xe7b000)=nil, 0xe7b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000e71000)={0xa, 0x0, 0x45da8146, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000e79000-0x1c)={0xa, 0x3, 0x7, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000000001}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ccd000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@multicast1=0xe0000001, 0x1, 0x0, 0x1, 0xffff, 0x2, 0xa0, 0x80}, {0x8, 0x5, 0x2, 0xb, 0x3f, 0x5c8e, 0x2, 0x1000}, {0xa78, 0x7f, 0xfffffffffffffff9, 0xec5f}, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x1, 0x0, 0x0, 0x5, 0x8}}, 0xe8) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000380000-0x38)={&(0x7f00009dd000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00002cf000-0x10)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3, "", []}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x81) 2018/02/10 10:55:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) poll(&(0x7f0000408000-0x30)=[], 0x0, 0x44c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x1b, 0x0, &(0x7f0000ca0000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000387000)=[@flat={0x73622a85}, @fd={0x66642a85, 0x0, 0xffffffffffffffff}], &(0x7f000000b000-0x30)=[]}}], 0x4e, 0x0, &(0x7f0000009000)}) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00007f2000)={0x1, &(0x7f0000022000)=[{0x74}]}) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00005ab000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x3, [@loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001]}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fe000-0xb)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) [ 50.175616] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 50.195794] device syz3 left promiscuous mode [ 50.217425] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 50.252758] binder_alloc: binder_alloc_mmap_handler: 8498 20000000-20002000 already mapped failed -16 [ 50.262206] device syz4 entered promiscuous mode [ 50.267406] device syz3 entered promiscuous mode [ 50.269263] binder: BINDER_SET_CONTEXT_MGR already set [ 50.269270] binder: 8498:8503 ioctl 40046207 0 returned -16 [ 50.294420] binder: release 8498:8503 transaction 46 out, still active 2018/02/10 10:55:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) poll(&(0x7f0000408000-0x30)=[], 0x0, 0x44c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x1b, 0x0, &(0x7f0000ca0000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000387000)=[@flat={0x73622a85}, @fd={0x66642a85, 0x0, 0xffffffffffffffff}], &(0x7f000000b000-0x30)=[]}}], 0x4e, 0x0, &(0x7f0000009000)}) 2018/02/10 10:55:26 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000f18000)={0x0, 0x0}) setpriority(0x0, r0, 0x0) 2018/02/10 10:55:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00004b8000)={0x10, 0x0, 0xffffffffffffffff, 0xffff}, 0xc) r1 = syz_open_dev$tun(&(0x7f0000516000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000fea000+0x815)=0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00004a0000)={@generic="9d7891c1b1e27d492a623232cb8fe68c", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc22207302"}) read(r0, &(0x7f0000edc000-0x2f)=""/47, 0xfffffffffffffe98) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xe7b000)=nil, 0xe7b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000e71000)={0xa, 0x0, 0x45da8146, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000e79000-0x1c)={0xa, 0x3, 0x7, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000000001}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ccd000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@multicast1=0xe0000001, 0x1, 0x0, 0x1, 0xffff, 0x2, 0xa0, 0x80}, {0x8, 0x5, 0x2, 0xb, 0x3f, 0x5c8e, 0x2, 0x1000}, {0xa78, 0x7f, 0xfffffffffffffff9, 0xec5f}, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x1, 0x0, 0x0, 0x5, 0x8}}, 0xe8) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000380000-0x38)={&(0x7f00009dd000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00002cf000-0x10)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3, "", []}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x81) 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10002000000011, 0x8000000080003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000ea0000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) connect$unix(0xffffffffffffffff, &(0x7f00008fa000-0x8)=@abs, 0x8) bind$packet(r1, &(0x7f00008b7000-0x14)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @empty}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x301}) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000000a, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000864000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_data=&(0x7f0000247000-0x20)="000000000000000000010001000000150000000700000000000000003095a901"}) 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0xe7b000)=nil, 0xe7b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000e71000)={0xa, 0x0, 0x45da8146, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000e79000-0x1c)={0xa, 0x3, 0x7, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000000001}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ccd000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@multicast1=0xe0000001, 0x1, 0x0, 0x1, 0xffff, 0x2, 0xa0, 0x80}, {0x8, 0x5, 0x2, 0xb, 0x3f, 0x5c8e, 0x2, 0x1000}, {0xa78, 0x7f, 0xfffffffffffffff9, 0xec5f}, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x1, 0x0, 0x0, 0x5, 0x8}}, 0xe8) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000380000-0x38)={&(0x7f00009dd000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00002cf000-0x10)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3, "", []}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x81) 2018/02/10 10:55:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10002000000011, 0x8000000080003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000ea0000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) connect$unix(0xffffffffffffffff, &(0x7f00008fa000-0x8)=@abs, 0x8) bind$packet(r1, &(0x7f00008b7000-0x14)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @empty}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x301}) [ 50.311290] binder: send failed reply for transaction 46, target dead 2018/02/10 10:55:26 executing program 7: mmap(&(0x7f0000000000/0xde0000)=nil, 0xde0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000ddd000)='./file0\x00', 0x80040, 0x0) r1 = open(&(0x7f0000cb0000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xffeffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000dda000-0x10), &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) open(&(0x7f0000195000-0x8)='./file0\x00', 0x20000000080047, 0x0) fcntl$setlease(r1, 0x400, 0x0) [ 50.376515] device syz4 left promiscuous mode 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xe7b000)=nil, 0xe7b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000e71000)={0xa, 0x0, 0x45da8146, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000e79000-0x1c)={0xa, 0x3, 0x7, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000000001}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ccd000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@multicast1=0xe0000001, 0x1, 0x0, 0x1, 0xffff, 0x2, 0xa0, 0x80}, {0x8, 0x5, 0x2, 0xb, 0x3f, 0x5c8e, 0x2, 0x1000}, {0xa78, 0x7f, 0xfffffffffffffff9, 0xec5f}, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x1, 0x0, 0x0, 0x5, 0x8}}, 0xe8) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000380000-0x38)={&(0x7f00009dd000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00002cf000-0x10)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3, "", []}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x81) 2018/02/10 10:55:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) poll(&(0x7f0000408000-0x30)=[], 0x0, 0x44c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x1b, 0x0, &(0x7f0000ca0000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000387000)=[@flat={0x73622a85}, @fd={0x66642a85, 0x0, 0xffffffffffffffff}], &(0x7f000000b000-0x30)=[]}}], 0x4e, 0x0, &(0x7f0000009000)}) 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0xe7b000)=nil, 0xe7b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000e71000)={0xa, 0x0, 0x45da8146, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000e79000-0x1c)={0xa, 0x3, 0x7, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000000001}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ccd000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@multicast1=0xe0000001, 0x1, 0x0, 0x1, 0xffff, 0x2, 0xa0, 0x80}, {0x8, 0x5, 0x2, 0xb, 0x3f, 0x5c8e, 0x2, 0x1000}, {0xa78, 0x7f, 0xfffffffffffffff9, 0xec5f}, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x1, 0x0, 0x0, 0x5, 0x8}}, 0xe8) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000380000-0x38)={&(0x7f00009dd000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00002cf000-0x10)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3, "", []}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x81) [ 50.412302] device syz3 left promiscuous mode [ 50.421940] binder: release 8514:8532 transaction 49 out, still active [ 50.428881] binder: send failed reply for transaction 49, target dead 2018/02/10 10:55:26 executing program 5: getrandom(&(0x7f0000dc9000), 0x0, 0x0) 2018/02/10 10:55:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000a1c000)=0x8000000000004, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000ff5000-0x4)=0x1, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0x1e000)=nil, 0x1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000018000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1b) 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0x5e1000)=nil, 0x5e1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x200000001, 0x0, &(0x7f0000016000)={0x1, &(0x7f00001e1000-0x18)=[{0x6, 0x0, 0x0, 0x7ffff7ff00000}]}) fstat(0xffffffffffffffff, &(0x7f00004e9000-0x44)) [ 50.459456] device syz4 entered promiscuous mode [ 50.465496] device syz3 entered promiscuous mode 2018/02/10 10:55:26 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x26, 0x0, 0x0, "00000707c89d"}}) 2018/02/10 10:55:26 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000b35000-0x8)={0x0, 0x0}, &(0x7f000085b000-0x4)=0xfffffe8c) setreuid(0x0, r0) 2018/02/10 10:55:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00004b8000)={0x10, 0x0, 0xffffffffffffffff, 0xffff}, 0xc) r1 = syz_open_dev$tun(&(0x7f0000516000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000fea000+0x815)=0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00004a0000)={@generic="9d7891c1b1e27d492a623232cb8fe68c", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc22207302"}) read(r0, &(0x7f0000edc000-0x2f)=""/47, 0xfffffffffffffe98) 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0xe7b000)=nil, 0xe7b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000e71000)={0xa, 0x0, 0x45da8146, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000e79000-0x1c)={0xa, 0x3, 0x7, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000000001}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ccd000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@multicast1=0xe0000001, 0x1, 0x0, 0x1, 0xffff, 0x2, 0xa0, 0x80}, {0x8, 0x5, 0x2, 0xb, 0x3f, 0x5c8e, 0x2, 0x1000}, {0xa78, 0x7f, 0xfffffffffffffff9, 0xec5f}, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x1, 0x0, 0x0, 0x5, 0x8}}, 0xe8) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000380000-0x38)={&(0x7f00009dd000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00002cf000-0x10)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3, "", []}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x81) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000012000-0x55)="240000001800030207f7fd946ff183a50a0800000086c497271d856806000700d100737e", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xe7b000)=nil, 0xe7b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000e71000)={0xa, 0x0, 0x45da8146, @dev={0xfe, 0x80, [], 0x0, 0x11}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000e79000-0x1c)={0xa, 0x3, 0x7, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000000001}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ccd000)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in=@multicast1=0xe0000001, 0x1, 0x0, 0x1, 0xffff, 0x2, 0xa0, 0x80}, {0x8, 0x5, 0x2, 0xb, 0x3f, 0x5c8e, 0x2, 0x1000}, {0xa78, 0x7f, 0xfffffffffffffff9, 0xec5f}, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x1, 0x0, 0x0, 0x5, 0x8}}, 0xe8) connect$l2tp(r1, &(0x7f00005fb000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f0000380000-0x38)={&(0x7f00009dd000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00002cf000-0x10)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3, "", []}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x81) 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000bed000-0x10)) timerfd_create(0x0, 0x0) 2018/02/10 10:55:26 executing program 7: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f00007fe000/0xc000)=nil, 0xc000, &(0x7f0000354000)) [ 50.499612] audit: type=1400 audit(1518260126.281:20): avc: denied { setopt } for pid=8544 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 50.538978] IPv4: Oversized IP packet from 127.0.0.1 [ 50.564949] binder: release 8537:8552 transaction 52 out, still active [ 50.573991] binder: send failed reply for transaction 52, target dead 2018/02/10 10:55:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000a1c000)=0x8000000000004, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000ff5000-0x4)=0x1, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) poll(&(0x7f0000408000-0x30)=[], 0x0, 0x44c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x1b, 0x0, &(0x7f0000ca0000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000387000)=[@flat={0x73622a85}, @fd={0x66642a85, 0x0, 0xffffffffffffffff}], &(0x7f000000b000-0x30)=[]}}], 0x4e, 0x0, &(0x7f0000009000)}) 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0x34000)=nil, 0x34000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f0000023000-0x4)=0x9d) ioctl$sock_FIOGETOWN(r1, 0x400454cb, &(0x7f0000001000-0x4)) 2018/02/10 10:55:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000fab000-0x4)) 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f000034d000-0x4), 0x504) 2018/02/10 10:55:26 executing program 5: r0 = inotify_init() flock(r0, 0x1) flock(r0, 0x2) 2018/02/10 10:55:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00004b8000)={0x10, 0x0, 0xffffffffffffffff, 0xffff}, 0xc) r1 = syz_open_dev$tun(&(0x7f0000516000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000fea000+0x815)=0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00004a0000)={@generic="9d7891c1b1e27d492a623232cb8fe68c", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc22207302"}) read(r0, &(0x7f0000edc000-0x2f)=""/47, 0xfffffffffffffe98) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000017000)={&(0x7f0000748000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000b68000-0x30)=@ipv4_newroute={0x30, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1}, [@RTA_MULTIPATH={0x14, 0x9, [{0x8}, {0x8}]}]}, 0x30}, 0x1}, 0x0) 2018/02/10 10:55:26 executing program 7: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/context\x00', 0x2, 0x0) write(r0, &(0x7f0000002000-0x42), 0x0) 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000890000)='/selinux/enforce\x00', 0x80081, 0x0) pwrite64(r0, &(0x7f0000a1a000), 0x0, 0x80000000) 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000262000-0x8), &(0x7f0000ddf000), 0x8) 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00008cd000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)={0xa0000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000321000)={0xbfffffffc000000d}) [ 50.699991] IPv4: Oversized IP packet from 127.0.0.1 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000fe9000), 0x8, 0x0) unshare(0x400) sync_file_range(r0, 0x0, 0x0, 0x0) 2018/02/10 10:55:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000a1c000)=0x8000000000004, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000ff5000-0x4)=0x1, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e9a000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f00001e8000)={&(0x7f000087e000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @dev}}}, 0x2e, &(0x7f0000699000-0x8)=[{&(0x7f000047f000)=""/190, 0xbe}], 0x1, &(0x7f000087b000)=""/4096, 0x1000}, 0x121) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00001cb000-0xc)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0x0) 2018/02/10 10:55:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000016000)="6664001f66d0") execveat(r0, &(0x7f0000019000-0x8)='./file0\x00', &(0x7f0000053000-0x8)=[&(0x7f0000019000-0x13)="2d1fe7f7ff5076696e657430dd"], &(0x7f00000c7000)=[], 0x0) 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000001000-0x15)=@known='system.sockprotoname\x00', &(0x7f0000dce000)=""/84, 0x54) 2018/02/10 10:55:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001af000)='./file0\x00', 0x0) mount(&(0x7f00000d1000-0x8)='./file0\x00', &(0x7f000027a000-0x8)='./file0\x00', &(0x7f0000284000-0x6)='ramfs\x00', 0x2, 0x0) open(&(0x7f00001fd000)='./file0/file0\x00', 0x8140, 0x1) execve(&(0x7f000015a000-0xe)='./file0/file0\x00', &(0x7f0000000000)=[], &(0x7f000001e000)=[&(0x7f0000000000)='ramfs\x00', &(0x7f0000104000)='(\x00']) 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0xfd6000)=nil, 0xfd6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000fd4000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$fuse(r0, &(0x7f0000534000)={0x30, 0x0, 0x0, @fuse_notify_retrieve_out}, 0x30) [ 50.737619] binder: release 8575:8595 transaction 55 out, still active [ 50.769745] binder: send failed reply for transaction 55, target dead 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000002000)='/dev/net/tun\x00', 0x0, 0x40000) fcntl$setstatus(r0, 0x4, 0x40000) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000a4d000)={0x0, 0x1}) 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000025000-0x6), 0xc) 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f000000f000-0x1c)={0x0, 0x0, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000011000-0x31)=[{0x34, 0x0, 0x0, "c1cb13bb6867ed22647cc597d25ebc603075a4d495053314a5c1b39f538a9843b5d653bdf9"}], 0x34}, 0x0) 2018/02/10 10:55:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e9a000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f00001e8000)={&(0x7f000087e000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @dev}}}, 0x2e, &(0x7f0000699000-0x8)=[{&(0x7f000047f000)=""/190, 0xbe}], 0x1, &(0x7f000087b000)=""/4096, 0x1000}, 0x121) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000002000)='/dev/net/tun\x00', 0x0, 0x40000) fcntl$setstatus(r0, 0x4, 0x40000) 2018/02/10 10:55:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001af000)='./file0\x00', 0x0) mount(&(0x7f00000d1000-0x8)='./file0\x00', &(0x7f000027a000-0x8)='./file0\x00', &(0x7f0000284000-0x6)='ramfs\x00', 0x2, 0x0) open(&(0x7f00001fd000)='./file0/file0\x00', 0x8140, 0x1) execve(&(0x7f000015a000-0xe)='./file0/file0\x00', &(0x7f0000000000)=[], &(0x7f000001e000)=[&(0x7f0000000000)='ramfs\x00', &(0x7f0000104000)='(\x00']) [ 50.797818] IPv4: Oversized IP packet from 127.0.0.1 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0xf7e000)=nil, 0xf7e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000af9000-0x8)={&(0x7f0000157000)=@dellink={0x20, 0x11, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x20}, 0x1}, 0x0) 2018/02/10 10:55:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76), 0x1}], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x54, 0x0, &(0x7f00009d5000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000a0a000-0x50)=[], &(0x7f0000711000)=[]}}}, @release={0x40046306}], 0x90, 0x0, &(0x7f0000f98000-0x22)}) modify_ldt$read_default(0x2, &(0x7f000093a000)=""/4096, 0x1000) 2018/02/10 10:55:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000a1c000)=0x8000000000004, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000ff5000-0x4)=0x1, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000002000)='/dev/net/tun\x00', 0x0, 0x40000) fcntl$setstatus(r0, 0x4, 0x40000) 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00009f6000-0x4)=0xd9, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00007d0000)=0x2fd71482) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000002000)='/dev/net/tun\x00', 0x0, 0x40000) fcntl$setstatus(r0, 0x4, 0x40000) [ 50.877312] binder: 8647:8651 got new transaction with bad transaction stack, transaction 58 has target 8647:0 [ 50.886741] IPv4: Oversized IP packet from 127.0.0.1 [ 50.904006] binder: 8647:8651 transaction failed 29201/-71, size 40-0 line 3032 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, @in=@broadcast=0xffffffff}}, 0x24d) sendmsg(r0, &(0x7f00001f1000)={&(0x7f0000843000-0x1c)=@in6={0x2, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000367000-0x80)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/10 10:55:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000060e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000cd9000), &(0x7f0000cf0000-0x4)=0x4) 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000002000)=""/161) 2018/02/10 10:55:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76), 0x1}], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x54, 0x0, &(0x7f00009d5000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000a0a000-0x50)=[], &(0x7f0000711000)=[]}}}, @release={0x40046306}], 0x90, 0x0, &(0x7f0000f98000-0x22)}) modify_ldt$read_default(0x2, &(0x7f000093a000)=""/4096, 0x1000) 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000c26000-0x160)={{{{0x2, 0xffffffffffffffff, @empty}}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}}, 0x0, 0x0, 0x0, "c4894c5ffdc2e5fdaf848a8c727e37faa506dd8e46692db30d14cfd35b211d9d49ffc036dc5bcfb55798e517c053abe15e94035a15e1320d5e472e33853c90a65787abecaf51020effb0ceb5e7263017"}, 0x160) connect$inet(r0, &(0x7f000061d000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000046a000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000012000-0x3)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000eee000-0x4)=0x8, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f000023f000-0x62)='-', 0x1) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eec000)=[], 0x0, &(0x7f00009fe000-0x51)=""/81, 0x51}, 0x40002106) 2018/02/10 10:55:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e9a000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f00001e8000)={&(0x7f000087e000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @dev}}}, 0x2e, &(0x7f0000699000-0x8)=[{&(0x7f000047f000)=""/190, 0xbe}], 0x1, &(0x7f000087b000)=""/4096, 0x1000}, 0x121) 2018/02/10 10:55:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001af000)='./file0\x00', 0x0) mount(&(0x7f00000d1000-0x8)='./file0\x00', &(0x7f000027a000-0x8)='./file0\x00', &(0x7f0000284000-0x6)='ramfs\x00', 0x2, 0x0) open(&(0x7f00001fd000)='./file0/file0\x00', 0x8140, 0x1) execve(&(0x7f000015a000-0xe)='./file0/file0\x00', &(0x7f0000000000)=[], &(0x7f000001e000)=[&(0x7f0000000000)='ramfs\x00', &(0x7f0000104000)='(\x00']) [ 50.925115] binder_alloc: binder_alloc_mmap_handler: 8647 20000000-20002000 already mapped failed -16 [ 50.938512] binder: BINDER_SET_CONTEXT_MGR already set [ 50.944469] binder: 8647:8651 ioctl 40046207 0 returned -16 [ 50.944518] binder_alloc: 8647: binder_alloc_buf, no vma [ 50.944552] binder: 8647:8659 transaction failed 29189/-3, size 40-8 line 3128 [ 50.965283] binder: release 8647:8651 transaction 58 out, still active 2018/02/10 10:55:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001af000)='./file0\x00', 0x0) mount(&(0x7f00000d1000-0x8)='./file0\x00', &(0x7f000027a000-0x8)='./file0\x00', &(0x7f0000284000-0x6)='ramfs\x00', 0x2, 0x0) open(&(0x7f00001fd000)='./file0/file0\x00', 0x8140, 0x1) execve(&(0x7f000015a000-0xe)='./file0/file0\x00', &(0x7f0000000000)=[], &(0x7f000001e000)=[&(0x7f0000000000)='ramfs\x00', &(0x7f0000104000)='(\x00']) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, @in=@broadcast=0xffffffff}}, 0x24d) sendmsg(r0, &(0x7f00001f1000)={&(0x7f0000843000-0x1c)=@in6={0x2, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000367000-0x80)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/10 10:55:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003de000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000eb6000-0x14)={0xffffffffffffffff}) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, @in=@broadcast=0xffffffff}}, 0x24d) sendmsg(r0, &(0x7f00001f1000)={&(0x7f0000843000-0x1c)=@in6={0x2, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000367000-0x80)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) [ 50.987019] binder: send failed reply for transaction 58, target dead [ 51.001806] binder: 8676:8679 got new transaction with bad transaction stack, transaction 64 has target 8676:0 [ 51.014813] binder: 8676:8679 transaction failed 29201/-71, size 40-0 line 3032 2018/02/10 10:55:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e9a000-0x10)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa1000-0x1), 0xffffffffffffffbb, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f00001e8000)={&(0x7f000087e000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @dev}}}, 0x2e, &(0x7f0000699000-0x8)=[{&(0x7f000047f000)=""/190, 0xbe}], 0x1, &(0x7f000087b000)=""/4096, 0x1000}, 0x121) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000ee3000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000591000)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f00002c0000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000e32000)='/') 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000c26000-0x160)={{{{0x2, 0xffffffffffffffff, @empty}}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}}, 0x0, 0x0, 0x0, "c4894c5ffdc2e5fdaf848a8c727e37faa506dd8e46692db30d14cfd35b211d9d49ffc036dc5bcfb55798e517c053abe15e94035a15e1320d5e472e33853c90a65787abecaf51020effb0ceb5e7263017"}, 0x160) connect$inet(r0, &(0x7f000061d000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, @in=@broadcast=0xffffffff}}, 0x24d) sendmsg(r0, &(0x7f00001f1000)={&(0x7f0000843000-0x1c)=@in6={0x2, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000367000-0x80)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/10 10:55:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76), 0x1}], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x54, 0x0, &(0x7f00009d5000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000a0a000-0x50)=[], &(0x7f0000711000)=[]}}}, @release={0x40046306}], 0x90, 0x0, &(0x7f0000f98000-0x22)}) modify_ldt$read_default(0x2, &(0x7f000093a000)=""/4096, 0x1000) 2018/02/10 10:55:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000fe2000)='net/dev_snmp6\x00') getdents64(r0, &(0x7f0000001000-0x1000)=""/1024, 0x400) 2018/02/10 10:55:26 executing program 1: stat(&(0x7f0000a21000)='./file0\x00', &(0x7f00000a3000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000088b000)='net/dev_snmp6\x00') lseek(r0, 0x19, 0x0) getdents(r0, &(0x7f00003bd000)=""/48, 0x19) 2018/02/10 10:55:26 executing program 6: mmap(&(0x7f0000000000/0xfcd000)=nil, 0xfcd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000fc2000)='./file0\x00', 0x141046, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000fc2000)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000fcc000)=[{{}, 0x0, 0x8}], 0xffffffc2) sendfile(r1, r0, 0x0, 0x72439a6b) 2018/02/10 10:55:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000668000-0x60)={0x20000000, 0x0, 0x2, @thr={&(0x7f0000732000), &(0x7f0000c9d000-0x37)}}) [ 51.040591] binder: release 8676:8679 transaction 64 out, still active [ 51.068588] binder: send failed reply for transaction 64, target dead 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000c26000-0x160)={{{{0x2, 0xffffffffffffffff, @empty}}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}}, 0x0, 0x0, 0x0, "c4894c5ffdc2e5fdaf848a8c727e37faa506dd8e46692db30d14cfd35b211d9d49ffc036dc5bcfb55798e517c053abe15e94035a15e1320d5e472e33853c90a65787abecaf51020effb0ceb5e7263017"}, 0x160) connect$inet(r0, &(0x7f000061d000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 10:55:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000032a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000d7e000-0x32)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0) sendfile(r0, r1, &(0x7f000000a000), 0x0) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000866000), 0x4) 2018/02/10 10:55:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000668000-0x60)={0x20000000, 0x0, 0x2, @thr={&(0x7f0000732000), &(0x7f0000c9d000-0x37)}}) 2018/02/10 10:55:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000004d000)='./file0\x00', &(0x7f0000d97000)='tmpfs\x00', 0x0, &(0x7f0000798000)) 2018/02/10 10:55:26 executing program 1: stat(&(0x7f0000a21000)='./file0\x00', &(0x7f00000a3000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) 2018/02/10 10:55:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00008f7000-0x7)='mounts\x00') mount(&(0x7f0000833000)='./file0\x00', &(0x7f0000972000)='.', &(0x7f0000e63000)='ramfs\x00', 0x0, &(0x7f0000caa000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) [ 51.114123] binder: 8702:8705 got new transaction with bad transaction stack, transaction 69 has target 8702:0 2018/02/10 10:55:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000668000-0x60)={0x20000000, 0x0, 0x2, @thr={&(0x7f0000732000), &(0x7f0000c9d000-0x37)}}) 2018/02/10 10:55:26 executing program 3: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000007000-0x4)=0x6, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000004000-0x87)={0x0, 0x5a, "05d48581b12538cd8c5c026f96353eeb04ad21e969918aeca5a158c7d2f8f7eddc8ee86e7d1538896f81e733219807af3b1ab227cf6fa4fc92a285590a7091e469b005a9d9b8265a23f1abde34123603f80ce5c69ef4a4490881"}, &(0x7f000000a000-0x4)=0x62) sendto$inet6(r0, &(0x7f0000004000-0x27), 0xffffffffffffffea, 0x0, &(0x7f0000006000-0x1c)={0xa, 0xffffffffffffffff, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x16) 2018/02/10 10:55:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000c26000-0x160)={{{{0x2, 0xffffffffffffffff, @empty}}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}}, 0x0, 0x0, 0x0, "c4894c5ffdc2e5fdaf848a8c727e37faa506dd8e46692db30d14cfd35b211d9d49ffc036dc5bcfb55798e517c053abe15e94035a15e1320d5e472e33853c90a65787abecaf51020effb0ceb5e7263017"}, 0x160) connect$inet(r0, &(0x7f000061d000-0x10)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/10 10:55:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76), 0x1}], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x54, 0x0, &(0x7f00009d5000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000a0a000-0x50)=[], &(0x7f0000711000)=[]}}}, @release={0x40046306}], 0x90, 0x0, &(0x7f0000f98000-0x22)}) modify_ldt$read_default(0x2, &(0x7f000093a000)=""/4096, 0x1000) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00008f7000-0x7)='mounts\x00') mount(&(0x7f0000833000)='./file0\x00', &(0x7f0000972000)='.', &(0x7f0000e63000)='ramfs\x00', 0x0, &(0x7f0000caa000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001000)={0x0, @in={{0x2, 0xffffffffffffffff, @loopback=0x7f000001}}}, &(0x7f0000001000-0x4)=0x8c) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000001000)) 2018/02/10 10:55:27 executing program 1: stat(&(0x7f0000a21000)='./file0\x00', &(0x7f00000a3000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) [ 51.175931] binder: 8702:8705 transaction failed 29201/-71, size 40-0 line 3032 [ 51.186877] binder: release 8702:8705 transaction 69 out, still active [ 51.194292] binder: send failed reply for transaction 69, target dead [ 51.228714] binder: 8746:8747 got new transaction with bad transaction stack, transaction 74 has target 8746:0 [ 51.244408] binder: 8746:8747 transaction failed 29201/-71, size 40-0 line 3032 2018/02/10 10:55:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000efa000)='/selinux/policy\x00', 0x0, 0x0) mmap$binder(&(0x7f0000886000/0x4000)=nil, 0x4000, 0x1000007, 0xc052, r0, 0x0) 2018/02/10 10:55:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000032a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000d7e000-0x32)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0) sendfile(r0, r1, &(0x7f000000a000), 0x0) 2018/02/10 10:55:27 executing program 1: stat(&(0x7f0000a21000)='./file0\x00', &(0x7f00000a3000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) 2018/02/10 10:55:27 executing program 3: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x400454d1, &(0x7f0000025000)) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000625000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000993000-0x9)='loginuid\x00') writev(r1, &(0x7f0000ba9000-0x10)=[{&(0x7f00007bf000-0xf7)='+', 0x1}], 0x1) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00008f7000-0x7)='mounts\x00') mount(&(0x7f0000833000)='./file0\x00', &(0x7f0000972000)='.', &(0x7f0000e63000)='ramfs\x00', 0x0, &(0x7f0000caa000)) umount2(&(0x7f0000d5c000-0x1)='.', 0x0) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000036e000-0x1c)={&(0x7f00007fc000)={0x10}, 0xc, &(0x7f0000e82000)={&(0x7f0000772000)=@setlink={0x20, 0x13, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x20}, 0x1}, 0x0) 2018/02/10 10:55:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000668000-0x60)={0x20000000, 0x0, 0x2, @thr={&(0x7f0000732000), &(0x7f0000c9d000-0x37)}}) 2018/02/10 10:55:27 executing program 2: mmap(&(0x7f0000000000/0xd18000)=nil, 0xd18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000d10000-0x4)=0x200004000000804, 0x4) [ 51.274577] binder: release 8746:8747 transaction 74 out, still active [ 51.281641] binder: send failed reply for transaction 74, target dead 2018/02/10 10:55:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e70000-0x30)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @connect}], 0x30) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000625000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000993000-0x9)='loginuid\x00') writev(r1, &(0x7f0000ba9000-0x10)=[{&(0x7f00007bf000-0xf7)='+', 0x1}], 0x1) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000-0x10)={0x2, &(0x7f0000443000-0x18)=[{0x25}, {0x6}]}, 0x10) writev(r1, &(0x7f00000a6000)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/10 10:55:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fstat(r0, &(0x7f0000001000-0x44)) 2018/02/10 10:55:27 executing program 3: unshare(0x20000400) r0 = timerfd_create(0x0, 0x0) fchown(r0, 0x0, 0x0) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000092a000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x80045104, &(0x7f0000001000-0x1)) 2018/02/10 10:55:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000032a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000d7e000-0x32)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0) sendfile(r0, r1, &(0x7f000000a000), 0x0) [ 51.356877] binder: binder_mmap: 8757 20886000-2088a000 bad vm_flags failed -1 2018/02/10 10:55:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000efa000)='/selinux/policy\x00', 0x0, 0x0) mmap$binder(&(0x7f0000886000/0x4000)=nil, 0x4000, 0x1000007, 0xc052, r0, 0x0) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000625000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000993000-0x9)='loginuid\x00') writev(r1, &(0x7f0000ba9000-0x10)=[{&(0x7f00007bf000-0xf7)='+', 0x1}], 0x1) 2018/02/10 10:55:27 executing program 1: mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000016000-0xbf), 0x0, 0x0, &(0x7f0000015000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000018000)=0xb4, 0x4) recvfrom$packet(r0, &(0x7f0000026000-0x1000)=""/4096, 0x1000, 0x1000000002000, &(0x7f0000026000-0x14)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) 2018/02/10 10:55:27 executing program 2: mmap(&(0x7f0000053000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000054000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000001000-0x50)) 2018/02/10 10:55:27 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f000002e000)=""/66, &(0x7f0000000000)=0x42) 2018/02/10 10:55:27 executing program 4: futex(&(0x7f0000004000), 0x4000000400000085, 0x0, &(0x7f00003fa000), &(0x7f0000004000), 0x0) 2018/02/10 10:55:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000032a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000d7e000-0x32)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0) sendfile(r0, r1, &(0x7f000000a000), 0x0) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ec000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc2000-0x20)) execve(&(0x7f0000ec2000-0x8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid}, &(0x7f0000a71000)) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00001e8000)) fcntl$setstatus(r1, 0x4, 0x42c00) timer_create(0x1, &(0x7f0000abe000-0x60)={0x0, 0x1e, 0x0, @tid}, &(0x7f0000db4000-0x4)=0x0) timer_gettime(r2, &(0x7f0000964000)) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004cf000-0x5)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4e000-0x10), &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006ce000-0x2e)=""/46, &(0x7f0000431000-0x4)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e1000-0x10)={0x0, 0x7530}, 0x8) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000001000-0x4)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa1000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e78000-0x1), 0x0, 0x20000008, &(0x7f00008d5000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000162000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5b000-0x70)=[{&(0x7f0000de3000-0xe7)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf4", 0x76}], 0x1, &(0x7f00009ef000)=[]}], 0x1, 0x1) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000efa000)='/selinux/policy\x00', 0x0, 0x0) mmap$binder(&(0x7f0000886000/0x4000)=nil, 0x4000, 0x1000007, 0xc052, r0, 0x0) 2018/02/10 10:55:27 executing program 2: mmap(&(0x7f0000000000/0x2d000)=nil, 0x2d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x100000000008b32, &(0x7f000002c000)={@syzn={0x73, 0x79, 0x7a}, @ifru_data=&(0x7f000002c000)="3b6eef223a7c5cccbb6b7dfa926ad86192256a66ae8615161013db6d5dbe8922"}) 2018/02/10 10:55:27 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000701000)={0xf97cff8c, 0x8, 'SE Linux'}, 0x10) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000625000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000993000-0x9)='loginuid\x00') writev(r1, &(0x7f0000ba9000-0x10)=[{&(0x7f00007bf000-0xf7)='+', 0x1}], 0x1) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000efa000)='/selinux/policy\x00', 0x0, 0x0) mmap$binder(&(0x7f0000886000/0x4000)=nil, 0x4000, 0x1000007, 0xc052, r0, 0x0) 2018/02/10 10:55:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000efa000)='/selinux/policy\x00', 0x0, 0x0) mmap$binder(&(0x7f0000886000/0x4000)=nil, 0x4000, 0x1000007, 0xc052, r0, 0x0) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000bd7000)="240000001a0025f0006bb404feff001c020b49ff6e10b500000700eb0800030001000000", 0x24) 2018/02/10 10:55:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000fd6000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x15}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000de3000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000dec000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000a4c000), 0x0, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) 2018/02/10 10:55:27 executing program 5: mmap(&(0x7f0000000000/0xf84000)=nil, 0xf84000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f7c000)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f81000), 0xfffffffffffffcc2, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0x44f, 0x23fffd, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000f81000-0x4)) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000a64000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) getsockname(0xffffffffffffffff, &(0x7f00005db000-0x3a)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @mcast2}}}, &(0x7f0000634000-0x4)=0x3a) connect$inet(r0, &(0x7f000005f000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) getsockopt$inet_opts(r0, 0x0, 0x20000000050, &(0x7f0000791000-0x10)=""/16, &(0x7f00004d1000)=0x10) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000efa000)='/selinux/policy\x00', 0x0, 0x0) mmap$binder(&(0x7f0000886000/0x4000)=nil, 0x4000, 0x1000007, 0xc052, r0, 0x0) 2018/02/10 10:55:27 executing program 1: mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000016000-0xbf), 0x0, 0x0, &(0x7f0000015000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000018000)=0xb4, 0x4) recvfrom$packet(r0, &(0x7f0000026000-0x1000)=""/4096, 0x1000, 0x1000000002000, &(0x7f0000026000-0x14)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) 2018/02/10 10:55:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8bf3, &(0x7f00005a6000)={@common='tunl0\x00', @ifru_data=&(0x7f00001d3000-0x20)="bd9c77f67d36bc72ee91099ec8444dab7bae34f4e3ecd8f1db5c6181a2f7c879"}) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00001e1000-0x4)=0x3ff, 0x4) connect$inet6(r0, &(0x7f0000f03000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000074b000)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x800, 0x1}, 0x20) 2018/02/10 10:55:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000772000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) poll(&(0x7f0000240000-0x40)=[{r0}], 0x1, 0x0) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000b6e000-0x10)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000702000-0x4a)={'system_u:object_r:framebuf_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x38, 0x35}, 0x48) 2018/02/10 10:55:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000efa000)='/selinux/policy\x00', 0x0, 0x0) mmap$binder(&(0x7f0000886000/0x4000)=nil, 0x4000, 0x1000007, 0xc052, r0, 0x0) 2018/02/10 10:55:27 executing program 3: mmap(&(0x7f0000000000/0xf8c000)=nil, 0xf8c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f8b000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000f8a000)=@ethtool_rx_ntuple={0x35, {0x0, @usr_ip4_spec={@dev={0xac, 0x14}, @loopback=0x7f000001, 0x0, 0x0, 0x1}, @tcp_ip4_spec={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000bd7000)="240000001a0025f0006bb404feff001c020b49ff6e10b500000700eb0800030001000000", 0x24) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00001e1000-0x4)=0x3ff, 0x4) connect$inet6(r0, &(0x7f0000f03000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000074b000)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x800, 0x1}, 0x20) 2018/02/10 10:55:27 executing program 1: mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000016000-0xbf), 0x0, 0x0, &(0x7f0000015000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000018000)=0xb4, 0x4) recvfrom$packet(r0, &(0x7f0000026000-0x1000)=""/4096, 0x1000, 0x1000000002000, &(0x7f0000026000-0x14)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) 2018/02/10 10:55:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000fd6000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x15}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000de3000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000dec000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000a4c000), 0x0, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000bd7000)="240000001a0025f0006bb404feff001c020b49ff6e10b500000700eb0800030001000000", 0x24) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00001e1000-0x4)=0x3ff, 0x4) connect$inet6(r0, &(0x7f0000f03000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000074b000)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x800, 0x1}, 0x20) 2018/02/10 10:55:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000fd6000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x15}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000de3000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000dec000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000a4c000), 0x0, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00001e1000-0x4)=0x3ff, 0x4) connect$inet6(r0, &(0x7f0000f03000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000074b000)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x800, 0x1}, 0x20) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000bd7000)="240000001a0025f0006bb404feff001c020b49ff6e10b500000700eb0800030001000000", 0x24) 2018/02/10 10:55:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000a31000)="74756e08000000000000008000000000", 0x0) lseek(r0, 0xfffffffffffffffe, 0x1) [ 51.852883] SELinux: Invalid class 85 [ 51.855959] binder: 8854:8866 transaction failed 29189/-22, size 0-0 line 3005 [ 51.867815] binder: 8854:8869 transaction failed 29189/-22, size 0-0 line 3005 2018/02/10 10:55:27 executing program 1: mmap(&(0x7f0000000000/0x27000)=nil, 0x27000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000016000-0xbf), 0x0, 0x0, &(0x7f0000015000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000018000)=0xb4, 0x4) recvfrom$packet(r0, &(0x7f0000026000-0x1000)=""/4096, 0x1000, 0x1000000002000, &(0x7f0000026000-0x14)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fb000-0x2e)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x11}}, 0x1, 0x0, 0x1}}, 0x26) 2018/02/10 10:55:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000772000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) poll(&(0x7f0000240000-0x40)=[{r0}], 0x1, 0x0) 2018/02/10 10:55:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005fd000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000341000-0x8)='./file0\x00', &(0x7f0000ff9000-0x8)='./file0\x00', &(0x7f0000426000)='tmpfs\x00', 0x0, &(0x7f0000ece000)=',') 2018/02/10 10:55:27 executing program 0: fchdir(0xffffffffffffffff) [ 51.908092] binder: undelivered TRANSACTION_ERROR: 29189 [ 51.916132] binder: undelivered TRANSACTION_ERROR: 29189 [ 51.926089] l2tp_core: tunl 1: fd 19 wrong protocol, got 1, expected 17 2018/02/10 10:55:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000fd6000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x15}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000de3000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000dec000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000a4c000), 0x0, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) connect(r0, &(0x7f0000002000-0x80)=@generic={0x0, "9ba7877fe0dfa4e383ad3586320cbedff1c1a23bc31ae4bf0cea07838a05ad6f194e0b645e6a52f255d43416baef6c6ffa5b43286c2bf00ceecb115fdde4bfe6c5c8f164e25c5acb5748845a42d815b5dd081d445010c1cc2b947badaf5ce80aa8b1f6c01d8a0260789cd7ce1414426ce33a9b101b58ca48ba7f9ae298cf"}, 0x80) 2018/02/10 10:55:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000772000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) poll(&(0x7f0000240000-0x40)=[{r0}], 0x1, 0x0) 2018/02/10 10:55:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000e9d000)="066f47767100", 0x0) pwritev(r0, &(0x7f0000844000-0x10)=[{&(0x7f0000879000-0x7)='$', 0x1}], 0x1, 0x40000) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x200000000000001, 0x8011, r0, 0x0) ftruncate(r0, 0x20001) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0x5c000)=nil, 0x5c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x101042) dup2(r1, r0) mprotect(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0) write$sndseq(r0, &(0x7f000001a000-0x1c)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000002000)}}], 0x1c) 2018/02/10 10:55:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000705000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$TUNSETLINK(r1, 0x400454cd, &(0x7f0000760000)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f00005bc000)={&(0x7f0000508000)={0x10}, 0xc, &(0x7f0000fa0000-0x10)={&(0x7f00004d5000)=@getlink={0x34, 0x12, 0xb, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @common='sit0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/02/10 10:55:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000198000)={@generic="0060940200000000000030000010bd5c", @ifru_addrs=@nfc={0x27}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 51.961533] l2tp_core: tunl 1: fd 19 wrong protocol, got 1, expected 17 [ 51.966020] binder: 8891:8895 transaction failed 29189/-22, size 0-0 line 3005 [ 51.968523] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00003a5000-0x4)=0x1, 0x4) bind$inet(r0, &(0x7f0000517000-0x10)={0x2, 0x1, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000589000-0x1), 0xfffffffffffffea7, 0x20020006, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/02/10 10:55:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000ffb000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5e000-0x20)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000002000-0x4e)=""/1, 0x1}], 0x1) mmap$binder(&(0x7f0000139000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000aa8000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) stat(&(0x7f00008fe000)='./file0\x00', &(0x7f0000153000)) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f000000d000)=0x4, 0x4) bind$inet(r0, &(0x7f0000022000-0x10)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) 2018/02/10 10:55:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000772000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) poll(&(0x7f0000240000-0x40)=[{r0}], 0x1, 0x0) 2018/02/10 10:55:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00007b6000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80247008) 2018/02/10 10:55:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00001f9000-0x8)={0x0, 0x8000}, 0xfffffffffffffd9b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000cc8000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f000086f000)=0x1, 0x4) close(r0) [ 52.001864] binder: 8900:8902 transaction failed 29189/-22, size 0-0 line 3005 [ 52.028700] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000e22000-0x20)={0xfffffffff8000001}, &(0x7f00002b9000), 0x8, &(0x7f0000329000)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00002dd000)='comm\x00') 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000f38000-0x9)='/dev/sg#\x00', 0x0, 0x8002) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000646000-0x1)=0x3) 2018/02/10 10:55:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023b000-0x18)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x3fffffffffffffc3, [@multicast2=0xe0000002]}, 0x14) 2018/02/10 10:55:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000e22000-0x20)={0xfffffffff8000001}, &(0x7f00002b9000), 0x8, &(0x7f0000329000)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00002dd000)='comm\x00') 2018/02/10 10:55:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000842000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000c20000)={{&(0x7f0000068000/0x800000)=nil, 0x7fffdff97000}}) 2018/02/10 10:55:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f77000-0xc)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000ff8000-0x79)=""/121, 0x79, 0x0, &(0x7f0000734000)) [ 52.062796] binder: 8925:8927 transaction failed 29189/-22, size 0-0 line 3005 [ 52.082022] binder: undelivered TRANSACTION_ERROR: 29189 [ 52.099283] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 52.145391] device gre0 entered promiscuous mode 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000198000)={@generic="0060940200000000000030000010bd5c", @ifru_addrs=@nfc={0x27}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000005000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000001000-0x4), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000110000-0x10), &(0x7f0000455000-0x4), 0x401ffffffc) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000001000-0x4)=0x24) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000006000)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@generic={0x88ca, "f23af049de674c1e69bdab7102f4b8cf"}}}, &(0x7f0000006000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 10:55:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000018000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f000003e000-0xa)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000009000-0xa)='./control\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000a97000-0xa)='./control\x00', 0x0, 0x0, 0x0) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000e22000-0x20)={0xfffffffff8000001}, &(0x7f00002b9000), 0x8, &(0x7f0000329000)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00002dd000)='comm\x00') 2018/02/10 10:55:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in=@loopback=0x7f000001}}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0xe8) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000e22000-0x20)={0xfffffffff8000001}, &(0x7f00002b9000), 0x8, &(0x7f0000329000)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00002dd000)='comm\x00') 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f000001c000-0x84)="260000002a0047d2ff0800000000000000010000010000000000000004000000000000000021", 0x26) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0x35000)=nil, 0x35000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f000002e000)={'filter\x00', 0x7, 0x4, 0x3dc, 0xe4, 0x1e8, 0xe4, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f000002f000-0x40), {[{{@uncond, 0x7b, 0xe4}, @unspec=@STANDARD={0x24}}, {{@uncond, 0xc0, 0x104}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @dev={0xac, 0x14}, @rand_addr}}}, {{@arp={@rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @empty, {}, @mac=@random="1a8431d816ae", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @generic="8f9d0fc307c9e69efc698d0663f02ab5", @generic="ffd6c38b31c7666e1cc56a50b16c79c4"}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}], {{[], 0xc0, 0xe4}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4380cc73b0fc7ef0) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe6000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00002fd000-0x4)) 2018/02/10 10:55:28 executing program 5: prctl$intptr(0x26, 0x0) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000adf000-0x8)=[{&(0x7f0000d31000)="29000000200019fb01440010000000060200001615de00f1ffffff040d001000000000000005000008", 0x29}], 0x1) 2018/02/10 10:55:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a01000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00009c5000)='/selinux/mls\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f00001bf000-0x1c)={&(0x7f0000cfb000-0x8)=@abs, 0x8, &(0x7f0000eb7000-0x8)=[], 0x0, &(0x7f0000e3a000-0xfc)=[@rights={0x10, 0x1, 0x1, [r3]}, @rights={0x10, 0x1, 0x1, [r2]}, @cred={0x18, 0x1, 0x2, r0}, @cred={0x18, 0x1, 0x2, r0}], 0x50}, 0x0) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) bind(r0, &(0x7f0000017000)=@sco={0x1f}, 0x8) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000198000)={@generic="0060940200000000000030000010bd5c", @ifru_addrs=@nfc={0x27}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0, 0x67}}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0xe8) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) dup3(r0, r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000fc6000-0x40)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000ebd000-0x5b), 0x0, 0x0, &(0x7f00000dd000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/10 10:55:28 executing program 5: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00001e5000)=""/192, &(0x7f00002ef000)=0xc0) 2018/02/10 10:55:28 executing program 4: rt_sigaction(0x0, &(0x7f0000cac000-0x20), 0x0, 0xfffffffffffffcb7, &(0x7f0000fed000)) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0x35000)=nil, 0x35000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f000002e000)={'filter\x00', 0x7, 0x4, 0x3dc, 0xe4, 0x1e8, 0xe4, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f000002f000-0x40), {[{{@uncond, 0x7b, 0xe4}, @unspec=@STANDARD={0x24}}, {{@uncond, 0xc0, 0x104}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @dev={0xac, 0x14}, @rand_addr}}}, {{@arp={@rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @empty, {}, @mac=@random="1a8431d816ae", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @generic="8f9d0fc307c9e69efc698d0663f02ab5", @generic="ffd6c38b31c7666e1cc56a50b16c79c4"}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}], {{[], 0xc0, 0xe4}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4380cc73b0fc7ef0) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000026000-0x4)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000ccc000)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000adf000-0x8)=[{&(0x7f0000d31000)="29000000200019fb01440010000000060200001615de00f1ffffff040d001000000000000005000008", 0x29}], 0x1) 2018/02/10 10:55:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000006000-0x42)) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0x35000)=nil, 0x35000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f000002e000)={'filter\x00', 0x7, 0x4, 0x3dc, 0xe4, 0x1e8, 0xe4, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f000002f000-0x40), {[{{@uncond, 0x7b, 0xe4}, @unspec=@STANDARD={0x24}}, {{@uncond, 0xc0, 0x104}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @dev={0xac, 0x14}, @rand_addr}}}, {{@arp={@rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @empty, {}, @mac=@random="1a8431d816ae", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @generic="8f9d0fc307c9e69efc698d0663f02ab5", @generic="ffd6c38b31c7666e1cc56a50b16c79c4"}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}], {{[], 0xc0, 0xe4}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4380cc73b0fc7ef0) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0, 0x67}}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0xe8) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) dup3(r0, r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000fc6000-0x40)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000ebd000-0x5b), 0x0, 0x0, &(0x7f00000dd000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/10 10:55:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c71000-0xb)='/dev/hwrng\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000b67000), 0x8) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000781000-0x8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000b9c000-0x10)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1000000000000047) timer_create(0x7, &(0x7f0000cf9000-0x58)={0x0, 0x19, 0x0, @thr={&(0x7f0000915000), &(0x7f0000b70000)}}, &(0x7f000004d000-0x4)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004b000-0x20)) kexec_load(0x0, 0x0, &(0x7f0000d72000)=[], 0x0) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000125000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000198000)={@generic="0060940200000000000030000010bd5c", @ifru_addrs=@nfc={0x27}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000017000-0x8)={0x3, &(0x7f0000003000-0x18)=[{0x15, 0x101, 0x0, 0xd24}, {}, {0x6}]}, 0x8) writev(r1, &(0x7f0000009000)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000adf000-0x8)=[{&(0x7f0000d31000)="29000000200019fb01440010000000060200001615de00f1ffffff040d001000000000000005000008", 0x29}], 0x1) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0x35000)=nil, 0x35000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f000002e000)={'filter\x00', 0x7, 0x4, 0x3dc, 0xe4, 0x1e8, 0xe4, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f000002f000-0x40), {[{{@uncond, 0x7b, 0xe4}, @unspec=@STANDARD={0x24}}, {{@uncond, 0xc0, 0x104}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @dev={0xac, 0x14}, @rand_addr}}}, {{@arp={@rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @empty, {}, @mac=@random="1a8431d816ae", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @generic="8f9d0fc307c9e69efc698d0663f02ab5", @generic="ffd6c38b31c7666e1cc56a50b16c79c4"}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}], {{[], 0xc0, 0xe4}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4380cc73b0fc7ef0) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000adf000-0x8)=[{&(0x7f0000d31000)="29000000200019fb01440010000000060200001615de00f1ffffff040d001000000000000005000008", 0x29}], 0x1) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0, 0x67}}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0xe8) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) dup3(r0, r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000fc6000-0x40)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000ebd000-0x5b), 0x0, 0x0, &(0x7f00000dd000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/10 10:55:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000937000+0x248)={0x0, 0x4}, 0x4) sendto$inet(r1, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/10 10:55:28 executing program 0: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001a00030407fffd946fa283bc0aeee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000781000-0x8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000b9c000-0x10)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1000000000000047) timer_create(0x7, &(0x7f0000cf9000-0x58)={0x0, 0x19, 0x0, @thr={&(0x7f0000915000), &(0x7f0000b70000)}}, &(0x7f000004d000-0x4)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004b000-0x20)) kexec_load(0x0, 0x0, &(0x7f0000d72000)=[], 0x0) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000781000-0x8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000b9c000-0x10)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1000000000000047) timer_create(0x7, &(0x7f0000cf9000-0x58)={0x0, 0x19, 0x0, @thr={&(0x7f0000915000), &(0x7f0000b70000)}}, &(0x7f000004d000-0x4)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004b000-0x20)) kexec_load(0x0, 0x0, &(0x7f0000d72000)=[], 0x0) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0x12, r2, 0x0, &(0x7f0000d0d000)=""/139) 2018/02/10 10:55:28 executing program 0: prctl$intptr(0x1, 0x0) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f00007b9000), 0x0, 0x8000, &(0x7f0000174000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) close(r0) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000ef2000-0x16), 0x0, 0x78af6a4e, &(0x7f0000ff7000)={0x0, 0x1c9c380}) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f9c000)={{{@in6=@empty, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0, 0x67}}, {{@in6=@dev={0xfe, 0x80}}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0xe8) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) dup3(r0, r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000686000-0x10)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000fc6000-0x40)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000ebd000-0x5b), 0x0, 0x0, &(0x7f00000dd000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/10 10:55:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r2 = dup2(r0, r1) recvfrom(r1, &(0x7f00009c8000)=""/4096, 0x1000, 0x0, &(0x7f0000d1f000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "224f3c9f018f871b30426b9edd09509e8f8a9e7ccc62a22aa20ffcca4359e427a4e0d5b6411ab6b3c1cd4d1535e161b414fd0a2f60bdb97c82a5dd739eb4d3"}, 0x60) writev(r2, &(0x7f0000e65000-0x40)=[{&(0x7f00007b6000)='.', 0x1}], 0x1) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000e000-0x12)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) poll(&(0x7f000058c000-0x40)=[{r1}], 0x1, 0x0) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0x12, r2, 0x0, &(0x7f0000d0d000)=""/139) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f00007b9000), 0x0, 0x8000, &(0x7f0000174000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) close(r0) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000781000-0x8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000b9c000-0x10)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1000000000000047) timer_create(0x7, &(0x7f0000cf9000-0x58)={0x0, 0x19, 0x0, @thr={&(0x7f0000915000), &(0x7f0000b70000)}}, &(0x7f000004d000-0x4)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004b000-0x20)) kexec_load(0x0, 0x0, &(0x7f0000d72000)=[], 0x0) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000781000-0x8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000b9c000-0x10)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1000000000000047) timer_create(0x7, &(0x7f0000cf9000-0x58)={0x0, 0x19, 0x0, @thr={&(0x7f0000915000), &(0x7f0000b70000)}}, &(0x7f000004d000-0x4)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004b000-0x20)) kexec_load(0x0, 0x0, &(0x7f0000d72000)=[], 0x0) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0x12, r2, 0x0, &(0x7f0000d0d000)=""/139) 2018/02/10 10:55:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000937000+0x248)={0x0, 0x4}, 0x4) sendto$inet(r1, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f00007b9000), 0x0, 0x8000, &(0x7f0000174000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) close(r0) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0x12, r2, 0x0, &(0x7f0000d0d000)=""/139) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000781000-0x8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000b9c000-0x10)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1000000000000047) timer_create(0x7, &(0x7f0000cf9000-0x58)={0x0, 0x19, 0x0, @thr={&(0x7f0000915000), &(0x7f0000b70000)}}, &(0x7f000004d000-0x4)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004b000-0x20)) kexec_load(0x0, 0x0, &(0x7f0000d72000)=[], 0x0) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0x12, r2, 0x0, &(0x7f0000d0d000)=""/139) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000bdb000)='./file0\x00', &(0x7f00002de000)='./bus\x00', &(0x7f0000c90000)='tmpfs\x00', 0x0, &(0x7f0000aa7000-0x81)="8d") 2018/02/10 10:55:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r2 = dup2(r0, r1) recvfrom(r1, &(0x7f00009c8000)=""/4096, 0x1000, 0x0, &(0x7f0000d1f000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "224f3c9f018f871b30426b9edd09509e8f8a9e7ccc62a22aa20ffcca4359e427a4e0d5b6411ab6b3c1cd4d1535e161b414fd0a2f60bdb97c82a5dd739eb4d3"}, 0x60) writev(r2, &(0x7f0000e65000-0x40)=[{&(0x7f00007b6000)='.', 0x1}], 0x1) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0x12, r2, 0x0, &(0x7f0000d0d000)=""/139) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0x12, r2, 0x0, &(0x7f0000d0d000)=""/139) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f00007b9000), 0x0, 0x8000, &(0x7f0000174000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) close(r0) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0x12, r2, 0x0, &(0x7f0000d0d000)=""/139) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='setgroups\x00') sendfile(r0, r0, &(0x7f00003a7000), 0x400000ff) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xfee000)=nil, 0xfee000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001000-0x8)='./file0\x00', 0x0) listxattr(&(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000001000), 0x0) [ 52.673153] tmpfs: No value for mount option '' [ 52.689491] tmpfs: No value for mount option '' 2018/02/10 10:55:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000937000+0x248)={0x0, 0x4}, 0x4) sendto$inet(r1, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0x12, r2, 0x0, &(0x7f0000d0d000)=""/139) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000762000-0x8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0x12, r2, 0x0, &(0x7f0000d0d000)=""/139) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000f83000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000f8f000-0x8)='./file0\x00', &(0x7f0000f83000)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x4000000000080003, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000135000-0x38)={&(0x7f00001a4000)=@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000568000)=[], 0x2, &(0x7f00003e2000)=[], 0x4c}, 0x0) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000531000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dce000-0x10)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b38000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) ioctl$TCSBRK(r0, 0x5409, 0x0) poll(&(0x7f0000053000)=[{r3}], 0x1, 0x1000) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x16) 2018/02/10 10:55:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r2 = dup2(r0, r1) recvfrom(r1, &(0x7f00009c8000)=""/4096, 0x1000, 0x0, &(0x7f0000d1f000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "224f3c9f018f871b30426b9edd09509e8f8a9e7ccc62a22aa20ffcca4359e427a4e0d5b6411ab6b3c1cd4d1535e161b414fd0a2f60bdb97c82a5dd739eb4d3"}, 0x60) writev(r2, &(0x7f0000e65000-0x40)=[{&(0x7f00007b6000)='.', 0x1}], 0x1) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xf92000)=nil, 0xf92000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x10000000000028, &(0x7f0000487000)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast2=0xe0000002}, 0xc) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000f54000)=[{&(0x7f0000d41000-0x59)="580000001400192300a14b80040d00090a0600000000e076000543d818fe5800000004ca816464858900ff0028635a0004fbf510000200000000000000100401fcffffffffffff000d000100040508000000ec6b0f530306", 0x58}], 0x1) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f00009bb000-0xb)='asymmetric\x00', &(0x7f000003b000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000ada000-0x7)=',ppp1!\x00', 0xfffffffffffffffe) r1 = add_key(&(0x7f000039b000)='id_legacy\x00', &(0x7f000058d000)={0x73, 0x79, 0x7a}, &(0x7f00001a7000), 0x0, r0) keyctl$read(0xb, r1, &(0x7f000023d000), 0x0) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xf16000)=nil, 0xf16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000c50000)={0x3, &(0x7f0000f14000-0x20)=[{0x2, 0x0, 0x0, 0x4}, {0x60, 0x0, 0x0, 0x4}, {0x6}]}, 0x10) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00006bb000-0x4)=0x20, 0x4) connect$inet6(r0, &(0x7f0000d15000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/10 10:55:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000937000+0x248)={0x0, 0x4}, 0x4) sendto$inet(r1, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/10 10:55:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d94000-0xa)=@abs, 0x8) r2 = dup2(r0, r1) recvfrom(r1, &(0x7f00009c8000)=""/4096, 0x1000, 0x0, &(0x7f0000d1f000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "224f3c9f018f871b30426b9edd09509e8f8a9e7ccc62a22aa20ffcca4359e427a4e0d5b6411ab6b3c1cd4d1535e161b414fd0a2f60bdb97c82a5dd739eb4d3"}, 0x60) writev(r2, &(0x7f0000e65000-0x40)=[{&(0x7f00007b6000)='.', 0x1}], 0x1) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000531000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dce000-0x10)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b38000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) ioctl$TCSBRK(r0, 0x5409, 0x0) poll(&(0x7f0000053000)=[{r3}], 0x1, 0x1000) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x16) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000e57000-0x16)={@syzn={0x73, 0x79, 0x7a}, @ifru_mtu}) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c2f000-0x4)=',\\', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f0000cbd000)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000-0x38)={&(0x7f0000014000)={0x10}, 0xc, &(0x7f0000015000)={&(0x7f0000017000-0x6e8)={0x24, 0x2000002c, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x10, 0x0, [@typed={0xc, 0x0, @pid}]}]}, 0x24}, 0x1}, 0x0) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000f54000)=[{&(0x7f0000d41000-0x59)="580000001400192300a14b80040d00090a0600000000e076000543d818fe5800000004ca816464858900ff0028635a0004fbf510000200000000000000100401fcffffffffffff000d000100040508000000ec6b0f530306", 0x58}], 0x1) 2018/02/10 10:55:28 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000073000-0x12)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000058000-0x60)=[{{}, 0x0, 0x2000000000002}, {{0x77359400}}], 0x30) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000735000-0x4)=0x1) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000-0x38)={&(0x7f0000014000)={0x10}, 0xc, &(0x7f0000015000)={&(0x7f0000017000-0x6e8)={0x24, 0x2000002c, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x10, 0x0, [@typed={0xc, 0x0, @pid}]}]}, 0x24}, 0x1}, 0x0) 2018/02/10 10:55:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000854000-0x40)=@newlink={0x40, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_ADDRESS={0xc, 0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}]}, 0x40}, 0x1}, 0x0) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000-0x38)={&(0x7f0000014000)={0x10}, 0xc, &(0x7f0000015000)={&(0x7f0000017000-0x6e8)={0x24, 0x2000002c, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x10, 0x0, [@typed={0xc, 0x0, @pid}]}]}, 0x24}, 0x1}, 0x0) 2018/02/10 10:55:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000ade000-0x4), 0x1) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000f54000)=[{&(0x7f0000d41000-0x59)="580000001400192300a14b80040d00090a0600000000e076000543d818fe5800000004ca816464858900ff0028635a0004fbf510000200000000000000100401fcffffffffffff000d000100040508000000ec6b0f530306", 0x58}], 0x1) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000-0x38)={&(0x7f0000014000)={0x10}, 0xc, &(0x7f0000015000)={&(0x7f0000017000-0x6e8)={0x24, 0x2000002c, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x10, 0x0, [@typed={0xc, 0x0, @pid}]}]}, 0x24}, 0x1}, 0x0) 2018/02/10 10:55:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000455000)=[{&(0x7f0000e09000-0x39)="390000001300094700bb61e1c3050000070000000200000045000000000b800006001a000d00000043de280ff4000000fd17e9ff0000060400", 0x39}], 0x1) 2018/02/10 10:55:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000676000-0x140)=[], 0x0, 0x0, 0x0) 2018/02/10 10:55:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00007e9000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000e91000)={0x0, 0x0, &(0x7f00001cd000)=[], 0x0, &(0x7f0000298000)=[]}, 0x3ffd) 2018/02/10 10:55:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000531000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dce000-0x10)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b38000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) ioctl$TCSBRK(r0, 0x5409, 0x0) poll(&(0x7f0000053000)=[{r3}], 0x1, 0x1000) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x16) 2018/02/10 10:55:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000f54000)=[{&(0x7f0000d41000-0x59)="580000001400192300a14b80040d00090a0600000000e076000543d818fe5800000004ca816464858900ff0028635a0004fbf510000200000000000000100401fcffffffffffff000d000100040508000000ec6b0f530306", 0x58}], 0x1) 2018/02/10 10:55:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x3, &(0x7f00006c3000), &(0x7f0000f99000-0x4)=0x13) 2018/02/10 10:55:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000769000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000e90000)) close(r1) preadv(0xffffffffffffffff, &(0x7f0000fee000)=[], 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/02/10 10:55:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f000036d000)='./control/file0\x00', 0x0) rename(&(0x7f0000f18000-0x10)='./control/file0\x00', &(0x7f0000032000-0xa)='./control\x00') 2018/02/10 10:55:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fsetxattr(r0, &(0x7f000045e000)=@random={'security.\x00', '-\x00'}, &(0x7f000029b000)='-[security{!![\x00', 0xf, 0x0) 2018/02/10 10:55:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000531000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dce000-0x10)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b38000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) ioctl$TCSBRK(r0, 0x5409, 0x0) poll(&(0x7f0000053000)=[{r3}], 0x1, 0x1000) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x16) 2018/02/10 10:55:29 executing program 0: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) connect(r0, &(0x7f0000004000-0xa)=@un=@file={0x0, './file0\x00'}, 0xa) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000880000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000465000-0x8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000e24000)={0x0, r0}) recvmmsg(r2, &(0x7f0000f40000)=[{{&(0x7f0000ee4000)=@in6={0x0, 0xffffffffffffffff, 0x0, @loopback}, 0x1c, &(0x7f0000f41000-0x30)=[], 0x0, &(0x7f0000c04000)=""/184, 0xb8}}], 0x1, 0x0, &(0x7f0000f41000-0x10)={0x77359400}) r3 = dup2(r1, r2) recvfrom$inet6(r3, &(0x7f00002c3000)=""/175, 0xaf, 0x0, 0x0, 0x0) tkill(r0, 0x15) 2018/02/10 10:55:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000572000-0x1b)=""/27, 0x1b) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f00001bf000-0x4), 0x4) 2018/02/10 10:55:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000001000-0x16)="83ed00353f208d03ab09000007000000", 0x10) 2018/02/10 10:55:29 executing program 1: r0 = gettid() waitid(0x1, r0, &(0x7f0000a1e000), 0x8, &(0x7f000027d000)) 2018/02/10 10:55:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000575000-0x10)={0x1, &(0x7f00000cf000)=[{0x74, 0x0, 0x0, 0x2000004000001}]}, 0x8) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000035000-0x2)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00005ae000-0xd)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000036000)=[{0x0, 0x0, 0x0, 0x0, @tick=0xffffffffffffffff, {}, {}, @quote={{}, 0x0, &(0x7f0000dcb000-0x1c)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f00006b3000)}}}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f000003b000-0x8c)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000003f0000000000006900000000000800000000000000000400"}) 2018/02/10 10:55:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f000081f000-0x160)={0x18, 0x3, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x2, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 10:55:29 executing program 7: r0 = socket(0xa, 0x1, 0x0) sendto$unix(r0, &(0x7f0000034000-0x3f), 0x0, 0x0, &(0x7f0000034000-0xac)=@file={0x0, "84c1793134fa66fbf1450f9c6735d28e24e0c6f2af333b5acbdd80a85048782a71c0a3954d58ffb9ca0cbafbe818207adeac74a7348a9739fda2930f10d30fbbc2959c224877f1996cedff991e7242680ebe3b04c859db494e152b5cf344332e54e7d4dfa32c82f023d4c3f57fbdd8fb2a72e7eb54383780a122c990d1a98ab265d0627cec2f7056c1d9de8756328f673c8d66464021d539a90b82e5f84d441e9ff031faf51ab712f3e3"}, 0xac) 2018/02/10 10:55:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0xffffffffffffffff, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f000098e000-0x1000), &(0x7f000003a000-0xaa)}}, &(0x7f0000636000)) 2018/02/10 10:55:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000e5e000)=@abs, 0x8) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000003a000-0x8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000b42000-0x60)={0x0, 0xa, 0x4, @tid=r0}, &(0x7f0000558000)) timer_settime(0x0, 0x1, &(0x7f0000e38000-0x20)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000474000)) timer_settime(0x0, 0x0, &(0x7f00008f2000), &(0x7f000068e000-0x20)) 2018/02/10 10:55:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f000081f000-0x160)={0x18, 0x3, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x2, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 10:55:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000572000-0x1b)=""/27, 0x1b) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000028000)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_LINKMODE={0x8, 0x11}]}, 0x3c}, 0x1}, 0x0) 2018/02/10 10:55:29 executing program 3: rt_sigprocmask(0x0, &(0x7f0000f6d000), 0x0, 0x25) 2018/02/10 10:55:29 executing program 0: mmap(&(0x7f0000000000/0xf7a000)=nil, 0xf7a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x20000000000017, &(0x7f0000f78000)=0x400, 0x102fc) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000f74000)=0x9, 0x4) 2018/02/10 10:55:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00007c5000-0x5aa)="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", 0x598, 0x48000, &(0x7f0000e3f000-0x1c)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00009de000-0xa)="359f1e0e258a7bb1b9", 0x9, 0xc800, &(0x7f0000e74000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) sendto$inet6(r0, &(0x7f0000f2d000-0xa6)="39d95bedd7489c6b88603f22", 0xc, 0x0, &(0x7f0000b52000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:29 executing program 3: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080000040149bd50ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/10 10:55:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f000081f000-0x160)={0x18, 0x3, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x2, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 10:55:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x800000000018, 0x23) capset(&(0x7f0000001000)={0x20071026}, &(0x7f0000b9d000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0xba4c}) 2018/02/10 10:55:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000015000-0xc)={0x10, 0x34000}, 0xc, &(0x7f0000008000-0x10)={&(0x7f0000017000-0x20)={0x14, 0x29, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000007000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000009000-0x438)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) setsockopt(r0, 0x111, 0x1, &(0x7f0000008000-0x4)="0d9cd50f", 0x4) 2018/02/10 10:55:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000e2b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) flock(r0, 0x1) r2 = gettid() readv(r0, &(0x7f0000617000-0x60)=[{&(0x7f0000e4c000-0x4c)=""/57, 0x39}], 0x1) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x20000000005452, &(0x7f0000009000-0x8)=0x7) fcntl$setsig(r3, 0xa, 0x12) fcntl$setownex(r3, 0xf, &(0x7f00002cb000)={0x0, r2}) recvmsg(r4, &(0x7f000070c000-0x38)={&(0x7f00001d7000-0x8)=@sco, 0x8, &(0x7f00000a5000-0x50)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r4) tkill(r2, 0x16) 2018/02/10 10:55:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f000081f000-0x160)={0x18, 0x3, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x2, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 10:55:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000271000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00003f5000)=""/86) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe2000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x80000000, 0x0, 0x20000000002, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000d5b000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x8080000000, 0x0, 0x3}, 0x20) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000f38000-0x9)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000823000)="b63db85e1e8d0000180200000000000000cc436aed5ed2bc7018ceb89b97ae00000000000000012c9b16", 0x2a) readv(r0, &(0x7f0000679000)=[{&(0x7f0000d0b000)=""/62, 0xffaf}], 0x20000000000000d2) [ 53.449658] audit: type=1400 audit(1518260129.231:21): avc: denied { write } for pid=9295 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.457953] capability: warning: `syz-executor6' uses deprecated v2 capabilities in a way that may be insecure 2018/02/10 10:55:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000572000-0x1b)=""/27, 0x1b) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) 2018/02/10 10:55:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000001000), 0x0) 2018/02/10 10:55:29 executing program 3: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080000040149bd50ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/10 10:55:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000b27000)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000009000+0x536)) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000f38000-0x9)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000823000)="b63db85e1e8d0000180200000000000000cc436aed5ed2bc7018ceb89b97ae00000000000000012c9b16", 0x2a) readv(r0, &(0x7f0000679000)=[{&(0x7f0000d0b000)=""/62, 0xffaf}], 0x20000000000000d2) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ftruncate(r0, 0xfffffffffffffff9) 2018/02/10 10:55:29 executing program 7: mmap(&(0x7f0000000000/0xf6c000)=nil, 0xf6c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00009fd000)=0x80, 0x4) 2018/02/10 10:55:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000a77000)="180003000000010000000000000000000001080203000008000006000e640002b900020000000000000077a107567e5bdba17e19550055040082ec67a100020049fc2d63e000000000001418000a00000000130000c88ebbff06010000ad000000000000061475d7220342000747ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c3165c287b7e75ab4f1b8fc393d2696c0c3ba5aeac0000000000000000000000401", 0xc8) 2018/02/10 10:55:29 executing program 1: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000f000-0x24)="240000002800030007fffd946fa283b70a00004003000000031d85680000856800000008", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:29 executing program 3: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080000040149bd50ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000f38000-0x9)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000823000)="b63db85e1e8d0000180200000000000000cc436aed5ed2bc7018ceb89b97ae00000000000000012c9b16", 0x2a) readv(r0, &(0x7f0000679000)=[{&(0x7f0000d0b000)=""/62, 0xffaf}], 0x20000000000000d2) 2018/02/10 10:55:29 executing program 0: ioprio_set$pid(0x0, 0x0, 0x8) 2018/02/10 10:55:29 executing program 6: mmap(&(0x7f0000000000/0xfbb000)=nil, 0xfbb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000085000)='./control\x00', 0x28042, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000fba000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xffffffffffffffff, @loopback=0x7f000001}}}}, &(0x7f0000fba000)=0xb8) writev(r0, &(0x7f0000fba000-0x8)=[], 0x20000000000001b8) 2018/02/10 10:55:29 executing program 7: mmap(&(0x7f0000000000/0xe8d000)=nil, 0xe8d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cab000-0x5)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) 2018/02/10 10:55:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003a000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000572000-0x1b)=""/27, 0x1b) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f0000904000)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000163000)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xfdf000)=nil, 0xfdf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) 2018/02/10 10:55:29 executing program 3: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080000040149bd50ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/10 10:55:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f0000197000)={&(0x7f00004d9000)=@ipv4_delroute={0x24, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x0}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000f38000-0x9)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000823000)="b63db85e1e8d0000180200000000000000cc436aed5ed2bc7018ceb89b97ae00000000000000012c9b16", 0x2a) readv(r0, &(0x7f0000679000)=[{&(0x7f0000d0b000)=""/62, 0xffaf}], 0x20000000000000d2) 2018/02/10 10:55:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) write$tun(r0, &(0x7f0000ba9000-0x3506)=@hdr={0x1, 0x0, 0x0, 0x7, 0x0, 0x0, @ipv6={0x0, 0x6, "3f1700", 0x14, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}, 0x2d) 2018/02/10 10:55:29 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000000e000)={0x3, &(0x7f0000003000-0x18)=[{0x35, 0x0, 0x401, 0x1}, {}, {0x6}]}, 0x10) writev(r1, &(0x7f0000009000)=[{&(0x7f000000f000-0x1000)="8f", 0x1}], 0x1) 2018/02/10 10:55:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000eef000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f5400000000034f3a0a1fdc222073b5"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00004f3000-0x50)={@common='eql\x00', @ifru_map}) 2018/02/10 10:55:29 executing program 6: keyctl$update(0x2, 0x0, &(0x7f0000d19000-0x1000)='}', 0x1) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xfdf000)=nil, 0xfdf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@loopback={0x0, 0x1}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x1}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) connect$inet6(r0, &(0x7f0000d24000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/02/10 10:55:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000b10000)=0xc2, 0x4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000be7000-0x1c)={&(0x7f00006f9000)={0x10}, 0xc, &(0x7f0000da9000)={&(0x7f0000680000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:29 executing program 4: linkat(0xffffffffffffffff, &(0x7f0000002000-0xe)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003000-0x8)='./file0\x00', 0xffffffff7fffffff) 2018/02/10 10:55:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x8, 0xa, 0x7ff, &(0x7f0000a1e000)={0x0}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000d7000-0x14)={0x0, 0x80000001, 0x80003, 0x3f, 0x3ffffffffffffd, 0x4000009}, &(0x7f000064d000-0x4)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000e93000)={r1, 0x0, 0x8, 0x5, 0x7fff, 0x7fffffff}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x5, 0x1, 0x5, &(0x7f00007e7000)={0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e00000-0x18)={r1, 0x100000000, 0x10, 0x5, 0x7fff}, &(0x7f0000f2f000-0x4)=0x18) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000041000)={0x4, [0x0, 0x6, 0x53055e0d, 0x4]}, &(0x7f0000606000)=0xc) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f00008a1000-0x10)={0x93, &(0x7f0000b05000)="8db116adb6fc500f9ecd833488451d558afb104e3083b6850e7833185143444395ddca489efdee81fd48e1382e8b545289e106e3ac70ec0cc1aa597260da29a33ae3e75c18d5eb1da1f5ccf6f501898f06d3a4283dc515bf71a4295405ab78c3b6e9483aa2ef74e8173f0f696b8d7bbbca2b9f138dc40c18c9cf38649ee9bbade9e76d2cc5edf79eb0690aff812249986a98bb"}) getsockname$packet(r3, &(0x7f0000944000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000192000)=0xfffffffffffffedc) sendmsg$nl_route(r2, &(0x7f000025c000-0x38)={&(0x7f0000b93000+0x43a)={0x10}, 0xc, &(0x7f00005a1000)={&(0x7f0000f80000-0x58)=@ipv4_delroute={0x58, 0x19, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x20, 0x94, 0x0, 0xff, 0x0, 0xfe}, [@RTA_MULTIPATH={0x24, 0x9, [{0x8, 0x6, 0x9, r4}, {0x9, 0x9, 0xd3}, {0x80000001, 0xffffffffe36b3bb9, 0x3ff}, {0x2, 0x98f, 0x101}]}, @RTA_FLOW={0x8, 0xb, 0xbe}, @RTA_OIF={0x8, 0x4}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4006}, 0x4000000) [ 53.687659] keychord: keycode 16224 out of range [ 53.701688] keychord: keycode 16224 out of range 2018/02/10 10:55:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003000-0x1c)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000a000)=@ipv6_newroute={0xb8, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x14, 0x9, [{0x9}, {}]}, @RTA_METRICS={0x88, 0x8, "8200106b2fbf63a425238e5946b775175da4c25257282298148ceef06464926e00fa5f73693d3fda29aa099a7437572c83e9e992bd8dc8f59e919303b40339b561b0f7ba05481f6c9f4fd2991c52b42266034e386d66dc781e5547908553a77e0b6fa2edeedd6e19622fb8e4005677b3aca379c80fc11735039f2aa6fb565277ad"}]}, 0xb8}, 0x1}, 0x0) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xfdf000)=nil, 0xfdf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000073a000)='./bus\x00', 0x0) r0 = open(&(0x7f0000027000-0x6)='./bus\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000de3000)) 2018/02/10 10:55:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000f5c000)) 2018/02/10 10:55:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) write$tun(r0, &(0x7f0000ba9000-0x3506)=@hdr={0x1, 0x0, 0x0, 0x7, 0x0, 0x0, @ipv6={0x0, 0x6, "3f1700", 0x14, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}, 0x2d) 2018/02/10 10:55:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000e3e000-0x8)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mount(&(0x7f0000e51000-0x8)='./file1\x00', &(0x7f0000024000-0x1)='.', &(0x7f0000637000)='pstore\x00', 0x911020, &(0x7f00003f8000-0x75)) 2018/02/10 10:55:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000eef000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f5400000000034f3a0a1fdc222073b5"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00004f3000-0x50)={@common='eql\x00', @ifru_map}) 2018/02/10 10:55:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00002eb000-0x4)=0x101, 0x4) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000267000-0x4), 0x4) sendmsg$netlink(r0, &(0x7f0000915000)={&(0x7f000058e000)=@kern={0x10}, 0xc, &(0x7f0000525000)=[{&(0x7f0000bd9000)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, "", []}, 0x10}], 0x1}, 0x0) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xfdf000)=nil, 0xfdf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) 2018/02/10 10:55:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) write$tun(r0, &(0x7f0000ba9000-0x3506)=@hdr={0x1, 0x0, 0x0, 0x7, 0x0, 0x0, @ipv6={0x0, 0x6, "3f1700", 0x14, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}, 0x2d) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001000-0x4), 0x85, 0x0, &(0x7f00003de000)={0x0, 0x1c9c380}, &(0x7f0000001000-0x4), 0x0) 2018/02/10 10:55:29 executing program 4: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000054000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000022000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 53.806710] keychord: keycode 16224 out of range 2018/02/10 10:55:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00005b2000-0xe)='/dev/keychord\x00', 0x201, 0x0) write$tun(r0, &(0x7f0000ba9000-0x3506)=@hdr={0x1, 0x0, 0x0, 0x7, 0x0, 0x0, @ipv6={0x0, 0x6, "3f1700", 0x14, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}}, 0x2d) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000073a000)='./bus\x00', 0x0) r0 = open(&(0x7f0000027000-0x6)='./bus\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000de3000)) 2018/02/10 10:55:29 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, []}) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) [ 53.838297] keychord: keycode 16224 out of range 2018/02/10 10:55:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00001cb000-0xc)='/dev/ashmem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000595000-0x8)={0x19980330}, &(0x7f0000244000)) ioprio_set$uid(0x3, 0x0, 0x0) 2018/02/10 10:55:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x0, &(0x7f0000421000-0xcf)="9d7ea4cd", 0x4) 2018/02/10 10:55:29 executing program 6: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe}], &(0x7f000000b000)=[0x0]}}}], 0x0, 0x0, &(0x7f000000b000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x0, 0x0, &(0x7f000000e000-0x54)=[], 0x5c, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc4"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x1}, @increfs_done={0x40106308, r2}], 0x1, 0xfdfd, &(0x7f000000d000-0x68)="ef"}) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000073a000)='./bus\x00', 0x0) r0 = open(&(0x7f0000027000-0x6)='./bus\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000de3000)) 2018/02/10 10:55:29 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, []}) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) 2018/02/10 10:55:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x9, 0x4, &(0x7f0000ee0000-0x10)={0x77359400}, &(0x7f0000048000), 0x4) futex(&(0x7f000000d000-0x4), 0x0, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f000099e000), 0x20) 2018/02/10 10:55:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000eef000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f5400000000034f3a0a1fdc222073b5"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00004f3000-0x50)={@common='eql\x00', @ifru_map}) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000073a000)='./bus\x00', 0x0) r0 = open(&(0x7f0000027000-0x6)='./bus\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000de3000)) [ 53.885838] l2tp_core: tunl 59: sockfd_lookup(fd=0) returned -88 [ 53.896256] keychord: keycode 16224 out of range [ 53.901684] l2tp_core: tunl 59: sockfd_lookup(fd=0) returned -88 2018/02/10 10:55:29 executing program 2: mmap(&(0x7f0000000000/0xd1a000)=nil, 0xd1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005f2000-0xa)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00007a8000)) r2 = inotify_add_watch(r0, &(0x7f0000b0c000-0xa)='./control\x00', 0x80) inotify_rm_watch(r0, r2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000d1a000-0xc)={0x80000001}) epoll_pwait(r1, &(0x7f0000b0d000)=[{}], 0x1, 0x0, &(0x7f000029b000-0x8), 0x8) 2018/02/10 10:55:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000fff000-0x1c)={&(0x7f00005ec000)=@kern={0x10}, 0xc, &(0x7f000078a000)=[], 0x0, &(0x7f0000ffe000)=[@cred={0x18, 0x1, 0x2}], 0x18}, 0x0) 2018/02/10 10:55:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000007000-0xd)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) clock_gettime(0x0, &(0x7f0000285000)={0x0}) write$sndseq(r0, &(0x7f0000040000)=[{0x0, 0x0, 0x0, 0x0, @time={r3}, {}, {}, @addr}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00007b2000-0x40)={0x32, @time={r3}}) 2018/02/10 10:55:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a7d000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) syz_open_pts(r0, 0x100) 2018/02/10 10:55:29 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, []}) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) [ 53.939352] l2tp_core: tunl 59: sockfd_lookup(fd=0) returned -88 [ 53.945894] binder: 9448:9451 ERROR: BC_REGISTER_LOOPER called without request [ 53.974070] binder: undelivered TRANSACTION_COMPLETE [ 53.979327] binder: undelivered transaction 85, process died. 2018/02/10 10:55:29 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/hwrng\x00', 0x450000, 0x0) [ 53.991696] binder: 9448:9451 transaction failed 29189/-22, size 0-0 line 3005 [ 53.999091] binder: 9448:9462 got reply transaction with no transaction stack [ 54.007130] binder: 9448:9462 transaction failed 29201/-71, size 32-8 line 2921 2018/02/10 10:55:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000eef000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_names=@generic="4f5400000000034f3a0a1fdc222073b5"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00004f3000-0x50)={@common='eql\x00', @ifru_map}) [ 54.135491] l2tp_core: tunl 59: sockfd_lookup(fd=0) returned -88 [ 54.148214] binder: undelivered TRANSACTION_ERROR: 29189 [ 54.154414] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0xd1a000)=nil, 0xd1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005f2000-0xa)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00007a8000)) r2 = inotify_add_watch(r0, &(0x7f0000b0c000-0xa)='./control\x00', 0x80) inotify_rm_watch(r0, r2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000d1a000-0xc)={0x80000001}) epoll_pwait(r1, &(0x7f0000b0d000)=[{}], 0x1, 0x0, &(0x7f000029b000-0x8), 0x8) 2018/02/10 10:55:30 executing program 6: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000c000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925001600210010000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfe8000)=nil, 0xfe8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000fe6000)) mount(&(0x7f00004c7000-0x8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005000-0x3c)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000003000-0x2d0)=[]}}], 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, []}) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) 2018/02/10 10:55:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000002000)={@common, @ifru_settings={0x0, 0x0, @fr=&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000001000)=@req={0x28, &(0x7f0000000000)={@generic="d4abfe0205ba5e046d9469627fcda5bd", @ifru_names=@generic="9fd465fdd8d77bbee66ceefacc67d0b1"}}) 2018/02/10 10:55:30 executing program 4: mmap(&(0x7f0000000000/0xf92000)=nil, 0xf92000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) close(r0) 2018/02/10 10:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f000054c000-0x1c)={&(0x7f00007a9000-0xc)={0x10}, 0xc, &(0x7f0000136000)={&(0x7f00006b2000-0x1d7c)=@getlink={0x5c, 0x12, 0x601, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_LINKINFO={0x3c, 0x12, [@IFLA_INFO_KIND={0x8, 0x1, '\x00'}, @IFLA_INFO_SLAVE_KIND={0x10, 0x4, '/dev/cuse\x00'}, @IFLA_INFO_KIND={0x8, 0x1, '*}.\x00'}, @IFLA_INFO_KIND={0x8, 0x1, '\x00'}, @IFLA_INFO_KIND={0x10, 0x1, '/dev/cuse\x00'}]}]}, 0x5c}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c00000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000017f000-0xc)={0x4}) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0xd1a000)=nil, 0xd1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005f2000-0xa)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00007a8000)) r2 = inotify_add_watch(r0, &(0x7f0000b0c000-0xa)='./control\x00', 0x80) inotify_rm_watch(r0, r2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000d1a000-0xc)={0x80000001}) epoll_pwait(r1, &(0x7f0000b0d000)=[{}], 0x1, 0x0, &(0x7f000029b000-0x8), 0x8) 2018/02/10 10:55:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000eac000-0x10)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0xd1a000)=nil, 0xd1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005f2000-0xa)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00007a8000)) r2 = inotify_add_watch(r0, &(0x7f0000b0c000-0xa)='./control\x00', 0x80) inotify_rm_watch(r0, r2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000d1a000-0xc)={0x80000001}) epoll_pwait(r1, &(0x7f0000b0d000)=[{}], 0x1, 0x0, &(0x7f000029b000-0x8), 0x8) [ 54.286247] l2tp_core: tunl 59: sockfd_lookup(fd=0) returned -88 [ 54.340703] device gre0 entered promiscuous mode 2018/02/10 10:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) pipe(&(0x7f0000f5a000-0x8)={0x0}) connect$unix(r0, &(0x7f0000b1c000-0xa)=@file={0x0, './file0\x00'}, 0xa) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000c26000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0}, @broadcast=0xffffffff}, 0xc) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000068d000-0x38)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f00003c1000-0x24)={0x14, 0x0, 0x5, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000cd0000-0x20)=[{{&(0x7f0000662000)=@in6={0xa, 0xffffffffffffffff, 0x4, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000f83000)=[], 0x0, &(0x7f000095f000)=[{0xc}], 0xc, 0x48844}, 0x9ee}], 0x1, 0x40) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ae1000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffffffffffe, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000022000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000017000-0x4), 0x252) 2018/02/10 10:55:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000003000)='-.[vmnet0^\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) read(r0, &(0x7f0000912000-0x2b)=""/43, 0x2b) 2018/02/10 10:55:30 executing program 6: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000c000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925001600210010000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/10 10:55:30 executing program 5: r0 = timerfd_create(0x0, 0x0) fstat(r0, &(0x7f00003eb000-0x44)) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00001cb000-0xc)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4000000000000001) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 2018/02/10 10:55:30 executing program 6: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000c000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925001600210010000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/10 10:55:30 executing program 6: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000c000-0x38)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925001600210010000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000068d000-0x38)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f00003c1000-0x24)={0x14, 0x0, 0x5, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000266000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000a25000-0x14)=@ethtool_wolinfo={0x7, 0x0, 0x0, "2b3381c3bb43"}}) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ae1000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffffffffffe, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/10 10:55:30 executing program 5: ioperm(0x0, 0x1000, 0x0) clone(0x80000, &(0x7f0000667000), &(0x7f0000752000), &(0x7f0000160000), &(0x7f00009f5000-0x1)) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000068d000-0x38)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f00003c1000-0x24)={0x14, 0x0, 0x5, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ae1000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffffffffffe, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000501000)) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000315000-0xb)='/dev/hwrng\x00', 0x20003, 0x0) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000266000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000a25000-0x14)=@ethtool_wolinfo={0x7, 0x0, 0x0, "2b3381c3bb43"}}) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/10 10:55:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) sendto$inet(r0, &(0x7f00004b9000), 0x0, 0x20000050, &(0x7f0000034000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/02/10 10:55:30 executing program 5: ioperm(0x0, 0x1000, 0x0) clone(0x80000, &(0x7f0000667000), &(0x7f0000752000), &(0x7f0000160000), &(0x7f00009f5000-0x1)) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000068d000-0x38)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f00003c1000-0x24)={0x14, 0x0, 0x5, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 4: mmap(&(0x7f0000000000/0xf93000)=nil, 0xf93000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000f92000), 0x4) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ae1000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffffffffffe, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/10 10:55:30 executing program 6: stat(&(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000eb2000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000fea000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r0, r1) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000163000)={@common='lo\x00', &(0x7f0000bc4000)=@ethtool_cmd={0x17}}) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058d000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a58000-0x20)=[{&(0x7f0000787000-0x1000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f89000-0x80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8c000-0xb1)=""/177, 0xb1}], 0x2) writev(r0, &(0x7f00003b8000)=[{&(0x7f0000d42000-0x1000)="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", 0x777}], 0x1) readv(r0, &(0x7f0000db1000-0x30)=[{&(0x7f00008e1000-0x1000)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r1, &(0x7f0000939000)={&(0x7f00005dd000-0xc)={0x10}, 0xc, &(0x7f0000a09000)={&(0x7f0000f7f000)=@newlink={0x34, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_VF_PORTS={0x4, 0x18, []}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7f4501c2d413094be9"}]}, 0x34}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000266000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000a25000-0x14)=@ethtool_wolinfo={0x7, 0x0, 0x0, "2b3381c3bb43"}}) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000000b000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x5393, &(0x7f0000001000-0x1c)) 2018/02/10 10:55:30 executing program 5: ioperm(0x0, 0x1000, 0x0) clone(0x80000, &(0x7f0000667000), &(0x7f0000752000), &(0x7f0000160000), &(0x7f00009f5000-0x1)) 2018/02/10 10:55:30 executing program 0: r0 = add_key(&(0x7f00007e0000)='dead\x00', &(0x7f0000f0c000)={0x73, 0x79, 0x7a}, &(0x7f0000c8a000-0xaf), 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, &(0x7f00005a8000), 0x0) 2018/02/10 10:55:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@loopback={0x0, 0x1}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in6=@dev={0xfe, 0x80}}}, 0x356) 2018/02/10 10:55:30 executing program 6: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000012000-0x44)={{0x2, 0xffffffffffffffff, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x3a, {0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, @syzn={0x73, 0x79, 0x7a, 0x0}}) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058d000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a58000-0x20)=[{&(0x7f0000787000-0x1000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f89000-0x80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8c000-0xb1)=""/177, 0xb1}], 0x2) writev(r0, &(0x7f00003b8000)=[{&(0x7f0000d42000-0x1000)="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", 0x777}], 0x1) readv(r0, &(0x7f0000db1000-0x30)=[{&(0x7f00008e1000-0x1000)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r1, &(0x7f0000939000)={&(0x7f00005dd000-0xc)={0x10}, 0xc, &(0x7f0000a09000)={&(0x7f0000f7f000)=@newlink={0x34, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_VF_PORTS={0x4, 0x18, []}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7f4501c2d413094be9"}]}, 0x34}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000266000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000a25000-0x14)=@ethtool_wolinfo={0x7, 0x0, 0x0, "2b3381c3bb43"}}) clone(0x0, &(0x7f0000b26000), &(0x7f0000eaa000-0x4), &(0x7f0000bf3000-0x4), &(0x7f00003b9000-0xcd)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/10 10:55:30 executing program 5: ioperm(0x0, 0x1000, 0x0) clone(0x80000, &(0x7f0000667000), &(0x7f0000752000), &(0x7f0000160000), &(0x7f00009f5000-0x1)) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x1, @thr={&(0x7f0000001000-0x23), &(0x7f0000002000-0x18)}}) 2018/02/10 10:55:30 executing program 4: r0 = add_key$keyring(&(0x7f0000db2000)='keyring\x00', &(0x7f0000738000-0x5)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00002eb000)={0x0, 0x0}, &(0x7f0000e3f000)=0xc) keyctl$chown(0x4, r0, r1, 0x0) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058d000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a58000-0x20)=[{&(0x7f0000787000-0x1000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f89000-0x80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8c000-0xb1)=""/177, 0xb1}], 0x2) writev(r0, &(0x7f00003b8000)=[{&(0x7f0000d42000-0x1000)="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", 0x777}], 0x1) readv(r0, &(0x7f0000db1000-0x30)=[{&(0x7f00008e1000-0x1000)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r1, &(0x7f0000939000)={&(0x7f00005dd000-0xc)={0x10}, 0xc, &(0x7f0000a09000)={&(0x7f0000f7f000)=@newlink={0x34, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_VF_PORTS={0x4, 0x18, []}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7f4501c2d413094be9"}]}, 0x34}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cda000-0xc)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000850000-0x4)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cba000)='/dev/rfkill\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/02/10 10:55:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) writev(r0, &(0x7f0000a60000-0x70)=[{&(0x7f0000b77000)}, {&(0x7f0000042000-0x8d)='X', 0x1}], 0x2) r1 = creat(&(0x7f00001d4000-0xc)='./file0/bus\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup2(r1, r0) 2018/02/10 10:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000bcc000-0x8)='./file0\x00', 0x0) unshare(0x40600) getdents(r0, &(0x7f0000fbf000)=""/67, 0x43) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000835000-0xc)={0x0, 0x1}, 0xc) 2018/02/10 10:55:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000540000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000000)=@ethtool_wolinfo={0x23, 0x0, 0x0, "35661b99c87d"}}) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8009) write(r0, &(0x7f0000b0f000)="b63db85e1e8d00000001b29d00000000ffffffffed5ed2bc7018cebc9b97ae21914d872c678ce22c9b160e96aa1fae1a", 0x30) write(r0, &(0x7f0000eb0000-0x59)="dbef803e3d9f6de1e52055bb7c8a326fe46092b668269ad789c5d7acad0e771f13ffcb59029b011ded54a09c41c6cfcfbcd743cc665c33af223d42438b496a0304891c88697ae700a70f330e6fe3a1c9c76f315019b32968", 0x58) write$tun(r0, &(0x7f0000253000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @loopback=0x7f000001, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) write(r0, &(0x7f0000657000)="ee000000080000000000ec676c6d0000230000e2ff057362569a446008265e3e6538e0ea000004000000", 0x2a) ppoll(&(0x7f0000fe9000-0x28)=[{r0}], 0x1, &(0x7f00008d5000), &(0x7f0000d3c000), 0x8) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058d000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a58000-0x20)=[{&(0x7f0000787000-0x1000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f89000-0x80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8c000-0xb1)=""/177, 0xb1}], 0x2) writev(r0, &(0x7f00003b8000)=[{&(0x7f0000d42000-0x1000)="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", 0x777}], 0x1) readv(r0, &(0x7f0000db1000-0x30)=[{&(0x7f00008e1000-0x1000)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r1, &(0x7f0000939000)={&(0x7f00005dd000-0xc)={0x10}, 0xc, &(0x7f0000a09000)={&(0x7f0000f7f000)=@newlink={0x34, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_VF_PORTS={0x4, 0x18, []}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7f4501c2d413094be9"}]}, 0x34}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 6: setpriority(0x10000000002, 0x0, 0x0) 2018/02/10 10:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b8c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x802c542a, &(0x7f0000bd8000)) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f000017f000)={0x20080522}, &(0x7f0000ca3000)) r0 = syz_open_procfs(0x0, &(0x7f00009be000)='ns/mnt\x00') setns(r0, 0x0) 2018/02/10 10:55:30 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 2018/02/10 10:55:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00004f0000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000e90000)={@common='gre0\x00', @ifru_settings={0x5, 0x0, @raw_hdlc=&(0x7f0000b31000)}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000f88000-0x20)={@common='gre0\x00', @ifru_flags=0x100000000000301}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000b90000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr=0x2000000}}) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058d000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a58000-0x20)=[{&(0x7f0000787000-0x1000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f89000-0x80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8c000-0xb1)=""/177, 0xb1}], 0x2) writev(r0, &(0x7f00003b8000)=[{&(0x7f0000d42000-0x1000)="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", 0x777}], 0x1) readv(r0, &(0x7f0000db1000-0x30)=[{&(0x7f00008e1000-0x1000)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r1, &(0x7f0000939000)={&(0x7f00005dd000-0xc)={0x10}, 0xc, &(0x7f0000a09000)={&(0x7f0000f7f000)=@newlink={0x34, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_VF_PORTS={0x4, 0x18, []}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7f4501c2d413094be9"}]}, 0x34}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058d000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a58000-0x20)=[{&(0x7f0000787000-0x1000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f89000-0x80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8c000-0xb1)=""/177, 0xb1}], 0x2) writev(r0, &(0x7f00003b8000)=[{&(0x7f0000d42000-0x1000)="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", 0x777}], 0x1) readv(r0, &(0x7f0000db1000-0x30)=[{&(0x7f00008e1000-0x1000)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r1, &(0x7f0000939000)={&(0x7f00005dd000-0xc)={0x10}, 0xc, &(0x7f0000a09000)={&(0x7f0000f7f000)=@newlink={0x34, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_VF_PORTS={0x4, 0x18, []}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7f4501c2d413094be9"}]}, 0x34}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 6: setpriority(0x10000000002, 0x0, 0x0) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8009) write(r0, &(0x7f0000b0f000)="b63db85e1e8d00000001b29d00000000ffffffffed5ed2bc7018cebc9b97ae21914d872c678ce22c9b160e96aa1fae1a", 0x30) write(r0, &(0x7f0000eb0000-0x59)="dbef803e3d9f6de1e52055bb7c8a326fe46092b668269ad789c5d7acad0e771f13ffcb59029b011ded54a09c41c6cfcfbcd743cc665c33af223d42438b496a0304891c88697ae700a70f330e6fe3a1c9c76f315019b32968", 0x58) write$tun(r0, &(0x7f0000253000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @loopback=0x7f000001, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) write(r0, &(0x7f0000657000)="ee000000080000000000ec676c6d0000230000e2ff057362569a446008265e3e6538e0ea000004000000", 0x2a) ppoll(&(0x7f0000fe9000-0x28)=[{r0}], 0x1, &(0x7f00008d5000), &(0x7f0000d3c000), 0x8) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8009) write(r0, &(0x7f0000b0f000)="b63db85e1e8d00000001b29d00000000ffffffffed5ed2bc7018cebc9b97ae21914d872c678ce22c9b160e96aa1fae1a", 0x30) write(r0, &(0x7f0000eb0000-0x59)="dbef803e3d9f6de1e52055bb7c8a326fe46092b668269ad789c5d7acad0e771f13ffcb59029b011ded54a09c41c6cfcfbcd743cc665c33af223d42438b496a0304891c88697ae700a70f330e6fe3a1c9c76f315019b32968", 0x58) write$tun(r0, &(0x7f0000253000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @loopback=0x7f000001, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) write(r0, &(0x7f0000657000)="ee000000080000000000ec676c6d0000230000e2ff057362569a446008265e3e6538e0ea000004000000", 0x2a) ppoll(&(0x7f0000fe9000-0x28)=[{r0}], 0x1, &(0x7f00008d5000), &(0x7f0000d3c000), 0x8) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f00001eb000-0xf6)='*', 0x1, 0xfffffffffffffffe) 2018/02/10 10:55:30 executing program 6: setpriority(0x10000000002, 0x0, 0x0) 2018/02/10 10:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b8c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x802c542a, &(0x7f0000bd8000)) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f1000-0x10)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058d000-0x3a)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a58000-0x20)=[{&(0x7f0000787000-0x1000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f89000-0x80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8c000-0xb1)=""/177, 0xb1}], 0x2) writev(r0, &(0x7f00003b8000)=[{&(0x7f0000d42000-0x1000)="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", 0x777}], 0x1) readv(r0, &(0x7f0000db1000-0x30)=[{&(0x7f00008e1000-0x1000)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r1, &(0x7f0000939000)={&(0x7f00005dd000-0xc)={0x10}, 0xc, &(0x7f0000a09000)={&(0x7f0000f7f000)=@newlink={0x34, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_VF_PORTS={0x4, 0x18, []}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7f4501c2d413094be9"}]}, 0x34}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xe6e000)=nil, 0xe6e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x801, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000003000-0xfff)="b9", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000e6f000-0x20)=""/16, &(0x7f0000623000)=0x10) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f000078e000), 0x4) 2018/02/10 10:55:30 executing program 0: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0xa972, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/dev/pktcdvd/control\x00', 0x0, 0x0) [ 54.860775] device gre0 entered promiscuous mode 2018/02/10 10:55:30 executing program 6: setpriority(0x10000000002, 0x0, 0x0) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8009) write(r0, &(0x7f0000b0f000)="b63db85e1e8d00000001b29d00000000ffffffffed5ed2bc7018cebc9b97ae21914d872c678ce22c9b160e96aa1fae1a", 0x30) write(r0, &(0x7f0000eb0000-0x59)="dbef803e3d9f6de1e52055bb7c8a326fe46092b668269ad789c5d7acad0e771f13ffcb59029b011ded54a09c41c6cfcfbcd743cc665c33af223d42438b496a0304891c88697ae700a70f330e6fe3a1c9c76f315019b32968", 0x58) write$tun(r0, &(0x7f0000253000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @loopback=0x7f000001, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) write(r0, &(0x7f0000657000)="ee000000080000000000ec676c6d0000230000e2ff057362569a446008265e3e6538e0ea000004000000", 0x2a) ppoll(&(0x7f0000fe9000-0x28)=[{r0}], 0x1, &(0x7f00008d5000), &(0x7f0000d3c000), 0x8) 2018/02/10 10:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b8c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x802c542a, &(0x7f0000bd8000)) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000000000)='smaps\x00') sendfile(r1, r1, &(0x7f0000007000)=0x47, 0x1) 2018/02/10 10:55:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f000012c000-0xe)='net/mcfilter6\x00') sendfile(r1, r2, &(0x7f0000058000-0x8), 0x10002) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xd1d000)=nil, 0xd1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00001de000)=[{&(0x7f0000d1d000-0xa8)=""/168, 0xa8}, {&(0x7f0000d1d000-0x2f)=""/47, 0x2f}], 0x2, &(0x7f00008d8000)=[{&(0x7f0000522000-0xd0)=""/208, 0xd0}, {&(0x7f0000d1d000-0x98)=""/197, 0xc5}], 0x2, 0x0) 2018/02/10 10:55:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00004f0000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000e90000)={@common='gre0\x00', @ifru_settings={0x5, 0x0, @raw_hdlc=&(0x7f0000b31000)}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000f88000-0x20)={@common='gre0\x00', @ifru_flags=0x100000000000301}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000b90000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr=0x2000000}}) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0x2e000)=nil, 0x2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000002c000-0x8)='./file0\x00', 0x0) r0 = creat(&(0x7f000001c000-0xc)='./file0/bus\x00', 0x0) fstatfs(r0, &(0x7f0000007000-0x28)=""/40) 2018/02/10 10:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b8c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x802c542a, &(0x7f0000bd8000)) 2018/02/10 10:55:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00004f0000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000e90000)={@common='gre0\x00', @ifru_settings={0x5, 0x0, @raw_hdlc=&(0x7f0000b31000)}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000f88000-0x20)={@common='gre0\x00', @ifru_flags=0x100000000000301}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000b90000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr=0x2000000}}) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000001b000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000002000-0x10)={0x2, 0x3, @multicast1=0xe0000001}, 0x10) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000d37000-0xc)) timerfd_settime(r3, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001b000-0xc)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000022000-0xc)={0x2001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000019000)) 2018/02/10 10:55:30 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000002000-0x10)='/dev/input/mice\x00', 0x0, 0x80001) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000003000)='wlan0*mime_type-trusted}&wlan0vmnet1.trusted{\\{GPL\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x8812, r1, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000005000-0x10)=[{&(0x7f0000001000)="ab", 0x1}], 0x1) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008d8000-0x89)='net/sockstat6\x00') read(r0, &(0x7f0000e3d000-0x24)=""/36, 0x24) 2018/02/10 10:55:30 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5420, &(0x7f0000fec000-0x8)) [ 54.996926] device gre0 entered promiscuous mode 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000426000)={{{@in=@rand_addr, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x3}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}, 0xe8) [ 55.060373] device gre0 entered promiscuous mode 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000be2000-0x8)=[{&(0x7f00003d8000-0x3a)="3900000011000947011b61e6c30500fe070000000200000045efffff08009b0019001a000f00000900000100000000000600040004000d0005", 0x39}], 0x1) 2018/02/10 10:55:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000dda000)='./file0\x00', 0x0) mount(&(0x7f0000901000-0x8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000ebd000-0x2)) r0 = creat(&(0x7f0000c5f000-0xc)='./file0/bus\x00', 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000090000)="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", 0xfd1, 0x0, &(0x7f0000add000-0x10)={0x77359400}) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) 2018/02/10 10:55:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000bc2000)=0x102) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="020000000400000000040080000abd22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = syz_open_dev$tun(&(0x7f00003cd000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) r2 = socket(0x10, 0x802, 0x0) sendto(r2, &(0x7f0000d0f000-0x12)="120000001200e7ff0a001c0000000000809b", 0x12, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000f77000-0x1000)=""/3940, 0xf64, 0x0, &(0x7f00008f7000)=@abs, 0x8) 2018/02/10 10:55:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00004f0000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000e90000)={@common='gre0\x00', @ifru_settings={0x5, 0x0, @raw_hdlc=&(0x7f0000b31000)}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000f88000-0x20)={@common='gre0\x00', @ifru_flags=0x100000000000301}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000b90000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr=0x2000000}}) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b9000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f000050a000-0x6e), 0xff77, 0x8000, &(0x7f0000560000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg$inet_sctp(r0, &(0x7f000014b000)={&(0x7f0000978000-0x1c)=@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000bb1000)=[], 0x20000000000001c0, &(0x7f000094b000)=[]}, 0x0) 2018/02/10 10:55:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00004f0000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000e90000)={@common='gre0\x00', @ifru_settings={0x5, 0x0, @raw_hdlc=&(0x7f0000b31000)}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000f88000-0x20)={@common='gre0\x00', @ifru_flags=0x100000000000301}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000b90000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr=0x2000000}}) 2018/02/10 10:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000fd8000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) pread64(r0, &(0x7f000018a000)=""/4096, 0x1000, 0xfffffffffffffffd) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0x57000)=nil, 0x57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000054000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000055000-0x5c)) 2018/02/10 10:55:30 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000001000-0xe), &(0x7f0000001000-0x18), 0x8, &(0x7f0000001000-0x8)) 2018/02/10 10:55:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d04000)='schedstat\x00') sendfile(r0, r0, &(0x7f00006c7000), 0x2a) 2018/02/10 10:55:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f0000ebf000-0xc)={0x10}, 0xc, &(0x7f0000452000)={&(0x7f0000e71000-0x40)=@ipv6_newaddr={0x40, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@IFA_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x2, [], 0x1}}, @IFA_LOCAL={0x12, 0x2, @empty}]}, 0x40}, 0x1}, 0x0) 2018/02/10 10:55:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000ff8000)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000095a000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00006ef000)=0x247e) ioctl$TCSETSF(r0, 0x5404, &(0x7f000080b000-0x24)) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000f51000-0x40), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/10 10:55:30 executing program 2: mmap(&(0x7f0000000000/0x23000)=nil, 0x23000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000020000)={0xaa}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000005000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000022000)={{&(0x7f0000007000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000005000/0x2000)=nil, 0x2000}, 0x1}) 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000a0a000)="9403", 0x2) [ 55.199001] device gre0 entered promiscuous mode [ 55.214966] device gre0 entered promiscuous mode 2018/02/10 10:55:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb2000-0x12)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f000033e000)=[{{}, 0x11}], 0x18) 2018/02/10 10:55:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000b3c000-0x8)='ns/user\x00') setns(r0, 0x0) 2018/02/10 10:55:31 executing program 3: r0 = eventfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00007c3000)="5a68bbfd320c71d4", 0x8) 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/10 10:55:31 executing program 7: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000000b000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000-0x4)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000012000-0x10)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/02/10 10:55:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00004f0000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000e90000)={@common='gre0\x00', @ifru_settings={0x5, 0x0, @raw_hdlc=&(0x7f0000b31000)}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000f88000-0x20)={@common='gre0\x00', @ifru_flags=0x100000000000301}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000b90000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr=0x2000000}}) 2018/02/10 10:55:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000bc2000)=0x102) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="020000000400000000040080000abd22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = syz_open_dev$tun(&(0x7f00003cd000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) r2 = socket(0x10, 0x802, 0x0) sendto(r2, &(0x7f0000d0f000-0x12)="120000001200e7ff0a001c0000000000809b", 0x12, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000f77000-0x1000)=""/3940, 0xf64, 0x0, &(0x7f00008f7000)=@abs, 0x8) 2018/02/10 10:55:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00004f0000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000e90000)={@common='gre0\x00', @ifru_settings={0x5, 0x0, @raw_hdlc=&(0x7f0000b31000)}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000f88000-0x20)={@common='gre0\x00', @ifru_flags=0x100000000000301}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000b90000-0x20)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr=0x2000000}}) 2018/02/10 10:55:31 executing program 3: mmap(&(0x7f0000000000/0xf87000)=nil, 0xf87000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000bdc000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000f86000-0xf0)={0x2, 0x3, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) 2018/02/10 10:55:31 executing program 2: mmap(&(0x7f0000000000/0xe70000)=nil, 0xe70000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000842000-0x150)=@dstopts={0x0, 0x0, [], []}, 0x8) getsockopt$inet6_int(r0, 0x29, 0x3b, &(0x7f0000e70000-0x4), &(0x7f00004f6000-0x4)=0x33) 2018/02/10 10:55:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f0000c44000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = open(&(0x7f0000053000)='./file0\x00', 0x43, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000dd8000-0x10), &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) truncate(&(0x7f00005d3000-0x8)='./file0\x00', 0x0) 2018/02/10 10:55:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000d73000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000016000-0xc)='./file0/bus\x00', 0x0) pwrite64(r0, &(0x7f0000d05000)="ae", 0x1, 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f00001e9000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8}) [ 55.439688] device gre0 entered promiscuous mode [ 55.445401] device gre0 entered promiscuous mode 2018/02/10 10:55:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6e000-0x38)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000e82000-0x98)={0x2, 0x400000000000003, 0x0, 0x0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) 2018/02/10 10:55:31 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000001000-0x4)={0x20080522}, &(0x7f0000216000)) 2018/02/10 10:55:31 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003000)) r2 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="02", 0x1}], 0x1, 0x0) close(r0) 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)="002670726f63eb657972696e6740", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dd5000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022e000-0x8c)={0x0, 0x0, 0x0, "7175f97565310000000000000000000a000000000000000002000000fbfffffffe00"}) write$sndseq(r0, &(0x7f0000619000)=[{0x0, 0x2, 0x0, 0x0, @time, {}, {}, @raw32}], 0x1c) 2018/02/10 10:55:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) 2018/02/10 10:55:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0x60}, 0x1}, 0x0) 2018/02/10 10:55:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f0000c44000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = open(&(0x7f0000053000)='./file0\x00', 0x43, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000dd8000-0x10), &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) truncate(&(0x7f00005d3000-0x8)='./file0\x00', 0x0) 2018/02/10 10:55:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000bc2000)=0x102) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="020000000400000000040080000abd22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = syz_open_dev$tun(&(0x7f00003cd000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) r2 = socket(0x10, 0x802, 0x0) sendto(r2, &(0x7f0000d0f000-0x12)="120000001200e7ff0a001c0000000000809b", 0x12, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000f77000-0x1000)=""/3940, 0xf64, 0x0, &(0x7f00008f7000)=@abs, 0x8) 2018/02/10 10:55:31 executing program 3: r0 = socket$packet(0x11, 0x20000000000003, 0x300) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000744000)=@syzn={0x73, 0x79, 0x7a}, 0x10) 2018/02/10 10:55:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) 2018/02/10 10:55:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) 2018/02/10 10:55:31 executing program 6: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f000000a000), 0x4) 2018/02/10 10:55:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) 2018/02/10 10:55:31 executing program 6: remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x0) 2018/02/10 10:55:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000061a000-0xd)='/dev/snd/seq\x00', 0x0, 0x80001) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003bc000-0xc)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000c40000-0xc)={0x30000017}) 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) 2018/02/10 10:55:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f000026c000)=[@flat={0x77622a85, 0x0, 0x0, 0x4}], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) 2018/02/10 10:55:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dce000-0x10)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b38000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000ccb000)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x16) 2018/02/10 10:55:31 executing program 4: mmap(&(0x7f0000000000/0x2e000)=nil, 0x2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000011000-0xc)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001d000-0x4)=0x3a) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f000002d000-0x1000)=""/4096) 2018/02/10 10:55:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f0000c44000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = open(&(0x7f0000053000)='./file0\x00', 0x43, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000dd8000-0x10), &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) truncate(&(0x7f00005d3000-0x8)='./file0\x00', 0x0) 2018/02/10 10:55:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00006f3000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000bc2000)=0x102) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="020000000400000000040080000abd22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a7000-0x4)}}) r1 = syz_open_dev$tun(&(0x7f00003cd000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f000053b000)=0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000712000-0x28)={@generic="9438a7c080c5008f3852c862b540c308", @ifru_map={0x294e}}) r2 = socket(0x10, 0x802, 0x0) sendto(r2, &(0x7f0000d0f000-0x12)="120000001200e7ff0a001c0000000000809b", 0x12, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000f77000-0x1000)=""/3940, 0xf64, 0x0, &(0x7f00008f7000)=@abs, 0x8) 2018/02/10 10:55:31 executing program 5: mmap(&(0x7f0000000000/0xd41000)=nil, 0xd41000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x270, []}) ioctl(r0, 0x8916, &(0x7f0000000000)) 2018/02/10 10:55:31 executing program 4: mmap(&(0x7f0000000000/0x93d000)=nil, 0x93d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001000-0x28)={@common='lo\x00', &(0x7f0000939000)=@ethtool_wolinfo={0x1f, 0x0, 0x0, "37601badc875"}}) 2018/02/10 10:55:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000000), 0x10) modify_ldt$read(0x0, &(0x7f0000000000)=""/214, 0xd6) 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000f87000-0x58)={{0x0, 0x2}, 0x0, 0x0, 0x0, {0x5}, 0x6, 0x48}) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000864000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/02/10 10:55:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00006bd000)=[{&(0x7f0000714000)="2900000018001980013d75241a0407210206e30067fffd01040000000800050000000200080000bf00", 0x29}], 0x1) [ 55.785291] binder: 9855:9859 sending u0000000000000000 node 91, cookie mismatch 0000000000000004 != 0000000000000000 [ 55.801069] binder: 9855:9859 transaction failed 29201/-22, size 24-8 line 3207 2018/02/10 10:55:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x11, &(0x7f0000b0e000), 0x0) 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000f87000-0x58)={{0x0, 0x2}, 0x0, 0x0, 0x0, {0x5}, 0x6, 0x48}) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000864000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/02/10 10:55:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x20000000050, &(0x7f0000f1a000), &(0x7f00009ff000)) 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000f87000-0x58)={{0x0, 0x2}, 0x0, 0x0, 0x0, {0x5}, 0x6, 0x48}) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000864000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) [ 55.838133] binder_alloc: binder_alloc_mmap_handler: 9855 20000000-20002000 already mapped failed -16 [ 55.851532] binder_alloc: 9855: binder_alloc_buf, no vma [ 55.851633] binder: BINDER_SET_CONTEXT_MGR already set [ 55.851639] binder: 9855:9859 ioctl 40046207 0 returned -16 [ 55.877943] binder: 9855:9878 transaction failed 29189/-3, size 24-8 line 3128 2018/02/10 10:55:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000333000-0x9)='ns/ipc\x00') sendfile(r0, r1, &(0x7f00004db000), 0x400ff) 2018/02/10 10:55:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00001e0000-0x1c)=@req3={0x0, 0xfffffffffffffffd}, 0x1c) 2018/02/10 10:55:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00006ba000)={0x2, &(0x7f00006b2000-0x10)=[{0x20, 0x0, 0x0, 0xffff7ffffffff020}, {0x6}]}, 0x10) [ 55.891649] binder: undelivered TRANSACTION_ERROR: 29189 [ 55.897545] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000f87000-0x58)={{0x0, 0x2}, 0x0, 0x0, 0x0, {0x5}, 0x6, 0x48}) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000864000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/02/10 10:55:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec4000-0xc)) shutdown(r0, 0x0) ppoll(&(0x7f0000bc1000-0x30)=[{r1}], 0x1, &(0x7f0000c04000-0x10), &(0x7f0000a1c000-0x8), 0x8) 2018/02/10 10:55:31 executing program 6: mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000062000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) fstatfs(r0, &(0x7f0000062000-0x9)=""/194) 2018/02/10 10:55:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f000071a000-0x1c)=@in6={0xa, 0x1, 0x0, @empty}, 0x1c, &(0x7f0000fc8000)=[]}, 0x8000) sendto$inet6(r0, &(0x7f0000bfd000)="d3", 0x1, 0x4008000, &(0x7f0000d87000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f3a000-0x81)="eb", 0x1, 0x0, &(0x7f0000bd3000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000d000-0x4), 0xc, 0x1, &(0x7f0000c44000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = open(&(0x7f0000053000)='./file0\x00', 0x43, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000dd8000-0x10), &(0x7f000003a000-0x10)={0x0, 0x8000000}, 0x8) truncate(&(0x7f00005d3000-0x8)='./file0\x00', 0x0) 2018/02/10 10:55:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00001e0000-0x1c)=@req3={0x0, 0xfffffffffffffffd}, 0x1c) 2018/02/10 10:55:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000005e000)={0x2, &(0x7f00009ea000)=[{0x200000000035, 0x0, 0x0, 0xfffffffffffffffd}, {0x200000000006, 0x0, 0x0, 0xfffffffffffffeff}]}) perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000a09000)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000002000-0x18)) open(&(0x7f000021b000-0x8)='./file0\x00', 0x89d7fd34f9410f8b, 0x0) 2018/02/10 10:55:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00001e0000-0x1c)=@req3={0x0, 0xfffffffffffffffd}, 0x1c) 2018/02/10 10:55:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f5a000-0x4)=0x5, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000453000-0x4)=0x3, 0x4) bind$inet6(r1, &(0x7f0000f5e000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000f6b000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:31 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) request_key(&(0x7f000000d000-0x12)='.request_key_auth\x00', &(0x7f0000005000-0x5)={0x73, 0x79, 0x7a}, &(0x7f0000001000-0x40)=')}md5sum:-vmnet0posix_acl_access^ppp1mime_type+keyringmime_type\x00', 0xfffffffffffffffe) clone(0x0, &(0x7f0000d58000), &(0x7f000049b000-0x4), &(0x7f0000003000-0x4), &(0x7f0000fd5000-0x1)) 2018/02/10 10:55:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000dc8000-0x25)=""/37, &(0x7f0000357000-0x4)=0x25) 2018/02/10 10:55:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000d74000-0x10)='/dev/input/mice\x00', 0x0, 0x82) writev(r0, &(0x7f0000569000-0x20)=[{&(0x7f00001f9000)="cb8f8496ac79f0fae8b0c558605574b5b5648004aea82dc9317483ed15ea3bbd5a49fba41cdea3cec967754fc6625541ff", 0x31}], 0x1) 2018/02/10 10:55:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x2, 0x0) write(r1, &(0x7f000006e000), 0xfffffdd8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000013) 2018/02/10 10:55:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f000071a000-0x1c)=@in6={0xa, 0x1, 0x0, @empty}, 0x1c, &(0x7f0000fc8000)=[]}, 0x8000) sendto$inet6(r0, &(0x7f0000bfd000)="d3", 0x1, 0x4008000, &(0x7f0000d87000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f3a000-0x81)="eb", 0x1, 0x0, &(0x7f0000bd3000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007af000-0x8), 0x8) r1 = inotify_init() close(r1) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000df9000)='/dev/keychord\x00', 0x0, 0x0) pread64(r2, &(0x7f000032c000-0x5f)=""/95, 0x5f, 0x0) close(r1) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000001000-0x6)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000021000-0x6)='./bus\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000009000-0x8)=0x8) recvfrom(r5, &(0x7f0000017000), 0x0, 0x0, &(0x7f000002d000-0x10)=@alg={0x26, 'aead\x00', 0x0, 0x0, "6c7a0700000000000000000000001300000000000000e2ffffffffffffff00"}, 0x58) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) dup2(r0, r5) tkill(r3, 0x80000000016) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f000071a000-0x1c)=@in6={0xa, 0x1, 0x0, @empty}, 0x1c, &(0x7f0000fc8000)=[]}, 0x8000) sendto$inet6(r0, &(0x7f0000bfd000)="d3", 0x1, 0x4008000, &(0x7f0000d87000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f3a000-0x81)="eb", 0x1, 0x0, &(0x7f0000bd3000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f000071a000-0x1c)=@in6={0xa, 0x1, 0x0, @empty}, 0x1c, &(0x7f0000fc8000)=[]}, 0x8000) sendto$inet6(r0, &(0x7f0000bfd000)="d3", 0x1, 0x4008000, &(0x7f0000d87000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f3a000-0x81)="eb", 0x1, 0x0, &(0x7f0000bd3000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f000001d000)={0x0, 0x0, 0x0, 0x80}) fcntl$lock(r0, 0x5, &(0x7f0000e0a000)={0x1}) 2018/02/10 10:55:32 executing program 2: futex(&(0x7f000000d000-0x4), 0x1000c, 0x0, &(0x7f000070f000-0x10)={0x77359400}, &(0x7f0000048000), 0x0) 2018/02/10 10:55:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f0000709000-0x4), 0x4) 2018/02/10 10:55:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00001e0000-0x1c)=@req3={0x0, 0xfffffffffffffffd}, 0x1c) 2018/02/10 10:55:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000ac9000)='vegas\x00', 0x6) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xfffffffffffffefc, 0x0, 0x0, 0x0) 2018/02/10 10:55:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) pwritev(r0, &(0x7f0000f51000-0x70)=[{&(0x7f00001b3000)="93", 0x1}], 0x1, 0x83003) sendfile(r0, r0, &(0x7f0000633000), 0x8001) lseek(r0, 0x0, 0x4) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000383000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000304000)) 2018/02/10 10:55:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00001e0000-0x1c)=@req3={0x0, 0xfffffffffffffffd}, 0x1c) 2018/02/10 10:55:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x2, 0x0) write(r1, &(0x7f000006e000), 0xfffffdd8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000013) 2018/02/10 10:55:32 executing program 2: mmap(&(0x7f0000000000/0xf62000)=nil, 0xf62000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) pipe(&(0x7f0000f5a000-0x8)={0x0, 0x0}) vmsplice(r0, &(0x7f000034a000)=[{&(0x7f0000e1f000)}], 0x1, 0x0) 2018/02/10 10:55:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000ac9000)='vegas\x00', 0x6) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xfffffffffffffefc, 0x0, 0x0, 0x0) 2018/02/10 10:55:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00001e0000-0x1c)=@req3={0x0, 0xfffffffffffffffd}, 0x1c) 2018/02/10 10:55:32 executing program 0: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000452000/0x1000)=nil, 0x1000, 0x9) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000253000)='pagemap\x00') sendfile(r0, r0, &(0x7f0000055000), 0x81) 2018/02/10 10:55:32 executing program 2: mmap(&(0x7f0000000000/0xf62000)=nil, 0xf62000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) pipe(&(0x7f0000f5a000-0x8)={0x0, 0x0}) vmsplice(r0, &(0x7f000034a000)=[{&(0x7f0000e1f000)}], 0x1, 0x0) 2018/02/10 10:55:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) pwritev(r0, &(0x7f0000f51000-0x70)=[{&(0x7f00001b3000)="93", 0x1}], 0x1, 0x83003) sendfile(r0, r0, &(0x7f0000633000), 0x8001) lseek(r0, 0x0, 0x4) 2018/02/10 10:55:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mkdir(&(0x7f0000493000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000b41000-0xa)='./control\x00', 0x0) inotify_rm_watch(r0, r1) 2018/02/10 10:55:32 executing program 2: mmap(&(0x7f0000000000/0xf62000)=nil, 0xf62000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) pipe(&(0x7f0000f5a000-0x8)={0x0, 0x0}) vmsplice(r0, &(0x7f000034a000)=[{&(0x7f0000e1f000)}], 0x1, 0x0) 2018/02/10 10:55:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x2, 0x0) write(r1, &(0x7f000006e000), 0xfffffdd8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000013) 2018/02/10 10:55:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) pwritev(r0, &(0x7f0000f51000-0x70)=[{&(0x7f00001b3000)="93", 0x1}], 0x1, 0x83003) sendfile(r0, r0, &(0x7f0000633000), 0x8001) lseek(r0, 0x0, 0x4) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0xd23000)=nil, 0xd23000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000d18000-0x4)=0x2, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00006a4000), &(0x7f0000d11000)=0x4) 2018/02/10 10:55:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mkdir(&(0x7f0000493000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000b41000-0xa)='./control\x00', 0x0) inotify_rm_watch(r0, r1) 2018/02/10 10:55:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000ac9000)='vegas\x00', 0x6) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xfffffffffffffefc, 0x0, 0x0, 0x0) 2018/02/10 10:55:32 executing program 2: mmap(&(0x7f0000000000/0xf62000)=nil, 0xf62000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) pipe(&(0x7f0000f5a000-0x8)={0x0, 0x0}) vmsplice(r0, &(0x7f000034a000)=[{&(0x7f0000e1f000)}], 0x1, 0x0) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mkdir(&(0x7f0000493000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000b41000-0xa)='./control\x00', 0x0) inotify_rm_watch(r0, r1) 2018/02/10 10:55:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mkdir(&(0x7f0000493000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000b41000-0xa)='./control\x00', 0x0) inotify_rm_watch(r0, r1) 2018/02/10 10:55:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) pwritev(r0, &(0x7f0000f51000-0x70)=[{&(0x7f00001b3000)="93", 0x1}], 0x1, 0x83003) sendfile(r0, r0, &(0x7f0000633000), 0x8001) lseek(r0, 0x0, 0x4) 2018/02/10 10:55:32 executing program 3: mmap(&(0x7f0000000000/0x23000)=nil, 0x23000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xe, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@generic={0x8100}}}, &(0x7f0000004000-0x14)={0x0, 0x1, [0x0]}) 2018/02/10 10:55:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x2, 0x0) write(r1, &(0x7f000006e000), 0xfffffdd8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000013) 2018/02/10 10:55:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00001e0000-0x1c)=@req3={0x0, 0xfffffffffffffffd}, 0x1c) 2018/02/10 10:55:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mkdir(&(0x7f0000493000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000b41000-0xa)='./control\x00', 0x0) inotify_rm_watch(r0, r1) 2018/02/10 10:55:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dee000-0x10)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000ac9000)='vegas\x00', 0x6) sendto$inet(r0, &(0x7f0000de2000-0x1), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xfffffffffffffefc, 0x0, 0x0, 0x0) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mkdir(&(0x7f0000493000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000b41000-0xa)='./control\x00', 0x0) inotify_rm_watch(r0, r1) 2018/02/10 10:55:32 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={@generic="6427c95ace52d7968d6789e8e218c0cb", @ifru_mtu}) 2018/02/10 10:55:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000c30000)=[{&(0x7f000068f000-0x2a)="290000002000190000003fffffffda060200000000000000030000040d000e00ea1100000005000000", 0x29}], 0x1) 2018/02/10 10:55:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000025000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000268000-0xa)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000000b000)='./control\x00', 0x0) faccessat(r0, &(0x7f00000e2000-0xa)='./control\x00', 0x1, 0x0) 2018/02/10 10:55:32 executing program 4: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006000)='/dev/vga_arbiter\x00', 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000006000-0x8)={0x0, 0xfb2}, &(0x7f0000009000-0x8)) 2018/02/10 10:55:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000b1f000-0xc)) munlockall() 2018/02/10 10:55:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a16000)=0x5, 0x4) bind$inet6(r1, &(0x7f000092b000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0xfffffde5, 0x20000004, &(0x7f00005f1000-0x1c)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r0, 0x1) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() mkdir(&(0x7f0000493000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000b41000-0xa)='./control\x00', 0x0) inotify_rm_watch(r0, r1) 2018/02/10 10:55:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f000022f000-0x50)={{0xff, 0xc}}) 2018/02/10 10:55:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x80045440, &(0x7f0000000000)) 2018/02/10 10:55:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e51000-0x8)='./file0\x00', 0x0) mount(&(0x7f00007a4000-0x8)='./file0\x00', &(0x7f00004f6000-0x8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c82000-0x2)) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00006f8000)=@random={'os2.\x00', 'eth1\x00'}) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095c000-0x4)={0x0, 0x0, 0xffffffffffffff7c}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000b1f000-0xc)) munlockall() 2018/02/10 10:55:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000c30000)=[{&(0x7f000068f000-0x2a)="290000002000190000003fffffffda060200000000000000030000040d000e00ea1100000005000000", 0x29}], 0x1) 2018/02/10 10:55:32 executing program 3: mmap(&(0x7f0000000000/0x2c000)=nil, 0x2c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000029000-0x38)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f0000029000)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, "", []}, 0x10}], 0x1, &(0x7f000002c000-0x28)=[]}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000017000-0x4), 0x4) recvmsg(r0, &(0x7f000001a000-0x38)={0x0, 0x0, &(0x7f0000011000)=[], 0x0, &(0x7f000001b000)}, 0x2) 2018/02/10 10:55:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f00008aa000-0x1)='.', 0x0, &(0x7f0000545000-0xf2)) 2018/02/10 10:55:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001000-0x8)='./file0\x00', 0x0) mkdir(&(0x7f00003d2000-0xe)='./file1\x00', 0x0) rename(&(0x7f00008e3000-0x8)='./file1\x00', &(0x7f0000a20000-0x8)='./file0\x00') 2018/02/10 10:55:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000b1f000-0xc)) munlockall() [ 56.809272] TCP: request_sock_TCPv6: Possible SYN flooding on port 20026. Sending cookies. Check SNMP counters. 2018/02/10 10:55:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000c30000)=[{&(0x7f000068f000-0x2a)="290000002000190000003fffffffda060200000000000000030000040d000e00ea1100000005000000", 0x29}], 0x1) 2018/02/10 10:55:32 executing program 0: unshare(0x400) r0 = eventfd2(0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 2018/02/10 10:55:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000011e000-0x7)='ns\x00') mknodat(r0, &(0x7f0000ac4000)='./file0\x00', 0x0, 0x0) 2018/02/10 10:55:32 executing program 4: clone(0x10000200, &(0x7f0000caf000-0x1), &(0x7f0000981000), &(0x7f0000e9a000-0x4), &(0x7f0000094000-0x1)) 2018/02/10 10:55:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000c30000)=[{&(0x7f000068f000-0x2a)="290000002000190000003fffffffda060200000000000000030000040d000e00ea1100000005000000", 0x29}], 0x1) [ 56.917543] IPv4: Oversized IP packet from 127.0.0.1 2018/02/10 10:55:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000ba5000)="4408050313", 0x5) 2018/02/10 10:55:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000b1f000-0xc)) munlockall() 2018/02/10 10:55:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000215000)='net/ptype\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f000076f000)) ftruncate(r0, 0x3d) 2018/02/10 10:55:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00008cd000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) dup2(r0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000d4a000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000579000-0xc)) 2018/02/10 10:55:32 executing program 2: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000008000-0x38)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001000ff20fffefd956fc283b724a6008002000000000000000000000010000d0006c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/02/10 10:55:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000adb000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ad3000)={{}, {0x0, 0x3}}) 2018/02/10 10:55:32 executing program 1: mmap(&(0x7f0000000000/0x21000)=nil, 0x21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/arp\x00') read(r0, &(0x7f0000020000-0x42)=""/174, 0xae) 2018/02/10 10:55:32 executing program 3: mmap(&(0x7f0000000000/0xd19000)=nil, 0xd19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000d19000-0x4)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000bfd000-0x4), &(0x7f0000d13000-0x4)=0x4) 2018/02/10 10:55:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x800000000000000a, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f00006c7000-0x37)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_data=&(0x7f0000912000-0x20)="00000000000000020000000000000000005c000000000000000000003095a901"}) 2018/02/10 10:55:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000b2000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80045430, &(0x7f0000000000)) 2018/02/10 10:55:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000d2f000-0x1)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) write$tun(r2, &(0x7f0000711000)=@hdr={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "a8068d", 0x30, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "3490a4", 0x0, 0x0, 0x0, @empty, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, []}}}}}, 0x62) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/10 10:55:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000069000)=[{{&(0x7f0000de2000-0x10)=@can, 0x10, &(0x7f000044b000)=[{&(0x7f0000986000-0x93)=""/147, 0x93}], 0x1, &(0x7f00009eb000-0x23)=""/35, 0x23}}], 0x1, 0x120, &(0x7f00000f9000-0x10)) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) timer_create(0x0, &(0x7f000030c000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000265000-0x4)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() tkill(r1, 0x16) [ 57.055671] netlink: 28 bytes leftover after parsing attributes in process `syz-executor2'. [ 57.238627] netlink: 28 bytes leftover after parsing attributes in process `syz-executor2'. 2018/02/10 10:55:33 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000922000-0xc)={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr}, 0xc) 2018/02/10 10:55:33 executing program 1: mmap(&(0x7f0000000000/0x21000)=nil, 0x21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/arp\x00') read(r0, &(0x7f0000020000-0x42)=""/174, 0xae) 2018/02/10 10:55:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000215000)='net/ptype\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f000076f000)) ftruncate(r0, 0x3d) 2018/02/10 10:55:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001000-0x4), 0x0) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000065000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f000082b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/02/10 10:55:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000e33000)='./file0\x00', 0x140) execve(&(0x7f000007b000)='./file0\x00', &(0x7f00009e4000)=[], &(0x7f00003a2000)=[]) 2018/02/10 10:55:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) r1 = memfd_create(&(0x7f000003b000-0x6)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r1, &(0x7f000003c000-0x1)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f000003c000), 0xffc) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000001000-0xb)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/10 10:55:33 executing program 2: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000008000-0x38)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001000ff20fffefd956fc283b724a6008002000000000000000000000010000d0006c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/02/10 10:55:33 executing program 1: mmap(&(0x7f0000000000/0x21000)=nil, 0x21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/arp\x00') read(r0, &(0x7f0000020000-0x42)=""/174, 0xae) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x5, 0x0) unshare(0x8000400) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x42, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fc000-0x40), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8), 0x8}) 2018/02/10 10:55:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f00000b6000)='./control/file0\x00', 0x0) unlink(&(0x7f0000eb9000-0x10)='./control/file0\x00') syz_fuseblk_mount(&(0x7f00009c4000)='./control\x00', &(0x7f000053e000)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00002e5000)='./control\x00', 0x0, 0x0) lseek(r0, 0x8000, 0x0) 2018/02/10 10:55:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000215000)='net/ptype\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f000076f000)) ftruncate(r0, 0x3d) [ 57.321277] netlink: 28 bytes leftover after parsing attributes in process `syz-executor2'. 2018/02/10 10:55:33 executing program 2: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000008000-0x38)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001000ff20fffefd956fc283b724a6008002000000000000000000000010000d0006c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/02/10 10:55:33 executing program 6: mmap(&(0x7f0000000000/0xdd9000)=nil, 0xdd9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000ad6000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000dd6000-0xb)) 2018/02/10 10:55:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000215000)='net/ptype\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f000076f000)) ftruncate(r0, 0x3d) 2018/02/10 10:55:33 executing program 1: mmap(&(0x7f0000000000/0x21000)=nil, 0x21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/arp\x00') read(r0, &(0x7f0000020000-0x42)=""/174, 0xae) 2018/02/10 10:55:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000033000-0x16)='/selinux/checkreqprot\x00', 0x2, 0x0) write(r0, &(0x7f0000a6d000)="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", 0x1000) 2018/02/10 10:55:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00005cb000-0x20)={0x7fffffff, 0x6, 0x0, 0x0, 0x0, 0xc8d, 0x6, 0x6}, &(0x7f0000001000-0x4)=0x20) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) openat(0xffffffffffffffff, &(0x7f00008e8000-0x8)='./file0\x00', 0x0, 0x0) close(r0) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000dcc000)) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000065000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f000082b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x9}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)={0x20000005}) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb3000-0x4)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005c000-0x20)={{}, {0x0, r3+10000000}}, &(0x7f0000046000)) ppoll(&(0x7f000004f000-0x40)=[{r1, 0x1301}, {r2}], 0x2, &(0x7f000005b000+0xd56), &(0x7f000005b000), 0x8) 2018/02/10 10:55:33 executing program 1: mmap(&(0x7f0000000000/0xf80000)=nil, 0xf80000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f7c000)=0x621c, 0x4) mmap(&(0x7f0000000000/0xb3e000)=nil, 0xb3e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000886000-0x57)='8', 0x1, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0x44f, 0x23fffd, 0x0, 0x0) 2018/02/10 10:55:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000fb4000), 0x0, 0x20000004, &(0x7f00007aa000)={0xa, 0x2, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f00003ae000-0x38)={&(0x7f00006e9000-0x20)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000ba1000-0x70)=[{&(0x7f00007a2000-0xdd)=""/221, 0xdd}], 0x1, &(0x7f0000636000-0x30)=""/101, 0x65}, 0x0) r2 = accept4(r1, &(0x7f0000219000-0x58)=@alg, &(0x7f0000db5000-0x4)=0x58, 0x0) shutdown(r0, 0x1) sendmsg$nl_crypto(r2, &(0x7f0000485000-0x38)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, []}, 0x10176}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 2: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000008000-0x38)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001000ff20fffefd956fc283b724a6008002000000000000000000000010000d0006c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/02/10 10:55:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000cd9000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000198000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) 2018/02/10 10:55:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000c93000)=""/108, &(0x7f0000b54000)=0x6c) [ 57.477160] netlink: 28 bytes leftover after parsing attributes in process `syz-executor2'. 2018/02/10 10:55:33 executing program 0: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f00003e7000), 0xffffffffffffff04) 2018/02/10 10:55:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000e96000/0x14000)=nil, 0x14000, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000e4f000-0x4)) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00001c7000-0xd)='/dev/usbmon#\x00', 0x0, 0x0) timerfd_gettime(r0, &(0x7f0000daa000-0x20)) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000065000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f000082b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/02/10 10:55:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000005000-0x10)={0x2, 0xa, 0x0, 0xf, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) [ 57.550865] TCP: request_sock_TCPv6: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. [ 57.574950] netlink: 28 bytes leftover after parsing attributes in process `syz-executor2'. 2018/02/10 10:55:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00006f2000)='/dev/snd/timer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0xfffffefffffffffd, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00008f8000)) 2018/02/10 10:55:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x3000)=nil, 0x3000) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000504000), 0x4) 2018/02/10 10:55:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00005cb000-0x20)={0x7fffffff, 0x6, 0x0, 0x0, 0x0, 0xc8d, 0x6, 0x6}, &(0x7f0000001000-0x4)=0x20) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) openat(0xffffffffffffffff, &(0x7f00008e8000-0x8)='./file0\x00', 0x0, 0x0) close(r0) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000dcc000)) 2018/02/10 10:55:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000fb4000), 0x0, 0x20000004, &(0x7f00007aa000)={0xa, 0x2, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f00003ae000-0x38)={&(0x7f00006e9000-0x20)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000ba1000-0x70)=[{&(0x7f00007a2000-0xdd)=""/221, 0xdd}], 0x1, &(0x7f0000636000-0x30)=""/101, 0x65}, 0x0) r2 = accept4(r1, &(0x7f0000219000-0x58)=@alg, &(0x7f0000db5000-0x4)=0x58, 0x0) shutdown(r0, 0x1) sendmsg$nl_crypto(r2, &(0x7f0000485000-0x38)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, []}, 0x10176}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000065000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f000082b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/02/10 10:55:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x4, @loopback={0x0, 0x1}}, 0x0, [0x0, 0x0, 0x8001]}, 0x5c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/02/10 10:55:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000fb4000), 0x0, 0x20000004, &(0x7f00007aa000)={0xa, 0x2, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f00003ae000-0x38)={&(0x7f00006e9000-0x20)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000ba1000-0x70)=[{&(0x7f00007a2000-0xdd)=""/221, 0xdd}], 0x1, &(0x7f0000636000-0x30)=""/101, 0x65}, 0x0) r2 = accept4(r1, &(0x7f0000219000-0x58)=@alg, &(0x7f0000db5000-0x4)=0x58, 0x0) shutdown(r0, 0x1) sendmsg$nl_crypto(r2, &(0x7f0000485000-0x38)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, []}, 0x10176}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00002e6000)='net/mcfilter6\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000150000)=@random={'osx.\x00', 'trustedcgroup:*}em0@vmnet1security-/trustedmd5sum\x00'}, &(0x7f000060c000)='keyring(vmnet0.proc\x00', 0x14, 0x0) 2018/02/10 10:55:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d17000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000017a000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000b07000-0x4), 0x4) sendto$unix(r1, &(0x7f00001a0000), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/02/10 10:55:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000db2000-0x8)='./file0\x00', &(0x7f000020b000-0xe)=@random={'user.', '/dev/sg#\x00'}, &(0x7f000039f000)=',eth1\x00', 0x6, 0x0) getresgid(&(0x7f0000d66000), &(0x7f0000de0000), &(0x7f00001d8000-0x4)) 2018/02/10 10:55:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000058c000-0x38)={&(0x7f0000187000-0xc)={0x10}, 0xc, &(0x7f0000452000)={&(0x7f0000009000)=@ipv6_newaddr={0x40, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x40}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000045000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) sendmmsg$unix(r0, &(0x7f000090f000-0x1c)=[{&(0x7f0000556000)=@abs, 0x8, &(0x7f0000fa7000-0x10)=[], 0x0, &(0x7f00008b4000)=[@cred={0x18, 0x1, 0x2, r1}], 0x18}], 0x1, 0x0) [ 57.726158] TCP: request_sock_TCPv6: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. 2018/02/10 10:55:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000f3d000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x8000, 0x0) readv(r0, &(0x7f0000f34000-0x10)=[{&(0x7f0000afd000)=""/4096, 0x1000}], 0x1) writev(r1, &(0x7f0000a01000-0x40)=[{&(0x7f0000f8a000-0xc3), 0x39}], 0x1) vmsplice(r1, &(0x7f0000d7b000)=[{&(0x7f0000849000-0xd9)='A', 0x1}], 0x1, 0x0) 2018/02/10 10:55:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 0: mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000001000/0x1000)=nil) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f000000d000)) 2018/02/10 10:55:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000fb4000), 0x0, 0x20000004, &(0x7f00007aa000)={0xa, 0x2, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f00003ae000-0x38)={&(0x7f00006e9000-0x20)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000ba1000-0x70)=[{&(0x7f00007a2000-0xdd)=""/221, 0xdd}], 0x1, &(0x7f0000636000-0x30)=""/101, 0x65}, 0x0) r2 = accept4(r1, &(0x7f0000219000-0x58)=@alg, &(0x7f0000db5000-0x4)=0x58, 0x0) shutdown(r0, 0x1) sendmsg$nl_crypto(r2, &(0x7f0000485000-0x38)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, []}, 0x10176}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00005cb000-0x20)={0x7fffffff, 0x6, 0x0, 0x0, 0x0, 0xc8d, 0x6, 0x6}, &(0x7f0000001000-0x4)=0x20) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) openat(0xffffffffffffffff, &(0x7f00008e8000-0x8)='./file0\x00', 0x0, 0x0) close(r0) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000dcc000)) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0xf69000)=nil, 0xf69000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000f67000)=0x174, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00009ba000)={@rand_addr, @multicast1, 0x0}, &(0x7f0000712000-0x4)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={r1, @broadcast=0xffffffff, @loopback=0x7f000001}, 0xc) sendmsg(r0, &(0x7f0000f31000-0x38)={&(0x7f0000a86000)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f00008fd000-0x50)=[], 0x0, &(0x7f0000f57000)=[]}, 0x0) recvfrom$inet6(r0, &(0x7f0000f43000), 0x0, 0xfffffffffffffffd, &(0x7f0000430000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) 2018/02/10 10:55:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000fb4000), 0x0, 0x20000004, &(0x7f00007aa000)={0xa, 0x2, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f00003ae000-0x38)={&(0x7f00006e9000-0x20)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000ba1000-0x70)=[{&(0x7f00007a2000-0xdd)=""/221, 0xdd}], 0x1, &(0x7f0000636000-0x30)=""/101, 0x65}, 0x0) r2 = accept4(r1, &(0x7f0000219000-0x58)=@alg, &(0x7f0000db5000-0x4)=0x58, 0x0) shutdown(r0, 0x1) sendmsg$nl_crypto(r2, &(0x7f0000485000-0x38)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, []}, 0x10176}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000109000+0x282)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000216000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x50, &(0x7f0000ffb000)) r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) writev(r0, &(0x7f0000dbb000)=[{&(0x7f00004d9000-0xfd)="e9", 0x1}], 0x1) [ 57.875712] TCP: request_sock_TCPv6: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. 2018/02/10 10:55:33 executing program 6: mmap(&(0x7f0000000000/0xef8000)=nil, 0xef8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ef7000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000ef8000-0x2b)) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000771000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r2) sendmmsg$unix(r0, &(0x7f00003a9000)=[{&(0x7f0000d47000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000391000-0x10)=[], 0x0, &(0x7f0000e0f000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) dup2(r1, r2) r3 = dup3(r1, r0, 0x0) connect$unix(r3, &(0x7f000002d000)=@abs={0x1}, 0x8) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000d0a000-0x80), 0x0) 2018/02/10 10:55:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$mice(&(0x7f0000785000)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2d000-0xc)={0x6}) 2018/02/10 10:55:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00005cb000-0x20)={0x7fffffff, 0x6, 0x0, 0x0, 0x0, 0xc8d, 0x6, 0x6}, &(0x7f0000001000-0x4)=0x20) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c7f000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006b0000-0x28)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) openat(0xffffffffffffffff, &(0x7f00008e8000-0x8)='./file0\x00', 0x0, 0x0) close(r0) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000dcc000)) 2018/02/10 10:55:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000fb4000), 0x0, 0x20000004, &(0x7f00007aa000)={0xa, 0x2, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f00003ae000-0x38)={&(0x7f00006e9000-0x20)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000ba1000-0x70)=[{&(0x7f00007a2000-0xdd)=""/221, 0xdd}], 0x1, &(0x7f0000636000-0x30)=""/101, 0x65}, 0x0) r2 = accept4(r1, &(0x7f0000219000-0x58)=@alg, &(0x7f0000db5000-0x4)=0x58, 0x0) shutdown(r0, 0x1) sendmsg$nl_crypto(r2, &(0x7f0000485000-0x38)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, []}, 0x10176}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001ff000-0x1c)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000fb4000), 0x0, 0x20000004, &(0x7f00007aa000)={0xa, 0x2, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f00003ae000-0x38)={&(0x7f00006e9000-0x20)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000ba1000-0x70)=[{&(0x7f00007a2000-0xdd)=""/221, 0xdd}], 0x1, &(0x7f0000636000-0x30)=""/101, 0x65}, 0x0) r2 = accept4(r1, &(0x7f0000219000-0x58)=@alg, &(0x7f0000db5000-0x4)=0x58, 0x0) shutdown(r0, 0x1) sendmsg$nl_crypto(r2, &(0x7f0000485000-0x38)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, []}, 0x10176}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000f30000)=[{&(0x7f0000924000)="a1", 0x1}], 0x1) write$sndseq(r0, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) 2018/02/10 10:55:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000132000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x180004524, &(0x7f0000383000)) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@common='lo\x00', &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x20, 0x0, 0x0, "00000707c89d"}}) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0x1d000)=nil, 0x1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000005000), &(0x7f0000012000-0x4)=0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000012000-0x1c)={0x1c, 0x12, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x1d, []}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/tcp\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000020000-0x42)=""/174, 0xae) read$eventfd(r0, &(0x7f0000009000-0x8), 0x42f) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0x1d000)=nil, 0x1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000005000), &(0x7f0000012000-0x4)=0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000012000-0x1c)={0x1c, 0x12, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x1d, []}]}, 0x1c}, 0x1}, 0x0) [ 57.985627] TCP: request_sock_TCPv6: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. 2018/02/10 10:55:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0x1d000)=nil, 0x1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000005000), &(0x7f0000012000-0x4)=0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000012000-0x1c)={0x1c, 0x12, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x1d, []}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f000000e000-0x8)=@file={0x1}, 0x2) listen(r0, 0xc8) 2018/02/10 10:55:33 executing program 2: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001900030407fffd946fa283bc0aeee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/10 10:55:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ff6000-0x18)={0xaa, 0x44}) 2018/02/10 10:55:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000565000/0x1000)=nil, 0x1000, 0x0, 0x912, r0, 0x0) 2018/02/10 10:55:33 executing program 0: mmap(&(0x7f0000000000/0x1d000)=nil, 0x1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000005000), &(0x7f0000012000-0x4)=0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000012000-0x1c)={0x1c, 0x12, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x1d, []}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000082f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000def000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000c6c000-0x20)={0x0, 0x0, 0x4000000080000d8}) 2018/02/10 10:55:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/02/10 10:55:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000565000/0x1000)=nil, 0x1000, 0x0, 0x912, r0, 0x0) 2018/02/10 10:55:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e4000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000937000-0x4)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000537000-0x4)=0x2) 2018/02/10 10:55:33 executing program 6: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) readv(r0, &(0x7f0000002000-0x60)=[{&(0x7f0000001000-0xb)=""/11, 0xb}, {&(0x7f0000003000-0x4b)=""/75, 0x4b}, {&(0x7f0000002000)=""/94, 0x5e}], 0x3) 2018/02/10 10:55:33 executing program 4: clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) 2018/02/10 10:55:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000d1e000)={0x0, 0x1c9c380}, &(0x7f00005c0000-0x10)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00005a9000/0x2000)=nil, 0x2000, 0x0) remap_file_pages(&(0x7f00002bc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 10:55:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00009cc000-0xd)='/dev/snd/seq\x00', 0x0, 0x20002) write$sndseq(r0, &(0x7f0000bd7000)=[{0x0, 0x6, 0x0, 0x0, @tick, {}, {}, @control}], 0x1c) 2018/02/10 10:55:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000565000/0x1000)=nil, 0x1000, 0x0, 0x912, r0, 0x0) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000007000)=@file={0x40000000000001, "e91f7189591e9233614b"}, 0xc) truncate(&(0x7f00007fd000+0xe6f)="e91f7189591e9233614b", 0x0) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000e9d000)='keyring\x00', &(0x7f0000659000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000be000)=[{&(0x7f0000d43000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000603000)=[{&(0x7f0000007000)="c2f1a8c82a5932fd69adc52c8e0345c26db185e9ed5355ea1469f94049d3f3fd34", 0x21}], 0x1, &(0x7f0000b88000)=[]}], 0x1, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)) ioctl(r0, 0x2285, &(0x7f0000007000)='S') read(r0, &(0x7f0000167000-0x20)=""/32, 0x20) 2018/02/10 10:55:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000565000/0x1000)=nil, 0x1000, 0x0, 0x912, r0, 0x0) 2018/02/10 10:55:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000af9000), &(0x7f0000632000)=0x4) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000c5c000-0x14)={0x14, 0x1, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00001e1000-0x9)='pagemap\x00') lseek(r0, 0x0, 0x2) 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000006000/0x2000)=nil, 0x2000, 0xc) 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000c27000)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000fe7000)=@newlink={0x7c, 0x10, 0x409, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_LINKINFO={0x5c, 0x12, [@IFLA_INFO_KIND={0x58, 0x1, "73656c696e7578766d6e6574302d7b70726f63fb47504c2d73656375726974796d643573756d76626f786e6574306d696d655f7479706576626f786e6574307d47504c282c2a707070307472757374656400"}]}]}, 0x7c}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0xea2000)=nil, 0xea2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000001000-0x18)) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000c5c000-0x14)={0x14, 0x1, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000617000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000ca2000-0x38)={&(0x7f00008dd000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f000032f000-0x10)=[], 0x0, &(0x7f0000734000-0x30)=[@rights={0x20, 0x1, 0x1, [r3, r0, r2]}], 0x20}, 0x0) close(r2) close(r1) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000c5c000-0x14)={0x14, 0x1, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000fce000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000493000)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="190300000000003800a9861bb45f00b7", @ifru_map={0xd6c}}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00003ce000)=0x1ff) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000b27000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000e58000-0xa8)={{0x80}, 'port0\x00'}) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007af000-0x8), 0x8) mkdir(&(0x7f000056a000)='./control\x00', 0x0) read(r0, &(0x7f0000713000)=""/384, 0xfffffd24) signalfd(r0, &(0x7f0000433000-0x8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/02/10 10:55:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00005ab000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x3, [@loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001]}, 0xfffffffffffffe65) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4c, &(0x7f0000e83000)={@loopback={0x0, 0x1}}, 0x20) 2018/02/10 10:55:34 executing program 0: prctl$intptr(0x2f, 0x1) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000066000-0x38)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000c5c000-0x14)={0x14, 0x1, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 1: r0 = add_key(&(0x7f0000ffe000)='trusted\x00', &(0x7f0000717000-0x5)={0x73, 0x79, 0x7a}, &(0x7f00007e0000-0x83), 0x0, 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r0, 0xffffffffffffffff) clone(0x8010900, &(0x7f00009f4000), &(0x7f000078e000), &(0x7f000039f000), &(0x7f00001ea000)) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f000017f000)='/dev/net/tun\x00', 0x0, 0x40003) vmsplice(r0, &(0x7f0000e88000)=[{&(0x7f000082d000)}], 0x1, 0x0) 2018/02/10 10:55:34 executing program 7: inotify_add_watch(0xffffffffffffffff, &(0x7f00004a6000+0xdb6)='./file0\x00', 0x80000003) 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0xfc2000)=nil, 0xfc2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000001000-0x10)=[{0x20}, {0x80000006}]}, 0x10) sendto(r0, &(0x7f000002b000-0xd8), 0xfd09, 0x0, 0x0, 0x0) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfc2000)=nil, 0xfc2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002f000-0x10)={0x2, &(0x7f0000001000-0x10)=[{0x28, 0x0, 0x0, 0xffffffffffffef48}, {0x80000006}]}, 0x10) sendto(r0, &(0x7f000002b000-0xd8), 0xfd09, 0x0, 0x0, 0x0) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000b27000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000e58000-0xa8)={{0x80}, 'port0\x00'}) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000054000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f000003c000-0x4c)) 2018/02/10 10:55:34 executing program 7: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000008000-0x2)='\x00', 0x0) fcntl$dupfd(r0, 0x40a, 0xffffffffffffffff) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000e6a000)=@get={0x1, &(0x7f0000579000-0x9b)=""/155}) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000b27000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000e58000-0xa8)={{0x80}, 'port0\x00'}) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f000072d000-0xe7)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, @rand_addr, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "fd735f", 0x0, "c3e204"}}}}}}, &(0x7f0000ae3000)={0x0, 0x0, []}) 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000000f000-0x18)={0xaa}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f000000c000)=@assoc_value={0x0, 0xc0}, &(0x7f0000002000-0x4)=0x8) mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f000000c000-0x10)={&(0x7f0000008000/0x3000)=nil, 0x3000}) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dff000-0xc)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f00009c5000)=@ipv6_deladdr={0x34, 0x15, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@IFA_FLAGS={0x5, 0x8}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80}}]}, 0x34}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000a88000-0xc)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0x9) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000141000)={@broadcast=0xffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xc) 2018/02/10 10:55:34 executing program 4: personality(0x400000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd6000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000939000-0x5)=@ethtool_wolinfo={0x26, 0x0, 0x0, "00000707c89d"}}) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000401, &(0x7f000019e000-0x10)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/10 10:55:34 executing program 7: mmap(&(0x7f0000000000/0xff8000)=nil, 0xff8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000400000004, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f000041f000/0x4000)=nil, 0x4000, 0x4) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000b27000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000e58000-0xa8)={{0x80}, 'port0\x00'}) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fea000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10008000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000fe2000-0xc)) epoll_pwait(r1, &(0x7f0000fe8000)=[{}], 0x1, 0x0, &(0x7f00008bd000), 0x8) 2018/02/10 10:55:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000444000-0xe)='net/mcfilter6\x00') fcntl$notify(r0, 0x402, 0x33) unshare(0x400) fcntl$notify(r0, 0x402, 0x8000000c) [ 58.533954] IPv4: Oversized IP packet from 127.0.0.1 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0xab4000)=nil, 0xab4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000001000-0x30)={0x0, 0x5}, 0x0) rt_sigsuspend(&(0x7f0000188000-0x8), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000e000-0x30)={0x4, 0x0, &(0x7f000000d000-0x98)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000067e000)='-$\x00', 0x40, 0x0, &(0x7f0000408000-0x20)) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x40000048f, &(0x7f000078a000-0x2c)="8735d96127345deced18b86c09bb2e83c68174708d6db960782f2ea948ddbcc1de84de4442ed43fdb02bf212", 0x2c) 2018/02/10 10:55:34 executing program 5: rt_sigtimedwait(&(0x7f0000002000-0x6), &(0x7f0000001000), &(0x7f0000001000+0xe54), 0x8) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f000046f000-0x10)) inotify_init1(0x0) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0x2e000)=nil, 0x2e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000011000-0x7)={0xffffffffffffffff, 0xffffffffffffffff}) 2018/02/10 10:55:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @rand_addr}, 0x2}}, 0x2e) connect(r0, &(0x7f0000b7c000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a) 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00005d2000)=@dstopts={0x0, 0xfe, [], [@generic={0x0, 0x7ef, "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"}]}, 0x7f9) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000bd3000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000e59000)='..') 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, &(0x7f000000e000-0x10)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000d000)=[{{&(0x7f0000006000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @dev}}}, 0x3a, &(0x7f0000006000)=[]}}, {{0x0, 0x0, &(0x7f000000a000-0x40)=[], 0x0, &(0x7f000000e000-0x2a)=""/42, 0x2a}}], 0x2, 0x2, &(0x7f000000a000)={0x0, r1+10000000}) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000a000)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000f06000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f0000aef000-0x6)='ramfs\x00', 0x0, &(0x7f00007d7000)) pivot_root(&(0x7f00003be000)='./file0\x00', &(0x7f0000d26000-0x8)='./file0\x00') 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000ae3000-0x1)) mount(&(0x7f000011e000-0xe)='./file0/file0\x00', &(0x7f0000a27000-0xe)='./file0\x00', &(0x7f0000286000-0x4)="04000000", 0x20, 0x0) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000067e000)='-$\x00', 0x40, 0x0, &(0x7f0000408000-0x20)) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000005000)={0x19980330}, &(0x7f0000006000-0x6)) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0x63000)=nil, 0x63000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) ppoll(&(0x7f0000054000-0x8)=[{r0}], 0x1, &(0x7f0000048000)={0x77359400}, &(0x7f0000052000), 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f0000019000-0x8), 0x8) signalfd4(r1, &(0x7f000005d000-0x8)={0x6}, 0x8, 0x0) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000397000)=""/94, &(0x7f000048c000)=0x5e) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000f1b000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f000090c000-0x18)={@loopback={0x0, 0x1}, 0x0, r2}) 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, &(0x7f000000e000-0x10)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000d000)=[{{&(0x7f0000006000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @dev}}}, 0x3a, &(0x7f0000006000)=[]}}, {{0x0, 0x0, &(0x7f000000a000-0x40)=[], 0x0, &(0x7f000000e000-0x2a)=""/42, 0x2a}}], 0x2, 0x2, &(0x7f000000a000)={0x0, r1+10000000}) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000a000)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f000057f000)={@mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801}) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000067e000)='-$\x00', 0x40, 0x0, &(0x7f0000408000-0x20)) 2018/02/10 10:55:34 executing program 7: mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000008000-0x38)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000010000-0x4c)="4c0000001000ff20fffefd956fc283b7000000040200000000000000000000001000190003001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabe25d4c1c01832b0790ed", 0x4c}], 0x1}, 0x0) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000001000-0x4), 0x4) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000f50000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000048000-0x8c)={0x0, 0x0, 0x0, "71756575653100000000000000000000000000000000008000"}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000757000)={0x0, 0x0, 0x0, 'queue0\x00'}) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000067e000)='-$\x00', 0x40, 0x0, &(0x7f0000408000-0x20)) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000000a000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000191000-0x10)='attr/sockcreate\x00') exit(0x0) preadv(r1, &(0x7f0000013000-0x10)=[{&(0x7f0000012000-0x3e)=""/62, 0x3e}], 0x1, 0x0) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000088b000)='net/dev_snmp6\x00') getdents(r0, &(0x7f00003bd000)=""/48, 0x19) getdents64(r0, &(0x7f000074a000-0xcd)=""/205, 0xcd) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000b1a000)=@hopopts={0x0, 0x0, [], []}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00003b2000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a9000-0x1), 0x0, 0xfffffefffffffffe, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000779000-0x8)={&(0x7f00003dd000-0x14)={0x14, 0x1, 0xa, 0x8ffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 58.841941] netlink: 28 bytes leftover after parsing attributes in process `syz-executor7'. [ 58.852310] netlink: 12 bytes leftover after parsing attributes in process `syz-executor7'. 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000002000)={0x18, 0x0, {0x0, @empty, @common='erspan0\x00'}}, 0x1e) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0}, &(0x7f0000e37000)=0x156) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000000+0xca6)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x11, r2) 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, &(0x7f000000e000-0x10)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000d000)=[{{&(0x7f0000006000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @dev}}}, 0x3a, &(0x7f0000006000)=[]}}, {{0x0, 0x0, &(0x7f000000a000-0x40)=[], 0x0, &(0x7f000000e000-0x2a)=""/42, 0x2a}}], 0x2, 0x2, &(0x7f000000a000)={0x0, r1+10000000}) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000a000)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000a5f000)='./file0\x00', &(0x7f0000912000-0x10)={{0x0, 0x7530}, {0x77359400}}, 0x4190915f7e5aa038) [ 58.888873] netlink: 28 bytes leftover after parsing attributes in process `syz-executor7'. [ 58.903506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor7'. 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000779000-0x8)={&(0x7f00003dd000-0x14)={0x14, 0x1, 0xa, 0x8ffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdd000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdb000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r2 = syz_open_pts(r0, 0x8000000006) ioctl$TCSETSW(r2, 0x5402, &(0x7f0000cf1000-0x24)={0x0, 0xfffffffffffffffb}) dup2(r2, r1) writev(r1, &(0x7f0000e0a000-0x18)=[{&(0x7f0000c3a000)="c7f55666490e1c1f19e4cfb10df0f820c58a8951f38d8ff7bd0a5fa709", 0x1d}], 0x1) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0x35000)=nil, 0x35000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000017000-0xe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5f3a37f0e20817321931e9545cfc648d66dcde55ecc219e0c2fd9cb8dc87231fb827017e785b18ff833d97af1497593f3f4fab16adf92654e10886e6b71862fe", "c7bf572b62000000000000020078f195cf4dc91d704aa60581b84790422d35f408b54258405da3e8b00ce828613d0207c28abd9b24d11552f51b0c3d73827c45", "0924636527eca2c41f0064e4f67fdaf611a60700000000000100f64729b8c5ce"}) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f0000cf0000-0x2c)=""/44, 0x2c) getdents(r0, &(0x7f0000cdb000)=""/36, 0x24) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000aeb000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000257000-0x8)='syscall\x00') sendfile(r0, r1, &(0x7f0000ea6000-0x8)=0x4, 0x6) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xe, &(0x7f0000b44000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@generic={0x8864}}}, &(0x7f000032a000-0x8)={0x0, 0x0, []}) 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, &(0x7f000000e000-0x10)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000d000)=[{{&(0x7f0000006000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @dev}}}, 0x3a, &(0x7f0000006000)=[]}}, {{0x0, 0x0, &(0x7f000000a000-0x40)=[], 0x0, &(0x7f000000e000-0x2a)=""/42, 0x2a}}], 0x2, 0x2, &(0x7f000000a000)={0x0, r1+10000000}) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000a000)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 1: keyctl$update(0x2, 0xfffffffffffffffe, &(0x7f00001ea000), 0x0) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f7b000)='clear_refs\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f00000e9000)='3', 0x1}], 0x1) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f0000005000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001f000-0x3)='./file0/file0\x00', r0, &(0x7f0000013000-0x8)='./file0\x00') faccessat(r0, &(0x7f0000018000-0x8)='./file0\x00', 0x0, 0x0) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000029000-0x38)={&(0x7f000010b000-0xc)={0x10}, 0xc, &(0x7f000011b000)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x1000a}, [@generic="280ffe0121"]}, 0x1c}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000997000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000005000)='sessionid\x00') exit(0x0) preadv(r1, &(0x7f0000013000-0x10)=[{&(0x7f0000012000-0x3e)=""/62, 0x3e}], 0x1, 0x0) 2018/02/10 10:55:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f000030a000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) fcntl$getown(r0, 0x9) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000779000-0x8)={&(0x7f00003dd000-0x14)={0x14, 0x1, 0xa, 0x8ffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f0000cf0000-0x2c)=""/44, 0x2c) getdents(r0, &(0x7f0000cdb000)=""/36, 0x24) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mlock2(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de3000-0xc)={0x10}, 0xc, &(0x7f0000779000-0x8)={&(0x7f00003dd000-0x14)={0x14, 0x1, 0xa, 0x8ffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003000-0x25)="240000001a00030007fffd946fa283bc02eee6d87986c497271d856808001000d188737e", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0xd2000)=nil, 0xd2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x1a, &(0x7f00000c6000)={{{@in=@broadcast=0xffffffff, @in=@rand_addr}}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, 0xe8) bind$inet6(r0, &(0x7f00000d2000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) 2018/02/10 10:55:34 executing program 7: prctl$getreaper(0x1b, &(0x7f0000202000-0x8)) 2018/02/10 10:55:34 executing program 4: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000003000-0x4)) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000003000-0x6)={0x20080522}, &(0x7f0000002000)) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f0000cf0000-0x2c)=""/44, 0x2c) getdents(r0, &(0x7f0000cdb000)=""/36, 0x24) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) read(r0, &(0x7f000000f000-0x1d)=""/29, 0x1d) 2018/02/10 10:55:34 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00007e9000-0x5)='veno\x00', 0x0) 2018/02/10 10:55:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000621000-0x4), &(0x7f000055b000)=0x4) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000997000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000005000)='sessionid\x00') exit(0x0) preadv(r1, &(0x7f0000013000-0x10)=[{&(0x7f0000012000-0x3e)=""/62, 0x3e}], 0x1, 0x0) [ 59.077512] binder_alloc: binder_alloc_mmap_handler: 10654 20000000-20002000 already mapped failed -16 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f0000cf0000-0x2c)=""/44, 0x2c) getdents(r0, &(0x7f0000cdb000)=""/36, 0x24) 2018/02/10 10:55:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000041, &(0x7f00005f0000)=""/30, &(0x7f0000787000)=0x24) 2018/02/10 10:55:34 executing program 6: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000054000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000055000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000007000)) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x8000000003, 0x10000000c) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="240000001000030307fffd946fa283bc03eee6d81000c497271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000deb000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x8000000000000007, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000004000-0x20)) close(r0) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="240000001e00030207fffd946fa283bc0aeee6d87986c497271d856806000900d188737e", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000997000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000005000)='sessionid\x00') exit(0x0) preadv(r1, &(0x7f0000013000-0x10)=[{&(0x7f0000012000-0x3e)=""/62, 0x3e}], 0x1, 0x0) 2018/02/10 10:55:34 executing program 5: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="240000001e00030207fffd946fa283bc0aeee6d87986c497271d856806000900d188737e", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000359000-0x8)={0x0, 0x0}) clock_gettime(0x0, &(0x7f000009b000-0x8)) recvmmsg(0xffffffffffffffff, &(0x7f000083e000-0x120)=[{{&(0x7f0000de1000)=@hci, 0x6, &(0x7f0000ea3000-0x30)=[], 0x0, &(0x7f0000731000-0xa)=""/10, 0xa}, 0x7ff}, {{&(0x7f0000463000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x14, &(0x7f0000a3d000)=[{&(0x7f0000fac000-0x4a)=""/74, 0x4a}], 0x1}}, {{&(0x7f0000e11000-0x10)=@can, 0x10, &(0x7f0000c02000)=[{&(0x7f00005b8000-0x3e)=""/62, 0x3e}], 0x1, &(0x7f00008d3000)=""/62, 0x3e}}, {{&(0x7f00002b7000-0x26)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @multicast2}}}, 0x26, &(0x7f00002b8000)=[], 0x0, 0x0, 0x0, 0x2}, 0x100000001}], 0x4, 0x0, &(0x7f0000e50000-0x8)) setitimer(0x0, &(0x7f0000746000)={{0x0, 0x7530}, {r0, r1/1000+30000}}, &(0x7f0000917000-0x20)) alarm(0x0) 2018/02/10 10:55:35 executing program 7: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000fd4000)=[], 0x0, 0x0, &(0x7f0000462000-0x8), 0x8) 2018/02/10 10:55:35 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000936000-0xe)='net/rt6_stats\x00') unlinkat(r0, &(0x7f0000001000)='./file0\x00', 0x0) 2018/02/10 10:55:35 executing program 2: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000009000)="1b0000000a0a030007fee91a00000000000f020000000000000085", 0x1b}], 0x1}, 0x0) 2018/02/10 10:55:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0c000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x200000}}) write$sndseq(r1, &(0x7f0000e70000-0x30)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @note}], 0x30) 2018/02/10 10:55:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) read(r1, &(0x7f0000103000-0xdc)=""/220, 0xdc) readv(r1, &(0x7f0000dc0000-0x20)=[{&(0x7f0000b3a000)=""/4096, 0x1000}], 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ec3000)={{{@in=@empty, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}}, {{@in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x0, @in=@multicast1=0xe0000001}}, 0x1a5) sendmsg$key(r1, &(0x7f00001c6000)={0x0, 0x0, &(0x7f0000416000-0x8)={&(0x7f000069a000)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/10 10:55:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000997000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000005000)='sessionid\x00') exit(0x0) preadv(r1, &(0x7f0000013000-0x10)=[{&(0x7f0000012000-0x3e)=""/62, 0x3e}], 0x1, 0x0) 2018/02/10 10:55:35 executing program 6: mmap(&(0x7f0000000000/0xe79000)=nil, 0xe79000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) getsockname(r0, &(0x7f0000e78000)=@sco, &(0x7f0000246000-0x4)=0x8) bind$llc(r0, &(0x7f00006f3000-0x10)={0x1a, 0x0, 0x7fffffff, 0x80000001, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) r3 = socket$l2tp(0x18, 0x1, 0x1) close(r2) dup2(r3, r1) 2018/02/10 10:55:35 executing program 5: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="240000001e00030207fffd946fa283bc0aeee6d87986c497271d856806000900d188737e", 0x24}], 0x1}, 0x0) 2018/02/10 10:55:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000531000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dce000-0x10)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b38000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000053000)=[{r3}, {r0}], 0x2, 0x1000) ioctl(r0, 0x0, &(0x7f0000b3f000)) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x16) 2018/02/10 10:55:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') pivot_root(&(0x7f0000544000-0xa)='./control\x00', &(0x7f0000a00000-0xa)='./control\x00') removexattr(&(0x7f0000dcd000)='./control\x00', &(0x7f000030c000)=@known='com.apple.FinderInfo\x00') close(r0) 2018/02/10 10:55:35 executing program 5: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005000-0x38)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="240000001e00030207fffd946fa283bc0aeee6d87986c497271d856806000900d188737e", 0x24}], 0x1}, 0x0) [ 59.264693] netlink: 7 bytes leftover after parsing attributes in process `syz-executor2'. [ 59.292278] ================================================================== [ 59.299688] BUG: KASAN: use-after-free in pppol2tp_session_destruct+0xee/0x110 [ 59.307039] Read of size 4 at addr ffff8800b196d680 by task syz-executor6/10731 [ 59.314464] [ 59.316068] CPU: 1 PID: 10731 Comm: syz-executor6 Not tainted 4.4.115-g0e9bcc1 #12 [ 59.323747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.333073] 0000000000000000 24acf5e869bcb5e1 ffff8800adcafc20 ffffffff81d03dad [ 59.341087] ffffea0002c65b00 ffff8800b196d680 0000000000000000 ffff8800b196d680 [ 59.349065] ffffffff82de7c10 ffff8800adcafc58 ffffffff814fe1e3 ffff8800b196d680 [ 59.357055] Call Trace: [ 59.359623] [] dump_stack+0xc1/0x124 2018/02/10 10:55:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000044000-0x20)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') pivot_root(&(0x7f0000544000-0xa)='./control\x00', &(0x7f0000a00000-0xa)='./control\x00') removexattr(&(0x7f0000dcd000)='./control\x00', &(0x7f000030c000)=@known='com.apple.FinderInfo\x00') close(r0) [ 59.364963] [] ? sock_release+0x1e0/0x1e0 [ 59.370736] [] print_address_description+0x73/0x260 [ 59.377374] [] ? sock_release+0x1e0/0x1e0 [ 59.383149] [] kasan_report+0x285/0x370 [ 59.388750] [] ? pppol2tp_session_destruct+0xee/0x110 [ 59.395568] [] __asan_report_load4_noabort+0x14/0x20 [ 59.402303] [] pppol2tp_session_destruct+0xee/0x110 [ 59.408964] [] ? pppol2tp_seq_start+0x4e0/0x4e0 [ 59.415269] [] sk_destruct+0x4a/0x4c0 [ 59.420706] [] __sk_free+0x57/0x230 [ 59.425962] [] sk_free+0x30/0x40 [ 59.430955] [] pppol2tp_release+0x27a/0x310 [ 59.436894] [] sock_release+0x8d/0x1e0 [ 59.442401] [] sock_close+0x16/0x20 [ 59.447648] [] __fput+0x233/0x6d0 [ 59.452728] [] ____fput+0x15/0x20 [ 59.457802] [] task_work_run+0x104/0x180 [ 59.463499] [] exit_to_usermode_loop+0x13d/0x160 [ 59.469901] [] do_fast_syscall_32+0x607/0x890 [ 59.476022] [] sysenter_flags_fixed+0xd/0x17 [ 59.482049] [ 59.483661] Allocated by task 10731: [ 59.487351] [] save_stack_trace+0x26/0x50 [ 59.493269] [] save_stack+0x43/0xd0 [ 59.498637] [] kasan_kmalloc+0xad/0xe0 [ 59.504261] [] __kmalloc+0x124/0x320 [ 59.509714] [] l2tp_session_create+0x39/0x10f0 [ 59.516055] [] pppol2tp_connect+0x10fc/0x1930 [ 59.522311] [] SYSC_connect+0x1b6/0x310 [ 59.528053] [] SyS_connect+0x24/0x30 [ 59.533522] [] do_fast_syscall_32+0x314/0x890 [ 59.539755] [] sysenter_flags_fixed+0xd/0x17 [ 59.545897] [ 59.547494] Freed by task 10732: [ 59.550824] [] save_stack_trace+0x26/0x50 [ 59.556714] [] save_stack+0x43/0xd0 [ 59.562077] [] kasan_slab_free+0x72/0xc0 [ 59.567872] [] kfree+0xfc/0x300 [ 59.572886] [] l2tp_session_free+0x170/0x200 [ 59.579026] [] l2tp_tunnel_closeall+0x2d1/0x3b0 [ 59.585426] [] l2tp_udp_encap_destroy+0x8b/0xf0 [ 59.591834] [] udpv6_destroy_sock+0xb1/0xd0 [ 59.597889] [] sk_common_release+0x6b/0x300 [ 59.603945] [] udp_lib_close+0x15/0x20 [ 59.609565] [] inet_release+0xfa/0x1d0 [ 59.615187] [] inet6_release+0x50/0x70 [ 59.620809] [] sock_release+0x8d/0x1e0 [ 59.626431] [] sock_close+0x16/0x20 [ 59.631808] [] __fput+0x233/0x6d0 [ 59.636995] [] ____fput+0x15/0x20 [ 59.642179] [] task_work_run+0x104/0x180 [ 59.647978] [] exit_to_usermode_loop+0x13d/0x160 [ 59.654467] [] do_fast_syscall_32+0x607/0x890 [ 59.661011] [] sysenter_flags_fixed+0xd/0x17 [ 59.667157] [ 59.668754] The buggy address belongs to the object at ffff8800b196d680 [ 59.668754] which belongs to the cache kmalloc-512 of size 512 [ 59.681381] The buggy address is located 0 bytes inside of [ 59.681381] 512-byte region [ffff8800b196d680, ffff8800b196d880) [ 59.693047] The buggy address belongs to the page: [ 59.719923] BUG: unable to handle kernel NULL pointer dereference at 0000000000000061 [ 59.728168] IP: [] str__compaction__trace_system_name+0x56b/0xfa0 [ 59.736096] PGD 80000001cc156067 PUD 1d0c2b067 PMD 0 [ 59.741681] Oops: 0002 [#1] PREEMPT SMP KASAN [ 59.746697] Dumping ftrace buffer: [ 59.750226] (ftrace buffer empty) [ 59.753922] Modules linked in: [ 59.757237] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.4.115-g0e9bcc1 #12 [ 59.764226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.773569] task: ffffffff84217840 task.stack: ffffffff84200000 [ 59.779614] RIP: 0010:[] [] str__compaction__trace_system_name+0x56b/0xfa0 [ 59.789970] RSP: 0018:ffff8801db207d18 EFLAGS: 00010206 [ 59.795404] RAX: ffffffff838a8e60 RBX: ffff8801db207d68 RCX: ffffffff812a0eeb [ 59.802668] RDX: 0000000000000100 RSI: ffffffff847ebc38 RDI: ffffffff812a0efb [ 59.809926] RBP: ffff8801db207df0 R08: 0000000000000000 R09: 0000000000000000 [ 59.818012] R10: ffffffff838443e0 R11: 1ffff1003b640f70 R12: 1ffff1003b640fa9 [ 59.825272] R13: ffff8800ab587b50 R14: 0000000000000101 R15: ffff8801db207df0 [ 59.832541] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 59.840760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.846629] CR2: 0000000000000061 CR3: 00000001cc328000 CR4: 0000000000160670 [ 59.853892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.861145] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.868397] Stack: [ 59.870540] ffffffff838a8e60 ffffffff812a0e4c 0000000000000000 ffffffff842c35a0 [ 59.878591] 0000000000000000 ffffffff838a8e60 0000000041b58ab3 ffffffff83faa3d1 [ 59.886639] ffffffff812a0d70 ffffffff812a2952 0000000000000000 0000000000000000 [ 59.894683] Call Trace: [ 59.897250] [ 59.899307] [] ? call_timer_fn+0xdc/0x860 [ 59.905419] [] ? process_timeout+0x20/0x20 [ 59.911300] [] ? run_timer_softirq+0x102/0xbb0 [ 59.917522] [] ? run_timer_softirq+0x5f2/0xbb0 [ 59.923744] [] run_timer_softirq+0x604/0xbb0 [ 59.929793] [] ? kvm_clock_read+0x23/0x40 [ 59.935584] [] ? msleep+0xc0/0xc0 [ 59.940682] [] ? check_preemption_disabled+0x3b/0x200 [ 59.947511] [] __do_softirq+0x227/0xa38 [ 59.953120] [] irq_exit+0x119/0x140 [ 59.958385] [] smp_apic_timer_interrupt+0x7b/0xa0 [ 59.964871] [] apic_timer_interrupt+0xa0/0xb0 [ 59.971003] [ 59.973060] [] ? check_preemption_disabled+0x3b/0x200 [ 59.980192] [] ? native_safe_halt+0x6/0x10 [ 59.986067] [] default_idle+0x55/0x3c0 [ 59.991596] [] arch_cpu_idle+0xa/0x10 [ 59.997038] [] default_idle_call+0x48/0x70 [ 60.002911] [] cpu_startup_entry+0x5fd/0x8f0 [ 60.008965] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 60.015886] [] ? call_cpuidle+0xe0/0xe0 [ 60.021505] [] rest_init+0x189/0x190 [ 60.026859] [] start_kernel+0x6b9/0x6ee [ 60.032471] [] ? thread_stack_cache_init+0xb/0xb [ 60.038867] [] ? early_idt_handler_array+0x120/0x120 [ 60.045612] [] ? early_idt_handler_array+0x120/0x120 [ 60.052362] [] x86_64_start_reservations+0x2a/0x2c [ 60.058929] [] x86_64_start_kernel+0x140/0x163 [ 60.065138] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 56 4d 5f 42 55 47 5f 4f 4e 5f 50 <41> 47 45 28 50 61 67 65 53 6c 61 62 28 70 61 67 65 29 29 00 00 [ 60.092747] RIP [] str__compaction__trace_system_name+0x56b/0xfa0 [ 60.100753] RSP [ 60.104374] CR2: 0000000000000061 [ 60.107824] ---[ end trace cc641c44a3f3e4d2 ]--- [ 60.112574] Kernel panic - not syncing: Fatal exception in interrupt SeaBIOS (version 1.8.2-20171120_144221-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 256 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2330: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... early console in decompress_kernel input_data: 0x00000000039c926e input_len: 0x0000000001426736 output: 0x0000000001000000 output_len: 0x0000000003ddaa40 run_size: 0x0000000005510000 Decompressing Linux... Parsing ELF... done. Booting the kernel. [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Initializing cgroup subsys schedtune [ 0.000000] Linux version 4.4.115-g0e9bcc1 (syzkaller@ci) (gcc version 7.1.1 20170620 (GCC) ) #12 SMP PREEMPT Fri Feb 9 14:00:18 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=120 [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] Centaur CentaurHauls [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] x86/fpu: Using 'eager' FPU context switches. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfff2fff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfff3000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] Hypervisor detected: KVM [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT [ 0.000000] e820: last_pfn = 0xbfff3 max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f23b0-0x000f23bf] mapped at [ffff8800000f23b0] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F2370 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFF3430 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFCF60 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFF3470 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFF65F0 00690D (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFF5D10 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFF5CE0 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFF4C30 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 2249745933 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfff2fff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] PM: Registered nosave memory: [mem 0xbfff3000-0xbfffffff] [ 0.000000] PM: Registered nosave memory: [mem 0xc0000000-0xfffbbfff] [ 0.000000] PM: Registered nosave memory: [mem 0xfffbc000-0xffffffff] [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 42 pages/cpu @ffff8801db200000 s134024 r8192 d29816 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935227 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=120 [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6581404K/7863876K available (40424K kernel code, 6135K rwdata, 8816K rodata, 1852K init, 23616K bss, 1282472K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Kernel/User page tables isolation: enabled [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2300.000 MHz processor [ 1.141716] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 1.142943] pid_max: default: 32768 minimum: 301 [ 1.143669] ACPI: Core revision 20150930 [ 1.537036] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.538988] Security Framework initialized [ 1.539575] SELinux: Initializing. [ 1.540226] AppArmor: AppArmor disabled by boot time parameter [ 1.541169] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.542097] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.545611] Initializing cgroup subsys io [ 1.546248] Initializing cgroup subsys freezer [ 1.546925] Initializing cgroup subsys hugetlb [ 1.547549] Initializing cgroup subsys debug [ 1.548319] CPU: Physical Processor ID: 0 [ 1.550184] mce: CPU supports 32 MCE banks [ 1.550933] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.551826] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.552745] Spectre V2 mitigation: Vulnerable: Minimal generic ASM retpoline [ 1.555958] Freeing SMP alternatives memory: 44K [ 1.565305] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.681048] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.682521] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.771276] x86: Booting SMP configuration: [ 1.771950] .... node #0, CPUs: #1 [ 1.772802] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 1.777763] x86: Booted up 1 node, 2 CPUs [ 1.778361] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 1.782166] devtmpfs: initialized [ 1.792209] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.793626] futex hash table entries: 512 (order: 4, 65536 bytes) [ 1.795297] xor: automatically using best checksumming function: [ 1.808902] kworker/u4:0 (21) used greatest stack depth: 27448 bytes left [ 1.891039] avx : 21993.600 MB/sec [ 1.892317] RTC time: 10:55:41, date: 02/10/18 [ 1.894566] NET: Registered protocol family 16 [ 1.895665] schedtune: init normalization constants... [ 1.896392] schedtune: no energy model data [ 1.896997] schedtune: disabled! [ 1.931237] cpuidle: using governor ladder [ 1.961082] cpuidle: using governor menu [ 1.962603] ACPI: bus type PCI registered [ 1.963179] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 1.965961] PCI: Using configuration type 1 for base access [ 2.136469] kworker/u4:3 (394) used greatest stack depth: 27080 bytes left [ 2.391034] raid6: sse2x1 gen() 4423 MB/s [ 2.560957] raid6: sse2x1 xor() 2489 MB/s [ 2.730939] raid6: sse2x2 gen() 7055 MB/s [ 2.900922] raid6: sse2x2 xor() 4081 MB/s [ 3.070904] raid6: sse2x4 gen() 8723 MB/s [ 3.240884] raid6: sse2x4 xor() 5316 MB/s [ 3.410866] raid6: avx2x1 gen() 9357 MB/s [ 3.580842] raid6: avx2x2 gen() 14639 MB/s [ 3.750838] raid6: avx2x4 gen() 19090 MB/s [ 3.751572] raid6: using algorithm avx2x4 gen() 19090 MB/s [ 3.752335] raid6: using avx2x2 recovery algorithm [ 3.753646] ACPI: Added _OSI(Module Device) [ 3.754317] ACPI: Added _OSI(Processor Device) [ 3.755010] ACPI: Added _OSI(3.0 _SCP Extensions) [ 3.755744] ACPI: Added _OSI(Processor Aggregator Device) [ 3.781453] ACPI: Executed 2 blocks of module-level executable AML code [ 4.612086] ACPI: Interpreter enabled [ 4.613067] ACPI: (supports S0 S3 S4 S5) [ 4.613636] ACPI: Using IOAPIC for interrupt routing [ 4.615501] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug